last executing test programs: 21m19.469182237s ago: executing program 3 (id=50): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x81, &(0x7f0000001180)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) 21m18.094218668s ago: executing program 3 (id=53): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0xffd) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @broadcast}, 0x2, 0x2, 0x0, 0x1}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x3, 0x20000008, 0x4) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x122) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x3, @private1, 0x48}, 0x1c, &(0x7f0000000040)}}], 0x1, 0x240000d4) 21m12.717472489s ago: executing program 3 (id=55): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x179a, &(0x7f0000000280)={0x0, 0x4, 0x2, 0xffffffff, 0x8400026f}, &(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000000)) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="9c0100001200330600000000fcffff7fe00000010000000000000000000000007f00000100"/52, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000000004d23200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000800ffffffffffffffff000000000000000005000000000000000400000002000000000000000600000002000000000004181900000000000000ac00"], 0x19c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) getrlimit(0xb, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000180)=[{r5, 0x200}], 0x1, 0xfff) rt_sigqueueinfo(r4, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb}) read$msr(r3, 0x0, 0x0) 21m8.005137605s ago: executing program 3 (id=62): dup(0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x2d) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xffffffffffffffff) 21m6.732875804s ago: executing program 3 (id=64): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) 21m4.887171535s ago: executing program 3 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) getpid() 20m53.96988399s ago: executing program 32 (id=60): r0 = socket$inet6(0xa, 0x3, 0x88) r1 = socket$tipc(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) read$hiddev(r3, &(0x7f0000000380)=""/174, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) close(r1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) 20m49.244057297s ago: executing program 33 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) getpid() 11m18.581809795s ago: executing program 2 (id=1172): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x51}], 0x1}, 0x0) 11m18.36377445s ago: executing program 2 (id=1174): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x1, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) write$binfmt_script(r0, &(0x7f0000005b40)={'#! ', './file0'}, 0xb) 11m17.04514765s ago: executing program 2 (id=1181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"43d064455ca79c3698dcca60005c1ba163b1d8f04d69d873792c0cbfc95dacc7cd39a49df12a052d0d8f1bd04b722b4f262437efc030e716916de618763f4600660b41f320706e06860fe29f1bb455ef507156d0a5738f130784a1aad99f74b3e592254eede14eb1b64af356cfaa8ff002c4deed28995dc5e6ee13c4a1b39ba72979c5f3ed91ff89e73e09f7f88fe58bce505f0500764c95c8bed7499213d10731b60ed6c8806ab094843295ac02f06dc46485bb56f2eb2eb3c5ef1e50a2431a2082b54c4b0e1357daaefd30e08322fb5f922f6d9fa3226faf7aeb9630aabe81617fe2849d8ab92fb80f07dfa9d831f4f7ef48923e28553f0c31cf1343d4c0d4dee937e639670fc2ceab9e5048d5bcd9f52a9c90ddd1fee1fda90a114fdf7298b7607c5294efdea04743a0045e96aae496fcb06636a8620f6e007ee5f5c24ab0d0f85cfb3a7820dbe2241b017e917eafb27d13feba7de3a28dd4c29c7959ae5c0724c848f8960fbea5f7b7a35ac32fa6bbf869030a1b61fb0d20a5631dcea68ffa7d456869c4e79f6033f38fa88ccd53dc1feb5381c01dd71ec0446e3633270b7fb961e04ad7e1f44e3fd0d96c724499e1ec2cff23a3d5a97952ec0a44dd967491dc45d4df48ad83027df0be02e35ca4c107bdf957f4c7a831dff89f998a2e1302445dc02b5fc38f7c8a6260723e535062319cb68cb309e91b88c55014bb436c5d9f6bf35cbe24605821baf9ea6aaa31cb2dd74e29863a0c71e3367846cffe17c4a29a76eb635e95c6d7f4d846f3369aedbfb70b3716c1c0234a0deb9abfac12686d45ba97952e8a50480c5f44e038b1a4d5cd9301d02b942afacfaa30b6ef315d72eaf41dddda4983608dc2f5d5e92392a141b0f2f8d34042d1a6cd45d9f9df4c83b8c8b55959d58843ab3564d3f49d81ed2ccd42bb8ad9c8e4b92c2df872c9383c88f4b1bbaf116fff233f54d99b43677eb29ad63e00ea4eee69c72a604b2cdd7641d9c682d1d4ea8e5bd0de857ac1a55b2d6374a4a18af8f27887ffb4b2168e764a5aa9b303a35873d2177de8c5a00be39726baa6d336b6a36b8ec6743454b4542f3fb3ca678a0ecca17ba7c2655931f38ed26219fde45ab8469db2a156953b028abec63c6b841c8bd9f9f0861e7aeb8195013444d2d326cad53718e40be06aea644573a9ef22b13692a17ed8a451af9e2de15b4bfce7c257063e28c07e4c3301a1bff37dc14d34ddabbb286f53264e0c8122f215de4f2e06f6e0472674c2476a61ad2e309abfed7e3367bc7373876507764e60b193e8c5abbe95f42adfc74dd25c9098dfba8272f7361d0000000000000000000000000000000000000000000000000000e000"}) 11m15.558816593s ago: executing program 2 (id=1191): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 11m15.016282085s ago: executing program 2 (id=1193): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30}, {0x0, 0x7f, 0x7, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0xe, 0xffffffffffffffff, 0x7fffffffffffffff}, {0x646c0704, 0xa00, 0xba, 0x800000000000002}, 0x400, 0x1, 0x1, 0x1, 0x3}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, {[], {{0x2100, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11m12.848021734s ago: executing program 2 (id=1197): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x3b, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0x5b) 11m11.225681701s ago: executing program 34 (id=1197): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x3b, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0x5b) 10m2.633588703s ago: executing program 0 (id=1481): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r1, &(0x7f00000013c0)=""/4108, 0x1017) 10m2.431412717s ago: executing program 0 (id=1483): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./bus\x00', 0xf2) open_by_handle_at(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="17000000fb"], 0x5f1502) 10m2.207492562s ago: executing program 0 (id=1486): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, r2, 0xd6fff000) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c8, 0x0, 0x220, 0x150, 0x220, 0x220, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@hashlimit1={{0x58}, {'\x00', {0x7, 0x8001, 0x9, 0x40000009, 0x539, 0x8, 0xe92c, 0x20, 0x8}, {0x1}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@loopback, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x1], 0xffff, 0x24, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109042, 0x23) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000380)={0x5, {{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}}, 0x88) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x7) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000280)={0xc, r6}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000a00)={0x2, 0x8, @status={[0x5, 0x3, 0x31fb, 0xe9, 0x3, 0x4]}, [0x2, 0x40, 0x6, 0x1, 0xda, 0x4, 0x8, 0xdb, 0x3, 0x9, 0xfff, 0x1b8b, 0x0, 0xffffffffffffffff, 0x7fffffffffffffff, 0x4, 0x2887, 0x100, 0x8, 0xf, 0x7, 0x7fff, 0x3, 0x8a, 0xfffffffffffffffb, 0x2, 0x7, 0x9, 0x7, 0x1, 0x7, 0x3, 0x53, 0x6, 0x8000003, 0xe, 0xe, 0xc8, 0xfffffffffffff001, 0x9, 0x6, 0x1000200, 0x4, 0x4, 0x1, 0xc57, 0x1ff, 0x3, 0x89ea, 0xfff, 0xfff, 0x4, 0x7, 0x0, 0x9, 0x8, 0x2, 0x4, 0x10000000000004, 0xf3a, 0x10000, 0xaab, 0x1067, 0xae3d7c1]}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200", "0000000000000000d59e00"}, 0x7, 0x4}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x42200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 9m59.977186763s ago: executing program 0 (id=1501): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000080)='./file0/file0/../file0\x00', 0x8) 9m59.854069305s ago: executing program 0 (id=1503): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000040)={[{@nodiscard}, {@jqfmt_vfsv0}, {@nobh}, {@dax_inode}]}, 0xfc, 0x4d2, &(0x7f0000000740)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='auxv\x00') readv(r2, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/238, 0xee}], 0x1) 9m59.438988235s ago: executing program 0 (id=1509): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, r2, 0xd6fff000) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c8, 0x0, 0x220, 0x150, 0x220, 0x220, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@hashlimit1={{0x58}, {'\x00', {0x7, 0x8001, 0x9, 0x40000009, 0x539, 0x8, 0xe92c, 0x20, 0x8}, {0x1}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@loopback, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x1], 0xffff, 0x24, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109042, 0x23) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000380)={0x5, {{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}}, 0x88) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x7) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000280)={0xc, r6}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000a00)={0x2, 0x8, @status={[0x5, 0x3, 0x31fb, 0xe9, 0x3, 0x4]}, [0x2, 0x40, 0x6, 0x1, 0xda, 0x4, 0x8, 0xdb, 0x3, 0x9, 0xfff, 0x1b8b, 0x0, 0xffffffffffffffff, 0x7fffffffffffffff, 0x4, 0x2887, 0x100, 0x8, 0xf, 0x7, 0x7fff, 0x3, 0x8a, 0xfffffffffffffffb, 0x2, 0x7, 0x9, 0x7, 0x1, 0x7, 0x3, 0x53, 0x6, 0x8000003, 0xe, 0xe, 0xc8, 0xfffffffffffff001, 0x9, 0x6, 0x1000200, 0x4, 0x4, 0x1, 0xc57, 0x1ff, 0x3, 0x89ea, 0xfff, 0xfff, 0x4, 0x7, 0x0, 0x9, 0x8, 0x2, 0x4, 0x10000000000004, 0xf3a, 0x10000, 0xaab, 0x1067, 0xae3d7c1]}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200", "0000000000000000d59e00"}, 0x7, 0x4}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x42200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 9m59.19045238s ago: executing program 35 (id=1509): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, r2, 0xd6fff000) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c8, 0x0, 0x220, 0x150, 0x220, 0x220, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@hashlimit1={{0x58}, {'\x00', {0x7, 0x8001, 0x9, 0x40000009, 0x539, 0x8, 0xe92c, 0x20, 0x8}, {0x1}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@loopback, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x1], 0xffff, 0x24, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109042, 0x23) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000380)={0x5, {{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}}, 0x88) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x7) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000280)={0xc, r6}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000a00)={0x2, 0x8, @status={[0x5, 0x3, 0x31fb, 0xe9, 0x3, 0x4]}, [0x2, 0x40, 0x6, 0x1, 0xda, 0x4, 0x8, 0xdb, 0x3, 0x9, 0xfff, 0x1b8b, 0x0, 0xffffffffffffffff, 0x7fffffffffffffff, 0x4, 0x2887, 0x100, 0x8, 0xf, 0x7, 0x7fff, 0x3, 0x8a, 0xfffffffffffffffb, 0x2, 0x7, 0x9, 0x7, 0x1, 0x7, 0x3, 0x53, 0x6, 0x8000003, 0xe, 0xe, 0xc8, 0xfffffffffffff001, 0x9, 0x6, 0x1000200, 0x4, 0x4, 0x1, 0xc57, 0x1ff, 0x3, 0x89ea, 0xfff, 0xfff, 0x4, 0x7, 0x0, 0x9, 0x8, 0x2, 0x4, 0x10000000000004, 0xf3a, 0x10000, 0xaab, 0x1067, 0xae3d7c1]}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200", "0000000000000000d59e00"}, 0x7, 0x4}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x42200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 3m31.130084003s ago: executing program 4 (id=3312): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r2 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r2, 0x40086f52, &(0x7f0000000000)={0x2, &(0x7f00000006c0)=[{0x25, '\x00', @st={0x4, [{0x2, @uvalue=0xe}, {0x2, @svalue=0xfff}, {0x2, @uvalue=0x5}, {0x1, @svalue=0xffffffff}]}, 0x6}, {0x2e}]}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = open$dir(&(0x7f0000000200)='./file0\x00', 0x141200, 0x2c) openat(r4, &(0x7f0000000240)='./file0\x00', 0x7a3000, 0x40) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r6 = syz_open_dev$evdev(0x0, 0x3, 0x8380) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000080)={0x9, 0x10, 0x1ff, 0x3, "64254ac05241e6562113f079450df56ac95a37d7d1a3ae3fbb374cd42a4cc93a"}) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) 3m30.782859341s ago: executing program 4 (id=3313): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20040000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m29.104510082s ago: executing program 4 (id=3317): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xc, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x8, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff9, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x5, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd51, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x80007, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x7, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d85, 0xb, 0xfffffff7, 0x8, 0x140f2, 0x5398, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0xc63f, 0xffffffff, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x290}}, 0x4048010) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x801) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mprotect(&(0x7f0000692000/0x9000)=nil, 0x9000, 0x2) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) setpgid(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 3m28.955788736s ago: executing program 4 (id=3321): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = eventfd(0x1) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0, 0x0, 0x10004000000, 0x0, 0x1, r1}]) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r2 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa4601, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x4b2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m27.685308008s ago: executing program 4 (id=3325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x20043, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2817\x00', [0xfffffffd, 0x3900000, 0x321, 0x4, 0x4, 0x800afa3, 0x4, 0x0, 0x5857, 0x20002, 0x80000000, 0x9, 0x1, 0x5, 0x6, 0x501, 0x0, 0x7, 0x4, 0xa, 0x8, 0xcaa2, 0xf6, 0x0, 0x2000003, 0x1e69, 0x2, 0x4, 0x4086, 0x0, 0x7]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69577000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$evdev(0x0, 0x1, 0x8001) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m24.70320158s ago: executing program 4 (id=3329): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000300)={[{@oldalloc}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020306"], 0x80}, 0x1, 0x0, 0xff80}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000000090000000000"], 0x0, 0x4a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x4, 0x78ac}, 0x50) socket$inet(0x2, 0x2, 0x0) 3m14.397315144s ago: executing program 6 (id=3345): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, &(0x7f0000000280)={&(0x7f0000000340)=0x3, 0x2, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000380)=ANY=[@ANYBLOB='dmask=00000000000000000000000,dmask=00000000000000000000006,errors=remount-ro,iocharset=cp932,fmask=00000000000000000000001,namecase=1,iocharset=iso8859-14,namecase=1,namecase=1,uid=', @ANYRESHEX=0x0, @ANYRESOCT=r3], 0x1, 0x1534, &(0x7f0000002840)="$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") utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0xa08b}) io_setup(0x4, 0x0) 3m13.061363767s ago: executing program 6 (id=3347): socket$inet6(0xa, 0x3, 0xfe) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000e, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0xd1, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x8004}, 0x40) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x3, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 3m12.770993524s ago: executing program 6 (id=3348): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x2, 0x20001, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040), 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000780)={{0xa}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3123, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x1, 0x2000000000, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x4, 0xffffffffffffffff, 0x2, 0x0, 0x80000000000, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001]}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x3, 0x1, 0x42, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv6_delroute={0x38, 0x19, 0x1, 0x1, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_GATEWAY={0x14, 0x5, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) 3m10.939929629s ago: executing program 6 (id=3350): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) r6 = syz_open_procfs(r0, &(0x7f0000000180)='smaps\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) lseek(r6, 0x10001, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100001042bbd70020000000002000000", @ANYRES32=r7, @ANYBLOB="00240000000000001800128008000100677470000c0002800500050000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) 3m8.88940839s ago: executing program 6 (id=3352): userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat(0xffffffffffffff9c, 0x0, 0x48042, 0x8c) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @local}, {0xa, 0x0, 0x7ffffffe, @mcast1, 0xa8a9}, r4, 0x2}}, 0x48) 3m7.742561848s ago: executing program 36 (id=3329): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000300)={[{@oldalloc}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020306"], 0x80}, 0x1, 0x0, 0xff80}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000000090000000000"], 0x0, 0x4a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x4, 0x78ac}, 0x50) socket$inet(0x2, 0x2, 0x0) 3m7.726826668s ago: executing program 6 (id=3354): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x0, 0xc, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x2108cff, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8100, &(0x7f0000001dc0)={0x0, 0x84, 0x40000, {r1}}, 0x20) socket$inet6(0xa, 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) kexec_load(0x0, 0x0, 0x0, 0xa0000) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) 2m50.61491642s ago: executing program 37 (id=3354): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x0, 0xc, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x2108cff, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8100, &(0x7f0000001dc0)={0x0, 0x84, 0x40000, {r1}}, 0x20) socket$inet6(0xa, 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) kexec_load(0x0, 0x0, 0x0, 0xa0000) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) 51.659673668s ago: executing program 8 (id=3611): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8, 0x42}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 51.493353612s ago: executing program 8 (id=3612): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x4) 51.338962096s ago: executing program 8 (id=3613): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r0, 0x0, 0x0, 0xe000) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r4, 0x6, 0x3, &(0x7f0000001340)=""/4123, &(0x7f00000000c0)=0x101b) 50.216567643s ago: executing program 8 (id=3619): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 50.014064198s ago: executing program 8 (id=3621): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000f40)=ANY=[], 0x1, 0x5577, &(0x7f000000b000)="$eJzs3M2LG+UfAPBnsk376+tvEQ/eOlCEXWhCs31Bb1VbfMGW4svBk2aTaUibZJZNmsaeBD2KB/8TUfDkUfwTPHj2Jh4Ub0Il80ystbZUkk229fOByXfmmSfffJ8htHxnlgTgP2s9/e2XJJwIh0MIayGEY0ko9pNyK1yM4bkQwskQQuUvW1KO/zlwMIRwJIRwYpo85kzKU5+fHp86//Mbv37z/aEDR7/4+ofVrRpYtedDCP2duH+7H2PeifFGOd4cd4vYPzcuYzzRv1ke5zHezraLDLebs3nNIp7txPn5zq3hNF7vNVvT2OleL8Z3BvEDh+POLE/xhhvN3eK4nW0XsTvMi9i5E+ua3In/tt0ZjmKedpnvwyJ9GI1mMY5nkyyuZ+dmEVuDUTke8+btbDKN43Y2qU7ricOhlffaRR3bc13qfe3N7uDWJB1nu8NuPkjP1xsv1BsXao3dvJ2NsnO1Zr994Vy60elNp9VGWbN/sZPnnV5Wb+X9zXSj02rVGo1041K23W0O0kajfrZ+pnZ+s9w7nb569d201043pvHl7uDWwW5vmF7Pd9P4js10q372xc30VCN9+8q19Npbly9fufbO+5feu/rSlddfKSc9UFa6sXVma6vWOFPbamzug/VP/999zPWP5ln/J2XRj7H+u4diTOa7PPBovmAA/9oD/X/Q/wN7b/X9f+W7yhz9f5i//6+EWf8/banK/j/o/x/e/1bm7//n6n/3a///BK8f5vLo/r+6tDoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFi6H6tfvlbsrMfjo+X48XLomfI4CSFUQgh3/8FaOHhfzrUyT/Uh86t/q+HbJBQZpp9xqNyOhBAultvv/9/rqwAAAABPr68+OvlZ7Nbjy/qqC2KZ4k2byrEPFpQvCSFU139aULbK9OXZBSUrvt8HwmRB2YobWP9bULJ4y+3AorI9lrVZ+Pj4vcFiQUkMlaWWAwAALMXafWG5XQgAAADL9OmqC2A1kjB7lDl7Flz85f29R5uH7zsHAAAAPIGSVRcAAAAA7Lmi//f7fwAAAPB0i7//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7BzP7lpA1EcgJ8hTtJ/Kqp6oO7CMXqELrurkqvkCJyhF+AMVN30CAhXnRmBjHBViTFu0PdJtjMT+PkZ2MzYGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBMP9rVclYhZ9edp0IJAAAAwIBNu1qmPxa5/ab0vytdH0q7iYhZRJwau8/jtpc5LzntwOvboxq+R6SEP+e4K9vriPhUtu37oep/VvwkAAAA4Dqtn54f8mg97xZTF8Ql5Umb2dvPlfKaiGgXvyqlpYdSPlYKS7/vm/haKS1NYN1XCstTbjen/3db6yR9896hXMn9Y/oSU6vGI0EAAMB/pj8SGBiFAAAAcAW+TF0A02j2u/19xrt8KDcEX/VacZgmAAAAAF6KZuoCAAAAgNGl8f9F1v87emO99f8AAACAv9l2XZfX/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBMm3a1XD89Pxx6uuxbbj3+Y86uO88oFwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8Zn/eUSAEwiAM9q7vTOb+h5UGDTyBSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPzuL/8npsaZZO61sfQ8kqydGlunxt65cfSH8fVrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42J+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAv+t0v/yemxplk7rSxdDySrF01tq4aew8aRw/G278BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Lmf1jjKMADgz85mtn9UjBFyiEgFD3oxyba29qgHJXjwE6gQ0k2Nbq22OdgS1Fz0JDlKL6JHEUHIsd+h5wbqod485BBB8KbMzkwzaRa7lGRm0/x+8M77zGSY93lnl5An8+4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACUtt/64PcybmebyTxOimN3d9aWsn7roT5ze+PeTNayuPWogb5988BzH3MvVnfOTFd2vqo/GQAAAI6HdlnfR8T9dHMh65PJrP6PtDwnq/l/fCaPy3r+4bp/a2ftZPGjmbz+//79PQNN5uNkF11e6ffm96cycQjTOxKefeQZE4M7P/jfS3vwgiTvrj+/nQ7uZ+u7O3fe7gzCE3VkCwA8jtmyL4Ly76Gs7zaZGADHxkSl8C7r//ZkszkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1GF7PZ4q41ZEzEzsxpmtnbWlYf3tjXszZbtw69ZG9ZrZJdKIWF7p99Ia5zLurt+4+cliv9+7Vn9wJiKaG70IPhzhnIj/P6d4e0Zzsxga/JMFrcbTaD5IitdnXPI5yKB87x38lRv6hQQAwBNhtrP/WFq0rK6/n24uZMdaUxH//rS3/n+lEseI9f+fH124Wx2rWv93D2+aR87c6pXP5q7fuPnaypXFy73LvU9fP9t9o3vu4vnzF+eyezU/txxJb77pNAEAADjCOkWr1v/J1P7n/6crcYxY/3/+Q/fL6lht9f9Quw/9ms4EAADgONp9WP7cS3//1RpyRqvTiS8WV1evdfPtg/2z+bbWdB/TibwsHyjr//ZUoykBAAAANdleb+15/n+pEseIz/+f/vmFX6vXbEfEqYirEdGbXbrav1TfdMbaIX8+ufV1ubJgyOc/AAAAOB5OFa26/j8drP9PHix5SCLi1ZfzuPyuq1Hq//Y73/xSHau6/v9cfVMcS8l0fj8G/XTExHTTGQEAAPAkO1m0rNj/I91c+Pi30+91rP8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNt/AQAA//8crjyv") open(&(0x7f0000000040)='.\x00', 0x511082, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x801) mkdir(0x0, 0x0) 47.695986065s ago: executing program 8 (id=3631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x100bf28, @empty}, 0x1c) 47.090169171s ago: executing program 38 (id=3631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x100bf28, @empty}, 0x1c) 4.188112217s ago: executing program 1 (id=3837): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000380)=""/129, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x12, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x800c051}, 0x0) 4.02549029s ago: executing program 9 (id=3838): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="a687337ce816", 0x6, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400"], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x400ee) shutdown(r0, 0x1) 3.851584975s ago: executing program 1 (id=3840): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x30, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x202}, {0xffff, 0x5, 0x1, 0x46, 0x2, 0x101}]}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r2, 0x4b3d, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 3.851321895s ago: executing program 7 (id=3841): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000600)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1, 0x0, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 3.63785658s ago: executing program 1 (id=3843): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0xe000) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r5, 0x6, 0x3, &(0x7f0000001340)=""/4123, &(0x7f00000000c0)=0x101b) 3.576940381s ago: executing program 7 (id=3844): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 3.247536469s ago: executing program 7 (id=3845): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r4, 0x6, 0x3, &(0x7f0000001340)=""/4123, &(0x7f00000000c0)=0x101b) 2.523535947s ago: executing program 5 (id=3846): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(0x0, 0x100) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0), 0x0, 0x4000000) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff1704b45adbde0800450000680000000000019078ac1e0001ac1414aa05009078e00000e0430000000000000000110000ac1414aaac1e000183030000443400036401010000000000ac1414bb00000000ac1414000000000000e6ff00"/114], 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) unshare(0x6a040000) 2.4298365s ago: executing program 1 (id=3847): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e", 0x27}, {&(0x7f0000000e80)="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", 0x10e}, {&(0x7f0000001340)="641a6a2b8647e6b5208cf9599b1d890aa834ebb75a925ab48c8442218425232932fc2e37e327de21450df098c113e179a0186c6e0cd8e068", 0x38}], 0x3}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000014c0)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd78d1aae07a60bfa40ae396026e0e2659a1e1332ac789341255aedc3223c16d66ce458c85f3c4372aa7f0ba420f8f046adc689289630718809a", 0x56}, {&(0x7f0000001540)="417e1fcc84ba36d92eced7b76463a43ac6c3c9eb0773f03237cfb1c88c6f5c3ff8deb0767df1a43ed83eee5101fafe74471d69f3cdc3446cf9ded344d8fd6aa575be67f8f82a441939bdba0aa19c5c1438243d72a5b568bbc12cc965c0c639ee7fbb0c980242dc0b2856e9142f0909a2d9f4388e6c9be93c703892c4e14676278a121f86052dbb6694647460a139614be42fb89d5b1da1a07994b7509c5dcc1c63cba1acb07b44c35d557db3b025ebb1fd5688a91a7ff0e10cc58cad5b11d03df3e48d", 0xc3}, {&(0x7f0000001640)="22c042cdf9bd9c9359e29aca901441bdb830df717384916ecdcc1d0484ed77459f0c", 0x22}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="9ed900f8a0d57b7656fa291a92dc9f58d067b2f1f69c6459442d67fb9436fd2078b14a2f", 0x24}, {&(0x7f00000002c0)="1a88f556665b77544a4f49495e71b694fb12eed4456b2ee14a4b13db92ebb7c2218e99c782d0b6a4bdeb49b9fc1638681e1b9d3264936a5602931030d6d53f6b979b85b0fedb3308b25785b1460fa910931a49d5107106e4e748a8679ded0e7b6fd03f2739a7ebb6399eabcd10bbaca33fa48116bc41b10eab20e805e435f5c7a75325387052bf0d4fefc4d414aed4ce8f82b0c627471a7fa0a789bbf6b5632a048ec0f3e391965bf6c6a64065b36c8c01cc6cfbbaba2316e3a8c34704a0de866867ff8af9f6f2227f7e9686fa75c310943d8ef74921e792ea7d378c237bb817c3", 0xe1}, {&(0x7f00000003c0)="7131821ef34992a7c3b4a30c7b10ab67375b1bdb027a5e1bdf1bff0a522c00e69535b60e7a4de35915f5f45a8f035f024d1a2ebd2ca1851fde44ef6ea33b34a5f71eb9c5db3573f871121fd352bffebb0535c4fa382bb7b35858425c0574055585dfc9236c0b008a04e25cda5f35f40550110c34741f377c963922a4acf4b39fbb260a7ef745bf706ed34c423eca2fbed0acf3b4915062e4aa13d770c023c057da26bec248682391fe18b640a7071c29834424d724b2755a8a6ea73eaf2b7c14bccfbe19b3f14366c9687e3f48eb4fe042c246f0433b0b0f178070597759", 0xde}, {&(0x7f0000000500)="43a8b66c36146a75fecd9759f847600123ee1de4e2faafd48bfa46508a87f84670a26d20c29b1072d6f45a98bf367face890b3ea383d417a2f533b5344812ec897d37bf53e023934bd9a96ae9a18b79c563a292a0ad0766518fcc808ad6c262d2abac2b18be23b5256a91cbd0e3e344ce14edd63b5356c98468e962a4de8194de1d51dca9fdda8a9f5bc9ba033db01eabcddea9b1d55303545c37762558c5a61c7665683be6896ee4ccd1eb69bc9f90aea0855ca0b21525c25966dd0d892b18e8750b19fdb095ffbe37cf68c5e5525ea457cc0565899fa663d834edb2cb71a04", 0xe0}, {&(0x7f0000000640)="2fa964bc6a347f3a58f8008d86c2b4a5625b59e154d7e4ee0f881289882e78808fef081bcbc323b0fef970094e925254d7543cf89f6ac674ea7f30b7b2c1313d0da8b70f5da8598ac90150ae4061ef4314a97d91c6d601f9e959b21911424486799078a2f4e7bc5508bf403ce9ebadb624b98507da134303fdad2411ad8e78baa7c091caec2828900597a5b64715bca43fe81706b60b6d6c931aedb065cfff4226f55cf9213c5309a6d5b51f7569bdd79729babdc4a8000ec8a11a7036a0ca57387e776b252aa0527ac158d975908592f709dd47dbdd", 0xd6}, {&(0x7f0000000740)="eb41c017c4afe48a3d0493647bf9e92cce9398e7528188dc568e62b73d3f816a91b3db04b468e8cc56e39edcc218e384d032072c10ebc2f56726faf68cd92c2f0b98bcb39041aceb21cbc7b5a01a23b93e46e3357ce20ad1f2", 0x59}, {&(0x7f00000001c0)="a334e4d3bf504a2f0c559abdfae63a1156aa", 0x12}, {0x0}], 0x8}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 2.218016395s ago: executing program 5 (id=3848): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$inet6(0xa, 0x802, 0x88) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x106, 0x2, 0xff, 0x1}}) 1.863557924s ago: executing program 5 (id=3849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000180)="b842f1ec7f87b9929128ba418085188f827317fbaa1e8580877093", 0x1b}], 0x2) 1.863148314s ago: executing program 1 (id=3850): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000003c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3, 0x1}}, 0x10) 1.696031828s ago: executing program 5 (id=3851): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x30, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x202}, {0xffff, 0x5, 0x1, 0x46, 0x2, 0x101}]}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r2, 0x4b3d, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.542624091s ago: executing program 1 (id=3852): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$loop(0x0, 0x0, 0x20000) creat(&(0x7f0000000100)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, 'rlimit'}]}, 0x8) 1.287524298s ago: executing program 9 (id=3853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'vcan0\x00', 0x400}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 1.279641108s ago: executing program 7 (id=3854): r0 = socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000640)="591e8a093b0ba8a84290e9c8468cb19d1c804d2b827073fe9c5f65a0cc63110ee53bbab1377da646c73e1054d929e2409ba1fa86e378a14ab8cb23b766f482f85482ddea0ea2516f1e7cd89fb4f29635ec16056631376ef7ca586cf2c5761b8cf65244e072afb851a5054d802ba24df54719bb00ee7e5195f5d5cc9e8935f57072817055130729695a1f3d871a409aa8a3593f7bfffa259779a75db60bf248ea23f404eb135700b1c21441b99d58", 0xae}, {&(0x7f0000000940)="350ed1871726b5ad4f44da88d4e6d6b1f17217c38a3418", 0x17}], 0x2}}], 0x1, 0x20002090) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 1.263390688s ago: executing program 5 (id=3855): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x1004041, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf8, 0x2f2, &(0x7f0000000180)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 1.007770545s ago: executing program 5 (id=3856): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002800)={0x0, 0x0}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002300)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_clone3(&(0x7f00000023c0)={0x400000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 848.036228ms ago: executing program 9 (id=3857): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f0000000e80)="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", 0x114}, {0x0}], 0x3}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet_sctp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000540)="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", 0x744}], 0x1, 0x0, 0x0, 0x44010}], 0x1, 0x10) 655.518964ms ago: executing program 9 (id=3858): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/108, 0x0, 0x8000000}) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0x1) 530.585607ms ago: executing program 9 (id=3859): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x11}, 0x40008) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) shutdown(r0, 0x1) 241.983644ms ago: executing program 9 (id=3860): setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x6040, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc4f8400f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xdddd1000, {}, 0x1}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 160.423936ms ago: executing program 7 (id=3861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 7 (id=3862): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r4, 0x6, 0x3, &(0x7f0000001340)=""/4123, &(0x7f00000000c0)=0x101b) kernel console output (not intermixed with test programs): .087656][ T5835] usb 8-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 829.092566][T13138] team0: Port device team_slave_0 removed [ 829.135271][ T5835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.163549][ T5835] usb 8-1: Product: syz [ 829.178548][ T5835] usb 8-1: Manufacturer: syz [ 829.197298][ T5835] usb 8-1: SerialNumber: syz [ 829.222505][ T5835] usb 8-1: config 0 descriptor?? [ 829.256988][ T5835] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 830.435751][ T6207] IPVS: starting estimator thread 0... [ 830.546994][T13177] IPVS: using max 19 ests per chain, 45600 per kthread [ 830.784775][ T5835] gspca_topro: Sensor cx0342 [ 830.974779][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 831.012779][ T788] usb 8-1: USB disconnect, device number 3 [ 831.188026][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 831.197549][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.208162][ T23] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 831.223753][ T23] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 831.245127][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.262619][ T23] usb 5-1: Product: syz [ 831.267158][ T23] usb 5-1: Manufacturer: syz [ 831.271829][ T23] usb 5-1: SerialNumber: syz [ 831.451385][T13208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1634'. [ 833.989874][ T23] usb 5-1: USB disconnect, device number 12 [ 834.537709][T13285] loop7: detected capacity change from 0 to 128 [ 834.924435][T13292] kvm: MWAIT instruction emulated as NOP! [ 838.565191][T13372] loop7: detected capacity change from 0 to 512 [ 838.609783][T13372] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #15: comm syz.7.1680: inode has both inline data and extents flags [ 838.635027][T13372] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.1680: couldn't read orphan inode 15 (err -117) [ 838.679521][T13372] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.924815][T12685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.290336][T13387] sd 0:0:1:0: PR command failed: 1026 [ 839.295937][T13387] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 839.303347][T13387] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 839.474274][T13390] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 840.768286][T13411] ipip0: entered promiscuous mode [ 841.021843][T13423] futex_wake_op: syz.7.1697 tries to shift op by -1; fix this program [ 841.542020][T13442] loop7: detected capacity change from 0 to 8 [ 841.618240][T13442] SQUASHFS error: Failed to read block 0x2d7: -5 [ 841.670151][T13442] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 842.756835][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 842.763667][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 842.779793][T13461] overlayfs: failed to resolve './file0': -2 [ 845.110286][T13508] overlayfs: failed to resolve './cgroup': -2 [ 845.214751][T13510] overlayfs: failed to resolve './file0': -2 [ 847.495309][T13558] io-wq is not configured for unbound workers [ 848.784759][T13584] overlayfs: failed to clone upperpath [ 849.281166][T13601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1750'. [ 849.384745][T13606] loop2: detected capacity change from 0 to 7 [ 849.394205][T13606] loop2: [ 849.401010][T13606] loop2: partition table partially beyond EOD, truncated [ 850.780277][T13646] FAULT_FLAG_ALLOW_RETRY missing 801 [ 850.787117][T13646] CPU: 0 PID: 13646 Comm: syz.4.1758 Not tainted syzkaller #0 [ 850.794840][T13646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 850.804943][T13646] Call Trace: [ 850.808260][T13646] [ 850.811228][T13646] dump_stack_lvl+0x18c/0x250 [ 850.815972][T13646] ? show_regs_print_info+0x20/0x20 [ 850.821232][T13646] ? load_image+0x420/0x420 [ 850.825787][T13646] ? assert_fault_locked+0x17f/0x3a0 [ 850.831117][T13646] handle_userfault+0x1167/0x1340 [ 850.836219][T13646] ? userfaultfd_wp_unpopulated+0xa0/0xa0 [ 850.842010][T13646] ? do_raw_spin_unlock+0x121/0x230 [ 850.847373][T13646] ? free_unref_page+0x190/0x2e0 [ 850.852375][T13646] handle_mm_fault+0x3ce9/0x4a50 [ 850.857345][T13646] ? handle_mm_fault+0xe6/0x4a50 [ 850.862312][T13646] ? numa_migrate_prep+0x350/0x350 [ 850.867432][T13646] ? follow_page_pte+0x6dd/0x1ae0 [ 850.872489][T13646] ? pmd_lock+0x60/0x60 [ 850.876671][T13646] __get_user_pages+0x604/0x1580 [ 850.881647][T13646] ? populate_vma_page_range+0x380/0x380 [ 850.887305][T13646] populate_vma_page_range+0x2c1/0x380 [ 850.892785][T13646] ? fixup_user_fault+0x750/0x750 [ 850.897832][T13646] mprotect_fixup+0x9a3/0xcd0 [ 850.902542][T13646] ? change_protection+0x31e0/0x31e0 [ 850.907850][T13646] ? apparmor_file_mprotect+0xfe/0x120 [ 850.913383][T13646] ? bpf_lsm_file_mprotect+0x9/0x10 [ 850.918799][T13646] do_mprotect_pkey+0x7c3/0xcc0 [ 850.923679][T13646] ? prot_none_test+0x10/0x10 [ 850.928410][T13646] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 850.934506][T13646] __x64_sys_mprotect+0x80/0x90 [ 850.939384][T13646] do_syscall_64+0x55/0xb0 [ 850.943817][T13646] ? clear_bhb_loop+0x40/0x90 [ 850.948507][T13646] ? clear_bhb_loop+0x40/0x90 [ 850.953198][T13646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.959124][T13646] RIP: 0033:0x7f1b4799de59 [ 850.963590][T13646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.983211][T13646] RSP: 002b:00007f1b487f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 850.991648][T13646] RAX: ffffffffffffffda RBX: 00007f1b47c25fa0 RCX: 00007f1b4799de59 [ 850.999632][T13646] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 851.007703][T13646] RBP: 00007f1b47a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 851.015694][T13646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.023678][T13646] R13: 00007f1b47c26038 R14: 00007f1b47c25fa0 R15: 00007fff9a845548 [ 851.031681][T13646] [ 851.652961][ T6207] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 853.083543][ T6207] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 853.210482][T13721] overlayfs: failed to clone upperpath [ 853.211793][T13723] overlayfs: failed to resolve './file0': -2 [ 853.299382][ T6207] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 853.327146][ T6207] usb 5-1: config 0 interface 0 has no altsetting 0 [ 853.358520][ T6207] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 853.389851][ T6207] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 853.410739][ T6207] usb 5-1: Product: syz [ 853.420115][ T6207] usb 5-1: Manufacturer: syz [ 853.424809][ T6207] usb 5-1: SerialNumber: syz [ 853.457954][ T6207] usb 5-1: config 0 descriptor?? [ 853.488007][ T6207] usb 5-1: selecting invalid altsetting 0 [ 853.861202][ T23] usb 5-1: USB disconnect, device number 14 [ 853.870325][T13707] usb 5-1: cannot submit urb 0, error -19: no device [ 854.834036][T13765] syzkaller1: entered promiscuous mode [ 854.869645][T13765] syzkaller1: entered allmulticast mode [ 857.228701][T13829] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1803'. [ 857.537573][T13834] overlayfs: failed to clone upperpath [ 858.287450][T13844] loop7: detected capacity change from 0 to 1024 [ 858.378461][T13844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.522883][ T28] audit: type=1804 audit(1784127558.385:74): pid=13844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1809" name="/newroot/44/file1/bus" dev="loop7" ino=18 res=1 errno=0 [ 859.043135][T13858] syz_tun: entered allmulticast mode [ 859.075021][T13857] syz_tun: left allmulticast mode [ 859.358110][T12685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.441654][T13870] loop7: detected capacity change from 0 to 4096 [ 860.595091][T13870] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.359299][T12685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.369600][T12685] EXT4-fs error (device loop7): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 4 in block_group 0 [ 861.413514][T12685] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 861.465913][T12685] EXT4-fs error (device loop7): ext4_quota_off:7237: inode #4: comm syz-executor: mark_inode_dirty error [ 861.508732][T12685] EXT4-fs error (device loop7): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 4 in block_group 0 [ 861.545148][T12685] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 861.570405][T12685] EXT4-fs error (device loop7): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 861.785278][T13892] loop4: detected capacity change from 0 to 1024 [ 861.832475][T13892] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 863.513559][ T5817] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 863.727499][ T5817] usb 5-1: Using ep0 maxpacket: 32 [ 863.744342][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.774757][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.813943][ T5817] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 863.829080][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.860335][ T5817] usb 5-1: config 0 descriptor?? [ 863.881677][ T5817] hub 5-1:0.0: USB hub found [ 864.112826][ T5817] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 864.548417][ T5817] hid-generic 0003:046D:C31C.0008: unknown main item tag 0x0 [ 864.613754][ T5817] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 865.122222][ T5817] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 865.445548][T13910] usb 5-1: reset high-speed USB device number 15 using dummy_hcd [ 865.974253][ T5765] usb 5-1: USB disconnect, device number 15 [ 865.975241][T13910] usbhid 5-1:0.0: reset_resume error -19 [ 866.107126][ T5817] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 866.278727][T13982] fido_id[13982]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 866.848540][ T5765] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 866.857858][ T9299] Bluetooth: hci0: command 0x0406 tx timeout [ 867.048817][T13994] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 867.106275][ T5765] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 867.135633][ T5765] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 867.176702][ T5765] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 867.188288][ T5765] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.469511][ T5765] usb 8-1: usb_control_msg returned -32 [ 867.502089][ T5765] usbtmc 8-1:16.0: can't read capabilities [ 869.815665][ T5870] usb 8-1: USB disconnect, device number 4 [ 872.289980][T14089] 0xfffffffffffffffd-0x000000020000 : "" [ 872.336051][T14089] mtd: partition "" is out of reach -- disabled [ 872.434324][T14089] ftl_cs: FTL header not found. [ 874.477243][ T5765] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 874.733821][ T5765] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.752338][ T5765] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.764213][ T5765] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 874.783614][ T5765] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 874.793180][ T5765] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.811138][ T5765] usb 8-1: config 0 descriptor?? [ 875.044748][T14157] tipc: Enabling of bearer rejected, failed to enable media [ 875.271063][ T5765] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 875.325016][ T5765] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 875.682671][ T5777] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 876.170175][T14189] syz_tun: entered allmulticast mode [ 876.211486][T14189] syz_tun: left allmulticast mode [ 876.431424][T14194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1935'. [ 877.792592][ T5765] usb 8-1: USB disconnect, device number 5 [ 877.860522][T14237] capability: warning: `syz.4.1953' uses deprecated v2 capabilities in a way that may be insecure [ 878.075710][T14248] loop7: detected capacity change from 0 to 256 [ 880.201385][T14294] overlayfs: failed to clone upperpath [ 880.436669][T14299] overlayfs: failed to clone upperpath [ 882.341930][T14358] tipc: Failed to remove unknown binding: 66,0,0/0:1456169228/1456169230 [ 882.367453][T14358] tipc: Failed to remove unknown binding: 66,0,0/0:1456169228/1456169229 [ 884.150463][T14392] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 884.174124][T14392] batman_adv: batadv0: Adding interface: gretap1 [ 884.187411][T14392] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.224390][T14392] batman_adv: batadv0: Interface activated: gretap1 [ 884.865998][ T5777] Bluetooth: hci2: link tx timeout [ 884.874134][ T5777] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 884.889720][ T5777] Bluetooth: hci2: link tx timeout [ 884.895004][ T5777] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 884.913509][ T5777] Bluetooth: hci2: link tx timeout [ 884.918858][ T5777] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 885.941740][T14436] overlayfs: failed to clone upperpath [ 886.803266][T14455] overlayfs: failed to clone upperpath [ 886.829557][T14459] overlayfs: failed to clone upperpath [ 887.051028][T14466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2044'. [ 887.060198][ T28] audit: type=1326 audit(1784127585.093:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.5.2042" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7ff38c197bd7 code=0x0 [ 887.129413][ T9299] Bluetooth: hci2: command 0x0406 tx timeout [ 888.451846][T14487] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2052'. [ 890.109831][T14521] overlayfs: failed to resolve './file0': -2 [ 891.159447][T14549] overlayfs: failed to clone upperpath [ 892.021618][T14566] loop7: detected capacity change from 0 to 4096 [ 892.118406][T14568] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 893.074454][T14588] input: syz0 as /devices/virtual/input/input16 [ 893.369678][T14590] loop7: detected capacity change from 0 to 8192 [ 893.586437][T14596] 9pnet_fd: Insufficient options for proto=fd [ 893.931014][T14600] loop7: detected capacity change from 0 to 32768 [ 894.350887][T14605] tipc: Enabling of bearer rejected, failed to enable media [ 898.232358][ T9299] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 901.706320][T14744] overlayfs: failed to resolve './file0': -2 [ 901.870058][T14746] loop7: detected capacity change from 0 to 2048 [ 901.891224][T14746] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 905.949849][T14822] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 908.428354][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 908.434750][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 909.091534][T14889] mmap: syz.5.2205 (14889): VmData 176005120 exceed data ulimit 235. Update limits or use boot option ignore_rlimit_data. [ 909.188992][T14893] loop7: detected capacity change from 0 to 256 [ 910.946475][T14916] 9pnet_fd: Insufficient options for proto=fd [ 913.134111][T14974] kvm: user requested TSC rate below hardware speed [ 913.144473][T14974] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 913.156621][T14974] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 914.315808][T14987] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 914.585782][T15001] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2247'. [ 914.611655][T15001] syzkaller1: entered promiscuous mode [ 914.623700][T15001] syzkaller1: entered allmulticast mode [ 917.869272][ T28] audit: type=1326 audit(1784127613.934:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15043 comm="syz.4.2262" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b4799de59 code=0x0 [ 919.915484][T15091] overlayfs: failed to clone upperpath [ 921.160413][T15113] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2288'. [ 923.288069][T15143] 9pnet_fd: Insufficient options for proto=fd [ 923.800320][T15168] tipc: Enabling of bearer rejected, failed to enable media [ 925.763676][T15200] loop7: detected capacity change from 0 to 128 [ 927.407996][T15227] overlayfs: failed to clone upperpath [ 927.532571][T15230] tipc: Started in network mode [ 927.544577][T15230] tipc: Node identity 080211, cluster identity 4711 [ 927.551536][T15230] tipc: Enabled bearer , priority 0 [ 927.796877][T15242] overlayfs: failed to clone upperpath [ 927.960650][ T5817] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 928.166146][ T5817] usb 8-1: Using ep0 maxpacket: 16 [ 928.185802][ T5817] usb 8-1: config index 0 descriptor too short (expected 37359, got 202) [ 928.204777][ T5817] usb 8-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 928.224938][ T5817] usb 8-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 928.235468][ T5817] usb 8-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 928.271755][ T5817] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 928.299228][ T5817] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.322335][ T5817] usb 8-1: Product: syz [ 928.355976][ T5817] usb 8-1: Manufacturer: syz [ 928.360661][ T5817] usb 8-1: SerialNumber: syz [ 928.740926][ T23] tipc: Node number set to 134353152 [ 929.108178][ T5817] usb 8-1: 0:2 : does not exist [ 929.163704][ T5817] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 929.282760][ T5817] usb 8-1: USB disconnect, device number 6 [ 931.188214][T15304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2354'. [ 934.404896][T15351] overlayfs: failed to resolve './cgroup': -2 [ 935.005893][T15357] overlayfs: failed to resolve './file0': -2 [ 938.603049][T15367] netlink: 'syz.4.2380': attribute type 1 has an invalid length. [ 938.611671][T15367] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 939.509063][T15398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2392'. [ 941.481162][T15447] loop7: detected capacity change from 0 to 512 [ 941.530661][T15447] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 941.595542][T15447] EXT4-fs error (device loop7): ext4_orphan_get:1430: comm syz.7.2413: bad orphan inode 131083 [ 941.608380][T15447] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 941.766429][T12685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.951951][T15509] overlayfs: failed to resolve './cgroup': -2 [ 945.816940][ T5817] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 946.033354][ T5817] usb 8-1: Using ep0 maxpacket: 8 [ 946.052821][ T5817] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 946.150598][ T5817] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 946.312716][ T5817] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 946.455181][ T5817] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 946.608195][ T5817] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 946.651981][ T5817] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 946.686458][ T5817] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.970330][ T5817] usb 8-1: GET_CAPABILITIES returned 0 [ 946.982326][ T5817] usbtmc 8-1:16.0: can't read capabilities [ 947.062642][T15561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 947.073624][T15561] batadv_slave_1: entered promiscuous mode [ 947.574199][ T5870] usb 8-1: USB disconnect, device number 7 [ 948.874091][ T5870] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 949.038458][T15614] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2481'. [ 949.076240][ T5870] usb 8-1: Using ep0 maxpacket: 16 [ 949.086694][ T5870] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 949.106159][ T5870] usb 8-1: config 0 has no interface number 0 [ 949.137714][ T5870] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 949.149499][ T5870] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 949.170698][ T5870] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 949.182762][ T5870] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.193835][ T5870] usb 8-1: Product: syz [ 949.198119][ T5870] usb 8-1: Manufacturer: syz [ 949.202892][ T5870] usb 8-1: SerialNumber: syz [ 949.486995][ T5870] usb 8-1: config 0 descriptor?? [ 949.634900][T15588] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 949.748502][T15588] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 950.085081][T15588] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 950.103177][T15588] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 950.347944][ T5870] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 951.842057][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802fad4c00: rx timeout, send abort [ 951.851196][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802fad4c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 951.865850][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805cfb3c00: rx timeout, send abort [ 951.875456][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805cfb3c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 952.084610][ T5870] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 952.108828][ T5870] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 952.135859][ T5870] asix: probe of 8-1:0.34 failed with error -71 [ 952.160790][ T5870] usb 8-1: USB disconnect, device number 8 [ 954.859537][T15656] loop7: detected capacity change from 0 to 32768 [ 954.912414][T15656] (syz.7.2504,15656,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 954.945820][T15656] (syz.7.2504,15656,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 955.027763][T15656] JBD2: Ignoring recovery information on journal [ 955.173490][T15656] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 955.576722][T15656] loop7: detected capacity change from 32768 to 64 [ 955.674068][T15695] (syz.7.2504,15695,0):ocfs2_block_group_alloc_contig:467 ERROR: status = -12 [ 955.694946][T15695] (syz.7.2504,15695,0):ocfs2_block_group_alloc:727 ERROR: status = -12 [ 955.710106][T15695] (syz.7.2504,15695,0):ocfs2_block_group_alloc:780 ERROR: status = -12 [ 955.724101][T15695] (syz.7.2504,15695,1):ocfs2_reserve_suballoc_bits:855 ERROR: status = -12 [ 955.732883][T15695] (syz.7.2504,15695,1):ocfs2_reserve_suballoc_bits:872 ERROR: status = -12 [ 955.742768][T15695] (syz.7.2504,15695,1):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -12 [ 955.752443][T15695] (syz.7.2504,15695,1):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -12 [ 955.762693][T15695] (syz.7.2504,15695,1):ocfs2_expand_inline_dir:2841 ERROR: status = -12 [ 955.771174][T15695] (syz.7.2504,15695,1):ocfs2_extend_dir:3205 ERROR: status = -12 [ 955.779903][T15695] (syz.7.2504,15695,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -12 [ 955.958148][T15695] (syz.7.2504,15695,0):ocfs2_link:762 ERROR: status = -12 [ 956.023977][T15695] (syz.7.2504,15695,0):ocfs2_link:840 ERROR: status = -12 [ 956.490458][T12685] syz-executor: attempt to access beyond end of device [ 956.490458][T12685] loop7: rw=0, sector=16977, nr_sectors = 1 limit=64 [ 956.550737][T12685] (syz-executor,12685,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 956.579984][T12685] syz-executor: attempt to access beyond end of device [ 956.579984][T12685] loop7: rw=0, sector=16977, nr_sectors = 1 limit=64 [ 956.610305][T12685] (syz-executor,12685,1):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 956.934115][T15686] jbd2/loop7-29: attempt to access beyond end of device [ 956.934115][T15686] loop7: rw=38913, sector=554, nr_sectors = 1 limit=64 [ 956.960819][T15686] jbd2/loop7-29: attempt to access beyond end of device [ 956.960819][T15686] loop7: rw=38913, sector=555, nr_sectors = 1 limit=64 [ 956.982882][T15686] jbd2/loop7-29: attempt to access beyond end of device [ 956.982882][T15686] loop7: rw=38913, sector=556, nr_sectors = 1 limit=64 [ 957.003442][T15686] jbd2/loop7-29: attempt to access beyond end of device [ 957.003442][T15686] loop7: rw=38913, sector=557, nr_sectors = 1 limit=64 [ 957.024660][T15686] jbd2/loop7-29: attempt to access beyond end of device [ 957.024660][T15686] loop7: rw=38913, sector=558, nr_sectors = 1 limit=64 [ 957.044087][T15686] jbd2/loop7-29: attempt to access beyond end of device [ 957.044087][T15686] loop7: rw=38913, sector=559, nr_sectors = 1 limit=64 [ 957.060423][T15686] jbd2/loop7-29: attempt to access beyond end of device [ 957.060423][T15686] loop7: rw=38913, sector=560, nr_sectors = 1 limit=64 [ 957.074654][T15686] jbd2/loop7-29: attempt to access beyond end of device [ 957.074654][T15686] loop7: rw=38913, sector=561, nr_sectors = 1 limit=64 [ 957.091444][T15686] Aborting journal on device loop7-29. [ 957.098045][T15686] Buffer I/O error on dev loop7, logical block 552, lost sync page write [ 957.115369][T15686] JBD2: I/O error when updating journal superblock for loop7-29. [ 957.131512][T12685] (syz-executor,12685,1):ocfs2_start_trans:379 ERROR: status = -30 [ 957.139753][T12685] OCFS2: abort (device loop7): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 957.151850][T15686] (jbd2/loop7-29,15686,1):ocfs2_abort_trigger:590 ERROR: ocfs2_abort_trigger called by JBD2. bh = 0xffff88805d4e8cb0, bh->b_blocknr = 16969 [ 957.163524][T12685] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 957.167195][T15686] OCFS2: ERROR (device loop7): void ocfs2_abort_trigger(struct jbd2_buffer_trigger_type *, struct buffer_head *): JBD2 has aborted our journal, ocfs2 cannot continue [ 957.194050][T15686] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 957.204027][T15686] OCFS2: Returning error to the calling process. [ 957.219323][T12685] OCFS2: Returning error to the calling process. [ 957.225717][T12685] (syz-executor,12685,1):ocfs2_modify_bh:105 ERROR: status = -30 [ 957.240305][T15686] (jbd2/loop7-29,15686,1):ocfs2_abort_trigger:590 ERROR: ocfs2_abort_trigger called by JBD2. bh = 0xffff88805d5f9570, bh->b_blocknr = 25 [ 957.264128][T12685] (syz-executor,12685,1):ocfs2_local_free_info:856 ERROR: status = -30 [ 957.275556][T15686] OCFS2: ERROR (device loop7): void ocfs2_abort_trigger(struct jbd2_buffer_trigger_type *, struct buffer_head *): JBD2 has aborted our journal, ocfs2 cannot continue [ 957.294309][T12685] (syz-executor,12685,1):ocfs2_start_trans:379 ERROR: status = -30 [ 957.302268][T12685] OCFS2: abort (device loop7): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 957.323871][T15686] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 957.336060][T12685] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 957.351551][T15686] OCFS2: Returning error to the calling process. [ 957.358007][T15686] (jbd2/loop7-29,15686,1):ocfs2_abort_trigger:590 ERROR: ocfs2_abort_trigger called by JBD2. bh = 0xffff88805d4e8910, bh->b_blocknr = 16966 [ 957.377836][T12685] OCFS2: Returning error to the calling process. [ 957.384616][T12685] (syz-executor,12685,1):ocfs2_modify_bh:105 ERROR: status = -30 [ 957.396466][T15686] OCFS2: ERROR (device loop7): void ocfs2_abort_trigger(struct jbd2_buffer_trigger_type *, struct buffer_head *): JBD2 has aborted our journal, ocfs2 cannot continue [ 957.406771][T12685] (syz-executor,12685,0):ocfs2_local_free_info:856 ERROR: status = -30 [ 957.413796][T15686] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 957.427941][T12685] (syz-executor,12685,0):ocfs2_start_trans:379 ERROR: status = -30 [ 957.433337][T15686] OCFS2: Returning error to the calling process. [ 957.446767][T12685] OCFS2: abort (device loop7): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 957.449383][T15686] (jbd2/loop7-29,15686,1):ocfs2_abort_trigger:590 ERROR: ocfs2_abort_trigger called by JBD2. bh = 0xffff888076d41740, bh->b_blocknr = 16953 [ 957.463323][T12685] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 957.473475][T15686] OCFS2: ERROR (device loop7): void ocfs2_abort_trigger(struct jbd2_buffer_trigger_type *, struct buffer_head *): JBD2 has aborted our journal, ocfs2 cannot continue [ 957.483384][T12685] OCFS2: Returning error to the calling process. [ 957.483397][T12685] (syz-executor,12685,0):ocfs2_shutdown_local_alloc:418 ERROR: status = -30 [ 957.483524][T12685] Buffer I/O error on dev loop7, logical block 16936, lost sync page write [ 957.506260][T15686] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 957.542397][T15686] OCFS2: Returning error to the calling process. [ 957.545878][T12685] (syz-executor,12685,0):ocfs2_write_block:78 ERROR: status = -5 [ 957.548853][T15686] (jbd2/loop7-29,15686,1):ocfs2_abort_trigger:590 ERROR: ocfs2_abort_trigger called by JBD2. bh = 0xffff88805d5f9000, bh->b_blocknr = 24 [ 957.564622][T12685] (syz-executor,12685,0):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 957.582946][T12685] (syz-executor,12685,1):ocfs2_put_slot:517 ERROR: status = -5 [ 957.592893][T15686] OCFS2: ERROR (device loop7): void ocfs2_abort_trigger(struct jbd2_buffer_trigger_type *, struct buffer_head *): JBD2 has aborted our journal, ocfs2 cannot continue [ 957.610277][T15686] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 957.621201][T15686] OCFS2: Returning error to the calling process. [ 957.627878][T15686] (jbd2/loop7-29,15686,0):ocfs2_abort_trigger:590 ERROR: ocfs2_abort_trigger called by JBD2. bh = 0xffff88805d6db3a0, bh->b_blocknr = 16950 [ 957.663834][T15686] OCFS2: ERROR (device loop7): void ocfs2_abort_trigger(struct jbd2_buffer_trigger_type *, struct buffer_head *): JBD2 has aborted our journal, ocfs2 cannot continue [ 957.686604][T15686] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 957.697223][T15686] OCFS2: Returning error to the calling process. [ 957.758025][T12685] (syz-executor,12685,0):ocfs2_journal_shutdown:1107 ERROR: status = -5 [ 957.836810][T12685] ocfs2: Unmounting device (7,7) on (node local) [ 959.506828][T14636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 959.523233][T14636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 959.533630][T14636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 959.545289][T14636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 959.554979][T14636] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 959.562873][T14636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 960.238253][T15759] chnl_net:caif_netlink_parms(): no params data found [ 961.098492][T15759] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.106389][T15759] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.114315][T15759] bridge_slave_0: entered allmulticast mode [ 961.121967][T15759] bridge_slave_0: entered promiscuous mode [ 961.132781][T15759] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.140073][T15759] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.147433][T15759] bridge_slave_1: entered allmulticast mode [ 961.155336][T15759] bridge_slave_1: entered promiscuous mode [ 961.173173][T15791] overlayfs: failed to clone upperpath [ 961.241091][T15759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.263896][T15759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.354039][T15759] team0: Port device team_slave_0 added [ 961.391119][T15759] team0: Port device team_slave_1 added [ 961.466653][T15759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.474235][T15759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.508086][T15759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.521708][T15759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.529421][T15759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.556513][T15759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.672332][T15759] hsr_slave_0: entered promiscuous mode [ 961.688394][T15759] hsr_slave_1: entered promiscuous mode [ 961.714586][T15759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 961.736439][T15759] Cannot create hsr debugfs directory [ 961.750731][T14636] Bluetooth: hci2: command tx timeout [ 962.067254][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2555'. [ 962.101582][ C1] vxcan1: j1939_session_tx_dat: 0xffff88805cfd0000: queue data error: -100 [ 962.290634][T15759] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.410183][T15759] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.496781][T15759] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.600628][T15759] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.091613][T15759] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 963.107409][T15759] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 963.379897][T15759] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 963.768836][T15759] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 963.972911][T14636] Bluetooth: hci2: command tx timeout [ 964.194483][T15759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.324054][T15759] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.373385][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.380574][ T6242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.483795][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.491046][ T6228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.152919][T15759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.212391][T14636] Bluetooth: hci2: command tx timeout [ 966.649452][T15759] veth0_vlan: entered promiscuous mode [ 966.672313][T15759] veth1_vlan: entered promiscuous mode [ 966.742143][T15759] veth0_macvtap: entered promiscuous mode [ 966.760355][T15759] veth1_macvtap: entered promiscuous mode [ 966.793435][T15759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.813968][T15759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.825526][T15759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.837112][T15759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.848349][T15759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.859687][T15759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.870091][T15759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.881781][T15759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.894078][T15759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.920776][T15759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.944968][T15759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.955557][T15759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.975295][T15759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.985307][T15759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.995833][T15759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.012856][T15759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.034921][T15759] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.044331][T15759] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.054456][T15759] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.065053][T15759] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.215665][ T6215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.242534][ T6215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.318260][ T6215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.326161][ T6215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.418137][T14636] Bluetooth: hci2: command tx timeout [ 969.426598][T15914] overlayfs: failed to clone upperpath [ 970.092789][T15943] kvm: emulating exchange as write [ 970.100666][T15943] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 971.253506][T15987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2613'. [ 972.372848][T16017] lo: entered allmulticast mode [ 973.426386][T16035] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.435768][T16035] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.855820][T16035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.901746][T16035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.078545][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 974.085255][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 974.358408][T16035] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.367502][T16035] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.376823][T16035] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.385902][T16035] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.522114][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2637'. [ 974.641234][T16060] loop7: detected capacity change from 0 to 1024 [ 974.662747][T16060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 975.924644][T16074] loop7: detected capacity change from 0 to 32768 [ 975.932327][T16079] ipip0: entered promiscuous mode [ 975.975239][T16074] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.2644 (16074) [ 976.080617][T16074] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 976.122835][T16074] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 976.142902][T16074] BTRFS info (device loop7): setting nodatasum [ 976.165252][T16074] BTRFS info (device loop7): force zlib compression, level 3 [ 976.173186][T16074] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 976.204986][T16074] BTRFS info (device loop7): use lzo compression, level 0 [ 976.225852][T16074] BTRFS info (device loop7): turning on flush-on-commit [ 976.236650][T16074] BTRFS info (device loop7): enabling auto defrag [ 976.266121][T16074] BTRFS info (device loop7): max_inline at 4096 [ 976.283842][T16074] BTRFS info (device loop7): force zlib compression, level 3 [ 976.291317][T16074] BTRFS info (device loop7): using free space tree [ 976.458772][T16074] BTRFS info (device loop7): enabling ssd optimizations [ 976.508621][T16074] BTRFS info (device loop7): auto enabling async discard [ 976.928870][ T28] audit: type=1326 audit(1784127669.202:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.4.2654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4799de59 code=0x7ffc0000 [ 977.003770][ T28] audit: type=1326 audit(1784127669.202:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.4.2654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4799de59 code=0x7ffc0000 [ 977.065528][ T28] audit: type=1326 audit(1784127669.202:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.4.2654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4799de59 code=0x7ffc0000 [ 977.145484][ T28] audit: type=1326 audit(1784127669.202:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.4.2654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4799de59 code=0x7ffc0000 [ 977.192971][T15759] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 977.244102][ T28] audit: type=1326 audit(1784127669.202:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.4.2654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4799de59 code=0x7ffc0000 [ 977.318471][ T28] audit: type=1326 audit(1784127669.202:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.4.2654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4799de59 code=0x7ffc0000 [ 977.353669][ T28] audit: type=1326 audit(1784127669.202:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.4.2654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4799de59 code=0x7ffc0000 [ 977.378455][ T28] audit: type=1326 audit(1784127669.202:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.4.2654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4799de59 code=0x7ffc0000 [ 977.405123][ T28] audit: type=1326 audit(1784127669.202:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.4.2654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1b4799de59 code=0x7ffc0000 [ 977.472239][ T28] audit: type=1326 audit(1784127669.202:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.4.2654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1b4799dbc2 code=0x7ffc0000 [ 978.659841][T16133] overlayfs: failed to clone upperpath [ 983.722775][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2687'. [ 983.753114][T16215] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 984.735564][ T6207] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 984.938592][ T6207] usb 8-1: Using ep0 maxpacket: 32 [ 984.953021][ T6207] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.975323][ T6207] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.998517][ T6207] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 985.019584][ T6207] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.043223][ T6207] usb 8-1: config 0 descriptor?? [ 985.350547][T16252] overlayfs: failed to clone upperpath [ 985.514029][ T6207] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 985.541613][ T6207] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 985.708316][ T6207] ft260 0003:0403:6030.000B: chip code: 0000 0000 [ 985.929914][ T6207] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 986.144423][ T6207] ft260 0003:0403:6030.000B: failed to retrieve status: -32, no wakeup [ 986.164827][ T6207] ft260 0003:0403:6030.000B: failed to retrieve status: -32 [ 986.431401][ T6207] usb 8-1: USB disconnect, device number 9 [ 986.596609][T16301] overlayfs: failed to clone upperpath [ 987.773653][T16327] loop7: detected capacity change from 0 to 256 [ 988.043985][T16307] overlayfs: failed to clone upperpath [ 989.096935][T16364] overlayfs: failed to clone upperpath [ 989.304837][T16371] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 989.318642][T16371] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 991.950568][T16440] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2764'. [ 993.329904][T16474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2775'. [ 993.596340][T16474] bond0: (slave bond_slave_1): Releasing backup interface [ 993.795765][T16480] tipc: Enabling of bearer rejected, failed to enable media [ 997.695091][T16573] overlayfs: failed to resolve './file0': -2 [ 997.763189][T16576] loop5: detected capacity change from 0 to 7 [ 997.794952][T16576] Dev loop5: unable to read RDB block 7 [ 997.810851][T16576] loop5: unable to read partition table [ 997.829140][T16576] loop5: partition table beyond EOD, truncated [ 997.845211][T16576] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1001.402021][T16646] loop7: detected capacity change from 0 to 4096 [ 1001.506512][T16646] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1001.548859][T16646] ntfs3: loop7: Failed to load $Extend (-22). [ 1001.555531][T16646] ntfs3: loop7: Failed to initialize $Extend. [ 1002.956680][T16676] netlink: 'syz.4.2850': attribute type 2 has an invalid length. [ 1004.348149][T16720] tipc: Enabling of bearer rejected, already enabled [ 1004.952226][T16729] overlayfs: failed to clone upperpath [ 1006.140826][T16760] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 1006.175733][T16760] syzkaller0: entered promiscuous mode [ 1006.181283][T16760] syzkaller0: entered allmulticast mode [ 1007.960056][T16775] syzkaller0: entered promiscuous mode [ 1007.965618][T16775] syzkaller0: entered allmulticast mode [ 1008.031682][T16775] tipc: Started in network mode [ 1008.044942][T16775] tipc: Node identity ee14b09c1bca, cluster identity 4711 [ 1008.074239][T16775] tipc: Enabled bearer , priority 0 [ 1008.098908][T16774] tipc: Resetting bearer [ 1008.198514][T16774] tipc: Disabling bearer [ 1008.343054][T16780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2890'. [ 1008.497204][ T2931] Bluetooth: hci3: Frame reassembly failed (-84) [ 1008.505257][ T2931] Bluetooth: hci3: Frame reassembly failed (-84) [ 1010.572735][T16809] netlink: 'syz.6.2901': attribute type 1 has an invalid length. [ 1010.613203][T16809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1010.652733][ T9299] Bluetooth: hci3: command 0x1003 tx timeout [ 1010.662075][T14636] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1010.826384][T16809] bond1: (slave geneve2): making interface the new active one [ 1010.848069][T16809] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1010.881705][T16810] tipc: Enabling of bearer rejected, already enabled [ 1014.155873][T16862] overlayfs: failed to clone upperpath [ 1017.072225][T16903] loop7: detected capacity change from 0 to 2048 [ 1017.081041][T16903] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1017.092392][T16903] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1017.118159][T16903] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 1017.131403][T16903] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1017.474976][T16907] 9pnet_fd: Insufficient options for proto=fd [ 1017.928546][T16918] netlink: 'syz.6.2944': attribute type 1 has an invalid length. [ 1017.983726][T16918] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1018.093842][T16922] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1018.297005][T16918] bond2: (slave macvlan1): making interface the new active one [ 1018.327437][T16918] macvlan1: entered promiscuous mode [ 1018.339783][T16918] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 1018.753596][T16940] lo: Caught tx_queue_len zero misconfig [ 1018.763133][T16940] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 1022.585722][T16963] tipc: Started in network mode [ 1022.590681][T16963] tipc: Node identity 7f000001, cluster identity 4711 [ 1022.629996][T16963] tipc: Enabled bearer , priority 10 [ 1022.676214][T16963] tipc: Enabled bearer , priority 10 [ 1022.704215][T16963] tipc: Enabled bearer , priority 27 [ 1022.986912][T14809] hsr_slave_0: left promiscuous mode [ 1023.004845][T14809] hsr_slave_1: left promiscuous mode [ 1023.011956][T14809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.020089][T14809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.029675][T14809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.039213][T14809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.072840][T14809] bridge_slave_1: left allmulticast mode [ 1023.087627][T14809] bridge_slave_1: left promiscuous mode [ 1023.099198][T14809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.120740][T14809] bridge_slave_0: left allmulticast mode [ 1023.126543][T14809] bridge_slave_0: left promiscuous mode [ 1023.141425][T14809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.238295][T14809] veth1_macvtap: left promiscuous mode [ 1023.251048][T14809] veth0_macvtap: left promiscuous mode [ 1023.263924][T14809] veth1_vlan: left promiscuous mode [ 1023.278412][T14809] veth0_vlan: left promiscuous mode [ 1025.140943][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2967'. [ 1025.681730][T17001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1027.357560][T17021] netlink: 'syz.5.2971': attribute type 1 has an invalid length. [ 1027.376409][T17021] netlink: 180900 bytes leftover after parsing attributes in process `syz.5.2971'. [ 1028.501617][T14809] team0 (unregistering): Port device team_slave_1 removed [ 1028.641855][T14809] team0 (unregistering): Port device team_slave_0 removed [ 1028.759049][T14809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.911914][T14809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1030.165684][T17041] siw: device registration error -23 [ 1030.327272][T14809] bond0 (unregistering): Released all slaves [ 1030.768450][ T5835] tipc: Node number set to 2130706433 [ 1035.010777][T17081] tipc: Enabling of bearer rejected, failed to enable media [ 1035.275341][ T6202] macvlan1: left promiscuous mode [ 1039.722834][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1039.730588][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1040.482294][T17152] overlayfs: failed to clone upperpath [ 1051.242614][T17240] tipc: Enabling of bearer rejected, failed to enable media [ 1051.709155][T17248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3037'. [ 1051.737374][T17248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1051.904298][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 1051.904318][ T28] audit: type=1326 audit(1784127739.350:141): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=17255 comm="syz.6.3041" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7cbdb9de59 code=0x0 [ 1069.113950][T17398] tipc: Enabling of bearer rejected, failed to enable media [ 1074.197567][ T5817] IPVS: starting estimator thread 0... [ 1074.305915][T17432] IPVS: using max 19 ests per chain, 45600 per kthread [ 1091.375588][ T9299] Bluetooth: hci2: command 0x0406 tx timeout [ 1100.276521][T17590] dns_resolver: Unsupported server list version (6) [ 1102.438298][T17591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.446886][T17591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.777893][T17591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.887731][T17591] batadv_slave_1: left promiscuous mode [ 1106.192047][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1106.216251][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1106.226953][ T1290] aoe: packet could not be sent on veth0_to_bond. consider increasing tx_queue_len [ 1106.675186][T17591] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.684244][T17591] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.698833][T17591] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.708349][T17591] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.799039][T17591] ip6erspan0: left allmulticast mode [ 1106.861211][T17591] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1106.870673][T17591] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1106.885459][T17591] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1106.894889][T17591] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1106.941230][T17606] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1107.702273][T17658] syz_tun: entered allmulticast mode [ 1110.446669][T17699] lo: entered allmulticast mode [ 1121.396563][ T28] audit: type=1326 audit(1784127804.388:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17791 comm="syz.5.3181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff38c19de59 code=0x0 [ 1129.633004][T17846] overlayfs: failed to clone lowerpath [ 1130.613544][T17852] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1130.834441][T17875] tipc: Enabling of bearer rejected, failed to enable media [ 1131.722956][T17876] overlayfs: failed to clone upperpath [ 1134.168076][T17900] tipc: Enabling of bearer rejected, already enabled [ 1135.342334][T17914] tipc: Enabling of bearer rejected, failed to enable media [ 1143.956464][T17952] tipc: Enabling of bearer rejected, failed to enable media [ 1144.056415][T17956] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3221'. [ 1145.016103][T17959] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3223'. [ 1147.913937][T17974] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 1151.857826][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3225'. [ 1157.646480][ T28] audit: type=1326 audit(1784127838.603:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.4.3245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b4799de59 code=0x0 [ 1170.847249][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1170.853632][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1173.101439][T18138] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1190.029237][T18272] tipc: Enabling of bearer rejected, failed to enable media [ 1191.321319][T18293] tipc: Enabling of bearer rejected, failed to enable media [ 1194.864290][T18341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3316'. [ 1195.082879][T18350] tipc: Enabling of bearer rejected, failed to enable media [ 1200.082819][T18394] tipc: Enabling of bearer rejected, failed to enable media [ 1205.932001][T18426] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3338'. [ 1206.614895][ T28] audit: type=1326 audit(1784127883.930:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.7.3339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1206.660514][ T28] audit: type=1326 audit(1784127883.930:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.7.3339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1206.801505][ T28] audit: type=1326 audit(1784127884.069:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.7.3339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1206.844551][ T28] audit: type=1326 audit(1784127884.069:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.7.3339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1206.881697][T14636] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1206.890323][ T28] audit: type=1326 audit(1784127884.069:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.7.3339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1206.891993][T14636] CPU: 1 PID: 14636 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1206.923651][T14636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1206.933745][T14636] Workqueue: hci2 hci_rx_work [ 1206.938608][T14636] Call Trace: [ 1206.941922][T14636] [ 1206.942929][ T28] audit: type=1326 audit(1784127884.078:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.7.3339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1206.944880][T14636] dump_stack_lvl+0x18c/0x250 [ 1206.944933][T14636] ? show_regs_print_info+0x20/0x20 [ 1206.979053][T14636] ? load_image+0x420/0x420 [ 1206.983725][T14636] sysfs_create_dir_ns+0x26e/0x2a0 [ 1206.988932][T14636] ? __lock_acquire+0x7d80/0x7d80 [ 1206.994011][T14636] ? sysfs_warn_dup+0xa0/0xa0 [ 1206.998737][T14636] ? do_raw_spin_unlock+0x121/0x230 [ 1207.003982][T14636] kobject_add_internal+0x617/0xc90 [ 1207.009212][T14636] kobject_add+0x164/0x240 [ 1207.013652][T14636] ? kobject_init+0x1d0/0x1d0 [ 1207.018351][T14636] ? get_device_parent+0x366/0x390 [ 1207.023531][T14636] device_add+0x3fa/0xc40 [ 1207.027879][T14636] hci_conn_add_sysfs+0xd5/0x1e0 [ 1207.032901][T14636] le_conn_complete_evt+0xe9f/0x1480 [ 1207.038246][T14636] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1207.044503][T14636] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1207.050170][T14636] ? mutex_unlock+0x10/0x10 [ 1207.054689][T14636] ? skb_pull_data+0xf0/0x1f0 [ 1207.059427][T14636] hci_le_conn_complete_evt+0x187/0x440 [ 1207.065006][T14636] ? hci_remote_host_features_evt+0x150/0x150 [ 1207.071090][T14636] hci_event_packet+0x7b4/0x1280 [ 1207.076048][T14636] ? __lock_acquire+0x7d80/0x7d80 [ 1207.081113][T14636] ? lock_chain_count+0x20/0x20 [ 1207.085982][T14636] ? bis_list+0x290/0x290 [ 1207.090329][T14636] ? lockdep_hardirqs_on+0x98/0x150 [ 1207.095545][T14636] ? hci_send_to_monitor+0xd7/0x4f0 [ 1207.100760][T14636] hci_rx_work+0x43a/0xd60 [ 1207.105204][T14636] ? process_scheduled_works+0x975/0x1600 [ 1207.110945][T14636] process_scheduled_works+0xa60/0x1600 [ 1207.116538][T14636] ? worker_attach_to_pool+0x370/0x370 [ 1207.122019][T14636] ? assign_work+0x3cc/0x5d0 [ 1207.126638][T14636] worker_thread+0xa5e/0xfe0 [ 1207.131283][T14636] ? _raw_spin_unlock+0x40/0x40 [ 1207.136237][T14636] ? __kthread_parkme+0x71/0x1c0 [ 1207.141202][T14636] kthread+0x2fa/0x390 [ 1207.145285][T14636] ? pr_cont_work+0x550/0x550 [ 1207.149980][T14636] ? kthread_blkcg+0xd0/0xd0 [ 1207.154583][T14636] ret_from_fork+0x48/0x80 [ 1207.159015][T14636] ? kthread_blkcg+0xd0/0xd0 [ 1207.163629][T14636] ret_from_fork_asm+0x11/0x20 [ 1207.168465][T14636] [ 1207.180553][T14636] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1207.194716][T14636] Bluetooth: hci2: failed to register connection device [ 1207.267276][ T28] audit: type=1326 audit(1784127884.530:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.7.3339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1207.325873][ T28] audit: type=1326 audit(1784127884.530:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.7.3339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1208.688034][T18443] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1218.032582][T18501] tipc: Enabling of bearer rejected, failed to enable media [ 1218.351774][ T9299] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1218.366284][ T9299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1218.379091][ T9299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1218.401093][ T9299] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1218.686925][ T9299] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1218.698417][ T9299] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1220.414754][T18386] syz_tun (unregistering): left allmulticast mode [ 1221.153148][ T9299] Bluetooth: hci3: command tx timeout [ 1221.870886][ T6215] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.095555][ T6215] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.348017][ T6215] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.521729][ T6215] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.622291][T18508] chnl_net:caif_netlink_parms(): no params data found [ 1223.490971][ T9299] Bluetooth: hci3: command tx timeout [ 1224.042500][T18508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.136632][T18508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.152779][T18508] bridge_slave_0: entered allmulticast mode [ 1224.160107][T18508] bridge_slave_0: entered promiscuous mode [ 1224.177918][T18508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.195932][T18508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.203184][T18508] bridge_slave_1: entered allmulticast mode [ 1224.220635][T18508] bridge_slave_1: entered promiscuous mode [ 1224.602517][T18508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.265055][T18508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.840234][T18508] team0: Port device team_slave_0 added [ 1226.078496][T18552] Bluetooth: hci3: command tx timeout [ 1226.511706][T18508] team0: Port device team_slave_1 added [ 1226.722143][ T6215] tipc: Disabling bearer [ 1226.753661][ T6215] tipc: Left network mode [ 1226.807290][T18508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.830986][T18508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1226.880308][T18508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.104202][T18508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.119166][T18508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.156675][T18508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.256169][T18508] hsr_slave_0: entered promiscuous mode [ 1227.271352][T18508] hsr_slave_1: entered promiscuous mode [ 1227.300633][T18508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1227.835988][T18508] Cannot create hsr debugfs directory [ 1228.322734][T18552] Bluetooth: hci3: command tx timeout [ 1232.003964][ T6215] batman_adv: batadv0: Interface deactivated: gretap1 [ 1232.159173][ T6215] batman_adv: batadv0: Removing interface: gretap1 [ 1232.834531][T18508] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1234.037281][T18508] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1234.976367][T18508] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1235.121776][ T28] audit: type=1326 audit(1784127910.200:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18642 comm="syz.5.3382" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff38c19de59 code=0x0 [ 1235.148393][T18508] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1235.680551][T18508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.752886][ T6215] hsr_slave_0: left promiscuous mode [ 1235.763886][ T6215] hsr_slave_1: left promiscuous mode [ 1235.780782][T14636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1235.796903][T14636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1235.879203][T14636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1235.891428][T14636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1235.901590][T14636] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1235.909719][T14636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1235.984208][ T6215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1235.992567][ T6215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.001069][ T6215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1236.008566][ T6215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.057759][ T6215] batman_adv: batadv0: Removing interface: veth0_vlan [ 1236.116933][ T6215] veth1_macvtap: left promiscuous mode [ 1236.240041][ T6215] veth0_macvtap: left promiscuous mode [ 1236.246042][ T6215] veth1_vlan: left promiscuous mode [ 1237.193220][ T1032] smc: removing ib device syz2 [ 1237.198309][T18517] syz2: rxe_query_port: returned err = -19 [ 1237.359120][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.365780][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.288014][T14636] Bluetooth: hci0: command tx timeout [ 1238.305050][ T6215] team0 (unregistering): Port device team_slave_1 removed [ 1238.373112][ T6215] team0 (unregistering): Port device team_slave_0 removed [ 1238.960736][ T6215] bond0 (unregistering): Released all slaves [ 1239.194611][T18508] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.343559][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.350804][ T6228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.367372][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.374677][ T6228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.550110][T14636] Bluetooth: hci0: command tx timeout [ 1240.576606][T18508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1240.587031][T18508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1242.344941][ T28] audit: type=1326 audit(1784127916.899:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18686 comm="syz.7.3390" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x0 [ 1242.621629][T18648] chnl_net:caif_netlink_parms(): no params data found [ 1242.681104][T18692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3391'. [ 1242.787583][T18692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.794847][T14636] Bluetooth: hci0: command tx timeout [ 1242.985844][ T6218] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.887327][T18648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.894527][T18648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.906526][T18648] bridge_slave_0: entered allmulticast mode [ 1244.920650][T18648] bridge_slave_0: entered promiscuous mode [ 1244.936119][T18648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.948742][T18648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.956707][T18648] bridge_slave_1: entered allmulticast mode [ 1244.968687][T18648] bridge_slave_1: entered promiscuous mode [ 1245.048018][T14636] Bluetooth: hci0: command tx timeout [ 1245.051725][ T6218] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.150901][T18508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.212198][T18718] mac80211_hwsim hwsim11 : renamed from wlan0 [ 1245.310269][ T6218] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.372124][T18648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.401278][T18648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1245.523625][ T6218] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.509130][T18648] team0: Port device team_slave_0 added [ 1246.554687][T18648] team0: Port device team_slave_1 added [ 1246.948359][T18648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.956283][T18648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.005434][T18648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.151247][T18648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.206771][T18648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.332563][T18648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.395333][T18648] hsr_slave_0: entered promiscuous mode [ 1247.434129][T18648] hsr_slave_1: entered promiscuous mode [ 1247.468717][T18648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1247.483042][T18648] Cannot create hsr debugfs directory [ 1248.750147][T18508] veth0_vlan: entered promiscuous mode [ 1248.770393][T18508] veth1_vlan: entered promiscuous mode [ 1248.940423][T18508] veth0_macvtap: entered promiscuous mode [ 1249.082583][ T6218] tipc: Disabling bearer [ 1249.093624][ T6218] tipc: Disabling bearer [ 1249.113592][ T6218] tipc: Disabling bearer [ 1249.453445][ T6218] tipc: Left network mode [ 1249.699176][T18508] veth1_macvtap: entered promiscuous mode [ 1249.955969][T18508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.981984][T18508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.000115][T18508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.046132][T18759] netlink: 'syz.5.3400': attribute type 10 has an invalid length. [ 1250.054014][T18759] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3400'. [ 1250.064608][T18759] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.073958][T18759] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.083009][T18759] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.091735][T18759] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.109253][T18759] team0: Port device geneve0 added [ 1250.422479][T18508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1250.456516][T18508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.503239][T18508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.532472][T18508] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.558586][T18508] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.596584][T18508] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.605360][T18508] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.392127][ T28] audit: type=1326 audit(1784127925.203:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18768 comm="syz.7.3399" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x0 [ 1252.003196][T18776] overlayfs: missing 'lowerdir' [ 1253.103721][T18648] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1253.144251][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.152133][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.318131][T18648] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1254.614401][T18648] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1255.731618][T18648] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1255.747733][ T6202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.769191][ T6202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.977927][T18797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1260.573648][ T6218] hsr_slave_0: left promiscuous mode [ 1260.580184][ T6218] hsr_slave_1: left promiscuous mode [ 1260.598818][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1260.610852][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1260.645410][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.659358][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1260.707407][ T6218] bridge_slave_1: left allmulticast mode [ 1260.731622][ T6218] bridge_slave_1: left promiscuous mode [ 1260.737555][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.771027][ T6218] bridge_slave_0: left allmulticast mode [ 1260.784280][ T6218] bridge_slave_0: left promiscuous mode [ 1260.791633][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.979474][ T6218] veth1_macvtap: left promiscuous mode [ 1260.985095][ T6218] veth0_macvtap: left promiscuous mode [ 1261.076048][ T6218] veth1_vlan: left promiscuous mode [ 1261.093467][ T6218] veth0_vlan: left promiscuous mode [ 1261.166670][T18826] ipt_REJECT: ECHOREPLY no longer supported. [ 1262.102373][T18830] loop8: detected capacity change from 0 to 128 [ 1262.134075][ T6218] bond2 (unregistering): (slave veth3): Releasing active interface [ 1262.153162][ T6218] macvlan1 (unregistering): entered promiscuous mode [ 1262.201563][T18830] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1262.217204][T18830] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1262.580698][T18830] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 1262.708352][T18508] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1262.753884][ T6218] bond2 (unregistering): (slave macvlan1): Releasing active interface [ 1262.777408][T18808] udevd[18808]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 1262.787958][ T6218] macvlan1 (unregistering): left promiscuous mode [ 1262.821108][ T6218] bond2 (unregistering): Released all slaves [ 1262.913680][ T6218] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1263.053658][T18808] udevd[18808]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 1263.364327][T14636] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1263.378005][ T788] libceph: connect (1)[c::]:6789 error -101 [ 1263.472455][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 1263.915744][ T788] libceph: connect (1)[c::]:6789 error -101 [ 1263.928201][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 1264.190896][ T6218] bond1 (unregistering): Released all slaves [ 1264.495972][T18849] ceph: No mds server is up or the cluster is laggy [ 1264.509614][ T788] libceph: connect (1)[c::]:6789 error -101 [ 1264.516008][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 1264.840645][ T28] audit: type=1326 audit(1784127937.660:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18856 comm="syz.7.3412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1264.907351][ T28] audit: type=1326 audit(1784127937.660:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18856 comm="syz.7.3412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1264.935110][ T28] audit: type=1326 audit(1784127937.688:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18856 comm="syz.7.3412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1264.999356][T18859] overlayfs: missing 'lowerdir' [ 1265.182312][ T28] audit: type=1326 audit(1784127937.688:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18856 comm="syz.7.3412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1265.426512][ T28] audit: type=1326 audit(1784127937.688:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18856 comm="syz.7.3412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1265.663982][ T28] audit: type=1326 audit(1784127937.688:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18856 comm="syz.7.3412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1265.688421][ T28] audit: type=1326 audit(1784127937.688:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18856 comm="syz.7.3412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1265.734608][ T28] audit: type=1326 audit(1784127937.688:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18856 comm="syz.7.3412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1265.823732][ T28] audit: type=1326 audit(1784127937.688:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18856 comm="syz.7.3412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1265.953707][ T28] audit: type=1326 audit(1784127938.491:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18856 comm="syz.7.3412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x7ffc0000 [ 1267.430188][T18867] netlink: 348 bytes leftover after parsing attributes in process `syz.7.3414'. [ 1267.440046][T18867] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3414'. [ 1268.513541][ T6218] team0 (unregistering): Port device team_slave_1 removed [ 1268.648962][ T6218] team0 (unregistering): Port device team_slave_0 removed [ 1269.170757][ T6218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.596718][ T6218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1271.834226][ T6218] bond0 (unregistering): Released all slaves [ 1271.978639][ T6218] lo (unregistering): left allmulticast mode [ 1272.178787][T18648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.300441][T18729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.480105][T18648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.512438][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.519701][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.577042][T18729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.301024][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.308165][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.450038][T18648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1275.464049][T18648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1276.601972][ T6218] IPVS: stop unused estimator thread 0... [ 1277.941184][T18648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.606161][T18648] veth0_vlan: entered promiscuous mode [ 1279.651852][T18648] veth1_vlan: entered promiscuous mode [ 1279.663480][ T5870] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1279.801552][T18648] veth0_macvtap: entered promiscuous mode [ 1279.839801][T18648] veth1_macvtap: entered promiscuous mode [ 1279.869576][T18648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.880278][T18648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.891703][ T5870] usb 9-1: Using ep0 maxpacket: 32 [ 1279.893118][T18648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.925353][T18648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.949558][T18648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.956046][ T5870] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.966967][T18648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.998853][T18648] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.999503][ T5870] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1280.008739][T18648] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.032975][T18648] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.060019][T18648] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.072069][ T5870] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1280.091243][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.093422][T18952] tipc: Enabling of bearer rejected, already enabled [ 1280.151607][ T5870] usb 9-1: Product: syz [ 1280.156831][ T5870] usb 9-1: Manufacturer: syz [ 1280.198515][ T5870] usb 9-1: SerialNumber: syz [ 1280.217050][ T5870] usb 9-1: config 0 descriptor?? [ 1280.359847][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.367719][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.627710][ T5892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.705361][T18960] blktrace: Concurrent blktraces are not allowed on loop10 [ 1280.806701][ T5892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.408183][T18960] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1282.806018][T18975] fuse: Bad value for 'fd' [ 1283.193140][ T5817] IPVS: starting estimator thread 0... [ 1283.305313][T18980] IPVS: using max 18 ests per chain, 43200 per kthread [ 1283.515922][ C1] hrtimer: interrupt took 28725 ns [ 1283.987508][ T5817] usb 9-1: USB disconnect, device number 2 [ 1288.914594][T13717] IPVS: starting estimator thread 0... [ 1289.103440][T19026] IPVS: using max 19 ests per chain, 45600 per kthread [ 1292.175254][T19059] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1292.282758][T19056] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 1292.429309][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1292.429326][ T28] audit: type=1326 audit(1784127962.942:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19054 comm="syz.7.3446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1443f9de59 code=0x0 [ 1294.747871][T19077] __vm_enough_memory: pid: 19077, comm: syz.5.3447, not enough memory for the allocation [ 1295.038793][T19082] overlayfs: failed to clone upperpath [ 1295.152920][T19083] netlink: 'syz.7.3449': attribute type 4 has an invalid length. [ 1298.678549][T19113] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3454'. [ 1298.687605][T19113] bridge_slave_1: left allmulticast mode [ 1298.693257][T19113] bridge_slave_1: left promiscuous mode [ 1298.699080][T19113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.708221][T19113] bridge_slave_0: left allmulticast mode [ 1298.713925][T19113] bridge_slave_0: left promiscuous mode [ 1298.719880][T19113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.425190][T19118] xt_CT: No such helper "pptp" [ 1299.858976][T19129] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1303.024863][T19140] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1303.927688][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1303.934308][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.114390][T19145] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1306.673254][T19162] 9pnet_fd: p9_fd_create_tcp (19162): problem connecting socket to 127.0.0.1 [ 1308.232644][T19172] xt_CT: No such helper "pptp" [ 1311.671980][ T788] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1313.796861][T19205] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1314.547879][T19214] overlayfs: failed to resolve './bus': -2 [ 1314.709986][ T788] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1314.735541][ T788] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1314.743720][ T788] usb 10-1: can't read configurations, error -71 [ 1315.695187][T19219] tmpfs: Unknown parameter 'grpquota2' [ 1315.933783][T19222] loop9: detected capacity change from 0 to 256 [ 1316.939123][T19222] FAT-fs (loop9): "posix" option is obsolete, not supported now [ 1317.296429][T19236] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1317.322527][T19232] IPVS: stopping master sync thread 19236 ... [ 1319.188912][T13717] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1320.351250][T13717] usb 10-1: too many configurations: 151, using maximum allowed: 8 [ 1320.943930][T19250] tipc: Enabling of bearer rejected, already enabled [ 1320.995837][T13717] usb 10-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1321.047390][T13717] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1321.082524][T13717] usb 10-1: Product: syz [ 1321.086857][T13717] usb 10-1: Manufacturer: syz [ 1321.124601][T13717] usb 10-1: SerialNumber: syz [ 1321.172796][T13717] usb 10-1: config 0 descriptor?? [ 1321.397042][ T28] audit: type=1326 audit(1784652276.930:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19256 comm="syz.8.3483" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff92299de59 code=0x0 [ 1322.273799][ T8] usb 10-1: USB disconnect, device number 4 [ 1322.419100][T19272] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 1323.912601][T19290] loop9: detected capacity change from 0 to 4096 [ 1323.966285][T19290] ntfs3: loop9: Different NTFS sector size (2048) and media sector size (512). [ 1324.250106][T19299] tipc: Enabling of bearer rejected, already enabled [ 1324.578944][T19308] loop9: detected capacity change from 0 to 512 [ 1324.717427][ T28] audit: type=1326 audit(1784652280.015:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19312 comm="syz.7.3498" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x0 [ 1324.771548][T19308] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1324.825894][T19308] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1325.087741][T19329] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3500'. [ 1325.132327][T18648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.676987][T19342] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3504'. [ 1329.084651][T19348] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 1329.091967][T19348] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 1329.516356][T19354] tipc: Enabling of bearer rejected, already enabled [ 1330.115895][T19372] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3510'. [ 1330.502272][T19378] netlink: 'syz.5.3512': attribute type 33 has an invalid length. [ 1330.510264][T19378] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3512'. [ 1330.566785][T19378] `: renamed from team0 [ 1331.953494][T19359] loop9: detected capacity change from 0 to 32768 [ 1333.153401][T19359] [ 1333.153401][T19359] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1333.153401][T19359] [ 1333.679903][T19359] read_mapping_page failed! [ 1333.740423][T19359] diRead: diIAGRead returned -5 [ 1334.252391][T19410] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1334.582440][T19409] loop9: detected capacity change from 0 to 8192 [ 1334.926741][T19424] syzkaller0: entered promiscuous mode [ 1334.944559][T19424] syzkaller0: entered allmulticast mode [ 1335.049263][T19428] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3529'. [ 1335.368643][T19441] Option '&7f%R(ﮘWO]mA(BeTv_bJqQ-I:' to dns_resolver key: bad/missing value [ 1335.405622][ T28] audit: type=1326 audit(1784652289.941:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19442 comm="syz.8.3535" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff92299de59 code=0x0 [ 1337.121394][T19470] netlink: 348 bytes leftover after parsing attributes in process `syz.9.3540'. [ 1337.131166][T19470] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3540'. [ 1338.566406][ T28] audit: type=1326 audit(1784652292.874:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19490 comm="syz.8.3549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff92299de59 code=0x0 [ 1338.678484][T19497] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1338.719450][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3550'. [ 1339.787080][T19500] loop9: detected capacity change from 0 to 32768 [ 1339.826898][T19500] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.3552 (19500) [ 1339.890548][T19500] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1339.929609][T19500] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 1339.960327][T19500] BTRFS info (device loop9): ignoring data csums [ 1339.986076][T19500] BTRFS info (device loop9): use zlib compression, level 3 [ 1340.013172][T19500] BTRFS info (device loop9): turning on sync discard [ 1340.026403][T19500] BTRFS error (device loop9): ignoredatacsums must be used with ro mount option [ 1340.082241][T19500] BTRFS error (device loop9): open_ctree failed: -22 [ 1340.097086][T19302] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by udevd (19302) [ 1340.872019][T19547] loop9: detected capacity change from 0 to 256 [ 1340.895128][T19547] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1340.938868][T19547] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1341.061315][T19547] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d) [ 1341.145498][T19551] tmpfs: Unknown parameter 'grpquota2' [ 1342.683183][T19563] syzkaller0: entered promiscuous mode [ 1342.688790][T19563] syzkaller0: entered allmulticast mode [ 1342.718021][T19561] loop9: detected capacity change from 0 to 4096 [ 1342.736180][T19561] ntfs3: loop9: Different NTFS sector size (4096) and media sector size (512). [ 1342.829742][T19561] ntfs3: loop9: Failed to initialize $Extend/$Reparse. [ 1343.078335][T19561] overlayfs: upper fs does not support tmpfile. [ 1343.147881][T19561] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1343.194203][T19561] overlayfs: failed to get uuid (/file0, err=0); falling back to uuid=null. [ 1343.226850][T19561] ntfs3: loop9: ino=1b, "file0" failed to parse mft record [ 1343.269891][T19561] ntfs3: loop9: ino=1b, "file0" attr_set_size [ 1343.278708][T19561] overlayfs: failed to verify origin (/, ino=5, err=-2) [ 1343.334124][T19561] overlayfs: failed to verify upper root origin [ 1343.496081][T18648] ntfs3: loop9: ino=1a, ntfs_sync_fs failed, -22. [ 1345.196832][T19611] netlink: 348 bytes leftover after parsing attributes in process `syz.7.3576'. [ 1345.206566][T19611] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3576'. [ 1346.129392][T19592] loop9: detected capacity change from 0 to 40427 [ 1346.150666][T19592] F2FS-fs (loop9): Fix alignment : internally, start(4096) end(16896) block(12288) [ 1346.191227][T19592] F2FS-fs (loop9): invalid crc value [ 1346.234861][T19592] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1346.468327][T19592] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1347.350526][T19639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1351.262780][ T28] audit: type=1326 audit(1784652304.643:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.9.3600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8f519de59 code=0x0 [ 1351.837380][T19706] netlink: 'syz.8.3603': attribute type 3 has an invalid length. [ 1352.943848][T19725] loop9: detected capacity change from 0 to 32768 [ 1353.003952][T19725] (syz.9.3610,19725,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1353.061985][T19725] (syz.9.3610,19725,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1353.116317][T19725] JBD2: Ignoring recovery information on journal [ 1353.293104][T19725] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1353.458585][ T28] audit: type=1326 audit(1784652306.682:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19752 comm="syz.5.3618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff38c19de59 code=0x0 [ 1354.281729][T19758] (syz.9.3610,19758,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 1354.677495][T18648] ocfs2: Unmounting device (7,9) on (node local) [ 1355.012706][T19769] loop9: detected capacity change from 0 to 256 [ 1355.024421][T19769] exfat: Deprecated parameter 'utf8' [ 1355.033909][T19769] exfat: Deprecated parameter 'utf8' [ 1355.043636][T19769] exfat: Deprecated parameter 'namecase' [ 1355.070844][T19769] exfat: Deprecated parameter 'namecase' [ 1355.231653][T19769] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1355.527704][T19777] loop9: detected capacity change from 0 to 128 [ 1355.587181][T19777] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1355.614092][T19777] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1355.932052][T18552] Bluetooth: hci3: command 0x0406 tx timeout [ 1356.212797][ T28] audit: type=1326 audit(1784652309.230:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19790 comm="syz.5.3630" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff38c19de59 code=0x0 [ 1356.372146][ T2931] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.541353][T18648] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1356.773284][ T2931] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.947861][ T2931] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.109086][ T2931] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.665008][T19817] 9pnet_fd: Insufficient options for proto=fd [ 1357.861225][T18552] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1357.883000][T18552] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1357.892827][T18552] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1357.903473][T18552] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1357.935492][T18552] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1357.943209][T18552] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1358.025651][ T28] audit: type=1326 audit(1784652310.908:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19828 comm="syz.9.3643" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8f519de59 code=0x0 [ 1358.373566][T19835] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3641'. [ 1358.383263][T19835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3641'. [ 1359.610966][T19853] netlink: 348 bytes leftover after parsing attributes in process `syz.7.3651'. [ 1359.621034][T19853] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3651'. [ 1360.243465][T18552] Bluetooth: hci3: command tx timeout [ 1360.577244][T19821] chnl_net:caif_netlink_parms(): no params data found [ 1361.170883][T19873] Set syz1 is full, maxelem 1029 reached [ 1361.718111][T19821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.725453][T19821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.733244][T19821] bridge_slave_0: entered allmulticast mode [ 1361.740766][T19821] bridge_slave_0: entered promiscuous mode [ 1361.751124][T19821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.758915][T19821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.766627][T19821] bridge_slave_1: entered allmulticast mode [ 1361.774803][T19821] bridge_slave_1: entered promiscuous mode [ 1362.514308][T19895] netlink: 348 bytes leftover after parsing attributes in process `syz.7.3654'. [ 1362.524002][T19895] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3654'. [ 1362.551997][T18552] Bluetooth: hci3: command tx timeout [ 1363.150586][T19821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1363.226834][T19821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1363.478338][ T5893] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1363.518358][T19821] team0: Port device team_slave_0 added [ 1363.654244][T19821] team0: Port device team_slave_1 added [ 1363.708418][ T5893] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.732189][T19821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.739591][T19821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.745131][ T5893] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.766971][T19821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.785585][ T5893] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1363.845984][ T5893] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1363.855288][ T5893] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.859737][T19821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.880824][T19821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.896182][ T5893] usb 10-1: config 0 descriptor?? [ 1363.923745][T19821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.971442][ T2931] hsr_slave_0: left promiscuous mode [ 1363.990429][ T2931] hsr_slave_1: left promiscuous mode [ 1364.004972][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.023908][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.041718][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.049334][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1364.061026][ T2931] bridge_slave_1: left allmulticast mode [ 1364.071175][ T2931] bridge_slave_1: left promiscuous mode [ 1364.091037][ T2931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.122179][ T2931] bridge_slave_0: left allmulticast mode [ 1364.132973][ T2931] bridge_slave_0: left promiscuous mode [ 1364.148785][ T2931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.253931][ T2931] veth1_macvtap: left promiscuous mode [ 1364.266873][ T2931] veth0_macvtap: left promiscuous mode [ 1364.273320][ T2931] veth1_vlan: left promiscuous mode [ 1364.287128][ T2931] veth0_vlan: left promiscuous mode [ 1364.399941][ T5893] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1364.407562][ T5893] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1364.415010][ T5893] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1364.494806][ T5893] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1364.502291][ T5893] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1364.509857][ T5893] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1364.527126][ T5893] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 1364.582427][ T5893] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1364.724530][T18552] Bluetooth: hci3: command tx timeout [ 1364.749831][ T5893] usb 10-1: USB disconnect, device number 5 [ 1364.838964][T19920] fido_id[19920]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1365.903619][T19936] netlink: 348 bytes leftover after parsing attributes in process `syz.9.3665'. [ 1365.913276][T19936] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3665'. [ 1366.984734][T18552] Bluetooth: hci3: command tx timeout [ 1367.284201][ T2931] team0 (unregistering): Port device team_slave_1 removed [ 1367.459998][ T2931] team0 (unregistering): Port device team_slave_0 removed [ 1367.614678][ T2931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1367.862554][ T2931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1367.967878][T19967] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3673'. [ 1367.977748][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3673'. [ 1369.192129][T19969] loop9: detected capacity change from 0 to 32768 [ 1369.325934][T19969] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1369.417170][T19969] XFS (loop9): Ending clean mount [ 1369.625101][ T2931] bond0 (unregistering): Released all slaves [ 1369.711889][T18648] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1370.047940][T19821] hsr_slave_0: entered promiscuous mode [ 1370.100141][T19821] hsr_slave_1: entered promiscuous mode [ 1370.189678][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1370.207175][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.204839][T19821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1372.292066][T19821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1372.372800][T20036] bridge0: port 3(vlan3) entered blocking state [ 1372.379225][T20036] bridge0: port 3(vlan3) entered disabled state [ 1372.398993][T20036] vlan3: entered allmulticast mode [ 1372.407896][T20036] vlan3: entered promiscuous mode [ 1372.414643][T19821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1372.431234][T19821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1372.445962][T14636] Bluetooth: hci0: command 0x0406 tx timeout [ 1372.766128][T19821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.850707][T19821] 8021q: adding VLAN 0 to HW filter on device team0 [ 1372.870880][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.878088][ T6218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1372.913432][ T6218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.920643][ T6218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.993523][T20058] overlayfs: failed to resolve './file0': -2 [ 1373.294287][ T28] audit: type=1326 audit(1784652337.020:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20067 comm="syz.5.3697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff38c19de59 code=0x0 [ 1373.655124][T19821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1373.776442][T19821] veth0_vlan: entered promiscuous mode [ 1373.801774][T19821] veth1_vlan: entered promiscuous mode [ 1373.885681][T19821] veth0_macvtap: entered promiscuous mode [ 1373.904601][T19821] veth1_macvtap: entered promiscuous mode [ 1373.944311][T19821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.962493][T19821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.983379][T19821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1374.008328][T19821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1374.019722][T19821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.032050][T19821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1374.045373][T19821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.061885][T19821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.070784][T19821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.084528][T19821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.267212][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.275139][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.314148][T18729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.332872][T18729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.500219][T20102] loop9: detected capacity change from 0 to 1024 [ 1374.671783][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/549.tmp-b7:9' failed: Read-only file system [ 1374.728310][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-label/untitled.tmp-b7:9' failed: Read-only file system [ 1374.778423][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-uuid/89204a28-3dc1-3311-9d08-7ea374525680.tmp-b7:9' failed: Read-only file system [ 1374.861388][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/549.tmp-b7:9' failed: Read-only file system [ 1374.920937][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/549.tmp-b7:9' failed: Read-only file system [ 1374.929038][T20117] loop9: detected capacity change from 0 to 16 [ 1374.973168][T20117] erofs: (device loop9): mounted with root inode @ nid 36. [ 1374.998670][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/549.tmp-b7:9' failed: Read-only file system [ 1375.026737][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:9' failed: Read-only file system [ 1375.118103][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/551.tmp-b7:9' failed: Read-only file system [ 1375.146248][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:9' failed: Read-only file system [ 1375.234292][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/551.tmp-b7:9' failed: Read-only file system [ 1375.553168][T20129] loop9: detected capacity change from 0 to 512 [ 1375.724135][T20113] loop1: detected capacity change from 0 to 32768 [ 1375.754171][T20113] (syz.1.3702,20113,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1375.796107][T20113] (syz.1.3702,20113,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1375.906242][T20113] JBD2: Ignoring recovery information on journal [ 1376.114529][T20113] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1377.362775][T20156] (syz.1.3702,20156,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 1377.737034][T19821] ocfs2: Unmounting device (7,1) on (node local) [ 1377.790178][T20168] tipc: Enabling of bearer rejected, failed to enable media [ 1380.057769][T20235] tipc: Enabling of bearer rejected, failed to enable media [ 1380.446004][ T28] audit: type=1326 audit(1784652343.618:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20246 comm="syz.7.3731" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1443f9de59 code=0x0 [ 1380.939725][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/555.tmp-b7:9' failed: Read-only file system [ 1381.020527][T14636] Bluetooth: hci4: command 0x1003 tx timeout [ 1381.031042][T18552] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1381.179606][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/556.tmp-b7:1' failed: Read-only file system [ 1381.467934][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/555.tmp-b7:9' failed: Read-only file system [ 1381.537650][T19191] udevd[19191]: symlink '../../loop1' '/dev/disk/by-diskseq/556.tmp-b7:1' failed: Read-only file system [ 1381.555179][T20269] netlink: 'syz.7.3736': attribute type 1 has an invalid length. [ 1381.782296][ T6223] nci: nci_ntf_packet: unknown ntf opcode 0x12f [ 1381.796758][T20269] bond1: entered promiscuous mode [ 1381.860579][T20269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1382.015825][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/555.tmp-b7:9' failed: Read-only file system [ 1382.083932][T20279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1382.097280][T20283] loop9: detected capacity change from 0 to 128 [ 1382.129993][T20279] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1382.151086][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/557.tmp-b7:9' failed: Read-only file system [ 1382.205003][T20279] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1382.216666][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/557.tmp-b7:9' failed: Read-only file system [ 1382.228233][ T28] audit: type=1804 audit(1784652345.260:177): pid=20283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.3739" name="/newroot/71/file0/bus" dev="loop9" ino=1048726 res=1 errno=0 [ 1382.278353][T20279] bond1: (slave ip6gre2): making interface the new active one [ 1382.294894][T20279] ip6gre2: entered promiscuous mode [ 1382.327973][T20279] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 1382.511854][T20273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1382.642755][T20283] bio_check_eod: 14 callbacks suppressed [ 1382.642776][T20283] syz.9.3739: attempt to access beyond end of device [ 1382.642776][T20283] loop9: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 1382.700803][T20283] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1382.717449][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/556.tmp-b7:1' failed: Read-only file system [ 1383.004790][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/557.tmp-b7:9' failed: Read-only file system [ 1383.098474][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/557.tmp-b7:9' failed: Read-only file system [ 1383.316796][T20300] tipc: Started in network mode [ 1383.323356][T20300] tipc: Node identity be48a9a7e727, cluster identity 4711 [ 1383.352268][T20300] tipc: Enabled bearer , priority 0 [ 1383.486746][T20297] tipc: Disabling bearer [ 1383.993369][T20320] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3746'. [ 1384.063291][T20320] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3746'. [ 1384.653866][T20336] loop9: detected capacity change from 0 to 128 [ 1384.731586][T20336] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1384.765182][T20336] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1384.859577][T20341] tipc: Started in network mode [ 1384.864533][T20341] tipc: Node identity 6e447e2b6e4b, cluster identity 4711 [ 1384.931321][T20341] tipc: Enabled bearer , priority 0 [ 1384.974563][T20336] syz.9.3752 (pid 20336) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1385.098600][T20340] tipc: Disabling bearer [ 1385.136432][T18648] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1385.683503][T20357] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3758'. [ 1386.137501][T20374] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3763'. [ 1386.177911][T20374] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3763'. [ 1386.274690][T20367] kvm: pic: non byte write [ 1386.529894][T20384] tipc: Enabling of bearer rejected, failed to enable media [ 1386.596497][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/556.tmp-b7:1' failed: Read-only file system [ 1387.049681][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/560.tmp-b7:9' failed: Read-only file system [ 1387.231236][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/556.tmp-b7:1' failed: Read-only file system [ 1387.409760][T19191] udevd[19191]: symlink '../../loop9' '/dev/disk/by-diskseq/560.tmp-b7:9' failed: Read-only file system [ 1387.656372][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/560.tmp-b7:9' failed: Read-only file system [ 1387.693366][T19191] udevd[19191]: symlink '../../loop1' '/dev/disk/by-diskseq/556.tmp-b7:1' failed: Read-only file system [ 1387.991329][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/560.tmp-b7:9' failed: Read-only file system [ 1388.052459][T19304] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1388.231079][ T28] audit: type=1326 audit(1784652350.815:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20425 comm="syz.9.3778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f519de59 code=0x7ffc0000 [ 1388.247396][T19304] usb 2-1: Using ep0 maxpacket: 8 [ 1388.313468][ T28] audit: type=1326 audit(1784652350.815:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20425 comm="syz.9.3778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8f519de59 code=0x7ffc0000 [ 1388.328857][T19304] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1388.369566][T19304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.398882][T19304] usb 2-1: Product: syz [ 1388.413491][T19304] usb 2-1: Manufacturer: syz [ 1388.427283][T19304] usb 2-1: SerialNumber: syz [ 1388.431587][ T28] audit: type=1326 audit(1784652350.815:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20425 comm="syz.9.3778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f519de59 code=0x7ffc0000 [ 1388.457475][T19304] usb 2-1: config 0 descriptor?? [ 1388.479587][T19304] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1388.550732][ T28] audit: type=1326 audit(1784652350.824:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20425 comm="syz.9.3778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f519de59 code=0x7ffc0000 [ 1388.609514][T19191] udevd[19191]: symlink '../../loop9' '/dev/disk/by-diskseq/560.tmp-b7:9' failed: Read-only file system [ 1390.049419][T19191] udevd[19191]: symlink '../../loop9' '/dev/disk/by-diskseq/560.tmp-b7:9' failed: Read-only file system [ 1390.060201][T19304] gspca_sonixj: i2c_w8 err -71 [ 1390.187335][T19304] sonixj: probe of 2-1:0.0 failed with error -71 [ 1390.212160][T19304] usb 2-1: USB disconnect, device number 3 [ 1390.369191][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/560.tmp-b7:9' failed: Read-only file system [ 1390.438643][T20473] bridge_slave_0: default FDB implementation only supports local addresses [ 1390.465534][T20473] bridge_slave_0: default FDB implementation only supports local addresses [ 1390.918262][T20491] syz_tun: entered allmulticast mode [ 1390.947988][T20490] syz_tun: left allmulticast mode [ 1391.119933][T20500] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3795'. [ 1391.282108][T20511] netlink: 'syz.7.3797': attribute type 13 has an invalid length. [ 1394.369884][T20502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1394.569347][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/556.tmp-b7:1' failed: Read-only file system [ 1394.904664][ T28] audit: type=1326 audit(1784652356.969:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.5.3811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff38c19de59 code=0x0 [ 1395.963308][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/556.tmp-b7:1' failed: Read-only file system [ 1396.032185][T20601] loop1: detected capacity change from 0 to 1024 [ 1396.040374][T20601] EXT4-fs: Ignoring removed oldalloc option [ 1396.056442][T20601] EXT4-fs: Ignoring removed oldalloc option [ 1396.090377][T20601] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1396.147511][T20601] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 1396.226627][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/561.tmp-b7:1' failed: Read-only file system [ 1396.265931][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1396.348363][T20601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1396.477824][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/561.tmp-b7:1' failed: Read-only file system [ 1396.546471][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1396.574573][T20625] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 1396.618176][T20625] overlayfs: failed to verify upper root origin [ 1396.782842][T19821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1396.837727][T20630] loop9: detected capacity change from 0 to 4096 [ 1397.018620][T20633] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3822'. [ 1397.027969][T20633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3822'. [ 1397.046509][T19191] udevd[19191]: symlink '../../loop1' '/dev/disk/by-diskseq/561.tmp-b7:1' failed: Read-only file system [ 1397.063862][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/562.tmp-b7:9' failed: Read-only file system [ 1397.193233][T19191] udevd[19191]: symlink '../../loop1' '/dev/disk/by-diskseq/561.tmp-b7:1' failed: Read-only file system [ 1397.233099][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 1397.517652][ T28] audit: type=1326 audit(1784652359.368:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20645 comm="syz.5.3825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff38c19de59 code=0x0 [ 1400.057908][T19302] udevd[19302]: symlink '../../loop9' '/dev/disk/by-diskseq/564.tmp-b7:9' failed: Read-only file system [ 1400.121462][T19191] udevd[19191]: symlink '../../loop1' '/dev/disk/by-diskseq/563.tmp-b7:1' failed: Read-only file system [ 1400.312664][ T28] audit: type=1326 audit(1784652361.952:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20705 comm="syz.5.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff38c19de59 code=0x0 [ 1400.350053][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/563.tmp-b7:1' failed: Read-only file system [ 1400.387434][T20710] loop1: detected capacity change from 0 to 128 [ 1400.424277][T20710] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1400.439803][ T5817] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1400.447779][T20710] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1400.470147][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/565.tmp-b7:1' failed: Read-only file system [ 1400.519763][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:1' failed: Read-only file system [ 1401.584559][ T5817] usb 10-1: Using ep0 maxpacket: 16 [ 1401.608730][T19821] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1401.609483][ T5817] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.628606][ T5817] usb 10-1: config 0 has no interfaces? [ 1401.634377][ T5817] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1401.643968][ T5817] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.657034][ T5817] usb 10-1: config 0 descriptor?? [ 1401.767804][T19191] udevd[19191]: symlink '../../loop1' '/dev/disk/by-diskseq/565.tmp-b7:1' failed: Read-only file system [ 1401.829627][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/565.tmp-b7:1' failed: Read-only file system [ 1401.909688][ T5817] usb 10-1: USB disconnect, device number 6 [ 1401.949075][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/566.tmp-b7:1' failed: Read-only file system [ 1402.118714][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/566.tmp-b7:1' failed: Read-only file system [ 1402.172893][T20740] tipc: Enabling of bearer rejected, already enabled [ 1402.495922][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/566.tmp-b7:1' failed: Read-only file system [ 1402.906552][T20751] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3853'. [ 1403.378748][T20746] loop1: detected capacity change from 0 to 32768 [ 1403.469832][T20746] JBD2: Ignoring recovery information on journal [ 1403.617168][T20746] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1404.061596][T20788] [ 1404.064006][T20788] ====================================================== [ 1404.071061][T20788] WARNING: possible circular locking dependency detected [ 1404.078119][T20788] syzkaller #0 Not tainted [ 1404.082582][T20788] ------------------------------------------------------ [ 1404.089818][T20788] syz.1.3852/20788 is trying to acquire lock: [ 1404.095925][T20788] ffff8880582922e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 1404.107579][T20788] [ 1404.107579][T20788] but task is already holding lock: [ 1404.114984][T20788] ffff888058292378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x360 [ 1404.125667][T20788] [ 1404.125667][T20788] which lock already depends on the new lock. [ 1404.125667][T20788] [ 1404.136104][T20788] [ 1404.136104][T20788] the existing dependency chain (in reverse order) is: [ 1404.145131][T20788] [ 1404.145131][T20788] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1404.152973][T20788] down_read+0x46/0x2e0 [ 1404.157676][T20788] ocfs2_init_acl+0x30a/0x770 [ 1404.162932][T20788] ocfs2_mknod+0x1427/0x2310 [ 1404.168056][T20788] ocfs2_mkdir+0x196/0x430 [ 1404.173001][T20788] vfs_mkdir+0x2a5/0x470 [ 1404.177775][T20788] do_mkdirat+0x1dc/0x450 [ 1404.182639][T20788] __x64_sys_mkdirat+0x89/0xa0 [ 1404.187941][T20788] do_syscall_64+0x55/0xb0 [ 1404.192937][T20788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1404.199386][T20788] [ 1404.199386][T20788] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1404.207917][T20788] down_read+0x46/0x2e0 [ 1404.212618][T20788] ocfs2_start_trans+0x3a8/0x6f0 [ 1404.218095][T20788] ocfs2_modify_bh+0xe4/0x4c0 [ 1404.223306][T20788] ocfs2_local_read_info+0x1433/0x17d0 [ 1404.229815][T20788] dquot_load_quota_sb+0x734/0xb30 [ 1404.235498][T20788] dquot_load_quota_inode+0x2d7/0x5c0 [ 1404.241406][T20788] ocfs2_enable_quotas+0x1c4/0x4a0 [ 1404.247060][T20788] ocfs2_fill_super+0x4187/0x5030 [ 1404.252624][T20788] mount_bdev+0x21c/0x2c0 [ 1404.257484][T20788] legacy_get_tree+0xea/0x180 [ 1404.262706][T20788] vfs_get_tree+0x8c/0x280 [ 1404.267658][T20788] do_new_mount+0x24a/0xa40 [ 1404.272712][T20788] __se_sys_mount+0x2e7/0x3d0 [ 1404.277955][T20788] do_syscall_64+0x55/0xb0 [ 1404.282903][T20788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1404.289336][T20788] [ 1404.289336][T20788] -> #1 (sb_internal#3){.+.+}-{0:0}: [ 1404.296828][T20788] ocfs2_start_trans+0x2a9/0x6f0 [ 1404.302305][T20788] ocfs2_write_begin_nolock+0x295c/0x4480 [ 1404.308562][T20788] ocfs2_write_begin+0x1bb/0x310 [ 1404.314040][T20788] generic_perform_write+0x2fe/0x5c0 [ 1404.319864][T20788] __generic_file_write_iter+0x1ac/0x230 [ 1404.326059][T20788] ocfs2_file_write_iter+0x1724/0x1ef0 [ 1404.332051][T20788] do_iter_write+0x747/0xc50 [ 1404.337178][T20788] iter_file_splice_write+0x6b6/0xcf0 [ 1404.343091][T20788] direct_splice_actor+0xe8/0x130 [ 1404.348737][T20788] splice_direct_to_actor+0x30b/0x8e0 [ 1404.354733][T20788] do_splice_direct+0x1d5/0x2f0 [ 1404.360120][T20788] do_sendfile+0x52b/0xe80 [ 1404.365075][T20788] __se_sys_sendfile64+0x145/0x1a0 [ 1404.370728][T20788] do_syscall_64+0x55/0xb0 [ 1404.375687][T20788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1404.382173][T20788] [ 1404.382173][T20788] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 1404.391228][T20788] __lock_acquire+0x37ef/0x7d80 [ 1404.396638][T20788] lock_acquire+0x19e/0x420 [ 1404.401676][T20788] down_write+0x97/0x200 [ 1404.406546][T20788] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 1404.413055][T20788] ocfs2_truncate_file+0xe87/0x1530 [ 1404.418785][T20788] ocfs2_setattr+0x15b8/0x1bf0 [ 1404.424079][T20788] notify_change+0xb05/0xde0 [ 1404.429205][T20788] do_truncate+0x1b0/0x240 [ 1404.434153][T20788] path_openat+0x2a7e/0x3270 [ 1404.439272][T20788] do_filp_open+0x1f2/0x430 [ 1404.444303][T20788] do_sys_openat2+0x134/0x1d0 [ 1404.449513][T20788] __x64_sys_creat+0x90/0xb0 [ 1404.454640][T20788] do_syscall_64+0x55/0xb0 [ 1404.459596][T20788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1404.466102][T20788] [ 1404.466102][T20788] other info that might help us debug this: [ 1404.466102][T20788] [ 1404.476337][T20788] Chain exists of: [ 1404.476337][T20788] &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 1404.476337][T20788] [ 1404.491560][T20788] Possible unsafe locking scenario: [ 1404.491560][T20788] [ 1404.499014][T20788] CPU0 CPU1 [ 1404.504384][T20788] ---- ---- [ 1404.509751][T20788] lock(&oi->ip_xattr_sem); [ 1404.514359][T20788] lock(&journal->j_trans_barrier); [ 1404.522176][T20788] lock(&oi->ip_xattr_sem); [ 1404.529381][T20788] lock(&ocfs2_file_ip_alloc_sem_key); [ 1404.535024][T20788] [ 1404.535024][T20788] *** DEADLOCK *** [ 1404.535024][T20788] [ 1404.543200][T20788] 3 locks held by syz.1.3852/20788: [ 1404.548404][T20788] #0: ffff888021f38418 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1404.557666][T20788] #1: ffff888058292658 (&sb->s_type->i_mutex_key#41){+.+.}-{3:3}, at: do_truncate+0x19c/0x240 [ 1404.568062][T20788] #2: ffff888058292378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x360 [ 1404.579142][T20788] [ 1404.579142][T20788] stack backtrace: [ 1404.585134][T20788] CPU: 0 PID: 20788 Comm: syz.1.3852 Not tainted syzkaller #0 [ 1404.592612][T20788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1404.602684][T20788] Call Trace: [ 1404.605983][T20788] [ 1404.608923][T20788] dump_stack_lvl+0x18c/0x250 [ 1404.613626][T20788] ? load_image+0x420/0x420 [ 1404.618146][T20788] ? show_regs_print_info+0x20/0x20 [ 1404.623368][T20788] ? print_circular_bug+0x12b/0x1a0 [ 1404.628780][T20788] check_noncircular+0x2fc/0x400 [ 1404.633751][T20788] ? print_deadlock_bug+0x5d0/0x5d0 [ 1404.638964][T20788] ? lockdep_lock+0xf5/0x230 [ 1404.643576][T20788] ? _find_first_zero_bit+0xd6/0x100 [ 1404.648913][T20788] __lock_acquire+0x37ef/0x7d80 [ 1404.653779][T20788] ? asan.module_dtor+0x20/0x20 [ 1404.658646][T20788] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1404.664651][T20788] ? trace_irq_disable+0x37/0xe0 [ 1404.669607][T20788] ? verify_lock_unused+0x140/0x140 [ 1404.674823][T20788] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1404.680480][T20788] ? lockdep_hardirqs_on+0x98/0x150 [ 1404.685690][T20788] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1404.691344][T20788] lock_acquire+0x19e/0x420 [ 1404.695858][T20788] ? ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 1404.702025][T20788] ? __might_sleep+0xe0/0xe0 [ 1404.706739][T20788] ? read_lock_is_recursive+0x20/0x20 [ 1404.712215][T20788] ? mapping_evict_folio+0x530/0x530 [ 1404.717514][T20788] down_write+0x97/0x200 [ 1404.721768][T20788] ? ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 1404.727934][T20788] ? down_read_killable+0x340/0x340 [ 1404.733148][T20788] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 1404.739140][T20788] ? ocfs2_remove_refcount_tree+0xe50/0xe50 [ 1404.745043][T20788] ? up_write+0x1be/0x410 [ 1404.749407][T20788] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 1404.755231][T20788] ocfs2_truncate_file+0xe87/0x1530 [ 1404.760452][T20788] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 1404.766184][T20788] ? do_raw_spin_unlock+0x121/0x230 [ 1404.771488][T20788] ? _raw_spin_unlock+0x28/0x40 [ 1404.776370][T20788] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 1404.782110][T20788] ? ocfs2_inode_lock_atime+0x530/0x530 [ 1404.787670][T20788] ? ocfs2_rw_lock+0x138/0x250 [ 1404.792454][T20788] ? dquot_initialize+0x20/0x20 [ 1404.797323][T20788] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 1404.803613][T20788] ? setattr_prepare+0x1e5/0xac0 [ 1404.808659][T20788] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 1404.815379][T20788] ocfs2_setattr+0x15b8/0x1bf0 [ 1404.820167][T20788] ? ocfs2_extend_allocation+0x1830/0x1830 [ 1404.826086][T20788] ? ktime_get_coarse_real_ts64+0x2f/0x120 [ 1404.831911][T20788] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1404.838170][T20788] ? ktime_get_coarse_real_ts64+0x10a/0x120 [ 1404.844077][T20788] ? current_time+0x196/0x290 [ 1404.848765][T20788] ? inode_set_ctime_current+0x2e0/0x2e0 [ 1404.854416][T20788] ? evm_inode_setattr+0x10a/0x6c0 [ 1404.859550][T20788] ? security_inode_setattr+0xdc/0x140 [ 1404.865039][T20788] ? try_break_deleg+0x79/0x120 [ 1404.869924][T20788] ? ocfs2_extend_allocation+0x1830/0x1830 [ 1404.875750][T20788] notify_change+0xb05/0xde0 [ 1404.880359][T20788] do_truncate+0x1b0/0x240 [ 1404.884877][T20788] ? put_page_bootmem+0x2b0/0x2b0 [ 1404.889911][T20788] ? apparmor_file_truncate+0x24a/0x2e0 [ 1404.895479][T20788] ? ima_bprm_check+0x200/0x200 [ 1404.900346][T20788] path_openat+0x2a7e/0x3270 [ 1404.904958][T20788] ? do_sys_openat2+0xda/0x1d0 [ 1404.909831][T20788] ? do_filp_open+0x430/0x430 [ 1404.914611][T20788] do_filp_open+0x1f2/0x430 [ 1404.919213][T20788] ? vfs_tmpfile+0x480/0x480 [ 1404.923828][T20788] ? _raw_spin_unlock+0x28/0x40 [ 1404.928692][T20788] ? alloc_fd+0x590/0x640 [ 1404.933040][T20788] do_sys_openat2+0x134/0x1d0 [ 1404.937742][T20788] ? do_sys_open+0xe0/0xe0 [ 1404.942169][T20788] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1404.948163][T20788] ? lock_chain_count+0x20/0x20 [ 1404.953040][T20788] __x64_sys_creat+0x90/0xb0 [ 1404.957648][T20788] do_syscall_64+0x55/0xb0 [ 1404.962084][T20788] ? clear_bhb_loop+0x40/0x90 [ 1404.966770][T20788] ? clear_bhb_loop+0x40/0x90 [ 1404.971464][T20788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1404.977374][T20788] RIP: 0033:0x7f59dff9de59 [ 1404.981803][T20788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1405.001422][T20788] RSP: 002b:00007f59e0ed6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1405.009848][T20788] RAX: ffffffffffffffda RBX: 00007f59e0226180 RCX: 00007f59dff9de59 [ 1405.017831][T20788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 1405.025816][T20788] RBP: 00007f59e0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 1405.033797][T20788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1405.041775][T20788] R13: 00007f59e0226218 R14: 00007f59e0226180 R15: 00007fff75459638 [ 1405.049763][T20788] [ 1405.418550][T19821] ocfs2: Unmounting device (7,1) on (node local) [ 1405.499946][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/567.tmp-b7:1' failed: Read-only file system [ 1405.547871][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/567.tmp-b7:1' failed: Read-only file system [ 1405.660073][T19302] udevd[19302]: symlink '../../loop1' '/dev/disk/by-diskseq/568.tmp-b7:1' failed: Read-only file system