last executing test programs: 17.924348513s ago: executing program 1: r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000800000009500"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2}) socket$phonet(0x23, 0x2, 0x1) r5 = syz_io_uring_setup(0x16c2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 16.82428691s ago: executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5ee3, &(0x7f000000e480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) 15.810155288s ago: executing program 1: mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x28}}, 0x0) mlockall(0x7) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r5 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000004500)={0x12c, 0x17, 0x7d9048fdbf402839, 0x0, 0x0, "", [@generic="68338e540c5a5217a694e97d2209733d9c84687c3e1aec9ff25f749162c6a8a7ea879be2cbb78b", @generic="e3185c4b48af41ecd30845120031d66249b57a08bdc82fdcb06974eb841867f7351a546006b08ea37dbb8737389766451ca7b66cc632e30b13c44e35cf2a8fd33653ac1bc26574e11f236e5cff9d7e781f84b5362704bd204a5045a8e1016652912f29be097a0f9149fb2b328115522a7ebf19e168eea80097cb1e47239ea78742ac197c940acea2d38c2c3c7baac4bdd45f9951497cd9516533e4b37741f2aba8e44178cf299e193246705a6a858f7e06e6e7852e4134a76e92eb1e34b986bd6b49797cf528fb1e37144ba6a9ef1ec8dbc0700c67df5e56fbccb225", @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, @nested={0x4}, @nested={0x4}, @nested={0x4}]}, 0x12c}], 0x1}, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) syz_mount_image$xfs(&(0x7f0000000540), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000240)={[{@lazytime}, {@uqnoenforce}, {@usrquota}, {@filestreams}, {@gquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@pqnoenforce}], [{@flag='nomand'}]}, 0x4, 0x9683, &(0x7f0000009680)="$eJzs+gm8pnPh+P/fZxi7jKGSUlMRLbJmiWpmMEMhWaIdWVKWkgptKClURLRn37KVJZStlWRvoYRQyRJpsQ3zfxxzhjFeVN8+/5/q9Xo9Hufc933d13Wd9/1+Xss5zCaTNpg4GMwxmNa4wcyde83kKWOuWvf2Izef/5hlTrl7/0evuOj4kccJI48TB4PBqJG3h6YtGzs49bRRg1kfWv5Ic88519C8g8GyIy9H9jNYcdrDvJdPX2/qTM080KFHvu097euh5hv+EcNPDtt/z8MHg8GYGbYfGgyGdnvMB5W2yYTJkx6xetht2Gr0yPMZv2ab9jXvRYPBvGcM+PiYcd2hJ+EjDf/M3V50zuh1n4Sf/V/XJhMmrzWT//C5OMvIshWHz/GZz0FjMx/nty626cojU/jQ8TYYDF/iHnWu/Fe0yYRJaw8e/zo/OHKVC/aeOu26Oftg2o1izsFgMNfI9XWeJ9ul/r0mTFzuoXv29Ncj7NOP5d3ouDj+rSc9OHyTHgwGCwwGY9ecfi+oqqqq/44mTFxuNbj/z/FE9/+TT174jO7/VVVV/72tNWHicsP3+pnu//M80f1/x4Uv3GPaf/sfv+K0rR58cj9EVVVV/UtNWgvv/2Oe6P6/4mqXrt39v6qq6r+39dd56P4/z0z3/wWf6P7/ppNWWWRkvem/Nzwwwy6HZvj/CffPsHyWGZbfN8Py0TPsZ8b1Z5th+T0zLJ99+D1Yf9xgMHb6vxec8sjiseOG3xtZfu8My8c/8u90Fl19huUTZlg+aYblE0fGOrx88gzLJ8+w/ppPMNVVVVX/Ma2/3KTVBjP8O/uRxQtNf5/u/+efee2ST9Z4q6qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq6r+zB28/65zBYDA0GAxGDQZTBiPPZ3wcTJ06derw65PPu+yyJ22g/xkNnXvN5Cljrlr39iM3n/+YZU65e/9HZum/tv/+T1D/TsP+cxw3bjDYfqMneyj1JNT57y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uIevP2sc0aOgVGDwZTByPPdpj+eud8b3zyy6sobn3LnQY9suej4bUaenXvN5CnbPAljfxIaGv6sY65a9/YjN5//mGVOuXv//4Gz57//E9S/00P+2wwNBiPn95jhc3ndCetvuMRgMDjozlM2XmHw8HsrDb+3ythZBrM8tOkSD31fY1He8W5rTnscP/xtwYf3cfJD+19r6qGzDM00iBl6xbk3HPmOTe5efubHxR//c4ya/uTw606/a+rUqVMftXCkOR5n4+n7n/5ZZj7PR8a+xPDYl9ppu3cv9d5ddl1ym+0223rLrbfcfpnlVlp+hWWXWWHlly211Tbbbrn0tO+PM2fjHvq+2j8zZ/PMPGe3T5hxzmb+bI83Z+OeeM4e2uOUXYc2nD5ns/6Lc7baE8/ZuG1GftCi40cPNn1oaoYGg0VXHz3YefjFMrMPBouuMbLuQsPrrjp21GCw3yMfdPjZ7A8fg0O7Da+zyaQNJj4yssd+wsdcpx+14qLjRx4njDxOnDbEcYNHDsWxg1NPGzU8F4+a5rnnnGto3sFg2ZGXI/sZrDzy7iHT15s6UzMPdOiRb3tP+3qo+YZ3MvzknUufdfXwuTjT9v//6P/p+v8Yr5WGHp6ooZGvkXWmeU2YvNYjP+uhaRieu1lGlq04bDLznP1f9pjxjpt1MOYJxjtprYnLDS+eaf6nb4LH1x2LXfDBacfW+BWnbfXg/zMKjXeeJxjvWhNwvPM80XiP+9Alp03b1f/ZeGe61q390Pfx/8y1bvDE17pZaAdbXrzIzNe61zz+EB91Hk+fo9lnWunxrnU7H7zsbsP7H//E17q1h8c++lHXulGDwaKrTb/WDV/4Jo0e7Df8YtnhF5NHD44ZfrHcQy/mHJw3/OKlb99h2y2GF6w5fU6WHt7v+LFDD7lfsOIti089YOrU1UfGMn7so8c6cnyMm/F+PmHstMmcvu30/Q6vOn2/Nz992nuTRvY74V/Y7/Rtabx3zjftvckj+504035HP8F+p2/7mPNhiaGHL1yPc72ZNNP1ZuRvnOk/7lFfs037mveiwWDeM8h3pnX/4TWTzt85nmC8EyYut9rw+GY6fx8+HOn8vWTyVcP3inkHg8ECg8HYNaeP/V9s6PHGO+sTj3cijHfWJxrvFcdut87/wXgHM4z3UcfZJutPO1bWHDnOJv8Lx+/0bWe+jo1+6N1pl/01/5nr2LjHXMd2n2XUTJM9Q4/3O9sWsP605ws98nvuNScePX3uR8+033/0O9sMn2UIrmNjZvp7ftSa1w+GaM53O27VS4cOfOI5Hz149N8W0+d8+rZPNOeT/5k5f9YTz/k/+3vyEs+f9v7omcY/45yvt+8z95k+57PNtN9/NOeTn/je8dg5Hz8YTXO+9H3T5u2JrqePN+fTt50+58MfcZWxsw7WGL5njcz5pH9mzhf6vznO54L1pz3f8uFFZx95yuunz/nMc/yP5nzSvzrn4x4+zhd96L3njRrMNttg58122mnHZaZ9n/5y2Wnf+Vp0zzXT5vmJ7qWPZzR92yc6L1b/Z4zG/FNGQ//IaOFZH8/okVPriB12fNr/67Vo9X/VaMDXoquOnjZvT/R70ePN+fRt6T644Azbz/x36PrrPPR79zwz3Qenb4L3wbPPXHuv6bsc2eyBmYY5/b56/wzLZ5lh+X0zLB89w35mXH+2GZbfM8Py4Y8w2wzrT2cdN/w378jyKY+sPnb4l6dxI8vvnWH5+Ee2XXT1GZZPmGH5pBmWT3zk0Fh08gzLJ8+w/pqDf7Hp/016m5kv8vXP1n//dZe/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+7B2886Z+QYGDUYTBlMez408jjYbWi92141/DgYDEaveMLU9Z7s8T7JDZ17zeQpY65a9/YjN5//mGVOuXv//4Gz57//E9S/00P+2wwNBiPn95htBoPBuhPW33CJwWCw3tQTVhw1ePi9hYbfW3XsqMFgv6FH7WD2h9cZ2m14nU0mbTBxMJhjZI1xj/mhjzmPHrXiouNHHieMPE6cdn0aN3jkeB07OPW0UYNZH1r+SHPPOdfQvIPBsiMvR/YzWHHaw7yXT19v6kzNPNChR77tPe3roeYb/hHDT3beevKzh+dqpu3/Y5p+rd5m1D9ctfPfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7+5f8+9o+V8rUXf5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4B28/65yRY2DUYDBlMO350G4jj4Ohk0594cghMnqXK4869Mke75Pc0LnXTJ4y5qp1bz9y8/mPWeaUu/f/Hzh7/vs/Qf07PeS/zdBgMHJ+j9lmMBisO2H9DZcYDAaHHnXlLqMGD7+30PB7q44dNRjsN/SoHcz+8DpDuw2vs8mkDSYOBnOMrDHuMT/0MefRo1ZcdPzI44SRx4nTrk/jBo8cr2MHp542ajDrQ8sfae455xqadzBYduTlyH4GK057mPfy6etNnamZBzr0yLe9p3091HzDP2L4yZ7zXHPS8FzNtP1/TNOv1duM+oerdv67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uAdvP+uckWNg1GAwZTDt+aiRx6HdbrrxIxsOPw6/nn/Nva55ssf7JDd07jWTp4y5at3bj9x8/mOWOeXu/f8Hzp7//k9Q/07D/nMcN24w2H6jJ3so9STU+e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iHrz9rHNGno56ZOmo3TousKFzr5k8ZcxV695+5ObzH7PMKXfv/2QP6N/tcfx3zx+z+O+RP2bx/1j+mMX/4/ljFv8988cs/p/IH7P475U/ZvH/ZP6Yxf9T+WMW/73zxyz+++SPWfz3zR+z+H86f8zi/5n8MYv/Z/PHLP775Y9Z/PfPH7P4fy5/zOJ/QP6Yxf/A/DGL/+fzxyz+B+WPWfwPzh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF/xv5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4v/N/DGL/7fyxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOL/7fwxi/8Z+WMW/zPzxyz+Z+WPWfy/kz9m8f9u/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/h/L3/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/wX5Yxb/C/PHLP4/yR+z+F+UP2bx/2n+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOL/s/wxi//P88cs/r/IH7P4/zJ/zOJ/Vf6Yxf/q/DGL/6/yxyz+v84fs/hfkz9m8f9N/pjF/9r8MYv/dfljFv/r88cs/r/NH7P435A/ZvG/MX/M4n9T/pjF/3f5Yxb/3+ePWfz/kD9m8b85f8zi/8f8MYv/LfljFv9b88cs/rflj1n8b88fs/j/KX/M4n9H/pjF/878MYv/n/PHLP535Y9Z/P+SP2bx/2v+mMX/b/ljFv+/549Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/lPwxi/8D+WMW/wfzxyz+U/PHJP6zDPLHLP5D+WMW/1H5Yxb/WfLHLP6z5o9Z/Efnj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfyfkj9m8Z8vf8ziPyZ/zOI/f/6YxX9s/pjFf4H8MYv/gvljFv+n5o9Z/J+WP2bxf3r+mMV/ofwxi/8z8scs/gvnj1n8n5k/ZvF/Vv6YxX+R/DGL/7Pzxyz+z8kfs/iPyx+z+D83f8zi/7z8H9OsI48G/+fnj1nO/0Xzxyz+i+WPWfxfkD9m8V88f8ziv0T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/yfwxi/9L88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi//L8scs/ivkj1n8V8wfs/ivlD9m8V85f8zi//L8MYv/KvljFv9V88cs/q/IH7P4vzJ/zOL/qvwxi//4/DGL/4T8MYv/xPwxi/9q+WMW/9Xzxyz+a+SPWfwn5Y9Z/Cer/Gf5p9e0+K+p8v/ns/ivlT9m8X91/pjF/zX5Yxb/tfPHLP7r5I9Z/NfNH7P4vzZ/zOK/Xv6Yxf91+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bxf33+mMV/4/wxi/8m+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvF/W/6YxX/T/DGL/2b5Yxb/zfPHLP5vzx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zvyxyz+2+SPWfzfmT9m8X9X/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8350/ZvF/T/6YxX/H/DGL/3vzxyz+O+WPWfzflz9m8X9//pjF/wP5Yxb/nfPHLP675I9Z/HfNH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P4fzR/zOK/W/6YxX/3/DGL/x75Yxb/j+WPWfw/nj9m8d8zf8zi/4n8MYv/XvljFv9P5o9Z/D+VP2bx3zt/zOK/T/6YxX/f/DGL/6fzxyz+n8kfs/h/Nn/M4r9f/pjFf//8MYv/5/LHLP4H5I9Z/A/MH7P4fz5/zOJ/UP6Yxf/g/DGL/xfyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8v5E/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/t/MH7P4fyt/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP7fzh+z+J+RP2bxPzN/zOJ/Vv6Yxf87+WMW/+/mj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi//38scs/t/PH7P4/+Bx/Xf//2Zc/6FZ/H/Y+Y9Z/H+UP2bx/3H+mMX/gvwxi/+F+WMW/5/kj1n8L8ofs/j/NH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8f9Z/pjF/+f5Yxb/X+Q/Q4/MhMX/l/ljFv+r8scs/lfnj1n8f5U/ZvH/df6Yxf+a/DGL/2/yxyz+1+aPWfyvyx+z+F+fP2bx/23+mMX/hvwxi/+N+WMW/5vyxyz+v8sfs/j/Pn/M4v+H/DGL/835Yxb/P+aPWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf9P+WMW/zvyxyz+d+aPWfz/nD9m8b8rf8zi/5f8MYv/X/PHLP5/yx+z+P89f8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfyn5I9Z/B/IH7P4P5g/ZvGfmj8m8Z91kD9m8R/KH7P4j8ofs/jPkj9m8Z81f8ziPzp/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4v+U/DGL/3z5Yxb/MfljFv/588cs/mPzxyz+C+SPWfwXzB+z+D81f8zi/7T8MYv/0/PHLP4L5Y9Z/J+RP2bxXzh/zOL/zPwxi/+z8scs/ovkj1n8n50/ZvF/Tv6YxX9c/pjF/7n5Yxb/5+WPWfyfnz9m8V80f8ziv1j+mMX/BfljFv/F88cs/kvkj1n8X5g/ZvF/Uf6Yxf/F+WMW/5fkj1n8l8wfs/i/NH/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/i/LH/M4r9C/pjFf8X8MYv/SvljFv+V88cs/i/PH7P4r5I/ZvFfNX/M4v+K/DGL/yvzxyz+r8ofs/iPzx+z+E/IH7P4T8wfs/ivlj9m8V89f8ziv0b+mMV/Uv6YxX9y/pjFf838MYv/WvljFv9X549Z/F+TP2bxXzt/zOK/Tv6YxX/d/DGL/2vzxyz+6+WPWfxfN7gsf8jiv37nP2bx3yB/zOK/Yf6YxX+j/DGL/+vzxyz+G+ePWfw3yR+z+L8hf8zi/8b8MYv/m/LHLP5vzh+z+L8lf8zi/9b8MYv/2/LHLP6b5o9Z/DfLH7P4b54/ZvF/e/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/N+RP2bx3yZ/zOL/zvwxi/+78scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/+78MYv/e/LHLP475o9Z/N+bP2bx3yl/zOL/vvwxi//788cs/h/IH7P475w/ZvHfJX/M4r9r/pjF/4P5Yxb/D+WPWfw/nD9m8f9I/pjF/6P5Yxb/3fLHLP67549Z/PfIH7P4fyx/zOL/8fwxi/+e+WMW/0/kj1n898ofs/h/Mn/M4v+p/DGL/975Yxb/ffLHLP775o9Z/D+dP2bx/0z+mMX/s/ljFv/98scs/vvnj1n8P5c/ZvE/IH/M4n9g/pjF//P5Yxb/g/LHLP4H549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zi/438MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8f9m/pjF/1v5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvH/dv6Yxf+M/DGL/5n5Yxb/s/LHLP7fyR+z+H83f8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfy/lz9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/4L8MYv/hfljFv+f5I9Z/C/KH7P4/zR/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvH/Wf6Yxf/n+WMW/1/kj1n8f5k/ZvG/Kn/M4n91/pjF/1f5Yxb/X+ePWfyvyR+z+P8mf8zif23+mMX/uvwxi//1+WMW/9/mj1n8b8gfs/jfmD9m8b8pf8zi/7v8MYv/7/PHLP5/yB+z+N+cP2bx/2P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfz/lD9m8b8jf8zif2f+mMX/z/ljFv+78scs/n/JH7P4/zV/zOL/t/wxi//f88cs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMV/Sv6Yxf+B/DGL/4P5Yxb/qfljEv/Rg/wxi/9Q/pjFf1T+mMV/lvwxi/+s+WMW/9H5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv+n5I9Z/OfLH7P4j8kfs/jPnz9m8R+bP2bxXyB/zOK/YP6Yxf+p+WMW/6flj1n8n54/ZvFfKH/M4v+M/DGL/8L5Yxb/Z+aPWfyflT9m8V8kf8zi/+z8MYv/c/LHLP7j8scs/s/NH7P4Py9/zOL//Pwxi/+i+WMW/8Xyxyz+L8gfs/gvnj9m8V8if8zi/8L8MYv/i/LHLP4vzh+z+L8kf8ziv2T+mMX/pfljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMX/ZfljFv8V8scs/ivmj1n8V8ofs/ivnD9m8X95/pjFf5X8MYv/qvljFv9X5I9Z/F+ZP2bxf1X+mMV/fP6YxX9C/pjFf2L+mMV/tfwxi//q+WMW/zXyxyz+k/LHLP6T88cs/mvmj1n818ofs/i/On/M4v+a/DGL/9r5Yxb/dfLHLP7r5o9Z/F+bP2bxXy9/zOL/uvwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+L8+f8ziv3H+mMV/k/wxi/8b8scs/m/MH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4vy1/zOK/af6YxX+z/DGL/+b5Yxb/t+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6Yxf8d+WMW/23yxyz+78wfs/i/K3/M4r9t/pjFf7v8MYv/9vljFv8d8scs/u/OH7P4vyd/zOK/Y/6Yxf+9+WMW/53yxyz+78sfs/i/P3/M4v+B/DGL/875Yxb/XfLHLP675o9Z/D+YP2bx/9DM/lPn+/94YP+ZWfw/3PmPWfw/kj9m8f9o/pjFf7f8MYv/7vljFv898scs/h/LH7P4fzx/zOK/Z/6Yxf8T+WMW/73yxyz+n8wfs/h/Kn/M4r93/pjFf5/8MYv/vvljFv9P549Z/D+TP2bx/2z+mMV/v/wxi//++WMW/8/lj1n8D8gfs/gfmD9m8f98/pjF/6D8MYv/wfljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/6/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8jf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/mT9m8f9W/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v50/ZvE/I3/M4n9m/pjF/6z8MYv/d/LHLP7fzR+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/7+WPWfy/nz9m8f9B/pjF/4f5Yxb/H+WPWfx/nD9m8b8gf8zif2H+mMX/J/ljFv+L8scs/j/NH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8r8ofs/hfnT9m8f9V/pjF/9f5Yxb/a/LHLP6/yR+z+F+bP2bxvy5/zOJ/ff6Yxf+3+WMW/xvyxyz+N+aPWfxvyh+z+P8uf8zi//v8MYv/H/LHLP43549Z/P+YP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/P+WPWfzvyB+z+N+ZP2bx/3P+mMX/rvwxi/9f8scs/n/NH7P4/y1/zOL/9/wxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxn5I/ZvF/IH/M4v9g/pjFf2r+mMR/tkH+mMV/KH/M4j8qf8ziP0v+mMV/1vwxi//o/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/U/LHLP7z5Y9Z/Mfkj1n8588fs/iPzR+z+C+QP2bxXzB/zOL/1Pwxi//T8scs/k/PH7P4L5Q/ZvF/Rv6YxX/h/DGL/zPzxyz+z8ofs/gvkj9m8X92/pjF/zn5Yxb/cfljFv/n5o9Z/J+XP2bxf37+mMV/0fwxi/9i+WMW/xfkj1n8F88fs/gvkT9m8X9h/pjF/0X5Yxb/F+ePWfxfkj9m8V8yf8zi/9L8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8V8+f8zi/7L8MYv/CvljFv8V88cs/ivlj1n8V84fs/i/PH/M4r9K/pjFf9X8MYv/K/LHLP6vzB+z+L8qf8ziPz5/zOI/IX/M4j8xf8ziv1r+mMV/9fwxi/8a+WMW/0n5Yxb/yfljFv8188cs/mvlj1n8X50/ZvF/Tf6YxX/t/DGL/zr5Yxb/dfPHLP6vzR+z+K+XP2bxf13+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfxfnz9m8d84f8ziv0n+mMX/DfljFv835o9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/N+WP2bx3zR/zOK/Wf6YxX/z/DGL/9vzxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOL/jvwxi/82+WMW/3fmj1n835U/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv93549Z/N+TP2bx3zF/zOL/3vwxi/9O+WMW//flj1n8358/ZvH/QP6YxX/n/DGL/y75Yxb/XfPHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+O+WP2bx3z1/zOK/R/6Yxf9j+WMW/4/nj1n898wfs/h/In/M4r9X/pjF/5P5Yxb/T+WPWfz3zh+z+O+TP2bx3zd/zOL/6fwxi/9n8scs/p/NH7P475c/ZvHfP3/M4v+5/DGL/wH5Yxb/A/PHLP6fzx+z+B+UP2bxPzh/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv9v5I9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/N/PHLP7fyh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/7fzxyz+Z+SPWfzPzB+z+J+VP2bx/07+mMX/u/ljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zi/738MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4X5I9Z/C/MH7P4/yR/zOJ/Uf6Yxf+n+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/8/yxyz+P88fs/j/In/M4v/L/DGL/1X5Yxb/q/PHLP6/yh+z+P86f8zif03+mMX/N/ljFv9r88cs/tflj1n8r88fs/j/Nn/M4n9D/pjF/8b8MYv/TfljFv/f5Y9Z/H+fP2bx/0P+mMX/5vwxi/8f88cs/rfkj1n8b80fs/jflj9m8b89f8zi/6f8MYv/HfljFv8788cs/n/OH7P435U/ZvH/S/6Yxf+v+WMW/7/lj1n8/54/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/lPyxyz+D+SPWfwfzB+z+E/NH5P4zz7IH7P4D+WPWfxH5Y9Z/GfJH7P4z5o/ZvEfnT9m8Z8tf8ziP7vQ/5/5vBb/OYT+/0wW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOL/lPwxi/98+WMW/zH5Yxb/+fPHLP5j88cs/gvkj1n8F8wfs/g/NX/M4v+0/DGL/9Pzxyz+C+WPWfyfkT9m8V84f8zi/8z8MYv/s/LHLP6L5I9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+flj1n8n58/ZvFfNH/M4r9Y/pjF/wX5Yxb/xfPHLP5L5I9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/JfMH7P4vzR/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4vyx/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP4vzx+z+K+SP2bxXzV/zOL/ivwxi/8r88cs/q/KH7P4j88fs/hPyB+z+E/MH7P4r5Y/ZvFfPX/M4r9G/pjFf1L+mMV/cv6YxX/N/DGL/1r5Yxb/V+ePWfxfkz9m8V87f8ziv07+mMV/3fwxi/9r88cs/uvlj1n8X5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv/X549Z/DfOH7P4b5I/ZvF/Q/6Yxf+N+WMW/zflj1n835w/ZvF/S/6Yxf+t+WMW/7flj1n8N80fs/hvlj9m8d88f8zi//b8MYv/FvljFv8t88cs/lvlj1n8t84fs/i/I3/M4r9N/pjF/535Yxb/d+WPWfy3zR+z+G+XP2bx3z5/zOK/Q/6Yxf/d+WMW//fkj1n8d8wfs/i/N3/M4r9T/pjF/335Yxb/9+ePWfw/kD9m8d85f8ziv0v+mMV/1/wxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/9H88cs/rvlj1n8d88fs/jvkT9m8f9Y/pjF/+P5Yxb/PfPHLP6fyB+z+O+VP2bx/2T+mMX/U/ljFv+988cs/vvkj1n8980fs/h/On/M4v+Z/DGL/2fzxyz+++WPWfz3zx+z+H8uf8zif0D+mMX/wPwxi//n88cs/gflj1n8D84fs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf8b+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOL/zfwxi/+38scs/qfkj1n8T80fs/iflj9m8T89f8zi/+38MYv/GfljFv8z88cs/mflj1n8v5M/ZvH/bv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4fy9/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/8F+WMW/wvzxyz+P8kfs/hflD9m8f9p/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zi/7P8MYv/z/PHLP6/yB+z+P8yf8zif1X+mMX/6vwxi/+v8scs/r/OH7P4X5M/ZvH/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP6/zR+z+N+QP2bxvzF/zOJ/U/6Yxf93+WMW/9/nj1n8/5A/ZvG/OX/M4v/H/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P4/yl/zOJ/R/6Yxf/O/DGL/5/zxyz+d+WPWfz/kj9m8f9r/pjF/2/5Yxb/v+ePWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/5T8MYv/A/ljFv8H88cs/lPzxyT+cwzyxyz+Q/ljFv9R+WMW/1nyxyz+s+aPWfxH549Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n8n5I/ZvGfL3/M4j8mf8ziP3/+mMV/bP6YxX+B/DGL/4L5Yxb/p+aPWfyflj9m8X96/pjFf6H8MYv/M/LHLP4L549Z/J+ZP2bxf1b+mMV/kfwxi/+z88cs/s/JH7P4j8sfs/g/N3/M4v+8/DGL//Pzxyz+i+aPWfwXyx+z+L8gf8ziv3j+mMV/ifwxi/8L88cs/i/KH7P4vzh/zOL/kvwxi/+S+WMW/5fmj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/5flj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMX/5fljFv9V8scs/qvmj1n8X5E/ZvF/Zf6Yxf9V+WMW//H5Yxb/CfljFv+J+WMW/9Xyxyz+q+ePWfzXyB+z+E/KH7P4T84fs/ivmT9m8V8rf8zi/+r8MYv/a/LHLP5r549Z/NfJH7P4r5s/ZvF/bf6YxX+9/DGL/+vyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOL/+vwxi//G+WMW/03yxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4v+2/DGL/6b5Yxb/zfLHLP6b549Z/N+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/d+SPWfy3yR+z+L8zf8zi/678MYv/tvljFv/t8scs/tvnj1n8d8gfs/i/O3/M4v+e/DGL/475Yxb/9+aPWfx3yh+z+L8vf8zi//78MYv/B/LHLP47549Z/HfJH7P475o/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6YxX+3/DGL/+75Yxb/PfLHLP4fyx+z+H88f8ziv2f+mMX/E/ljFv+98scs/p/MH7P4fyp/zOK/d/6YxX+f/DGL/775Yxb/T+ePWfw/kz9m8f9s/pjFf7/8MYv//vljFv/P5Y9Z/A/IH7P4H5g/ZvH/fP6Yxf+g/DGL/8H5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/h/I3/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8v5k/ZvH/Vv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/L+dP2bxPyN/zOJ/Zv6Yxf+s/DGL/3fyxyz+380fs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/+/lj1n8v58/ZvH/Qf6Yxf+H+WMW/x/lj1n8f5w/ZvG/IH/M4n9h/pjF/yf5Yxb/i/LHLP4/zR+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/K/KH7P4X50/ZvH/Vf6Yxf/X+WMW/2vyxyz+v8kfs/hfmz9m8b8uf8zif33+mMX/t/ljFv8b8scs/jfmj1n8b8ofs/j/Ln/M4v/7/DGL/x/yxyz+N+ePWfz/mD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/z/lj1n878gfs/jfmT9m8f9z/pjF/678MYv/X/LHLP5/zR+z+P8tf8zi//f8MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8Z+SP2bxfyB/zOL/YP6YxX9q/pjEf85B/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/1Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi/9T8MYv/0/LHLP5Pzx+z+C+UP2bxf0b+mMV/4fwxi/8z88cs/s/KH7P4L5I/ZvF/dv6Yxf85+WMW/3H5Yxb/5+aPWfyflz9m8X9+/pjFf9H8MYv/YvljFv8X5I9Z/BfPH7P4L5E/ZvF/Yf6Yxf9F+WMW/xfnj1n8X5I/ZvFfMn/M4v/S/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v+y/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4vzx/zOK/Sv6YxX/V/DGL/yvyxyz+r8wfs/i/Kn/M4j8+f8ziPyF/zOI/MX/M4r9a/pjFf/X8MYv/GvljFv9J+WMW/8n5Yxb/NfPHLP5r5Y9Z/F+dP2bxf03+mMV/7fwxi/86+WMW/3Xzxyz+r80fs/ivlz9m8X9d/pjFf/38MYv/BvljFv8N88cs/hvlj1n8X58/ZvHfOH/M4r9J/pjF/w35Yxb/N+aPWfzflD9m8X9z/pjF/y35Yxb/t+aPWfzflj9m8d80f8ziv1n+mMV/8/wxi//b88cs/lvkj1n8t8wfs/hvlT9m8d86f8zi/478MYv/NvljFv935o9Z/N+VP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/d+ePWfzfkz9m8d8xf8zi/978MYv/TvljFv/35Y9Z/N+fP2bx/0D+mMV/5/wxi/8u+WMW/13zxyz+H8wfs/h/KH/M4v/h/DGL/0fyxyz+H80fs/jvlj9m8d89f8ziv0f+mMX/Y/ljFv+P549Z/PfMH7P4fyJ/zOK/V/6Yxf+T+WMW/0/lj1n8984fs/jvkz9m8d83f8zi/+n8MYv/Z/LHLP6fzR+z+O+XP2bx3z9/zOL/ufwxi/8B+WMW/wPzxyz+n88fs/gflD9m8T84f8zi/4X8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/b+SPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/zfzxyz+38ofs/ifkj9m8T81f8zif1r+mMX/9Pwxi/+388cs/mfkj1n8z8wfs/iflT9m8f9O/pjF/7v5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4v+9/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+F+SPWfwvzB+z+P8kf8zif1H+mMX/p/ljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi//P8scs/j/PH7P4/yJ/zOL/y/wxi/9V+WMW/6vzxyz+v8ofs/j/On/M4n9N/pjF/zf5Y4/2H/1kD+ff73H8r80fs5z/1+WPWfyvzx+z+P82f8zif0P+mMX/xvwxi/9N+WMW/9/lj1n8f58/ZvH/Q/6Yxf/m/DGL/x/zxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOL/p/wxi/8d+WMW/zvzxyz+f84fs/jflT9m8f9L/pjF/6/5Yxb/v+WPWfz/nj9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+U/LHLP4P5I9Z/B/MH7P4T80fk/jPNcgfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLH/vf953j4rfwf2/++/0PNNU/+mMV/3vwxi/9T8scs/vPlj1n8x+SPWfznzx+z+I/NH7P4L5A/ZvFfMH/M4v/U/DGL/9Pyxyz+T88fs/gvlD9m8X9G/pjFf+H8MYv/M/PHLP7Pyh+z+C+SP2bxf3b+mMX/OfljFv9x+WMW/+fmj1n8n5c/ZvF/fv6YxX/R/DGL/2L5Yxb/F+SPWfwXzx+z+C+RP2bxf2H+mMX/RfljFv8X549Z/F+SP2bxXzJ/zOL/0vwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOL/svwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+L88f8ziv0r+mMV/1fwxi/8r8scs/q/MH7P4vyp/zOI/Pn/M4j8hf8ziPzF/zOK/Wv6YxX/1/DGL/xr5Yxb/SfljFv/J+WMW/zXzxyz+a+WPWfxfnT9m8X9N/pjFf+38MYv/OvljFv9188cs/q/NH7P4r5c/ZvF/Xf6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/F+fP2bx3zh/zOK/Sf6Yxf8N+WMW/zfmj1n835Q/ZvF/c/6Yxf8t+WMW/7fmj1n835Y/ZvHfNH/M4r9Z/pjFf/P8MYv/2/PHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4v+O/DGL/zb5Yxb/d+aPWfzflT9m8d82f8ziv13+mMV/+/wxi/8O+WMW/3fnj1n835M/ZvHfMX/M4v/e/DGL/075Yxb/9+WPWfzfnz9m8f9A/pjFf+f8MYv/LvljFv9d88cs/h+c7j/1SRrXf2gW/w91/mMW/w/nj1n8P5I/ZvH/aP6YxX+3/DGL/+75Yxb/PfLHLP4fyx+z+H88f8ziv2f+mMX/E/ljFv+98scs/p/MH7P4fyp/zOK/d/6YxX+f/DGL/775Yxb/T+ePWfw/kz9m8f9s/pjFf7/8MYv//vljFv/P5Y9Z/A/IH7P4H5g/ZvH/fP6Yxf+g/DGL/8H5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/h/I3/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8v5k/ZvH/Vv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/L+dP2bxPyN/zOJ/Zv6Yxf+s/DGL/3fyxyz+380fs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/+/lj1n8v58/ZvH/Qf6Yxf+H+WMW/x/lj1n8f5w/ZvG/IH/M4n9h/pjF/yf5Yxb/i/LHLP4/zR+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/K/KH7P4X50/ZvH/Vf6Yxf/X+WMW/2vyxyz+v8kfs/hfmz9m8b8uf8zif33+mMX/t/ljFv8b8scs/jfmj1n8b8ofs/j/Ln/M4v/7/DGL/x/yxyz+N+ePWfz/mD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/z/lj1n878gfs/jfmT9m8f9z/pjF/678MYv/X/LHLP5/zR+z+P8tf8zi//f8MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8Z+SP2bxfyB/zOL/YP6YxX9q/pjEf+5B/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/1Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi/9T8MYv/0/LHLP5Pzx+z+C+UP2bxf0b+mMV/4fwxi/8z88cs/s/KH7P4L5I/ZvF/dv6Yxf85+WMW/3H5Yxb/5+aPWfyflz9m8X9+/pjFf9H8MYv/YvljFv8X5I9Z/BfPH7P4L5E/ZvF/Yf6Yxf9F+WMW/xfnj1n8X5I/ZvFfMn/M4v/S/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v+y/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4vzx/zOK/Sv6YxX/V/DGL/yvyxyz+r8wfs/i/Kn/M4j8+f8ziPyF/zOI/MX/M4r9a/pjFf/X8MYv/GvljFv9J+WMW/8n5Yxb/NfPHLP5r5Y9Z/F+dP2bxf03+mMV/7fwxi/86+WMW/3Xzxyz+r80fs/ivlz9m8X9d/pjFf/38MYv/BvljFv8N88cs/hvlj1n8X58/ZvHfOH/M4r9J/pjF/w35Yxb/N+aPWfzflD9m8X+zxX/Of211i/9bLP7/Yhb/t+aPWfzflj9m8d80f8ziv1n+mMV/8/wxi//b88cs/lvkj1n8t8wfs/hvlT9m8d86f8zi/478MYv/NvljFv935o9Z/N+VP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/d+ePWfzfkz9m8d8xf8zi/978MYv/TvljFv/35Y9Z/N+fP2bx/0D+mMV/5/wxi/8u+WMW/13zxyz+H8wfs/h/KH/M4v/h/DGL/0fyxyz+H80fs/jvlj9m8d89f8ziv0f+mMX/Y/ljFv+P549Z/PfMH7P4fyJ/zOK/V/6Yxf+T+WMW/0/lj1n8984fs/jvkz9m8d83f8zi/+n8MYv/Z/LHLP6fzR+z+O+XP2bx3z9/zOL/ufwxi/8B+WMW/wPzxyz+n88fs/gflD9m8T84f8zi/4X8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/b+SPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/zfzxyz+38ofs/ifkj9m8T81f8zif1r+mMX/9Pwxi/+388cs/mfkj1n8z8wfs/iflT9m8f9O/pjF/7v5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4v+9/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+F+SPWfwvzB+z+P8kf8zif1H+mMX/p/ljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi//P8scs/j/PH7P4/yJ/zOL/y/wxi/9V+WMW/6vzxyz+v8ofs/j/On/M4n9N/pjF/zf5Yxb/a/PHLP7X5Y9Z/K/PH7P4/zZ/zOJ/Q/6Yxf/G/DGL/035Yxb/3+WPWfx/nz9m8f9D/pjF/+b8MYv/H/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4v+n/DGL/x35Yxb/O/PHLP5/zh+z+N+VP2bx/0v+mMX/r/ljFv+/5Y9Z/P+eP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP5T8scs/g/kj1n8H8wfs/hPzR+T+M8zyB+z+A/lj1n8R+WPWfxnyR+z+M+aP2bxH50/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8X9K/pjFf778MYv/mPwxi//8+WMW/7H5Yxb/BfLHLP4L5o9Z/J+aP2bxf1r+mMX/6fljFv+F8scs/s/IH7P4L5w/ZvF/Zv6Yxf9Z+WMW/0Xyxyz+z84fs/g/J3/M4j8uf8zi/9z8MYv/8/LHLP7Pzx+z+C+aP2bxXyx/zOL/gvwxi//i+WMW/yXyxyz+L8wfs/i/KH/M4v/i/DGL/0vyxyz+S+aPWfxfmj9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxflj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/5fnj1n8V8kfs/ivmj9m8X9F/pjF/5X5Yxb/V+WPWfzH549Z/Cfkj1n8J+aPWfxXyx+z+K+eP2bxXyN/zOI/KX/M4j85f8ziv2b+mMV/rfwxi/+r88cs/q/JH7P4r50/ZvFfJ3/M4r9u/pjF/7X5Yxb/9fLHLP6vyx+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/+vzxyz+G+ePWfw3yR+z+L8hf8zi/8b8MYv/m/LHLP5vzh+z+L8lf8zi/9b8MYv/2/LHLP6b5o9Z/DfLH7P4b54/ZvF/e/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/N+RP2bx3yZ/zOL/zvwxi/+78scs/tvmj1n8t8sfs/hvnz9m8d8hf+xh/61O+p/2f3f+mOX8f0/+mMV/x/wxi/9788cs/jvlj1n835c/ZvF/f/6Yxf8D+WMW/53zxyz+u+SPWfx3zR+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+H90Rv/xT8K4/kOz+O/W+Y9Z/HfPH7P475E/ZvH/WP6Yxf/j+WMW/z3zxyz+n8gfs/jvlT9m8f9k/pjF/1P5Yxb/vfPHLP775I9Z/PfNH7P4fzp/zOL/mfwxi/9n88cs/vvlj1n8988fs/h/Ln/M4n9A/pjF/8D8MYv/5/PHLP4H5Y9Z/A/OH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi//X8scs/l/PH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kfl/9hGefyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf8b+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOL/zfwxi/+38scs/qfkj1n8T80fs/iflj9m8T89f8zi/+38MYv/GfljFv8z88cs/mflj1n8v5M/ZvH/bv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4fy9/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/8F+WMW/wvzxyz+P8kfs/hflD9m8f9p/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zi/7P8MYv/z/PHLP6/yB+z+P8yf8zif1X+mMX/6vwxi/+v8scs/r/OH7P4X5M/ZvH/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP6/zR+z+N+QP2bxvzF/zOJ/U/6Yxf93+WMW/9/nj1n8/5A/ZvG/OX/M4v/H/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P4/yl/zOJ/R/6Yxf/O/DGL/5/zxyz+d+WPWfz/kj9m8f9r/pjF/2/5Yxb/v+ePWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/5T8MYv/A/ljFv8H88cs/lPzxyT+8w7yxyz+Q/ljFv9R+WMW/1nyxyz+s+aPWfxH549Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n8n5I/ZvGfL3/M4j8mf8ziP3/+mMV/bP6YxX+B/DGL/4L5Yxb/p+aPWfyflj9m8X96/pjFf6H8MYv/M/LHLP4L549Z/J+ZP2bxf1b+mMV/kfwxi/+z88cs/s/JH7P4j8sfs/g/N3/M4v+8/DGL//Pzxyz+i+aPWfwXyx+z+L8gf8ziv3j+mMV/ifwxi/8L88cs/i/KH7P4vzh/zOL/kvwxi/+S+WMW/5fmj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/5flj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMX/5fljFv9V8scs/qvmj1n8X5E/ZvF/Zf6Yxf9V+WMW//H5Yxb/CfljFv+J+WMW/9Xyxyz+q+ePWfzXyB+z+E/KH7P4T84fs/ivmT9m8V8rf8zi/+r8MYv/a/LHLP5r549Z/NfJH7P4r5s/ZvF/bf6YxX+9/DGL/+vyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOL/+vwxi//G+WMW/03yxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4v+2/DGL/6b5Yxb/zfLHLP6b549Z/N+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/d+SPWfy3yR+z+L8zf8zi/678MYv/tvljFv/t8scs/tvnj1n8d8gfs/i/O3/M4v+e/DGL/475Yxb/9+aPWfx3yh+z+L8vf8zi//78MYv/B/LHLP47549Z/HfJH7P475o/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6YxX+3/DGL/+75Yxb/PfLHLP4fyx+z+H88f8ziv2f+mMX/E/ljFv+98scs/p/MH7P4fyp/zOK/d/6YxX+f/DGL/775Yxb/T+ePWfw/kz9m8f9s/pjFf7/8MYv//vljFv/P5Y9Z/A/IH7P4H5g/ZvH/fP6Yxf+g/DGL/8H5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/h/I3/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8v5k/ZvH/Vv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/L+dP2bxPyN/zOJ/Zv6Yxf+s/DGL/3fyxyz+380fs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/+/lj1n8v58/ZvH/Qf6Yxf+H+WMW/x/lj1n8f5w/ZvG/IH/M4n9h/pjF/yf5Yxb/i/LHLP4/zR+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/K/KH7P4X50/ZvH/Vf6Yxf/X+WMW/2vyxyz+v8kfs/hfmz9m8b8uf8zif33+mMX/t/ljFv8b8scs/jfmj1n8b8ofs/j/Ln/M4v/7/DGL/x/yxyz+N+ePWfz/mD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/z/lj1n878gfs/jfmT9m8f9z/pjF/678MYv/X/LHLP5/zR+z+P8tf8zi//f8MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8Z+SP2bxfyB/zOL/YP6YxX9q/pjE/ymD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW/6fkj1n858sfs/iPyR+z+M+fP2bxH5s/ZvFfIH/M4r9g/pjF/6n5Yxb/p+WPWfyfnj9m8V8of8zi/4z8MYv/wvljFv9n5o9Z/J+VP2bxXyR/zOL/7Pwxi/9z8scs/uPyxyz+z80fs/g/L3/M4v/8/DGL/6L5Yxb/xfLHLP4vyB+z+C+eP2bxXyJ/zOL/wvwxi/+L8scs/i/OH7P4vyR/zOK/ZP6Yxf+l+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf9l+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxf3n+mMV/lfwxi/+q+WMW/1fkj1n8X5k/ZvF/Vf6YxX98/pjFf0L+mMV/Yv6YxX+1/DGL/+oi/zn+hXUt/muI/P+VLP6T8scs/pPzxyz+a+aPWfzXyh+z+L86f8zi/5r8MYv/2vljFv918scs/uvmj1n8X5s/ZvFfL3/M4v+6/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4vz5/zOK/cf6YxX+T/DGL/xvyxyz+b8wfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4r9p/pjFf7P8MYv/5vljFv+3549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/x35Yxb/bfLHLP7vzB/73/OfDf3flT/2v+fP5/+2+WMW/+3yxyz+2+ePWfx3yB+z+L87f8zi/578MYv/jvljFv/35o9Z/HfKH7P4vy9/zOL//vwxi/8H8scs/jvnj1n8d8kfs/jvmj9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8f9o/pjFf7f8MYv/7vljFv898scs/h/LH7P4fzx/zOK/Z/6Yxf8T+WMW/73yxyz+n8wfs/h/Kn/M4r93/pjFf5/8MYv/vvljFv9P549Z/D+TP2bx/2z+mMV/v/wxi//++WMW/8/lj1n8D8gfs/gfmD9m8f98/pjF/6D8MYv/wfljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/6/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8jf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/mT9m8f9W/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v50/ZvE/I3/M4n9m/pjF/6z8MYv/d/LHLP7fzR+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/7+WPWfy/nz9m8f9B/pjF/4f5Yxb/H+WPWfx/nD9m8b8gf8zif2H+mMX/J/ljFv+L8scs/j/NH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8r8ofs/hfnT9m8f9V/pjF/9f5Yxb/a/LHLP6/yR+z+F+bP2bxvy5/zOJ/ff6Yxf+3+WMW/xvyxyz+N+aPWfxvyh+z+P8uf8zi//v8MYv/H/LHLP43549Z/P+YP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/P+WPWfzvyB+z+N+ZP2bx/3P+mMX/rvwxi/9f8scs/n/NH7P4/y1/zOL/9/wxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxn5I/ZvF/IH/M4v9g/pjFf2r+mMR/vkH+mMV/KH/M4j8qf8ziP0v+mMV/1vwf1Swjjxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW/6fkj1n858sfs/iPyR+z+M+fP2bxH5s/ZvFfIH/M4r9g/pjF/6n5Yxb/p+WPWfyfnj9m8V8of8zi/4z8MYv/wvljFv9n5o9Z/J+VP2bxXyR/zOL/7Pwxi/9z8scs/uPyxyz+z80fs/g/L3/M4v/8/DGL/6L5Yxb/xfLHLP4vyB+z+C+eP2bxXyJ/zOL/wvwxi/+L8scs/i/OH7P4vyR/zOK/ZP6Yxf+l+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf9l+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxf3n+mMV/lfwxi/+q+WMW/1fkj1n8X5k/ZvF/Vf6YxX98/pjFf0L+mMV/Yv6YxX+1/DGL/+r5Yxb/NfLHLP6T8scs/pPzxyz+a+aPWfzXyh+z+L86f8zi/5r8MYv/2vljFv918scs/uvmj1n8X5s/ZvFfL3/M4v+6/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4vz5/zOK/cf6YxX+T/DGL/xvyxyz+b8wfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4r9p/pjFf7P8MYv/5vljFv+3549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/x35Yxb/bfLHLP7vzB+z+L8rf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+784fs/i/J3/M4r9j/pjF/735Yxb/nfLHLP7vyx+z+L8/f8zi/4H8MYv/zvljFv9d8scs/rvmj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n8P/r/Y48eEgBBECAI7vZy3GPbtm3btm3btm3btm3btvmBesFUxDGv6X/U8n8v/6OW/3v7H7X838f/qOX/vv5HLf/38z9q+b+//1HL/wP8j1r+H+h/1PL/IP+jlv8H+x+1/D/E/6jl/6H+Ry3/D/M/avl/uP9Ry/8j/I9a/h/pf9Ty/yj/o5b/R/sftfw/xv+o5f+x/kct/4/zP2r5f7z/Ucv/E/yPWv6f6H/U8v8k/6OW/yf7H7X8P8X/qOX/qf5HLf9P8z9q+X+6/1HL/zP8j1r+n+l/1PL/LP+jlv9n+x+1/D/H/6jl/7n+Ry3/z/M/avl/vv9Ry/8L/I9a/l/of9Ty/yL/o5b/F/sftfy/xP+o5f+l/kct/y/zP2r5f7n/Ucv/K/yPWv5f6X/U8v8q/6OW/1f7H7X8v8b/qOX/tf5HLf+v8z9q+X+9/1HL/xv8j1r+3+h/1PL/Jv+jlv83+x+1/L/F/6jl/63+Ry3/b/M/avl/u/9Ry/87/I9a/t/pf9Ty/y7/o5b/d/sftfy/x/+o5f+9/kct/+/zP2r5f7//Ucv/B/yPWv4/6H/U8v8h/6OW/w/7H7X8f8T/qOX/o/5HLf8f8z9q+f+4/1HL/yf8j1r+P+l/1PL/Kf+jlv9P+x+1/H/G/6jl/7P+Ry3/n/M/avn/vP9Ry/8X/I9a/r/of9Ty/yX/o5b/L/sftfx/xf+o5f+r/kct/1/zP2r5/7r/Ucv/N/yPWv6/6X/U8v8t/6OW/2/7H7X8f8f/qOX/u/5HLf/f8z9q+f++/1HL/w/8j1r+f+h/1PL/I/+jlv8f+x+1/P/E/6jl/6f+Ry3/P/M/avn/uf9Ry/8v/I9a/n/pf9Ty/yv/o5b/X/sftfz/xv+o5f+3/kct/7/zP2r5/73/Ucv/H/yPWv7/6H/U8v8n/6OW/z/7H7X8/8X/qOX/r/5HLf9/8z9q+f+7/1HL/z/8j1r+/+l/VPJ/4D/8j1r+/9P/qOX/AP+jlv//8j9q+f9v/6OW///xP2r5/1//o5b///M/avn/f/+jlv+D+B+1/B/U/6jl/2D+Ry3/B/c/avk/hP9Ry/8h/Y9a/g/lf9Tyf6D/Ucv/of2PWv4P43/U8n9Y/6OW/8P5H7X8H97/qOX/CP5HLf9H9D9q+T+S/1HL/5H9j1r+j+J/1PJ/VP+jlv+j+R+1/B/d/6jl/xj+Ry3/x/Q/avk/lv9Ry/+x/Y9a/o/jf9Tyf1z/o5b/4/kftfwf3/+o5f8E/kct/yf0P2r5P5H/Ucv/if2PWv5P4n/U8n9S/6OW/5P5H7X8n9z/qOX/FP5HLf+n9D9q+T+V/1HL/6n9j1r+T+N/1PJ/Wv+jlv/T+R+1/J/e/6jl/wz+Ry3/Z/R/QIot/2fyP2r5P7P/Ucv/WfyPWv7P6n/U8n82/6OW/7P7H7X8n8P/qOX/nP5HLf/n8j9q+T+3/1HL/3n8j1r+z+t/1PJ/Pv+jlv/z+x+1/F/A/6jl/4L+Ry3/F/I/avm/sP9Ry/9F/I9a/i/qf9TyfzH/o5b/i/sftfxfwv+o5f+S/kct/5fyP2r5v7T/Ucv/ZfyPWv4v63/U8n85/6OW/8v7H7X8X8H/qOX/iv5HLf9X8j9q+b+y/1HL/1X8j1r+r+p/1PJ/Nf+jlv+r+x+1/F/D/6jl/5r+Ry3/1/I/avm/tv9Ry/91/I9a/q/rf9Tyfz3/o5b/6/sftfzfwP+o5f+G/kct/zfyP2r5v7H/Ucv/TfyPWv5v6n/U8n8z/6OW/5v7H7X838L/qOX/lv5HLf+38j9q+b+1/1HL/238j1r+b+t/1PJ/O/+jlv/b+x+1/N/B/6jl/47+Ry3/d/I/avm/s/9Ry/9d/I9a/u/qf9Tyfzf/o5b/u/sftfzfw/+o5f+e/kd/u/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwF/s221snWXhx/G72zrG/vyTERdchiabXCgkwmz3kPGCsMnYVgfdeB4DHN3ajY12m12HXQH38GISITxIMskSJcqWoYSZ0EgMBCuIaNBFTTT4AIhCFI0TIeiWuFhz2tPSHrvGc9XrWpTP50XPue+z372tyXf3vcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+ezU0LjwyvmbYqfFDDz54uKXvdc7RlTcf+G3PhQOv5Y+XjXDJcUMPent7e+c8N3tH+fCUoihKP9vO8vGkynHp+jvrv9DZfxQW9Ly05PiUnzceObDm9Efquo/eX9t3tra4ad2G1paPjSuKcHFt0Vk6qKspirC4trivdFBfOlhSWzxSOpjdd3Bq8e3SwflrN7c2l04sjf6ewf+KhsadxfhhxRbD/jQY2v/O+m/dOfA6yiUHrjahKPd/Rdf336r4bMAJ+h+4flhY2X/Vv0HghKrr/4UFA6+jXPJf7v+Tn1r1ykifnbj/geuHj+sf0hnh+X9Yo5XP/RXP/zNGuOTg/qqaruOl/i+97dmZ5VMT/p3n/3evHy6u7H/csOf/0nP8ooHn/1OKIlwyxm8HvKc0NO46Mtr9f/T+J0yv2NQM7f+M9s37S/0/vuR7T5RP1VbZ/6JR7v/jllb8WoHqNDR+ubfi/l9F/8VHRrjkYP9vP/Hrh0v9P/b7B84c8lk1/V9S2f+sjrYts7Zu7zpvQ1vT+pb1LZvqZs+fM6++bt4Fc2f1PRL0fx3jdwXeG8Z2/y8mV2xqiqJlcH9N94GnS/3PffDBOeVTk6rsf/Go9/8Z7v8wog+NKyZOLDqbOjra6/q/DhzW93/t/2Ej9F/F3//POqf8w2rLrzVFMW1wf9eZd68o9f/OoWd3l09NrLL/JaP2v2Dw5wUijPH+31yxGdb/wUMv9T3/L7v34BnlU9X+/X/pqP2/6v4PY9HQWPE//PyHlfrfVVwW2Wlo8N//IJ0c/T/2zg09cevwCf1DOjn6/93njp4btw7L9A/p5Oh/wsYHno9bh0v1D+nk6H/51Pkr4tbhMv1DOjn6X/vquX+OW4dG/UM6Ofo/50u7O+PWYbn+IZ0c/T/UPmdb3Dqs0D+kk6P/n5720Gtx63C5/iGdHP0fO3bPjXHrcIX+IZ0c/XfvOfsHcetwpf4hnRz9X75uYYhbh6v0D+nk6H/6tD8+HrcOV+sf0snR/7w//f20uHW4Rv+QTo7+7/j8in1x63Ct/iGdHP2Pv/6VF+PWYaX+IZ0c/S89e9vCuHW4Tv+QTo7+m3/S3Bu3Dqv0D+nk6H/W13+0IW4drtc/pJOj/8PLH90Ttw436B/SydH/nrpiStw63Kh/SCdH/1/77umH4tbhk/qHdHL0/5unnpwftw6r9Q/p5Oj/uQ/c/o24dbhJ/5BOjv7vXfPiWXHr0KR/SCdH/w/vff6LceuwRv+QTo7+33ij7f/i1mGt/iGdHP1PnnTq63Hr0Kx/SCdH/wtv/Up73Dq06B/SydF/2+7uH8atwzr9Qzo5+v/w8Wmr4tZhvf4hnRz9r5y79/1x63Cz/iGdHP2/b9mFu+LWYYP+IZ0c/V/U89GL4tZho/4hnRz9dzzz2a/GrcMt+od0cvS/d+Zri+PWoVX/kE6O/l9evfTHcevQpn9IJ0f/bz163aa4ddikf0gnR/9P/uztY3HrsFn/kE6O/v//gkV/jVuHLfqHdHL0v3jJm2vj1uFT+od0cvS/sfsfL8etQ7v+IZ0c/c88fPWyuHXYqn9IJ0f/3zmvbn/cOnToH9LJ0f+dV+6rj1uHbfqHdHL0v//gXXfHrcOt+od0cvT/5i9mTI9bh0/rH9LJ0f/9Uw5dG7cOnfqHdHL0/8tNtc/ErcN2/UM6Ofr/276pO+LWoUv/kE6O/p9+vecPcetwm/4hnRz9r57wq4lx63C7/iGdHP1P7dpyX9w63KF/SCdH//PvaTo/bh0+o39IJ0f/W//ywjfj1mGH/iGdrdu7bmlqbW1p98Ybb7wZfHOy/2QCUns3+pP9KwEAAAAAAAAAAAAAAE4kxz8nOtm/RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/skOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UQvRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcAAAD//ylY4j4=") socket$inet6_sctp(0xa, 0x0, 0x84) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x91309b, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 14.426043491s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000740)={0x0, @l2tp, @qipcrtr, @isdn, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8138}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r3, 0x100) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090100ffffffb09500000000000000b70200001fffffff739af0ff00000000b509000000000000c3aa04fef1000000bf8600000000000007080000f8ffffffbf9400000000000007040000f0ffffffa70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b700000000000000950000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 14.320690691s ago: executing program 1: r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000800000009500"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2}) socket$phonet(0x23, 0x2, 0x1) r6 = syz_io_uring_setup(0x16c2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 12.605716499s ago: executing program 1: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3800003, 0x11, r2, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2275, &(0x7f00000018c0)) r3 = getpgrp(0x0) prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000580)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000001c0)={[{@dioread_nolock}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@debug}, {@mblk_io_submit}, {@errors_continue}, {@usrjquota}, {@prjquota}, {@nodiscard}]}, 0xfe, 0x43a, &(0x7f00000008c0)="$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") r6 = open(&(0x7f0000000000)='./file1\x00', 0x14957e, 0x30) r7 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) ftruncate(r7, 0x2007fff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc19a, 0x4002011, r6, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000044c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sync() r8 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r8, &(0x7f0000000080), 0xffffff1c) 11.081276683s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) 10.486714997s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$isdn(0x22, 0x2, 0x26) mknod(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0xfffffffffffffffc, &(0x7f0000000140)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a400000ff000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01"], 0x104}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000100)=0x6) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)=0x7fffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000080000000c000180080003000000000044000180140002007866726d3000"/50, @ANYRES32=0x0, @ANYBLOB], 0x64}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x28, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.053874245s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) r1 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000800)={0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) read(r3, &(0x7f00000000c0)=""/29, 0x1d) 7.654676066s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x14, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x14) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x34}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f00000000c0), 0x2, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000100)=""/185, 0xb9}], 0x1, 0x0, 0x0) sysinfo(&(0x7f00000003c0)=""/67) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = userfaultfd(0x80001) fremovexattr(r6, 0xfffffffffffffffd) unshare(0x44000680) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 6.306089055s ago: executing program 3: r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r0, &(0x7f00000002c0), 0x0, 0x0, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) 6.302183227s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000180)=ANY=[], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',privport,access=', @ANYRESDEC=r8]) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 5.904869732s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000740)={0x0, @l2tp, @qipcrtr, @isdn, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8138}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r3, 0x100) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090100ffffffb09500000000000000b70200001fffffff739af0ff00000000b509000000000000c3aa04fef1000000bf8600000000000007080000f8ffffffbf9400000000000007040000f0ffffffa70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b700000000000000950000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.797625497s ago: executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000848, &(0x7f00000015c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d302c7379735f696d6d757461626c652c756e695f786c6174653d312c756e695f786c6174653d312c73686f72746e616d653d6d697865642c696f636861727365743d6d61636761656c69632c756e695f786c6174653d312c64656275672c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c726f6469722c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c00765951898d8d221b19e1a2ffba549e66dc3e46698a9c2fe46460faf0ff29a68c04dfd74a8a4a75d249abf2c6442933dc3131ed0478aa9a20ee72b682544b75de4d", @ANYRES8], 0x1, 0x384, &(0x7f0000001d00)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7c00, 0x0, 0x0) fallocate(r0, 0xb, 0x0, 0x7000) 5.580010251s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r2}, 0x14) 5.519268192s ago: executing program 2: r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000800000009500"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2}) socket$phonet(0x23, 0x2, 0x1) r6 = syz_io_uring_setup(0x16c2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.452385785s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x96}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) process_vm_readv(0x0, &(0x7f0000001b00)=[{0x0}, {0x0}, {&(0x7f0000001a00)=""/208, 0xd0}], 0x3, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1, 0x9fb, &(0x7f0000002540)="$eJzs3U1sXGe5B/D/GduJ61ZJ2ub29kZtM0lvUrfNdWznNiHqAhJ7krj4A9mO1IhFUxoHRTEUWpDaColUQqyoQAKxgF3FilWlbugGdQc7WLFAQt2yrFiFDUZnZmyP7ZmMExzbbX8/a2bOx3Pe9zkfc17PzJl5w2fL0v41Y0tL9ds9jl/+7TZkzC52fvyT9z94r7y9eyt70pMXit8l/UmqSW+Sx5O+sfHZmakuBd1Mrib5OCmS7E3jcVOupvhpHlod/zjFr8t6O9qz2ZLpZokvtJ0+/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDcqxsaHh0eKPZmYvvxytSGpbjA2PjtTZGlp45zlZRo+qvf6XXzUtd6kKG/p71/u6vvxg6uzH0tSPZonGmNP1DskT3/eefCxAy8+2ltZXr5TNv+RvZsv9s2337n56uLiwhv3JZHd72JtemJuZmLq3MVadWJupnr29Onhk5cuzFUvTEzW5q7MzdemqmOztXPzM7PVwbFnqyNnz56q1oauzFyevjg+NFlbnnjm/0aHh09XXxr6Wu3c7NzM9MmXhubGLk1MTk5MX6zHlLPLmDPlgfjVifnqfO3cVLV6/cbiwql1OfVk3fFbBo10W5MyaLRb0Ojw6OjIyOjoyLvN3rNXJpx+4ewLZ4aHe4fXyYaI+3TQsrs80Hk3b/1JHO5RpdH+J5OZyHQu5+VU2/6NZTyzmclUh/lNy+3/sZO1O9bb2v43W/neltmHyrujeao52t+h/e+Qy/b9vZm3805u5tUsZjELeWPHM9rev4upZToTmctMJjKVc/Up1eaUas7mdE5nOK/kUg5nLtVcyEQmU8tcrmQu86nVj6ixzKaWc5nPTGZTzWDG8myqGcnZnM2pVFPLUK5kJpcznYsZz7l6Kddzo77dT90hx5Wgkc0Ejd4haENjftftf239Pyd84Wz9SRzu0VKz/d/TPXRwbDsSAgAAALbc//wx+w4+8oe/JUWerL8vf2Fisja802kBAAAAW6h+ud4T5UNfOfRkCq//AQAA4POmqH/HrkgykMONoeVvQnkTAAAAAD4n6p//P5Xi8OqEja///75DyQEAAABbovtv7HeN6F8prHqt8XitGdEYKwYuTEzWhsZmJl8cyfH6rwzUv2mwobSepOirf/3guRxpRB0ZaDwOrJZY1tlfRo0MvTiS53K0uSKDT5cPTw+2iRxtRD7TiHymNbInayJPlZEA8Hl39A7t8Sbb/+K5nGhEnDhUb/J7D7Vpg4e1rACwW6z0sfPPZpdmbdr/ZsRTndr//1/u/qfN6/8y4pFcP9y4pGAor+X1LOZaTqR5xcHhdqUu90bQuAzhRJd3Awaalyz8+UwlJza8H7D69kRr7EJGc6LtOwIt5RbLOZxqxPXcn30AANvt6B3b4c21/ye6vP4f8JVCANhVVnqwv48DO72OAMBaWmkAAAAAAAAAAAAAAAAAAAAAAAAAAADYepv6Af8/HU8WFxeSbegsYGWg/24yXB0osnFWJduU844P9CTZqdq/3GbLdxko9/Fu2XQG1g7s8IkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbVEkPe2mV5K9SYaTnNz+rO6fWzudwFap3ttixe3czlvZt9XpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB80TV//7+SxuODjUnprSTHklxN8vWdznEr3d7pBHbMt+r3Lb//X0n6slSkt7HbU/SNjc/OTJW7v9hbzv/k/Q/eK2/dy97Yq0JZQFnDms4lmjW0TOlbu9TD9aUGxhfevPm9179THT9fPzDPz1+YHJ+6OPuV1cDHig8bXSC0doOwnO8Pjv3+Zy2T9zQr/7Bc0/bW13uhXu/4xnr/u93SHerdhBuLC6NlTfO1l+e//+0bb7XMeiRHkqcHk8G1NX2zvHWo6cj67blW8Wnx42Jffpmr9f1fbo1iqSh30f76+j9w/cbiwtBrry9eW8nph2tyOpDDSa4l/ZvP6XD9fNJW/air9JW1DteDyruDXcq7o5YSRzps14frh8xA93WorM6udl6Hui7bvZnRqbYZ/fy7j+b4Xe/p411qbPrXmrHi0+KvxaX8JT9q6f+jUu7/Y2n77NyoqEe2HCmt89Y8vSrHVtd8tHXGK+vL7Pis5D74Sb6RL63s/0rL+b+5r7bnfNRSY/vnRXL3z4vf7N/Qoqyqt0gH17VIzbNPp2WaeR5sRHXI87/yfNJ76K7Ois93OaNs0fN/reLT4lfFYP6RW/r/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdr8i6Wk3vZIcS3Igyf5yvJosrY+5dQ/1VQaKe0lzy9xLzp89RccVLW7ndt7Kvu3OCAAAAAAAAID74/z4J+9/8F55q38e35P/rTTnVJPeJAeKX/SNjc/OTHUpqC+5uvyRfv/d5XC1vHtodfzjcuzxLgvt7OUDAPCZ9u8AAAD//0hhb5A=") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r3, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000005900)={&(0x7f0000005800), 0xc, &(0x7f00000058c0)={&(0x7f0000005880)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44841}, 0x800) chdir(&(0x7f0000000140)='./bus\x00') getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00', 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005a40)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$eJzs3M9rI+UbAPAn7XZ/f/dbxIO3HViEFjZh0x+L3qru4g/sUlY9eNI0SUN2k0xp0rT25MGjePA/EQVPHv0bPHj2Jh4Ub0IlM1PdqgtC08RtPx+YPPO+efPM84Zl4ZkpCeDcmk9+/bkUN+JKRMxGxPWI7LxUHJm1PLwQETcjYuaJo1TM/zFxMSKuRsSNUfI8Z6l46/Pbw1urP731yzffXbpw7Yuvv5/eroFpezEiutv5+V43j2krj4+K+dqwncXuyrCI+Rvdx8U4zeNeczPLsFc7WlfL4nIrX59u7/ZHcatTq49iq72VzW/38gv2h62jPNkHHtV2snGjuZnFdj/NYusgr2v/IP+/7aA/yPM0inwfZeljMDiK+Xxzv5nvZ/txFuu9QTGf500bzf1RHBaxuFzU004jq2PzJN/0f9vb7d7ufjJs7vTbaS9ZrVRfqlTvlqs7aaM5aK6Ua93G3ZVkodUZLSsPmrXuWitNW51mpZ52F5OFVr1erlaThXvNzXatl1SrleXKnfLqYnF2O3n9wXtJp5EsjOKr7d7uoN3pJ1vpTpJ/YjFZqiy/vJjcqibvrG8kGw/v31/feDfuvf/glfU3XysW/a2sZGHpztJSuXqnvFRdPIP7/+Ap+/+kKHqM+4cTKU27AIBnj/4fmIbT6/93HsbhYTZ/mv1/6P/HYlz97+Ek+t/z3v+fwv7hRPT/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn1g9zX76Rnczn42vF/P+KqeeKcSkiZiLi8B/MxsVjOWeLPHNPWT/3lxq+LUWWYXSNS8VxNSLWiuO3/5/2twAAAABn11cf3/ws79bzl/lpF8Qk5TdtZq5/OKZ8pYiYm/9xTNlmRi/PjylZ9u/7QuyPKVt2A+vymJLlt9wujCvbvzJ7LFx+IpTyMDPRcgAAgIk43glMtgsBAABgkj6ddgFMRymOHmUePQvO/vL+zweCV46NAAAAgGdQadoFAAAAAKcu6//9/h8AAACcbfnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/M7O/dyoDURxAH62cSD/FBTlnla4QRkpIcccIwpIE5RAWkgD1EBuKSGCFR4vWlbsaiWP7d3V90kwjAU/ZhA+zBtpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjT33q7+v3z66+uOYdjN3lmAwAAAFyzr7er5sU89d+31z+2lz63/SIiyoi4tnav4s1FZtXm1A+8v743hj8RTcLpO6bt411ELKqIRUT8/9T3rwAAAACv1269WabVenqajz0ghpSKNuWHb5nyioio5/8ypZWnvC+Zwpr/9yR+ZEprClizTGGp5DbJlfYkze1+rtrN7jRFasrHP59t7gAAwICqi2bYVQgAAABD+j72ABhHEbdbmeetwGlq2u29txc9AAAA4AUqxh4AAAAA0Ltm/f+sz/8L5/8BAABAV+n8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPq0r7er3Xqz7JpzOHaTZzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3LA/7ygQAmEQBnvXdyZz/8NKg6amJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxc79u0ZSxQEAfzOzs/FOxTXKFhFRsNDGy+2dd14nFkqw8E8QQm7vjLcqnim84xDS2Enqa0RLEUGJ3f0PVyeQJnYptohgYbUyszPJ5Ae4/prZZD8fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKXh24dxkh064zguzm3tP1jJ+u1jfebRxs5C1rI4qjPps+HF6oeo21wiAAAAzI6krO9DCLvp5lLWx528/k/La7Ka/9unx3FZzx+v+8u+rP2z9svPe88fDNQZj5Pd9NbqoH/5ZCqt/2+W0+2Zv7yilT/5/N1Lkn8h8Xvrzw3T/HlGXz9+/E47D+fqyBYA+CculX0RlL8PZX2vycQAmBmtSuFd1v9Jp9mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOowXA9PlnEUQlhoHcaZ7f0HK6f1jzZ2Fsp2/eHDjeo9s1ukIYRbq4P+5RrnMu0+v3f/zvJg0L9bf/BSCKGp0d8qpn/ngwkuDqGR5yP4j4K4+LKnJZ+zETT4QwkAgHMpLVpW1++mm0vZuWg+hNF3R+v/VytxmLD+3/vw+lZ1rGr936tthg2am+yyxbU/RqPRvfuvr368fLt/u//JG1d6b/au3rh27cZi/q5k0RsTAAAA/p120ar1fzx/cv3/YiUOE9b/n33T+7I6VjJr9f+EDhf9ms4EAABgtj378u+/Raecj9rt8MXy2trd3vh48PnK+NhAqn/bXNGq9X8y33RWAAAAQB2G69GR9f+blThMuP7/1Pcv/Fi9ZxJCuFCs/19a+XRws77pTLU6/py46TkCAADQrAtFq67/p/n+//hgy0McQnjtlXFc/BvAier/5N2vfqiOVd3/f7W+KU6luDt+HnnfDaHVbTojAAAAzrMnipYV+7+mm0sf/XTx/bb9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1+zMAAP//H1NCtw==") ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000005980)) bpf$PROG_LOAD(0x5, &(0x7f0000005740)={0x0, 0xc, &(0x7f0000000fc0)=ANY=[@ANYRESHEX=r3, @ANYRES16=r3, @ANYRES16, @ANYRES32=r3, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) 4.796549884s ago: executing program 3: syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5fd0cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb6d658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d967206115b492d825751fcc00000000000000e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bebb749daef202e0412a73d545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177de97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b8f8451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f50520f91fbf7201fc9621d0aee9735d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fbad8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c40000005e538c77b2b14f63d253705363846bc4e9cd3284ff329330812d2211ae34106e0306376a2b1cfe60a09becae2b05ec9adcac47612af85f598a880fa97891a7a290b6e730800542aea761aeb463f5ff5bdf5099ae8ad4afe99db9e9c4e703cb900e9ae272742fe2ff81d1a4f15668392cdafd2e1757706f47f9f84e532f25e2737cb6f6e89378f8d79ab8507b109c7f1f3653a5bc9d54ccc633de6263526eac10519274"], 0x1, 0x5ee3, &(0x7f000000e480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) 4.785294659s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) 4.383906746s ago: executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000082300810000000000400000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0x5, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r3, &(0x7f00000000c0), &(0x7f0000000200)=""/71}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@empty, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x0, 0x0, 0x100, 0x6}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4b) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000000)=0x2) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000040), 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x62, &(0x7f0000000040), &(0x7f0000000500)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) 3.273675362s ago: executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x38, 0x0, &(0x7f00000045c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4000003f) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xc}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='hpfs\x00', 0x0, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) 1.838478413s ago: executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$isdn(0x22, 0x2, 0x26) mknod(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0xfffffffffffffffc, &(0x7f0000000140)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a400000ff000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01"], 0x104}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000100)=0x6) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)=0x7fffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000080000000c000180080003000000000044000180140002007866726d3000"/50, @ANYRES32=0x0, @ANYBLOB], 0x64}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x3c, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x14, 0x0, 0x0, 0x1, [@generic="0d2a79075827af5aa534d6815c2e93f1"]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.728348617s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) 1.709467866s ago: executing program 4: mkdir(&(0x7f00000005c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1e) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) rmdir(0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) r6 = syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000100)='./file1\x00', 0x2210084, &(0x7f000000f3c0)=ANY=[@ANYBLOB="636f6465706167653d63703433372c696f636861727365743d6575632d6a702c00a26550b3bd2e70a4031d010695e18635faa8d6f06a91de4f295559ef9ce2a9773ed0f3a0fea8c90cb62bbe6d0294488fa60accd3b7aae7a6a67b20a0afd180825526b7c21ab1886d1ec9ccaf41379d12b7c9afd7fad169fa393a32f203fd201aa07e4872b0de9111e8f6ab4ad957f255f931fd5bf27748a5ae293163e016b964853fe3026aadd32200fec25398e608b6"], 0x4, 0x334, &(0x7f0000001980)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r7, 0x0, 0x0) mmap(&(0x7f0000604000/0x4000)=nil, 0x4000, 0x0, 0x10012, r6, 0x0) 1.620364184s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000f00001800d0001"], 0x19c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getpgrp(0xffffffffffffffff) (async) r4 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r4, 0x0, 0x20004f) (async) ptrace$setopts(0x4206, r4, 0x0, 0x20004f) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x979c}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x44}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x979c}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x44}}, 0x0) 1.418905938s ago: executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0xa}, @random="e157ae65e9c1", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x30, 0x0, 0x0, @empty, @local, {[@hopopts={0x0, 0x4, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0xff90, [0x0]}}, @hao={0xc9, 0x10, @loopback}]}]}}}}}, 0x0) 419.340839ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r2}, 0x14) 381.837081ms ago: executing program 3: r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r0, &(0x7f00000002c0), 0x0, 0x0, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) 159.716236ms ago: executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b33, 0x0) 0s ago: executing program 4: r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000800000009500"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2}) socket$phonet(0x23, 0x2, 0x1) r5 = syz_io_uring_setup(0x16c2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): RDX: 0000000000000054 RSI: 00007f8dd5ce4670 RDI: 0000000000000003 [ 304.664084][ C1] RBP: 0000000000000000 R08: 00007fffd8a505f4 R09: 000000000000000c [ 304.672093][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 304.680092][ C1] R13: 0000000000000000 R14: 00007f8dd5ce4670 R15: 0000000000000000 [ 304.688393][ C1] [ 304.691419][ C1] DEBUG: waiting rtnl_mutex for 1326 jiffies. [ 304.697546][ C1] task:kworker/0:3 state:D stack:22192 pid:5125 tgid:5125 ppid:2 flags:0x00004000 [ 304.708003][ C1] Workqueue: events linkwatch_event [ 304.713253][ C1] Call Trace: [ 304.716622][ C1] [ 304.719582][ C1] __schedule+0x17e8/0x4a20 [ 304.724209][ C1] ? __pfx___schedule+0x10/0x10 [ 304.729101][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 304.735180][ C1] ? __pfx_lock_release+0x10/0x10 [ 304.740264][ C1] ? kick_pool+0x45c/0x620 [ 304.745104][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 304.750491][ C1] ? schedule+0x90/0x320 [ 304.754759][ C1] schedule+0x14b/0x320 [ 304.758924][ C1] schedule_preempt_disabled+0x13/0x30 [ 304.764460][ C1] __mutex_lock+0x6a4/0xd70 [ 304.768993][ C1] ? __mutex_lock+0x527/0xd70 [ 304.773699][ C1] ? linkwatch_event+0xe/0x60 [ 304.778491][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 304.783551][ C1] ? process_scheduled_works+0x945/0x1830 [ 304.789313][ C1] ? rtnl_lock+0xe7/0x130 [ 304.793658][ C1] ? process_scheduled_works+0x945/0x1830 [ 304.799575][ C1] linkwatch_event+0xe/0x60 [ 304.807414][ C1] process_scheduled_works+0xa2c/0x1830 [ 304.813019][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 304.819056][ C1] ? assign_work+0x364/0x3d0 [ 304.823683][ C1] worker_thread+0x86d/0xd50 [ 304.828380][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 304.834594][ C1] ? __kthread_parkme+0x169/0x1d0 [ 304.839749][ C1] ? __pfx_worker_thread+0x10/0x10 [ 304.844914][ C1] kthread+0x2f0/0x390 [ 304.848985][ C1] ? __pfx_worker_thread+0x10/0x10 [ 304.854090][ C1] ? __pfx_kthread+0x10/0x10 [ 304.858711][ C1] ret_from_fork+0x4b/0x80 [ 304.863124][ C1] ? __pfx_kthread+0x10/0x10 [ 304.867765][ C1] ret_from_fork_asm+0x1a/0x30 [ 304.872555][ C1] [ 304.875610][ C1] DEBUG: holding rtnl_mutex for 1337 jiffies. [ 304.881689][ C1] task:kworker/u8:9 state:D stack:21968 pid:2863 tgid:2863 ppid:2 flags:0x00004000 [ 304.891907][ C1] Workqueue: netns cleanup_net [ 304.896745][ C1] Call Trace: [ 304.900025][ C1] [ 304.902953][ C1] __schedule+0x17e8/0x4a20 [ 304.907494][ C1] ? __pfx___schedule+0x10/0x10 [ 304.912423][ C1] ? __pfx_lock_release+0x10/0x10 [ 304.917496][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 304.923442][ C1] ? kthread_data+0x52/0xd0 [ 304.928045][ C1] ? wq_worker_sleeping+0x66/0x240 [ 304.933261][ C1] ? schedule+0x90/0x320 [ 304.937533][ C1] schedule+0x14b/0x320 [ 304.941688][ C1] synchronize_rcu_expedited+0x684/0x830 [ 304.947373][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 304.953529][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 304.958876][ C1] ? __pfx___might_resched+0x10/0x10 [ 304.964181][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 304.970208][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 304.976323][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 304.982671][ C1] synchronize_rcu+0x11b/0x360 [ 304.987479][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 304.992790][ C1] lockdep_unregister_key+0x4b7/0x540 [ 304.998635][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 305.004577][ C1] ? rcu_is_watching+0x15/0xb0 [ 305.009369][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 305.014028][ C1] __qdisc_destroy+0x165/0x410 [ 305.018968][ C1] dev_shutdown+0x357/0x440 [ 305.023485][ C1] unregister_netdevice_many_notify+0x977/0x16b0 [ 305.030050][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 305.036921][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 305.042888][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 305.049273][ C1] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 305.055649][ C1] default_device_exit_batch+0xa0f/0xa90 [ 305.061308][ C1] ? __pfx___might_resched+0x10/0x10 [ 305.066651][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 305.072867][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 305.078237][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 305.084472][ C1] cleanup_net+0x89d/0xcc0 [ 305.088963][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 305.094041][ C1] ? process_scheduled_works+0x945/0x1830 [ 305.100123][ C1] process_scheduled_works+0xa2c/0x1830 [ 305.105750][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 305.111728][ C1] ? assign_work+0x364/0x3d0 [ 305.116367][ C1] worker_thread+0x86d/0xd50 [ 305.120993][ C1] ? __kthread_parkme+0x169/0x1d0 [ 305.126057][ C1] ? __pfx_worker_thread+0x10/0x10 [ 305.131158][ C1] kthread+0x2f0/0x390 [ 305.135276][ C1] ? __pfx_worker_thread+0x10/0x10 [ 305.140660][ C1] ? __pfx_kthread+0x10/0x10 [ 305.145316][ C1] ret_from_fork+0x4b/0x80 [ 305.149767][ C1] ? __pfx_kthread+0x10/0x10 [ 305.154524][ C1] ret_from_fork_asm+0x1a/0x30 [ 305.159315][ C1] [ 305.162328][ C1] DEBUG: waiting rtnl_mutex for 1367 jiffies. [ 305.168454][ C1] task:syz-executor.4 state:D stack:21024 pid:7543 tgid:7543 ppid:7533 flags:0x00004002 [ 305.178885][ C1] Call Trace: [ 305.182180][ C1] [ 305.185273][ C1] __schedule+0x17e8/0x4a20 [ 305.189833][ C1] ? __pfx___schedule+0x10/0x10 [ 305.194761][ C1] ? __pfx_lock_release+0x10/0x10 [ 305.199856][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 305.205386][ C1] ? schedule+0x90/0x320 [ 305.209675][ C1] schedule+0x14b/0x320 [ 305.213932][ C1] schedule_preempt_disabled+0x13/0x30 [ 305.219485][ C1] __mutex_lock+0x6a4/0xd70 [ 305.224013][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 305.229441][ C1] ? __mutex_lock+0x527/0xd70 [ 305.234161][ C1] ? nsim_destroy+0x71/0x5c0 [ 305.238954][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 305.244007][ C1] ? __pfx_mntput_no_expire+0x10/0x10 [ 305.250218][ C1] ? rtnl_lock+0xe7/0x130 [ 305.254635][ C1] nsim_destroy+0x71/0x5c0 [ 305.259113][ C1] __nsim_dev_port_del+0x14b/0x1b0 [ 305.264262][ C1] nsim_dev_reload_destroy+0x28a/0x490 [ 305.269878][ C1] ? __pfx_nsim_bus_remove+0x10/0x10 [ 305.277421][ C1] nsim_drv_remove+0x58/0x160 [ 305.282102][ C1] device_release_driver_internal+0x4a9/0x7c0 [ 305.288294][ C1] bus_remove_device+0x34f/0x420 [ 305.293327][ C1] device_del+0x57a/0x9b0 [ 305.297896][ C1] ? __pfx_device_del+0x10/0x10 [ 305.302981][ C1] device_unregister+0x20/0xc0 [ 305.308654][ C1] del_device_store+0x363/0x480 [ 305.313708][ C1] ? __pfx_del_device_store+0x10/0x10 [ 305.319176][ C1] ? sysfs_kf_write+0x182/0x2a0 [ 305.324053][ C1] ? bus_attr_store+0x4f/0xa0 [ 305.328888][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 305.334124][ C1] kernfs_fop_write_iter+0x3a1/0x500 [ 305.340168][ C1] vfs_write+0xa72/0xc90 [ 305.345367][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 305.351891][ C1] ? __pfx_vfs_write+0x10/0x10 [ 305.357587][ C1] ksys_write+0x1a0/0x2c0 [ 305.362196][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 305.367623][ C1] ? __pfx_ksys_write+0x10/0x10 [ 305.373021][ C1] ? rcu_is_watching+0x15/0xb0 [ 305.377879][ C1] ? trace_sys_enter+0x1f/0xd0 [ 305.382766][ C1] do_syscall_64+0xf3/0x230 [ 305.387514][ C1] ? clear_bhb_loop+0x35/0x90 [ 305.393345][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.399343][ C1] RIP: 0033:0x7f176b27bdef [ 305.403780][ C1] RSP: 002b:00007ffc6dc54000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 305.412303][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f176b27bdef [ 305.420340][ C1] RDX: 0000000000000001 RSI: 00007ffc6dc54050 RDI: 0000000000000005 [ 305.428479][ C1] RBP: 00007f176b2da33a R08: 0000000000000000 R09: 00007ffc6dc53e57 [ 305.436721][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 305.444862][ C1] R13: 00007ffc6dc54050 R14: 00007f176bee4620 R15: 0000000000000003 [ 305.453145][ C1] [ 305.456241][ C1] DEBUG: waiting rtnl_mutex for 1080 jiffies. [ 305.462315][ C1] task:syz-executor.3 state:D stack:26800 pid:7696 tgid:7695 ppid:7350 flags:0x00000006 [ 305.472554][ C1] Call Trace: [ 305.475882][ C1] [ 305.479277][ C1] __schedule+0x17e8/0x4a20 [ 305.483879][ C1] ? __pfx___schedule+0x10/0x10 [ 305.488988][ C1] ? __pfx_lock_release+0x10/0x10 [ 305.494039][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 305.499781][ C1] ? schedule+0x90/0x320 [ 305.504061][ C1] schedule+0x14b/0x320 [ 305.508317][ C1] schedule_preempt_disabled+0x13/0x30 [ 305.513989][ C1] __mutex_lock+0x6a4/0xd70 [ 305.518777][ C1] ? __mutex_lock+0x527/0xd70 [ 305.523483][ C1] ? rtnetlink_rcv_msg+0x839/0x1170 [ 305.528725][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 305.533750][ C1] ? rtnl_lock+0xe7/0x130 [ 305.538138][ C1] rtnetlink_rcv_msg+0x839/0x1170 [ 305.543185][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 305.548497][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 305.554032][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 305.560036][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 305.566414][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 305.571819][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 305.577082][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 305.582466][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 305.587808][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 305.593018][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 305.598811][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 305.603936][ C1] ? __dev_queue_xmit+0x16c9/0x3d30 [ 305.609171][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 305.614321][ C1] ? ref_tracker_free+0x643/0x7e0 [ 305.619388][ C1] netlink_rcv_skb+0x1e3/0x430 [ 305.624169][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 305.629651][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 305.635050][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 305.640248][ C1] netlink_unicast+0x7f0/0x990 [ 305.645492][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 305.650792][ C1] ? __virt_addr_valid+0x183/0x520 [ 305.655953][ C1] ? __check_object_size+0x49c/0x900 [ 305.661254][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 305.666622][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 305.671519][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.676899][ C1] ? __import_iovec+0x536/0x820 [ 305.681868][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 305.686863][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 305.692167][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 305.697714][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.703032][ C1] __sock_sendmsg+0x221/0x270 [ 305.707799][ C1] ____sys_sendmsg+0x525/0x7d0 [ 305.712660][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.718331][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 305.722935][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 305.728148][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 305.734538][ C1] ? do_syscall_64+0x100/0x230 [ 305.739311][ C1] ? do_syscall_64+0xb6/0x230 [ 305.743978][ C1] do_syscall_64+0xf3/0x230 [ 305.748500][ C1] ? clear_bhb_loop+0x35/0x90 [ 305.753173][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.759178][ C1] RIP: 0033:0x7f281d87d0a9 [ 305.763581][ C1] RSP: 002b:00007f281e6ab0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.772015][ C1] RAX: ffffffffffffffda RBX: 00007f281d9b3f80 RCX: 00007f281d87d0a9 [ 305.780013][ C1] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 305.788180][ C1] RBP: 00007f281d8ec074 R08: 0000000000000000 R09: 0000000000000000 [ 305.796240][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.804258][ C1] R13: 000000000000000b R14: 00007f281d9b3f80 R15: 00007ffd98a51708 [ 305.812572][ C1] [ 305.815656][ C1] [ 305.815656][ C1] Showing all locks held in the system: [ 305.824518][ C1] 5 locks held by kworker/u8:9/2863: [ 305.829832][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 305.840822][ C1] #1: ffffc90009dd7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 305.851457][ C1] #2: ffffffff8f5eb450 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 305.860919][ C1] #3: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 305.870993][ C1] #4: ffffffff8e33ab78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 305.881919][ C1] 3 locks held by kworker/u8:11/2920: [ 305.887351][ C1] #0: ffff88802a2a8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 305.899071][ C1] #1: ffffc9000a007d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 305.912360][ C1] #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 305.921932][ C1] 2 locks held by getty/4845: [ 305.926773][ C1] #0: ffff88802a4570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 305.936618][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 305.946843][ C1] 3 locks held by kworker/0:3/5125: [ 305.952046][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 305.963064][ C1] #1: ffffc90003dd7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 305.974187][ C1] #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 305.983326][ C1] 5 locks held by syz-executor.0/6439: [ 305.988844][ C1] #0: ffff8880285fe0c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x310 [ 305.998177][ C1] #1: ffff88805c35c180 (&type->i_mutex_dir_key#16){.+.+}-{3:3}, at: iterate_dir+0x215/0x810 [ 306.008429][ C1] #2: ffffc90000a18c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 306.018716][ C1] #3: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 306.028548][ C1] #4: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 306.038443][ C1] 2 locks held by syz-executor.3/7039: [ 306.043910][ C1] #0: ffff88807aa06c70 (&fc->uapi_mutex){+.+.}-{3:3}, at: __se_sys_fsconfig+0x9a7/0xf80 [ 306.053776][ C1] #1: ffff888072f2c0e0 (&type->s_umount_key#58){+.+.}-{3:3}, at: __se_sys_fsconfig+0xb64/0xf80 [ 306.064332][ C1] 1 lock held by syz-executor.2/7496: [ 306.069719][ C1] #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 306.079293][ C1] 7 locks held by syz-executor.4/7543: [ 306.084819][ C1] #0: ffff88802f57c420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 306.093772][ C1] #1: ffff88807aec3888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 306.103846][ C1] #2: ffff888022b55e18 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 306.115229][ C1] #3: ffffffff8ef04068 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 306.125582][ C1] #4: ffff88805bb490e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 306.136276][ C1] #5: ffff88802c173250 (&devlink->lock_key#12){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 306.146632][ C1] #6: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 306.155570][ C1] 1 lock held by syz-executor.1/7593: [ 306.160953][ C1] #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 306.170536][ C1] 1 lock held by syz-executor.3/7696: [ 306.176008][ C1] #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 306.185728][ C1] 1 lock held by syz-executor.0/7718: [ 306.191118][ C1] #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: tcx_link_attach+0xed/0x950 [ 306.200460][ C1] 1 lock held by syz-executor.0/7719: [ 306.205873][ C1] #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: tcx_prog_detach+0x10f/0x6c0 [ 306.215224][ C1] [ 306.217567][ C1] ============================================= [ 306.217567][ C1] [ 307.515210][ T7496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.714882][ T7496] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.756640][ T5307] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.763837][ T5307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.856742][ T5307] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.864068][ T5307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.231346][ T7593] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 308.308792][ T7593] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 308.378154][ T7737] netlink: 'syz-executor.3': attribute type 49 has an invalid length. [ 308.677786][ T7593] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 308.864584][ T7593] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 308.911964][ T7496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.210036][ T7543] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 309.321687][ T7543] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 309.398251][ T7543] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 309.465111][ T7543] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 309.653818][ T7496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.039686][ T29] audit: type=1800 audit(1719096362.336:2990): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1950 res=0 errno=0 [ 310.146930][ T7496] veth0_vlan: entered promiscuous mode [ 310.215415][ T7593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.266481][ T7593] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.345459][ T7496] veth1_vlan: entered promiscuous mode [ 310.373917][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.381210][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.442655][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.450470][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.271875][ T7543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.539503][ T7543] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.707983][ T5307] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.715234][ T5307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.845371][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.852594][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.989723][ T7496] veth0_macvtap: entered promiscuous mode [ 312.055258][ T7496] veth1_macvtap: entered promiscuous mode [ 312.159553][ T29] audit: type=1800 audit(1719096364.456:2991): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 312.180338][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.315792][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.356725][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.375551][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.397371][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.411766][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.425845][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.439480][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.458728][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.480891][ T7496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.595144][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.624701][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.641385][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.668806][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.702362][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.730089][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.753162][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.779485][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.813834][ T7496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.979609][ T7496] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.993267][ T7496] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.002997][ T7496] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.015702][ T7496] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.099718][ T7593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.163598][ T7543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.327144][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.342663][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.538396][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.551496][ T7593] veth0_vlan: entered promiscuous mode [ 313.565789][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.622993][ T7593] veth1_vlan: entered promiscuous mode [ 313.982454][ T7593] veth0_macvtap: entered promiscuous mode [ 314.049039][ T7593] veth1_macvtap: entered promiscuous mode [ 314.100589][ T7795] loop2: detected capacity change from 0 to 64 [ 314.284104][ T7593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.312020][ T7593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.343203][ T7593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.373705][ T7593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.393018][ T7593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.428678][ T7593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.450972][ T7593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.500550][ T7593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.542424][ T7593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.577172][ T7593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.640736][ T7593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.684208][ T7593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.854620][ T7800] loop2: detected capacity change from 0 to 32768 [ 314.878853][ T7800] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7800) [ 314.902521][ T7800] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 314.912771][ T7800] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 314.921451][ T7800] BTRFS info (device loop2): using free-space-tree [ 314.930387][ T7593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.987493][ T7593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.040537][ T7593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.087553][ T7593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.134438][ T7593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.160463][ T7593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.185451][ T7593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.214416][ T7593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.232653][ T7593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.256458][ T7593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.269559][ T7543] veth0_vlan: entered promiscuous mode [ 315.735322][ T7593] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.753782][ T7593] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.794376][ T7593] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.819068][ T7593] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.850746][ T7496] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 316.017023][ T7543] veth1_vlan: entered promiscuous mode [ 316.573340][ T7543] veth0_macvtap: entered promiscuous mode [ 316.586753][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.604588][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.636368][ T7543] veth1_macvtap: entered promiscuous mode [ 316.691174][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.700595][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.773440][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.786257][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.798861][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.809630][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.820155][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.830962][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.841109][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.853304][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.864608][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.875676][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.886012][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.896818][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.919801][ T7543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.961197][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.013704][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.025712][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.047921][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.058364][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.069172][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.079304][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.092029][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.103048][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.113800][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.123964][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.150954][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.170959][ T7543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.281741][ T7543] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.322345][ T7543] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.343578][ T7543] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.362003][ T7543] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.431911][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.438533][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.121641][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.164439][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.228306][ T2894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.248033][ T2894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.506625][ T5300] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 319.727819][ T5300] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 319.768487][ T5300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.818081][ T5300] usb 2-1: config 0 descriptor?? [ 319.846711][ T5300] gspca_main: spca508-2.14.0 probing 8086:0110 [ 319.872617][ T7839] loop2: detected capacity change from 0 to 32768 [ 319.991656][ T29] audit: type=1800 audit(1719096372.276:2992): pid=7839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=3 res=0 errno=0 [ 320.017415][ T7851] input: syz1 as /devices/virtual/input/input10 [ 320.073092][ T5300] gspca_spca508: reg_read err -32 [ 320.077097][ T7851] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 320.597808][ T5300] gspca_spca508: reg_read err -110 [ 320.633915][ T5300] gspca_spca508: reg_read err -32 [ 320.645083][ T5300] gspca_spca508: reg_read err -32 [ 320.654521][ T5300] gspca_spca508: reg_read err -32 [ 320.660829][ T5300] gspca_spca508: reg write: error -32 [ 320.677782][ T5300] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 320.694559][ T5267] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 320.980694][ T7858] loop4: detected capacity change from 0 to 32768 [ 320.996229][ T7858] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7858) [ 321.019722][ T7858] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 321.033166][ T7858] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 321.043182][ T7858] BTRFS info (device loop4): using free-space-tree [ 321.070390][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.086445][ T5267] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 321.098849][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.115354][ T5267] usb 1-1: config 0 descriptor?? [ 321.996917][ T5267] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 322.043250][ T5267] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000B/input/input11 [ 322.223347][ T7543] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 322.304820][ T5267] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 322.507227][ T9] usb 2-1: USB disconnect, device number 13 [ 323.678729][ T29] audit: type=1326 audit(1719096375.976:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281d87d0a9 code=0x7ffc0000 [ 323.903714][ T29] audit: type=1326 audit(1719096375.976:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281d87d0a9 code=0x7ffc0000 [ 323.933852][ T5307] usb 1-1: USB disconnect, device number 8 [ 323.952152][ T7852] delete_channel: no stack [ 324.005743][ T7901] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 324.023074][ T29] audit: type=1326 audit(1719096376.006:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f281d87d0a9 code=0x7ffc0000 [ 324.066327][ T7913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.122213][ T29] audit: type=1326 audit(1719096376.096:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281d87d0a9 code=0x7ffc0000 [ 324.159240][ T7913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.280808][ T29] audit: type=1326 audit(1719096376.096:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281d87d0a9 code=0x7ffc0000 [ 324.311961][ T7919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.380677][ T29] audit: type=1326 audit(1719096376.106:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f281d87ee27 code=0x7ffc0000 [ 324.444491][ T5169] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 324.502423][ T29] audit: type=1326 audit(1719096376.106:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f281d87ed9c code=0x7ffc0000 [ 324.583967][ T29] audit: type=1326 audit(1719096376.106:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f281d87ecd4 code=0x7ffc0000 [ 324.648868][ T5169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.678027][ T5169] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 324.697536][ T29] audit: type=1326 audit(1719096376.136:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f281d87ecd4 code=0x7ffc0000 [ 324.748629][ T5169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.771272][ T7915] syzkaller0: entered promiscuous mode [ 324.797458][ T5169] usb 5-1: config 0 descriptor?? [ 324.802926][ T7915] syzkaller0: entered allmulticast mode [ 325.268844][ T5169] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 325.322373][ T5169] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000C/input/input12 [ 325.471236][ T7902] loop2: detected capacity change from 0 to 32768 [ 325.548508][ T5169] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 326.808817][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 326.810847][ T29] audit: type=1800 audit(1719096379.106:3011): pid=7921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 326.982377][ T7907] delete_channel: no stack [ 326.994030][ T5172] usb 5-1: USB disconnect, device number 12 [ 327.054481][ T7927] input: syz1 as /devices/virtual/input/input13 [ 327.122588][ T7928] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 328.324084][ T5172] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 328.539065][ T5172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 48495, setting to 64 [ 328.581577][ T5172] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 328.613859][ T5172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.653803][ T5172] usb 5-1: Product: syz [ 328.660247][ T5172] usb 5-1: Manufacturer: syz [ 328.692702][ T5172] usb 5-1: SerialNumber: syz [ 328.694158][ T29] audit: type=1326 audit(1719096380.986:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102e07d0a9 code=0x7ffc0000 [ 328.763747][ T5172] usb 5-1: config 0 descriptor?? [ 328.775680][ T29] audit: type=1326 audit(1719096380.986:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102e07d0a9 code=0x7ffc0000 [ 328.815611][ T7931] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 328.830971][ T29] audit: type=1326 audit(1719096381.036:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f102e07d0a9 code=0x7ffc0000 [ 328.836681][ T5172] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 328.931218][ T29] audit: type=1326 audit(1719096381.036:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102e07d0a9 code=0x7ffc0000 [ 328.962783][ T5172] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 329.001134][ T29] audit: type=1326 audit(1719096381.036:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102e07d0a9 code=0x7ffc0000 [ 329.077201][ T5172] usb 5-1: USB disconnect, device number 13 [ 329.114590][ T29] audit: type=1326 audit(1719096381.066:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f102e07d0a9 code=0x7ffc0000 [ 329.118221][ T5172] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 329.177424][ T29] audit: type=1326 audit(1719096381.076:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102e07d0a9 code=0x7ffc0000 [ 329.182138][ T5172] kobil_sct 5-1:0.0: device disconnected [ 329.453093][ T29] audit: type=1326 audit(1719096381.076:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102e07d0a9 code=0x7ffc0000 [ 329.923386][ T29] audit: type=1326 audit(1719096381.196:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f102e07d0a9 code=0x7ffc0000 [ 330.134340][ C1] DEBUG: waiting rtnl_mutex for 528 jiffies. [ 330.140403][ C1] task:kworker/u8:10 state:D stack:19688 pid:2894 tgid:2894 ppid:2 flags:0x00004000 [ 330.150731][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 330.156804][ C1] Call Trace: [ 330.160099][ C1] [ 330.163044][ C1] __schedule+0x17e8/0x4a20 [ 330.167659][ C1] ? __pfx___schedule+0x10/0x10 [ 330.172527][ C1] ? __pfx_lock_release+0x10/0x10 [ 330.177582][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 330.183032][ C1] ? kthread_data+0x52/0xd0 [ 330.187545][ C1] ? schedule+0x90/0x320 [ 330.191778][ C1] ? wq_worker_sleeping+0x66/0x240 [ 330.196904][ C1] ? schedule+0x90/0x320 [ 330.201129][ C1] schedule+0x14b/0x320 [ 330.205325][ C1] schedule_preempt_disabled+0x13/0x30 [ 330.210826][ C1] __mutex_lock+0x6a4/0xd70 [ 330.215794][ C1] ? mark_lock+0x9a/0x360 [ 330.220227][ C1] ? __mutex_lock+0x527/0xd70 [ 330.224963][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 330.230153][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 330.235212][ C1] ? rtnl_lock+0xe7/0x130 [ 330.239543][ C1] addrconf_dad_work+0xd0/0x16f0 [ 330.245375][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 330.250830][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.257226][ C1] ? process_scheduled_works+0x945/0x1830 [ 330.262963][ C1] process_scheduled_works+0xa2c/0x1830 [ 330.268538][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 330.274560][ C1] ? assign_work+0x364/0x3d0 [ 330.279166][ C1] worker_thread+0x86d/0xd50 [ 330.283751][ C1] ? __kthread_parkme+0x169/0x1d0 [ 330.288805][ C1] ? __pfx_worker_thread+0x10/0x10 [ 330.293901][ C1] kthread+0x2f0/0x390 [ 330.298006][ C1] ? __pfx_worker_thread+0x10/0x10 [ 330.303102][ C1] ? __pfx_kthread+0x10/0x10 [ 330.307705][ C1] ret_from_fork+0x4b/0x80 [ 330.312110][ C1] ? __pfx_kthread+0x10/0x10 [ 330.316715][ C1] ret_from_fork_asm+0x1a/0x30 [ 330.321496][ C1] [ 330.324522][ C1] DEBUG: holding rtnl_mutex for 534 jiffies. [ 330.330494][ C1] task:syz-executor.1 state:D stack:24672 pid:7904 tgid:7904 ppid:7593 flags:0x00004006 [ 330.340671][ C1] Call Trace: [ 330.343934][ C1] [ 330.346878][ C1] __schedule+0x17e8/0x4a20 [ 330.351388][ C1] ? __pfx___schedule+0x10/0x10 [ 330.356252][ C1] ? __pfx_lock_release+0x10/0x10 [ 330.361288][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 330.367206][ C1] ? schedule+0x90/0x320 [ 330.371465][ C1] schedule+0x14b/0x320 [ 330.375634][ C1] synchronize_rcu_expedited+0x684/0x830 [ 330.381349][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 330.387535][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 330.392812][ C1] ? __pfx___might_resched+0x10/0x10 [ 330.398116][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 330.404087][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 330.410280][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.416835][ C1] synchronize_rcu+0x11b/0x360 [ 330.421596][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 330.426913][ C1] lockdep_unregister_key+0x4b7/0x540 [ 330.432293][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 330.438220][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 330.443423][ C1] ? __qdisc_destroy+0x150/0x410 [ 330.448385][ C1] ? kfree+0x149/0x360 [ 330.452461][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 330.458030][ C1] __qdisc_destroy+0x165/0x410 [ 330.462794][ C1] dev_shutdown+0x9b/0x440 [ 330.467266][ C1] unregister_netdevice_many_notify+0x977/0x16b0 [ 330.473592][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 330.480383][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 330.486396][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.492730][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 330.498413][ C1] unregister_netdevice_queue+0x303/0x370 [ 330.504176][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 330.510452][ C1] __tun_detach+0x6b6/0x1600 [ 330.515069][ C1] tun_chr_close+0x108/0x1b0 [ 330.519677][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 330.524805][ C1] __fput+0x24a/0x8a0 [ 330.528800][ C1] task_work_run+0x24f/0x310 [ 330.533413][ C1] ? __pfx_task_work_run+0x10/0x10 [ 330.538545][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 330.544261][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 330.549938][ C1] do_syscall_64+0x100/0x230 [ 330.554545][ C1] ? clear_bhb_loop+0x35/0x90 [ 330.559250][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.565177][ C1] RIP: 0033:0x7f8dd507d0a9 [ 330.569591][ C1] RSP: 002b:00007fffd8a50ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 330.578016][ C1] RAX: 0000000000000000 RBX: 00007f8dd51b5980 RCX: 00007f8dd507d0a9 [ 330.586028][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 330.594003][ C1] RBP: 00007f8dd51b5980 R08: 00000000000001a9 R09: 0000000c00000000 [ 330.602015][ C1] R10: 0000001b2df20000 R11: 0000000000000246 R12: 000000000004f477 [ 330.610020][ C1] R13: 00007f8dd51b42cc R14: 0000000000000032 R15: 00007f8dd51b5980 [ 330.618030][ C1] [ 330.621042][ C1] [ 330.621042][ C1] Showing all locks held in the system: [ 330.628804][ C1] 3 locks held by kworker/0:0/8: [ 330.633727][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 330.644714][ C1] #1: ffffc900000d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 330.655695][ C1] #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 330.666175][ C1] 3 locks held by kworker/u8:0/11: [ 330.671315][ C1] 3 locks held by kworker/u8:10/2894: [ 330.676697][ C1] #0: ffff88802a2a8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 330.688289][ C1] #1: ffffc90009957d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 330.701099][ C1] #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 330.710554][ C1] 2 locks held by getty/4845: [ 330.715231][ C1] #0: ffff88802a4570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 330.724992][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 330.735108][ C1] 3 locks held by kworker/0:7/5172: [ 330.740283][ C1] 3 locks held by kworker/1:6/5267: [ 330.745588][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 330.756562][ C1] #1: ffffc90003b57d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 330.767538][ C1] #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 330.776526][ C1] 2 locks held by syz-executor.0/6439: [ 330.781971][ C1] 2 locks held by syz-executor.3/7039: [ 330.787429][ C1] #0: ffff88807aa06c70 (&fc->uapi_mutex){+.+.}-{3:3}, at: __se_sys_fsconfig+0x9a7/0xf80 [ 330.797283][ C1] #1: ffff888072f2c0e0 (&type->s_umount_key#58){+.+.}-{3:3}, at: __se_sys_fsconfig+0xb64/0xf80 [ 330.807746][ C1] 2 locks held by syz-executor.1/7904: [ 330.813186][ C1] #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 330.822169][ C1] #1: ffffffff8e33ab78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 330.833078][ C1] 1 lock held by syz-executor.2/7939: [ 330.838464][ C1] #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 330.847968][ C1] 1 lock held by syz-executor.0/7943: [ 330.853320][ C1] 2 locks held by syz-executor.0/7945: [ 330.858781][ C1] #0: ffffffff8f661470 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 330.867012][ C1] #1: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 330.876319][ C1] 2 locks held by syz-executor.0/7946: [ 330.881760][ C1] #0: ffffffff8f661470 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 330.889963][ C1] #1: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 330.899249][ C1] 3 locks held by syz-executor.0/7950: [ 330.904746][ C1] 2 locks held by syz-executor.4/7947: [ 330.910187][ C1] #0: ffff88805c180e08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 330.920476][ C1] #1: ffffffff8e33ab78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 330.931464][ C1] 3 locks held by syz-executor.4/7948: [ 330.936929][ C1] #0: ffffc90000a18c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 330.947028][ C1] #1: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 330.956800][ C1] #2: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 330.966651][ C1] [ 330.968955][ C1] ============================================= [ 330.968955][ C1] [ 330.997881][ T7950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.155314][ T7955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.282341][ T7952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.054932][ C1] DEBUG: waiting rtnl_mutex for 720 jiffies. [ 332.061065][ C1] task:kworker/u8:10 state:D stack:19688 pid:2894 tgid:2894 ppid:2 flags:0x00004000 [ 332.071700][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 332.077721][ C1] Call Trace: [ 332.080986][ C1] [ 332.083902][ C1] __schedule+0x17e8/0x4a20 [ 332.088456][ C1] ? __pfx___schedule+0x10/0x10 [ 332.093317][ C1] ? __pfx_lock_release+0x10/0x10 [ 332.098359][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 332.103824][ C1] ? kthread_data+0x52/0xd0 [ 332.108354][ C1] ? schedule+0x90/0x320 [ 332.112671][ C1] ? wq_worker_sleeping+0x66/0x240 [ 332.117796][ C1] ? schedule+0x90/0x320 [ 332.122023][ C1] schedule+0x14b/0x320 [ 332.126201][ C1] schedule_preempt_disabled+0x13/0x30 [ 332.131645][ C1] __mutex_lock+0x6a4/0xd70 [ 332.136189][ C1] ? mark_lock+0x9a/0x360 [ 332.140529][ C1] ? __mutex_lock+0x527/0xd70 [ 332.145248][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 332.150378][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 332.155431][ C1] ? rtnl_lock+0xe7/0x130 [ 332.159753][ C1] addrconf_dad_work+0xd0/0x16f0 [ 332.164716][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 332.170162][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.176507][ C1] ? process_scheduled_works+0x945/0x1830 [ 332.182213][ C1] process_scheduled_works+0xa2c/0x1830 [ 332.187783][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.193841][ C1] ? assign_work+0x364/0x3d0 [ 332.198445][ C1] worker_thread+0x86d/0xd50 [ 332.203036][ C1] ? __kthread_parkme+0x169/0x1d0 [ 332.208171][ C1] ? __pfx_worker_thread+0x10/0x10 [ 332.213291][ C1] kthread+0x2f0/0x390 [ 332.217416][ C1] ? __pfx_worker_thread+0x10/0x10 [ 332.222526][ C1] ? __pfx_kthread+0x10/0x10 [ 332.227150][ C1] ret_from_fork+0x4b/0x80 [ 332.231613][ C1] ? __pfx_kthread+0x10/0x10 [ 332.236228][ C1] ret_from_fork_asm+0x1a/0x30 [ 332.241034][ C1] [ 332.244067][ C1] DEBUG: holding rtnl_mutex for 725 jiffies. [ 332.250137][ C1] task:syz-executor.1 state:R running task stack:24672 pid:7904 tgid:7904 ppid:7593 flags:0x00004006 [ 332.261905][ C1] Call Trace: [ 332.265282][ C1] [ 332.268220][ C1] __schedule+0x17e8/0x4a20 [ 332.272790][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.279159][ C1] ? __pfx___schedule+0x10/0x10 [ 332.284020][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 332.289250][ C1] ? mark_lock+0x9a/0x360 [ 332.293596][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 332.298748][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 332.304523][ C1] irqentry_exit+0x5e/0x90 [ 332.308957][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 332.314440][ C1] RIP: 0010:synchronize_rcu+0x0/0x360 [ 332.319811][ C1] Code: e1 07 80 c1 03 38 c1 0f 8c 97 fe ff ff 4c 89 f7 e8 a5 15 80 00 e9 8a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 332.339714][ C1] RSP: 0018:ffffc90002f4f8d8 EFLAGS: 00000206 [ 332.345847][ C1] RAX: dffffc0000000000 RBX: 1ffff920005e9f24 RCX: ffffffff947dc803 [ 332.353823][ C1] RDX: 0000000000000001 RSI: ffffffff8bcad580 RDI: ffffffff8c206c80 [ 332.361838][ C1] RBP: ffffc90002f4f9b8 R08: ffffffff947d2117 R09: 1ffffffff28fa422 [ 332.369830][ C1] R10: dffffc0000000000 R11: fffffbfff28fa423 R12: ffffffff947cfe08 [ 332.377830][ C1] R13: 1ffff920005e9f20 R14: 0000000000000202 R15: ffffc90002f4f920 [ 332.385825][ C1] lockdep_unregister_key+0x4b7/0x540 [ 332.391193][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 332.397131][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 332.402332][ C1] ? __qdisc_destroy+0x150/0x410 [ 332.407323][ C1] ? kfree+0x149/0x360 [ 332.411437][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 332.417056][ C1] __qdisc_destroy+0x165/0x410 [ 332.421820][ C1] dev_shutdown+0x9b/0x440 [ 332.426269][ C1] unregister_netdevice_many_notify+0x977/0x16b0 [ 332.432592][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 332.439374][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 332.445385][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.451703][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 332.457015][ C1] unregister_netdevice_queue+0x303/0x370 [ 332.462752][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 332.469581][ C1] __tun_detach+0x6b6/0x1600 [ 332.474176][ C1] tun_chr_close+0x108/0x1b0 [ 332.478809][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 332.483942][ C1] __fput+0x24a/0x8a0 [ 332.488019][ C1] task_work_run+0x24f/0x310 [ 332.492627][ C1] ? __pfx_task_work_run+0x10/0x10 [ 332.497764][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 332.503594][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 332.509291][ C1] do_syscall_64+0x100/0x230 [ 332.513959][ C1] ? clear_bhb_loop+0x35/0x90 [ 332.518668][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.524577][ C1] RIP: 0033:0x7f8dd507d0a9 [ 332.529000][ C1] RSP: 002b:00007fffd8a50ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 332.537455][ C1] RAX: 0000000000000000 RBX: 00007f8dd51b5980 RCX: 00007f8dd507d0a9 [ 332.545506][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 332.553503][ C1] RBP: 00007f8dd51b5980 R08: 00000000000001a9 R09: 0000000c00000000 [ 332.561502][ C1] R10: 0000001b2df20000 R11: 0000000000000246 R12: 000000000004f477 [ 332.569496][ C1] R13: 00007f8dd51b42cc R14: 0000000000000032 R15: 00007f8dd51b5980 [ 332.577496][ C1] [ 332.580514][ C1] DEBUG: waiting rtnl_mutex for 668 jiffies. [ 332.586522][ C1] task:kworker/1:6 state:D stack:20568 pid:5267 tgid:5267 ppid:2 flags:0x00004000 [ 332.596779][ C1] Workqueue: events linkwatch_event [ 332.602004][ C1] Call Trace: [ 332.605321][ C1] [ 332.608272][ C1] __schedule+0x17e8/0x4a20 [ 332.612804][ C1] ? __pfx___schedule+0x10/0x10 [ 332.617723][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 332.623725][ C1] ? __pfx_lock_release+0x10/0x10 [ 332.628805][ C1] ? kick_pool+0x45c/0x620 [ 332.633217][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.638429][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 332.643617][ C1] ? schedule+0x90/0x320 [ 332.647878][ C1] schedule+0x14b/0x320 [ 332.652035][ C1] schedule_preempt_disabled+0x13/0x30 [ 332.657510][ C1] __mutex_lock+0x6a4/0xd70 [ 332.662026][ C1] ? __mutex_lock+0x527/0xd70 [ 332.666760][ C1] ? linkwatch_event+0xe/0x60 [ 332.671465][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 332.676536][ C1] ? process_scheduled_works+0x945/0x1830 [ 332.682281][ C1] ? rtnl_lock+0xe7/0x130 [ 332.686661][ C1] ? process_scheduled_works+0x945/0x1830 [ 332.692399][ C1] linkwatch_event+0xe/0x60 [ 332.696939][ C1] process_scheduled_works+0xa2c/0x1830 [ 332.702496][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.708507][ C1] ? assign_work+0x364/0x3d0 [ 332.713089][ C1] worker_thread+0x86d/0xd50 [ 332.717715][ C1] ? __kthread_parkme+0x169/0x1d0 [ 332.722730][ C1] ? __pfx_worker_thread+0x10/0x10 [ 332.727951][ C1] kthread+0x2f0/0x390 [ 332.732025][ C1] ? __pfx_worker_thread+0x10/0x10 [ 332.737156][ C1] ? __pfx_kthread+0x10/0x10 [ 332.741735][ C1] ret_from_fork+0x4b/0x80 [ 332.746198][ C1] ? __pfx_kthread+0x10/0x10 [ 332.750807][ C1] ret_from_fork_asm+0x1a/0x30 [ 332.755615][ C1] [ 332.758634][ C1] DEBUG: waiting rtnl_mutex for 508 jiffies. [ 332.764972][ C1] task:kworker/0:0 state:D stack:21144 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 332.775169][ C1] Workqueue: events switchdev_deferred_process_work [ 332.781758][ C1] Call Trace: [ 332.785110][ C1] [ 332.788070][ C1] __schedule+0x17e8/0x4a20 [ 332.792636][ C1] ? __pfx___schedule+0x10/0x10 [ 332.797555][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 332.803563][ C1] ? __pfx_lock_release+0x10/0x10 [ 332.808647][ C1] ? kick_pool+0x45c/0x620 [ 332.813075][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.818321][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 332.823549][ C1] ? schedule+0x90/0x320 [ 332.827962][ C1] schedule+0x14b/0x320 [ 332.832130][ C1] schedule_preempt_disabled+0x13/0x30 [ 332.837623][ C1] __mutex_lock+0x6a4/0xd70 [ 332.842125][ C1] ? __mutex_lock+0x527/0xd70 [ 332.847000][ C1] ? switchdev_deferred_process_work+0xe/0x20 [ 332.853057][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 332.858159][ C1] ? process_scheduled_works+0x945/0x1830 [ 332.863900][ C1] ? rtnl_lock+0xe7/0x130 [ 332.868291][ C1] ? process_scheduled_works+0x945/0x1830 [ 332.874019][ C1] switchdev_deferred_process_work+0xe/0x20 [ 332.879970][ C1] process_scheduled_works+0xa2c/0x1830 [ 332.885568][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.891984][ C1] ? assign_work+0x364/0x3d0 [ 332.896603][ C1] worker_thread+0x86d/0xd50 [ 332.901212][ C1] ? __kthread_parkme+0x169/0x1d0 [ 332.906281][ C1] ? __pfx_worker_thread+0x10/0x10 [ 332.911472][ C1] kthread+0x2f0/0x390 [ 332.915560][ C1] ? __pfx_worker_thread+0x10/0x10 [ 332.920663][ C1] ? __pfx_kthread+0x10/0x10 [ 332.925281][ C1] ret_from_fork+0x4b/0x80 [ 332.929708][ C1] ? __pfx_kthread+0x10/0x10 [ 332.934331][ C1] ret_from_fork_asm+0x1a/0x30 [ 332.939129][ C1] [ 332.942146][ C1] [ 332.942146][ C1] Showing all locks held in the system: [ 332.950068][ C1] 3 locks held by kworker/0:0/8: [ 332.955016][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 332.966003][ C1] #1: ffffc900000d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 332.977377][ C1] #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 332.987787][ C1] 3 locks held by kworker/u8:10/2894: [ 332.993138][ C1] #0: ffff88802a2a8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 333.004744][ C1] #1: ffffc90009957d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 333.017574][ C1] #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 333.027060][ C1] 2 locks held by getty/4845: [ 333.031894][ C1] #0: ffff88802a4570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 333.041769][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 333.051890][ C1] 3 locks held by kworker/1:6/5267: [ 333.057100][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 333.068086][ C1] #1: ffffc90003b57d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 333.079070][ C1] #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 333.088058][ C1] 5 locks held by syz-executor.0/6439: [ 333.093498][ C1] #0: ffff8880285fe0c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x310 [ 333.102778][ C1] #1: ffff88805c35c180 (&type->i_mutex_dir_key#16){.+.+}-{3:3}, at: iterate_dir+0x215/0x810 [ 333.113029][ C1] #2: ffffc90000a18c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 333.123177][ C1] #3: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 333.133027][ C1] #4: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 333.142899][ C1] 2 locks held by syz-executor.3/7039: [ 333.148538][ C1] #0: ffff88807aa06c70 (&fc->uapi_mutex){+.+.}-{3:3}, at: __se_sys_fsconfig+0x9a7/0xf80 [ 333.158390][ C1] #1: ffff888072f2c0e0 (&type->s_umount_key#58){+.+.}-{3:3}, at: __se_sys_fsconfig+0xb64/0xf80 [ 333.168969][ C1] 1 lock held by syz-executor.1/7904: [ 333.174450][ C1] 1 lock held by syz-executor.2/7939: [ 333.179889][ C1] #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 333.189520][ C1] 1 lock held by syz-executor.0/7943: [ 333.194987][ C1] 2 locks held by syz-executor.0/7945: [ 333.200435][ C1] #0: ffffffff8f661470 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 333.208644][ C1] #1: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 333.217921][ C1] 2 locks held by syz-executor.0/7946: [ 333.223370][ C1] #0: ffffffff8f661470 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 333.231597][ C1] #1: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 333.240852][ C1] 2 locks held by syz-executor.4/7956: [ 333.246341][ C1] 2 locks held by syz-executor.3/7965: [ 333.251801][ C1] [ 333.254109][ C1] ============================================= [ 333.254109][ C1] [ 333.872030][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 333.872048][ T29] audit: type=1800 audit(1719096386.166:3038): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 333.945405][ T5170] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 333.956149][ T7970] input: syz1 as /devices/virtual/input/input14 [ 334.003036][ T7970] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 334.161116][ T5170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.196045][ T5170] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 334.210411][ T5170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.233595][ T5170] usb 5-1: config 0 descriptor?? [ 334.294923][ C1] DEBUG: waiting rtnl_mutex for 944 jiffies. [ 334.301034][ C1] task:kworker/u8:10 state:D stack:19688 pid:2894 tgid:2894 ppid:2 flags:0x00004000 [ 334.311346][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 334.317640][ C1] Call Trace: [ 334.320918][ C1] [ 334.323846][ C1] __schedule+0x17e8/0x4a20 [ 334.328513][ C1] ? __pfx___schedule+0x10/0x10 [ 334.333374][ C1] ? __pfx_lock_release+0x10/0x10 [ 334.338422][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 334.344370][ C1] ? kthread_data+0x52/0xd0 [ 334.348927][ C1] ? schedule+0x90/0x320 [ 334.353195][ C1] ? wq_worker_sleeping+0x66/0x240 [ 334.358375][ C1] ? schedule+0x90/0x320 [ 334.362719][ C1] schedule+0x14b/0x320 [ 334.366912][ C1] schedule_preempt_disabled+0x13/0x30 [ 334.372370][ C1] __mutex_lock+0x6a4/0xd70 [ 334.376934][ C1] ? mark_lock+0x9a/0x360 [ 334.381275][ C1] ? __mutex_lock+0x527/0xd70 [ 334.385986][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 334.391106][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 334.396158][ C1] ? rtnl_lock+0xe7/0x130 [ 334.400488][ C1] addrconf_dad_work+0xd0/0x16f0 [ 334.405456][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 334.410928][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.417322][ C1] ? process_scheduled_works+0x945/0x1830 [ 334.423066][ C1] process_scheduled_works+0xa2c/0x1830 [ 334.428670][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 334.434709][ C1] ? assign_work+0x364/0x3d0 [ 334.439301][ C1] worker_thread+0x86d/0xd50 [ 334.443900][ C1] ? __kthread_parkme+0x169/0x1d0 [ 334.449040][ C1] ? __pfx_worker_thread+0x10/0x10 [ 334.454192][ C1] kthread+0x2f0/0x390 [ 334.458410][ C1] ? __pfx_worker_thread+0x10/0x10 [ 334.463641][ C1] ? __pfx_kthread+0x10/0x10 [ 334.468652][ C1] ret_from_fork+0x4b/0x80 [ 334.473179][ C1] ? __pfx_kthread+0x10/0x10 [ 334.477884][ C1] ret_from_fork_asm+0x1a/0x30 [ 334.482722][ C1] [ 334.485814][ C1] DEBUG: holding rtnl_mutex for 950 jiffies. [ 334.491853][ C1] task:syz-executor.1 state:D stack:24672 pid:7904 tgid:7904 ppid:7593 flags:0x00004006 [ 334.502192][ C1] Call Trace: [ 334.505537][ C1] [ 334.508543][ C1] __schedule+0x17e8/0x4a20 [ 334.513136][ C1] ? __pfx___schedule+0x10/0x10 [ 334.518110][ C1] ? __pfx_lock_release+0x10/0x10 [ 334.523236][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 334.529238][ C1] ? schedule+0x90/0x320 [ 334.533588][ C1] schedule+0x14b/0x320 [ 334.537832][ C1] synchronize_rcu_expedited+0x684/0x830 [ 334.544016][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 334.550372][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 334.555792][ C1] ? __pfx___might_resched+0x10/0x10 [ 334.561162][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.567233][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 334.573357][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.579781][ C1] synchronize_rcu+0x11b/0x360 [ 334.584685][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 334.590141][ C1] lockdep_unregister_key+0x4b7/0x540 [ 334.595632][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 334.601639][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 334.606925][ C1] ? __qdisc_destroy+0x150/0x410 [ 334.611982][ C1] ? kfree+0x149/0x360 [ 334.616145][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 334.621799][ C1] __qdisc_destroy+0x165/0x410 [ 334.626652][ C1] dev_shutdown+0x9b/0x440 [ 334.631143][ C1] unregister_netdevice_many_notify+0x977/0x16b0 [ 334.637612][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 334.644496][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.650538][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.656961][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 334.662393][ C1] unregister_netdevice_queue+0x303/0x370 [ 334.668651][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 334.675042][ C1] __tun_detach+0x6b6/0x1600 [ 334.679712][ C1] tun_chr_close+0x108/0x1b0 [ 334.684445][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 334.689654][ C1] __fput+0x24a/0x8a0 [ 334.693723][ C1] task_work_run+0x24f/0x310 [ 334.698518][ C1] ? __pfx_task_work_run+0x10/0x10 [ 334.703746][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 334.709619][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 334.715395][ C1] do_syscall_64+0x100/0x230 [ 334.720041][ C1] ? clear_bhb_loop+0x35/0x90 [ 334.724806][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.730772][ C1] RIP: 0033:0x7f8dd507d0a9 [ 334.735277][ C1] RSP: 002b:00007fffd8a50ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 334.743755][ C1] RAX: 0000000000000000 RBX: 00007f8dd51b5980 RCX: 00007f8dd507d0a9 [ 334.751797][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 334.759857][ C1] RBP: 00007f8dd51b5980 R08: 00000000000001a9 R09: 0000000c00000000 [ 334.767920][ C1] R10: 0000001b2df20000 R11: 0000000000000246 R12: 000000000004f477 [ 334.775966][ C1] R13: 00007f8dd51b42cc R14: 0000000000000032 R15: 00007f8dd51b5980 [ 334.784004][ C1] [ 334.787101][ C1] DEBUG: waiting rtnl_mutex for 889 jiffies. [ 334.793203][ C1] task:kworker/1:6 state:D stack:20568 pid:5267 tgid:5267 ppid:2 flags:0x00004000 [ 334.803515][ C1] Workqueue: events linkwatch_event [ 334.808947][ C1] Call Trace: [ 334.812265][ C1] [ 334.815262][ C1] __schedule+0x17e8/0x4a20 [ 334.819902][ C1] ? __pfx___schedule+0x10/0x10 [ 334.824892][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.831022][ C1] ? __pfx_lock_release+0x10/0x10 [ 334.836155][ C1] ? kick_pool+0x45c/0x620 [ 334.840679][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.845972][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 334.851308][ C1] ? schedule+0x90/0x320 [ 334.855631][ C1] schedule+0x14b/0x320 [ 334.859853][ C1] schedule_preempt_disabled+0x13/0x30 [ 334.865416][ C1] __mutex_lock+0x6a4/0xd70 [ 334.870044][ C1] ? __mutex_lock+0x527/0xd70 [ 334.874846][ C1] ? linkwatch_event+0xe/0x60 [ 334.879591][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 334.884711][ C1] ? process_scheduled_works+0x945/0x1830 [ 334.890720][ C1] ? rtnl_lock+0xe7/0x130 [ 334.895129][ C1] ? process_scheduled_works+0x945/0x1830 [ 334.901022][ C1] linkwatch_event+0xe/0x60 [ 334.905628][ C1] process_scheduled_works+0xa2c/0x1830 [ 334.911268][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 334.917421][ C1] ? assign_work+0x364/0x3d0 [ 334.922214][ C1] worker_thread+0x86d/0xd50 [ 334.926906][ C1] ? __kthread_parkme+0x169/0x1d0 [ 334.932038][ C1] ? __pfx_worker_thread+0x10/0x10 [ 334.937249][ C1] kthread+0x2f0/0x390 [ 334.941380][ C1] ? __pfx_worker_thread+0x10/0x10 [ 334.946581][ C1] ? __pfx_kthread+0x10/0x10 [ 334.951234][ C1] ret_from_fork+0x4b/0x80 [ 334.955747][ C1] ? __pfx_kthread+0x10/0x10 [ 334.960399][ C1] ret_from_fork_asm+0x1a/0x30 [ 334.965279][ C1] [ 334.968360][ C1] DEBUG: waiting rtnl_mutex for 729 jiffies. [ 334.974421][ C1] task:kworker/0:0 state:D stack:21144 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 334.984724][ C1] Workqueue: events switchdev_deferred_process_work [ 334.991424][ C1] Call Trace: [ 334.994783][ C1] [ 334.997756][ C1] __schedule+0x17e8/0x4a20 [ 335.002338][ C1] ? __pfx___schedule+0x10/0x10 [ 335.007280][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 335.013329][ C1] ? __pfx_lock_release+0x10/0x10 [ 335.018442][ C1] ? kick_pool+0x45c/0x620 [ 335.022916][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.028205][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 335.033471][ C1] ? schedule+0x90/0x320 [ 335.037794][ C1] schedule+0x14b/0x320 [ 335.042097][ C1] schedule_preempt_disabled+0x13/0x30 [ 335.047746][ C1] __mutex_lock+0x6a4/0xd70 [ 335.052378][ C1] ? __mutex_lock+0x527/0xd70 [ 335.057189][ C1] ? switchdev_deferred_process_work+0xe/0x20 [ 335.063440][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 335.068741][ C1] ? process_scheduled_works+0x945/0x1830 [ 335.074690][ C1] ? rtnl_lock+0xe7/0x130 [ 335.079181][ C1] ? process_scheduled_works+0x945/0x1830 [ 335.085011][ C1] switchdev_deferred_process_work+0xe/0x20 [ 335.091014][ C1] process_scheduled_works+0xa2c/0x1830 [ 335.096702][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 335.102792][ C1] ? assign_work+0x364/0x3d0 [ 335.107501][ C1] worker_thread+0x86d/0xd50 [ 335.112175][ C1] ? __kthread_parkme+0x169/0x1d0 [ 335.117399][ C1] ? __pfx_worker_thread+0x10/0x10 [ 335.122750][ C1] kthread+0x2f0/0x390 [ 335.126905][ C1] ? __pfx_worker_thread+0x10/0x10 [ 335.132077][ C1] ? __pfx_kthread+0x10/0x10 [ 335.136780][ C1] ret_from_fork+0x4b/0x80 [ 335.141257][ C1] ? __pfx_kthread+0x10/0x10 [ 335.145933][ C1] ret_from_fork_asm+0x1a/0x30 [ 335.150835][ C1] [ 335.153894][ C1] DEBUG: waiting rtnl_mutex for 661 jiffies. [ 335.159944][ C1] task:syz-executor.2 state:D stack:23800 pid:7939 tgid:7938 ppid:7496 flags:0x00004006 [ 335.170345][ C1] Call Trace: [ 335.173674][ C1] [ 335.176688][ C1] __schedule+0x17e8/0x4a20 [ 335.181335][ C1] ? __pfx___schedule+0x10/0x10 [ 335.186337][ C1] ? __pfx_lock_release+0x10/0x10 [ 335.191468][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 335.197139][ C1] ? schedule+0x90/0x320 [ 335.201504][ C1] schedule+0x14b/0x320 [ 335.205754][ C1] schedule_preempt_disabled+0x13/0x30 [ 335.211326][ C1] __mutex_lock+0x6a4/0xd70 [ 335.215925][ C1] ? __mutex_lock+0x527/0xd70 [ 335.220672][ C1] ? rtnetlink_rcv_msg+0x839/0x1170 [ 335.226052][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 335.231181][ C1] ? rtnl_lock+0xe7/0x130 [ 335.235612][ C1] rtnetlink_rcv_msg+0x839/0x1170 [ 335.240734][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 335.246123][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.251709][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 335.257844][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.264334][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 335.269933][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 335.275250][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 335.280736][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 335.286119][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 335.291287][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 335.297118][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 335.302289][ C1] ? __dev_queue_xmit+0x16c9/0x3d30 [ 335.307602][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 335.312831][ C1] ? ref_tracker_free+0x643/0x7e0 [ 335.317983][ C1] netlink_rcv_skb+0x1e3/0x430 [ 335.322916][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.328453][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.333839][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.339316][ C1] netlink_unicast+0x7f0/0x990 [ 335.344146][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 335.349549][ C1] ? __virt_addr_valid+0x183/0x520 [ 335.354752][ C1] ? __check_object_size+0x49c/0x900 [ 335.360149][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 335.365347][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 335.370780][ C1] ? irqentry_exit+0x63/0x90 [ 335.375463][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.380896][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 335.385907][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 335.391306][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 335.396843][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.402181][ C1] __sock_sendmsg+0x221/0x270 [ 335.406943][ C1] ____sys_sendmsg+0x525/0x7d0 [ 335.411826][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.417319][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 335.422034][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 335.427340][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.433752][ C1] ? do_syscall_64+0x100/0x230 [ 335.438629][ C1] ? do_syscall_64+0xb6/0x230 [ 335.443363][ C1] do_syscall_64+0xf3/0x230 [ 335.448226][ C1] ? clear_bhb_loop+0x35/0x90 [ 335.452961][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.459139][ C1] RIP: 0033:0x7f363f87d0a9 [ 335.463605][ C1] RSP: 002b:00007f363f3ff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.472104][ C1] RAX: ffffffffffffffda RBX: 00007f363f9b3f80 RCX: 00007f363f87d0a9 [ 335.480190][ C1] RDX: 0000000000000000 RSI: 0000000020000d40 RDI: 0000000000000007 [ 335.488302][ C1] RBP: 00007f363f8ec074 R08: 0000000000000000 R09: 0000000000000000 [ 335.496359][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.504418][ C1] R13: 000000000000000b R14: 00007f363f9b3f80 R15: 00007ffd422e0038 [ 335.512463][ C1] [ 335.515552][ C1] DEBUG: waiting rtnl_mutex for 648 jiffies. [ 335.521564][ C1] task:syz-executor.0 state:D stack:26112 pid:7945 tgid:7941 ppid:7399 flags:0x00000006 [ 335.531888][ C1] Call Trace: [ 335.535234][ C1] [ 335.538208][ C1] __schedule+0x17e8/0x4a20 [ 335.543317][ C1] ? __pfx___schedule+0x10/0x10 [ 335.548292][ C1] ? __pfx_lock_release+0x10/0x10 [ 335.553404][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 335.559050][ C1] ? schedule+0x90/0x320 [ 335.563399][ C1] schedule+0x14b/0x320 [ 335.567631][ C1] schedule_preempt_disabled+0x13/0x30 [ 335.573220][ C1] __mutex_lock+0x6a4/0xd70 [ 335.577821][ C1] ? __mutex_lock+0x527/0xd70 [ 335.582576][ C1] ? nl80211_pre_doit+0x5f/0x8b0 [ 335.587600][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 335.592692][ C1] ? rtnl_lock+0xe7/0x130 [ 335.597123][ C1] nl80211_pre_doit+0x5f/0x8b0 [ 335.601964][ C1] genl_rcv_msg+0xaaa/0xec0 [ 335.606571][ C1] ? mark_lock+0x9a/0x360 [ 335.610988][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.616206][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 335.621331][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 335.626783][ C1] ? __pfx_nl80211_set_interface+0x10/0x10 [ 335.632646][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 335.638191][ C1] ? __pfx___might_resched+0x10/0x10 [ 335.643543][ C1] netlink_rcv_skb+0x1e3/0x430 [ 335.648486][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.653626][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.659007][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 335.664612][ C1] genl_rcv+0x28/0x40 [ 335.668713][ C1] netlink_unicast+0x7f0/0x990 [ 335.673543][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 335.678917][ C1] ? __virt_addr_valid+0x183/0x520 [ 335.684120][ C1] ? __check_object_size+0x49c/0x900 [ 335.689521][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 335.694728][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 335.699616][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.705012][ C1] ? __import_iovec+0x536/0x820 [ 335.709912][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 335.714939][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 335.720336][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 335.725880][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.731289][ C1] __sock_sendmsg+0x221/0x270 [ 335.736088][ C1] ____sys_sendmsg+0x525/0x7d0 [ 335.740911][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.746322][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 335.751046][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 335.756280][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.763141][ C1] ? do_syscall_64+0x100/0x230 [ 335.767987][ C1] ? do_syscall_64+0xb6/0x230 [ 335.772716][ C1] do_syscall_64+0xf3/0x230 [ 335.777295][ C1] ? clear_bhb_loop+0x35/0x90 [ 335.782027][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.788020][ C1] RIP: 0033:0x7f102e07d0a9 [ 335.792482][ C1] RSP: 002b:00007f102ed3d0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.800983][ C1] RAX: ffffffffffffffda RBX: 00007f102e1b4120 RCX: 00007f102e07d0a9 [ 335.809031][ C1] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 335.817164][ C1] RBP: 00007f102e0ec074 R08: 0000000000000000 R09: 0000000000000000 [ 335.825207][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.833397][ C1] R13: 000000000000006e R14: 00007f102e1b4120 R15: 00007ffc42348188 [ 335.841465][ C1] [ 335.844544][ C1] DEBUG: waiting rtnl_mutex for 670 jiffies. [ 335.850558][ C1] task:syz-executor.0 state:D stack:27056 pid:7946 tgid:7941 ppid:7399 flags:0x00000006 [ 335.860829][ C1] Call Trace: [ 335.864147][ C1] [ 335.867149][ C1] __schedule+0x17e8/0x4a20 [ 335.871737][ C1] ? __pfx___schedule+0x10/0x10 [ 335.876685][ C1] ? __pfx_lock_release+0x10/0x10 [ 335.881775][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 335.887345][ C1] ? schedule+0x90/0x320 [ 335.891712][ C1] schedule+0x14b/0x320 [ 335.895952][ C1] schedule_preempt_disabled+0x13/0x30 [ 335.901509][ C1] __mutex_lock+0x6a4/0xd70 [ 335.906102][ C1] ? __mutex_lock+0x527/0xd70 [ 335.910923][ C1] ? nl80211_pre_doit+0x5f/0x8b0 [ 335.915951][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 335.921115][ C1] ? rtnl_lock+0xe7/0x130 [ 335.925548][ C1] nl80211_pre_doit+0x5f/0x8b0 [ 335.930444][ C1] genl_rcv_msg+0xaaa/0xec0 [ 335.935051][ C1] ? mark_lock+0x9a/0x360 [ 335.939443][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.944592][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 335.949732][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 335.955193][ C1] ? __pfx_nl80211_connect+0x10/0x10 [ 335.960537][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 335.966088][ C1] ? __pfx___might_resched+0x10/0x10 [ 335.971443][ C1] netlink_rcv_skb+0x1e3/0x430 [ 335.976312][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.981398][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.986784][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 335.992373][ C1] genl_rcv+0x28/0x40 [ 335.996515][ C1] netlink_unicast+0x7f0/0x990 [ 336.001340][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 336.006722][ C1] ? __virt_addr_valid+0x183/0x520 [ 336.011899][ C1] ? __check_object_size+0x49c/0x900 [ 336.017289][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 336.022458][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 336.027319][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.032711][ C1] ? __import_iovec+0x536/0x820 [ 336.037641][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 336.042623][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 336.047992][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 336.053683][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.059052][ C1] __sock_sendmsg+0x221/0x270 [ 336.063783][ C1] ____sys_sendmsg+0x525/0x7d0 [ 336.068630][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.073990][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 336.078750][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.083941][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 336.089986][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.096453][ C1] ? do_syscall_64+0x100/0x230 [ 336.101293][ C1] ? do_syscall_64+0xb6/0x230 [ 336.106043][ C1] do_syscall_64+0xf3/0x230 [ 336.110618][ C1] ? clear_bhb_loop+0x35/0x90 [ 336.115371][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.121322][ C1] RIP: 0033:0x7f102e07d0a9 [ 336.125807][ C1] RSP: 002b:00007f102ed1c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.134335][ C1] RAX: ffffffffffffffda RBX: 00007f102e1b41f0 RCX: 00007f102e07d0a9 [ 336.142356][ C1] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000007 [ 336.150398][ C1] RBP: 00007f102e0ec074 R08: 0000000000000000 R09: 0000000000000000 [ 336.158443][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.166478][ C1] R13: 000000000000006e R14: 00007f102e1b41f0 R15: 00007ffc42348188 [ 336.174543][ C1] [ 336.177627][ C1] [ 336.177627][ C1] Showing all locks held in the system: [ 336.185431][ C1] 3 locks held by kworker/0:0/8: [ 336.190449][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 336.201812][ C1] #1: ffffc900000d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 336.213095][ C1] #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 336.223649][ C1] 5 locks held by kworker/u8:1/12: [ 336.228825][ C1] #0: ffff88802b023948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 336.240348][ C1] #1: ffffc90000117d00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 336.253717][ C1] #2: ffffc90000a18ca0 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 336.263996][ C1] #3: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 336.273919][ C1] #4: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 336.284024][ C1] 3 locks held by kworker/u8:10/2894: [ 336.289488][ C1] #0: ffff88802a2a8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 336.301700][ C1] #1: ffffc90009957d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 336.314894][ C1] #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 336.324537][ C1] 2 locks held by getty/4845: [ 336.329251][ C1] #0: ffff88802a4570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 336.339389][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 336.349694][ C1] 5 locks held by kworker/1:5/5170: [ 336.354958][ C1] #0: ffff88801c6bfd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 336.366543][ C1] #1: ffffc900042b7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 336.378568][ C1] #2: ffff88802378f190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 336.387616][ C1] #3: ffff888023f2b190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 336.397012][ C1] #4: ffff88802f7a7160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 336.406429][ C1] 3 locks held by kworker/1:6/5267: [ 336.411676][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 336.422787][ C1] #1: ffffc90003b57d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 336.434008][ C1] #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 336.443896][ C1] 2 locks held by syz-executor.0/6439: [ 336.449544][ C1] 2 locks held by syz-executor.3/7039: [ 336.455065][ C1] #0: ffff88807aa06c70 (&fc->uapi_mutex){+.+.}-{3:3}, at: __se_sys_fsconfig+0x9a7/0xf80 [ 336.465104][ C1] #1: ffff888072f2c0e0 (&type->s_umount_key#58){+.+.}-{3:3}, at: __se_sys_fsconfig+0xb64/0xf80 [ 336.475792][ C1] 2 locks held by syz-executor.1/7904: [ 336.481315][ C1] #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 336.490440][ C1] #1: ffffffff8e33ab78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 336.501505][ C1] 1 lock held by syz-executor.2/7939: [ 336.506960][ C1] #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 336.516682][ C1] 2 locks held by syz-executor.0/7945: [ 336.522174][ C1] #0: ffffffff8f661470 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 336.530574][ C1] #1: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 336.539978][ C1] 2 locks held by syz-executor.0/7946: [ 336.545511][ C1] #0: ffffffff8f661470 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 336.553874][ C1] #1: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 336.563392][ C1] 1 lock held by syz-executor.4/7967: [ 336.568897][ C1] [ 336.571260][ C1] ============================================= [ 336.571260][ C1] [ 336.603353][ T7968] delete_channel: no stack [ 336.635186][ T5170] usbhid 5-1:0.0: can't add hid device: -71 [ 336.654737][ T5170] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 336.695067][ T5170] usb 5-1: USB disconnect, device number 14 [ 336.726917][ T7975] loop4: detected capacity change from 0 to 128 [ 336.745849][ T7975] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 336.834423][ T7975] syz-executor.4: attempt to access beyond end of device [ 336.834423][ T7975] loop4: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 336.878819][ T7975] syz-executor.4: attempt to access beyond end of device [ 336.878819][ T7975] loop4: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 337.655011][ C1] DEBUG: waiting rtnl_mutex for 1280 jiffies. [ 337.661172][ C1] task:kworker/u8:10 state:D stack:19688 pid:2894 tgid:2894 ppid:2 flags:0x00004000 [ 337.671895][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 337.678104][ C1] Call Trace: [ 337.681418][ C1] [ 337.684408][ C1] __schedule+0x17e8/0x4a20 [ 337.688979][ C1] ? __pfx___schedule+0x10/0x10 [ 337.693889][ C1] ? __pfx_lock_release+0x10/0x10 [ 337.699547][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 337.705090][ C1] ? kthread_data+0x52/0xd0 [ 337.709627][ C1] ? schedule+0x90/0x320 [ 337.713903][ C1] ? wq_worker_sleeping+0x66/0x240 [ 337.719187][ C1] ? schedule+0x90/0x320 [ 337.723477][ C1] schedule+0x14b/0x320 [ 337.727729][ C1] schedule_preempt_disabled+0x13/0x30 [ 337.733253][ C1] __mutex_lock+0x6a4/0xd70 [ 337.737843][ C1] ? mark_lock+0x9a/0x360 [ 337.742214][ C1] ? __mutex_lock+0x527/0xd70 [ 337.747055][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 337.752930][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 337.758297][ C1] ? rtnl_lock+0xe7/0x130 [ 337.762677][ C1] addrconf_dad_work+0xd0/0x16f0 [ 337.767748][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 337.773260][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 337.779900][ C1] ? process_scheduled_works+0x945/0x1830 [ 337.785722][ C1] process_scheduled_works+0xa2c/0x1830 [ 337.791874][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 337.797967][ C1] ? assign_work+0x364/0x3d0 [ 337.802738][ C1] worker_thread+0x86d/0xd50 [ 337.807461][ C1] ? __kthread_parkme+0x169/0x1d0 [ 337.812896][ C1] ? __pfx_worker_thread+0x10/0x10 [ 337.818116][ C1] kthread+0x2f0/0x390 [ 337.822222][ C1] ? __pfx_worker_thread+0x10/0x10 [ 337.827630][ C1] ? __pfx_kthread+0x10/0x10 [ 337.832255][ C1] ret_from_fork+0x4b/0x80 [ 337.836770][ C1] ? __pfx_kthread+0x10/0x10 [ 337.841403][ C1] ret_from_fork_asm+0x1a/0x30 [ 337.846254][ C1] [ 337.849303][ C1] DEBUG: holding rtnl_mutex for 1286 jiffies. [ 337.855412][ C1] task:syz-executor.1 state:R running task stack:24672 pid:7904 tgid:7904 ppid:7593 flags:0x00004006 [ 337.867228][ C1] Call Trace: [ 337.870527][ C1] [ 337.873481][ C1] __schedule+0x17e8/0x4a20 [ 337.878082][ C1] ? __pfx___schedule+0x10/0x10 [ 337.883007][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 337.889095][ C1] ? kasan_save_track+0x51/0x80 [ 337.893984][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 337.899499][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 337.904676][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 337.910455][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 337.916097][ C1] irqentry_exit+0x5e/0x90 [ 337.920550][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.926613][ C1] RIP: 0010:synchronize_rcu+0x0/0x360 [ 337.932038][ C1] Code: e1 07 80 c1 03 38 c1 0f 8c 97 fe ff ff 4c 89 f7 e8 a5 15 80 00 e9 8a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 337.952005][ C1] RSP: 0018:ffffc90002f4f8d8 EFLAGS: 00000206 [ 337.958160][ C1] RAX: dffffc0000000000 RBX: 1ffff920005e9f24 RCX: ffffffff947dc803 [ 337.966214][ C1] RDX: 0000000000000001 RSI: ffffffff8bcad580 RDI: ffffffff8c206c80 [ 337.974222][ C1] RBP: ffffc90002f4f9b8 R08: ffffffff947d2127 R09: 1ffffffff28fa424 [ 337.982380][ C1] R10: dffffc0000000000 R11: fffffbfff28fa425 R12: ffffffff947cfe08 [ 337.990462][ C1] R13: 1ffff920005e9f20 R14: 0000000000000203 R15: ffffc90002f4f920 [ 337.998544][ C1] lockdep_unregister_key+0x4b7/0x540 [ 338.003968][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 338.009945][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 338.015379][ C1] ? __qdisc_destroy+0x150/0x410 [ 338.020489][ C1] ? kfree+0x149/0x360 [ 338.024650][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 338.030262][ C1] __qdisc_destroy+0x165/0x410 [ 338.035092][ C1] dev_shutdown+0x9b/0x440 [ 338.039550][ C1] unregister_netdevice_many_notify+0x977/0x16b0 [ 338.045981][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 338.052870][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 338.058934][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.065435][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 338.070675][ C1] unregister_netdevice_queue+0x303/0x370 [ 338.076489][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 338.082786][ C1] __tun_detach+0x6b6/0x1600 [ 338.087459][ C1] tun_chr_close+0x108/0x1b0 [ 338.092090][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 338.097317][ C1] __fput+0x24a/0x8a0 [ 338.101345][ C1] task_work_run+0x24f/0x310 [ 338.106028][ C1] ? __pfx_task_work_run+0x10/0x10 [ 338.111269][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 338.117070][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 338.122743][ C1] do_syscall_64+0x100/0x230 [ 338.127406][ C1] ? clear_bhb_loop+0x35/0x90 [ 338.132115][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.138250][ C1] RIP: 0033:0x7f8dd507d0a9 [ 338.142690][ C1] RSP: 002b:00007fffd8a50ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 338.151202][ C1] RAX: 0000000000000000 RBX: 00007f8dd51b5980 RCX: 00007f8dd507d0a9 [ 338.159259][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 338.167306][ C1] RBP: 00007f8dd51b5980 R08: 00000000000001a9 R09: 0000000c00000000 [ 338.175346][ C1] R10: 0000001b2df20000 R11: 0000000000000246 R12: 000000000004f477 [ 338.183342][ C1] R13: 00007f8dd51b42cc R14: 0000000000000032 R15: 00007f8dd51b5980 [ 338.191397][ C1] [ 338.194477][ C1] DEBUG: waiting rtnl_mutex for 1230 jiffies. [ 338.200561][ C1] task:kworker/1:6 state:D stack:20568 pid:5267 tgid:5267 ppid:2 flags:0x00004000 [ 338.210820][ C1] Workqueue: events linkwatch_event [ 338.216110][ C1] Call Trace: [ 338.219398][ C1] [ 338.222362][ C1] __schedule+0x17e8/0x4a20 [ 338.226993][ C1] ? __pfx___schedule+0x10/0x10 [ 338.231874][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 338.237954][ C1] ? __pfx_lock_release+0x10/0x10 [ 338.243047][ C1] ? kick_pool+0x45c/0x620 [ 338.247743][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.252989][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 338.258307][ C1] ? schedule+0x90/0x320 [ 338.262585][ C1] schedule+0x14b/0x320 [ 338.266840][ C1] schedule_preempt_disabled+0x13/0x30 [ 338.272966][ C1] __mutex_lock+0x6a4/0xd70 [ 338.277662][ C1] ? __mutex_lock+0x527/0xd70 [ 338.282500][ C1] ? linkwatch_event+0xe/0x60 [ 338.287349][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 338.292410][ C1] ? process_scheduled_works+0x945/0x1830 [ 338.298202][ C1] ? rtnl_lock+0xe7/0x130 [ 338.302557][ C1] ? process_scheduled_works+0x945/0x1830 [ 338.308400][ C1] linkwatch_event+0xe/0x60 [ 338.312926][ C1] process_scheduled_works+0xa2c/0x1830 [ 338.318685][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 338.324881][ C1] ? assign_work+0x364/0x3d0 [ 338.329573][ C1] worker_thread+0x86d/0xd50 [ 338.334213][ C1] ? __kthread_parkme+0x169/0x1d0 [ 338.340984][ C1] ? __pfx_worker_thread+0x10/0x10 [ 338.346167][ C1] kthread+0x2f0/0x390 [ 338.350267][ C1] ? __pfx_worker_thread+0x10/0x10 [ 338.355460][ C1] ? __pfx_kthread+0x10/0x10 [ 338.360098][ C1] ret_from_fork+0x4b/0x80 [ 338.364609][ C1] ? __pfx_kthread+0x10/0x10 [ 338.369673][ C1] ret_from_fork_asm+0x1a/0x30 [ 338.374541][ C1] [ 338.377576][ C1] DEBUG: waiting rtnl_mutex for 1070 jiffies. [ 338.383833][ C1] task:kworker/0:0 state:D stack:21144 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 338.394095][ C1] Workqueue: events switchdev_deferred_process_work [ 338.400891][ C1] Call Trace: [ 338.404188][ C1] [ 338.407189][ C1] __schedule+0x17e8/0x4a20 [ 338.411757][ C1] ? __pfx___schedule+0x10/0x10 [ 338.416698][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 338.422722][ C1] ? __pfx_lock_release+0x10/0x10 [ 338.427845][ C1] ? kick_pool+0x45c/0x620 [ 338.432284][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.437554][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 338.442786][ C1] ? schedule+0x90/0x320 [ 338.447099][ C1] schedule+0x14b/0x320 [ 338.451291][ C1] schedule_preempt_disabled+0x13/0x30 [ 338.456824][ C1] __mutex_lock+0x6a4/0xd70 [ 338.461363][ C1] ? __mutex_lock+0x527/0xd70 [ 338.466119][ C1] ? switchdev_deferred_process_work+0xe/0x20 [ 338.472215][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 338.477336][ C1] ? process_scheduled_works+0x945/0x1830 [ 338.483183][ C1] ? rtnl_lock+0xe7/0x130 [ 338.487594][ C1] ? process_scheduled_works+0x945/0x1830 [ 338.493342][ C1] switchdev_deferred_process_work+0xe/0x20 [ 338.499397][ C1] process_scheduled_works+0xa2c/0x1830 [ 338.505050][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 338.511072][ C1] ? assign_work+0x364/0x3d0 [ 338.515750][ C1] worker_thread+0x86d/0xd50 [ 338.520373][ C1] ? __kthread_parkme+0x169/0x1d0 [ 338.525504][ C1] ? __pfx_worker_thread+0x10/0x10 [ 338.531007][ C1] kthread+0x2f0/0x390 [ 338.535170][ C1] ? __pfx_worker_thread+0x10/0x10 [ 338.540330][ C1] ? __pfx_kthread+0x10/0x10 [ 338.545006][ C1] ret_from_fork+0x4b/0x80 [ 338.549446][ C1] ? __pfx_kthread+0x10/0x10 [ 338.554073][ C1] ret_from_fork_asm+0x1a/0x30 [ 338.558978][ C1] [ 338.562022][ C1] DEBUG: waiting rtnl_mutex for 1002 jiffies. [ 338.568254][ C1] task:syz-executor.2 state:D stack:23800 pid:7939 tgid:7938 ppid:7496 flags:0x00004006 [ 338.578503][ C1] Call Trace: [ 338.581802][ C1] [ 338.584795][ C1] __schedule+0x17e8/0x4a20 [ 338.589359][ C1] ? __pfx___schedule+0x10/0x10 [ 338.594366][ C1] ? __pfx_lock_release+0x10/0x10 [ 338.599418][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 338.604977][ C1] ? schedule+0x90/0x320 [ 338.609253][ C1] schedule+0x14b/0x320 [ 338.613444][ C1] schedule_preempt_disabled+0x13/0x30 [ 338.619079][ C1] __mutex_lock+0x6a4/0xd70 [ 338.623633][ C1] ? __mutex_lock+0x527/0xd70 [ 338.628404][ C1] ? rtnetlink_rcv_msg+0x839/0x1170 [ 338.633720][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 338.638850][ C1] ? rtnl_lock+0xe7/0x130 [ 338.643221][ C1] rtnetlink_rcv_msg+0x839/0x1170 [ 338.648332][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 338.653571][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 338.659118][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 338.665167][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.671528][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 338.676978][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 338.682209][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 338.687653][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 338.692970][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 338.698144][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 338.703898][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 338.709095][ C1] ? __dev_queue_xmit+0x16c9/0x3d30 [ 338.714376][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 338.719621][ C1] ? ref_tracker_free+0x643/0x7e0 [ 338.724808][ C1] netlink_rcv_skb+0x1e3/0x430 [ 338.729883][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 338.735441][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.740875][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.746157][ C1] netlink_unicast+0x7f0/0x990 [ 338.750969][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 338.756410][ C1] ? __virt_addr_valid+0x183/0x520 [ 338.762614][ C1] ? __check_object_size+0x49c/0x900 [ 338.768009][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 338.773178][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 338.778028][ C1] ? irqentry_exit+0x63/0x90 [ 338.782668][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.788171][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 338.793136][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 338.798499][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 338.803994][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.809359][ C1] __sock_sendmsg+0x221/0x270 [ 338.814071][ C1] ____sys_sendmsg+0x525/0x7d0 [ 338.818919][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.824252][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 338.828913][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 338.834098][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.840498][ C1] ? do_syscall_64+0x100/0x230 [ 338.845327][ C1] ? do_syscall_64+0xb6/0x230 [ 338.850031][ C1] do_syscall_64+0xf3/0x230 [ 338.854594][ C1] ? clear_bhb_loop+0x35/0x90 [ 338.859296][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.865248][ C1] RIP: 0033:0x7f363f87d0a9 [ 338.869684][ C1] RSP: 002b:00007f363f3ff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.878324][ C1] RAX: ffffffffffffffda RBX: 00007f363f9b3f80 RCX: 00007f363f87d0a9 [ 338.886399][ C1] RDX: 0000000000000000 RSI: 0000000020000d40 RDI: 0000000000000007 [ 338.894430][ C1] RBP: 00007f363f8ec074 R08: 0000000000000000 R09: 0000000000000000 [ 338.902437][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.910478][ C1] R13: 000000000000000b R14: 00007f363f9b3f80 R15: 00007ffd422e0038 [ 338.919285][ C1] [ 338.922334][ C1] DEBUG: waiting rtnl_mutex for 988 jiffies. [ 338.928479][ C1] task:syz-executor.0 state:D stack:26112 pid:7945 tgid:7941 ppid:7399 flags:0x00000006 [ 338.938739][ C1] Call Trace: [ 338.942489][ C1] [ 338.945605][ C1] __schedule+0x17e8/0x4a20 [ 338.950185][ C1] ? __pfx___schedule+0x10/0x10 [ 338.955125][ C1] ? __pfx_lock_release+0x10/0x10 [ 338.960183][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 338.965738][ C1] ? schedule+0x90/0x320 [ 338.970006][ C1] schedule+0x14b/0x320 [ 338.974196][ C1] schedule_preempt_disabled+0x13/0x30 [ 338.979835][ C1] __mutex_lock+0x6a4/0xd70 [ 338.984464][ C1] ? __mutex_lock+0x527/0xd70 [ 338.989229][ C1] ? nl80211_pre_doit+0x5f/0x8b0 [ 338.994549][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 338.999635][ C1] ? rtnl_lock+0xe7/0x130 [ 339.003997][ C1] nl80211_pre_doit+0x5f/0x8b0 [ 339.008887][ C1] genl_rcv_msg+0xaaa/0xec0 [ 339.013615][ C1] ? mark_lock+0x9a/0x360 [ 339.018130][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.023310][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 339.028412][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 339.033818][ C1] ? __pfx_nl80211_set_interface+0x10/0x10 [ 339.039879][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 339.045422][ C1] ? __pfx___might_resched+0x10/0x10 [ 339.050940][ C1] netlink_rcv_skb+0x1e3/0x430 [ 339.055764][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.060907][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.066287][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 339.071830][ C1] genl_rcv+0x28/0x40 [ 339.075873][ C1] netlink_unicast+0x7f0/0x990 [ 339.080684][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 339.086045][ C1] ? __virt_addr_valid+0x183/0x520 [ 339.091187][ C1] ? __check_object_size+0x49c/0x900 [ 339.096548][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 339.101726][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 339.106582][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.111911][ C1] ? __import_iovec+0x536/0x820 [ 339.116835][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 339.121804][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 339.127202][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 339.132979][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.138363][ C1] __sock_sendmsg+0x221/0x270 [ 339.143078][ C1] ____sys_sendmsg+0x525/0x7d0 [ 339.147935][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.153277][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 339.157959][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.163149][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.169568][ C1] ? do_syscall_64+0x100/0x230 [ 339.174406][ C1] ? do_syscall_64+0xb6/0x230 [ 339.179118][ C1] do_syscall_64+0xf3/0x230 [ 339.183642][ C1] ? clear_bhb_loop+0x35/0x90 [ 339.188408][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.194371][ C1] RIP: 0033:0x7f102e07d0a9 [ 339.198813][ C1] RSP: 002b:00007f102ed3d0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.207291][ C1] RAX: ffffffffffffffda RBX: 00007f102e1b4120 RCX: 00007f102e07d0a9 [ 339.215319][ C1] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 339.223316][ C1] RBP: 00007f102e0ec074 R08: 0000000000000000 R09: 0000000000000000 [ 339.231346][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.239398][ C1] R13: 000000000000006e R14: 00007f102e1b4120 R15: 00007ffc42348188 [ 339.247474][ C1] [ 339.250510][ C1] DEBUG: waiting rtnl_mutex for 1010 jiffies. [ 339.256658][ C1] task:syz-executor.0 state:D stack:27056 pid:7946 tgid:7941 ppid:7399 flags:0x00000006 [ 339.267000][ C1] Call Trace: [ 339.270319][ C1] [ 339.273275][ C1] __schedule+0x17e8/0x4a20 [ 339.277890][ C1] ? __pfx___schedule+0x10/0x10 [ 339.282774][ C1] ? __pfx_lock_release+0x10/0x10 [ 339.287876][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 339.293384][ C1] ? schedule+0x90/0x320 [ 339.297703][ C1] schedule+0x14b/0x320 [ 339.301890][ C1] schedule_preempt_disabled+0x13/0x30 [ 339.307421][ C1] __mutex_lock+0x6a4/0xd70 [ 339.311956][ C1] ? __mutex_lock+0x527/0xd70 [ 339.316719][ C1] ? nl80211_pre_doit+0x5f/0x8b0 [ 339.321690][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 339.326802][ C1] ? rtnl_lock+0xe7/0x130 [ 339.331172][ C1] nl80211_pre_doit+0x5f/0x8b0 [ 339.336036][ C1] genl_rcv_msg+0xaaa/0xec0 [ 339.340573][ C1] ? mark_lock+0x9a/0x360 [ 339.344985][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.350068][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 339.355173][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 339.360577][ C1] ? __pfx_nl80211_connect+0x10/0x10 [ 339.365941][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 339.371545][ C1] ? __pfx___might_resched+0x10/0x10 [ 339.376908][ C1] netlink_rcv_skb+0x1e3/0x430 [ 339.381715][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.386835][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.392168][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 339.397720][ C1] genl_rcv+0x28/0x40 [ 339.401737][ C1] netlink_unicast+0x7f0/0x990 [ 339.406585][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 339.411902][ C1] ? __virt_addr_valid+0x183/0x520 [ 339.417091][ C1] ? __check_object_size+0x49c/0x900 [ 339.422468][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 339.427654][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 339.432479][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.437866][ C1] ? __import_iovec+0x536/0x820 [ 339.442766][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 339.447809][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 339.453745][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 339.459319][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.464690][ C1] __sock_sendmsg+0x221/0x270 [ 339.469401][ C1] ____sys_sendmsg+0x525/0x7d0 [ 339.474208][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.479588][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 339.484206][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.489416][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 339.495390][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.501743][ C1] ? do_syscall_64+0x100/0x230 [ 339.506569][ C1] ? do_syscall_64+0xb6/0x230 [ 339.511272][ C1] do_syscall_64+0xf3/0x230 [ 339.515849][ C1] ? clear_bhb_loop+0x35/0x90 [ 339.520551][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.526603][ C1] RIP: 0033:0x7f102e07d0a9 [ 339.531038][ C1] RSP: 002b:00007f102ed1c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.539634][ C1] RAX: ffffffffffffffda RBX: 00007f102e1b41f0 RCX: 00007f102e07d0a9 [ 339.547770][ C1] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000007 [ 339.555815][ C1] RBP: 00007f102e0ec074 R08: 0000000000000000 R09: 0000000000000000 [ 339.563827][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.572226][ C1] R13: 000000000000006e R14: 00007f102e1b41f0 R15: 00007ffc42348188 [ 339.580303][ C1] [ 339.583348][ C1] [ 339.583348][ C1] Showing all locks held in the system: [ 339.591122][ C1] 3 locks held by kworker/0:0/8: [ 339.596211][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 339.607277][ C1] #1: ffffc900000d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 339.618524][ C1] #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 339.629031][ C1] 3 locks held by kworker/u8:10/2894: [ 339.634457][ C1] #0: ffff88802a2a8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 339.646123][ C1] #1: ffffc90009957d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 339.659296][ C1] #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 339.668919][ C1] 2 locks held by getty/4845: [ 339.673671][ C1] #0: ffff88802a4570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 339.683553][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 339.693822][ C1] 3 locks held by kworker/1:6/5267: [ 339.699090][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 339.710186][ C1] #1: ffffc90003b57d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 339.721355][ C1] #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 339.730442][ C1] 2 locks held by syz-executor.0/6439: [ 339.736055][ C1] 2 locks held by syz-executor.3/7039: [ 339.741530][ C1] #0: ffff88807aa06c70 (&fc->uapi_mutex){+.+.}-{3:3}, at: __se_sys_fsconfig+0x9a7/0xf80 [ 339.751493][ C1] #1: ffff888072f2c0e0 (&type->s_umount_key#58){+.+.}-{3:3}, at: __se_sys_fsconfig+0xb64/0xf80 [ 339.762082][ C1] 2 locks held by syz-executor.1/7904: [ 339.767611][ C1] #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 339.776691][ C1] #1: ffffffff8e33ab78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 339.787691][ C1] 1 lock held by syz-executor.2/7939: [ 339.793083][ C1] #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 339.802682][ C1] 2 locks held by syz-executor.0/7945: [ 339.808199][ C1] #0: ffffffff8f661470 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 339.816475][ C1] #1: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 339.825802][ C1] 2 locks held by syz-executor.0/7946: [ 339.831281][ C1] #0: ffffffff8f661470 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 339.839571][ C1] #1: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 339.848879][ C1] 2 locks held by syz-executor.3/7974: [ 339.854388][ C1] #0: ffffffff8f661470 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 339.862626][ C1] #1: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 339.871974][ C1] 2 locks held by syz-executor.3/7977: [ 339.877494][ C1] #0: ffffffff8f661470 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 339.885794][ C1] #1: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 339.895138][ C1] 5 locks held by syz-executor.4/7980: [ 339.900615][ C1] #0: ffff888015071498 (&mm->mmap_lock){++++}-{3:3}, at: do_vmi_align_munmap+0x104f/0x18c0 [ 339.910831][ C1] #1: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: page_ext_get+0x20/0x2a0 [ 339.920194][ C1] #2: ffffc90000a18c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 339.930427][ C1] #3: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 339.941558][ C1] #4: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 339.951601][ C1] [ 339.953953][ C1] ============================================= [ 339.953953][ C1] [ 339.979625][ T7980] loop4: detected capacity change from 0 to 32768 [ 340.033542][ T29] audit: type=1800 audit(1719096392.326:3039): pid=7980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 340.051024][ T113] ERROR: (device loop4): diUpdatePMap: the inode is not allocated in the working map [ 340.051024][ T113] [ 340.093789][ T113] ERROR: (device loop4): remounting filesystem as read-only [ 340.862885][ T7945] syz-executor.0 (7945) used greatest stack depth: 17360 bytes left [ 341.954496][ T5267] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 342.156480][ T5267] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 342.184448][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.211188][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.262555][ T5267] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 342.298545][ T5267] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 342.323428][ T5267] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 342.354590][ T5267] usb 4-1: Manufacturer: syz [ 342.378832][ T5267] usb 4-1: config 0 descriptor?? [ 342.744910][ T7995] loop1: detected capacity change from 0 to 32768 [ 342.766350][ T29] audit: type=1800 audit(1719096395.066:3040): pid=7995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=3 res=0 errno=0 [ 342.828565][ T5267] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 342.831093][ T7997] loop4: detected capacity change from 0 to 32768 [ 342.884688][ T5267] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 342.902903][ T7997] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7997) [ 342.930382][ T7997] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 342.950926][ T7997] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 342.961857][ T7997] BTRFS info (device loop4): using free-space-tree [ 343.060367][ T29] audit: type=1800 audit(1719096395.356:3041): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 343.174969][ T5169] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 343.273175][ T7543] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 343.401826][ T5169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.419766][ T5169] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 343.464073][ T5169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.515327][ T5169] usb 1-1: config 0 descriptor?? [ 343.615354][ T8033] loop2: detected capacity change from 0 to 4096 [ 343.648866][ T8033] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 343.771224][ T5125] usb 4-1: USB disconnect, device number 10 [ 343.775616][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 343.990899][ T5169] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 344.037250][ T5169] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000E/input/input15 [ 344.228052][ T5169] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 344.265676][ T5300] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 344.359543][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 344.467882][ T5300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 48495, setting to 64 [ 344.510183][ T5300] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 344.538234][ T5300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.577949][ T5300] usb 5-1: Product: syz [ 344.582225][ T5300] usb 5-1: Manufacturer: syz [ 344.614396][ T5300] usb 5-1: SerialNumber: syz [ 344.735282][ T5300] usb 5-1: config 0 descriptor?? [ 344.775175][ T8042] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 345.948219][ T5300] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 345.993756][ T5300] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 346.180583][ T5300] usb 5-1: USB disconnect, device number 15 [ 346.191561][ T5300] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 346.216013][ T5300] kobil_sct 5-1:0.0: device disconnected [ 346.226608][ T8] usb 1-1: USB disconnect, device number 9 [ 346.277230][ T8007] delete_channel: no stack [ 346.403066][ T29] audit: type=1800 audit(1719096398.696:3042): pid=8063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1936 res=0 errno=0 [ 346.461048][ T8059] loop1: detected capacity change from 0 to 512 [ 346.565778][ T8059] EXT4-fs: Ignoring removed mblk_io_submit option [ 346.627569][ T8059] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 346.665646][ T8059] System zones: 1-12 [ 346.687586][ T8059] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 346.737317][ T8059] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 346.778678][ T8059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.827749][ T8073] loop4: detected capacity change from 0 to 16 [ 346.850640][ T29] audit: type=1800 audit(1719096399.146:3043): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 348.294522][ T5307] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 348.412429][ T8090] loop4: detected capacity change from 0 to 512 [ 348.734448][ T5307] usb 1-1: Using ep0 maxpacket: 8 [ 348.775982][ T5121] Bluetooth: hci4: command tx timeout [ 349.042073][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 349.131227][ T5307] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 349.265993][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.361691][ T5307] usb 1-1: config 0 descriptor?? [ 349.449327][ T8090] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 349.684438][ T5169] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 349.708733][ T29] audit: type=1800 audit(1719096402.006:3044): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 349.744590][ T5168] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 349.763963][ T5307] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 349.796272][ T5307] usb 1-1: USB disconnect, device number 10 [ 349.823298][ T5307] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 349.888189][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.907399][ T5169] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 349.954446][ T5168] usb 3-1: Using ep0 maxpacket: 8 [ 349.962732][ T5169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.985879][ T5168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.006724][ T5169] usb 4-1: config 0 descriptor?? [ 350.014454][ T5168] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 350.078582][ T5168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.110616][ T5168] usb 3-1: config 0 descriptor?? [ 350.387700][ T29] audit: type=1326 audit(1719096402.676:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f363f87d0a9 code=0x0 [ 350.410034][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.472979][ T5169] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 350.499977][ T5169] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000F/input/input16 [ 350.555896][ T5168] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 350.599586][ T8101] loop4: detected capacity change from 0 to 4096 [ 350.652850][ T5169] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 350.856366][ T8101] loop4: detected capacity change from 0 to 256 [ 351.071883][ T8109] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 351.133813][ T8109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.350168][ T5169] usb 4-1: USB disconnect, device number 11 [ 352.365834][ T8093] delete_channel: no stack [ 352.779914][ T5168] usb 3-1: USB disconnect, device number 14 [ 352.810110][ T5168] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 352.998202][ T8128] loop2: detected capacity change from 0 to 256 [ 353.080264][ T29] audit: type=1800 audit(1719096405.376:3046): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 353.130778][ T29] audit: type=1800 audit(1719096405.376:3047): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 354.804682][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 354.947539][ T8148] input: syz1 as /devices/virtual/input/input17 [ 355.001191][ T8148] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 355.064410][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 355.086542][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 355.102028][ T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 355.114396][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.129408][ T8] usb 5-1: config 0 descriptor?? [ 355.401676][ T8] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 355.443706][ T8] usb 5-1: USB disconnect, device number 16 [ 355.468244][ T8] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 357.034949][ T29] audit: type=1800 audit(1719096409.326:3048): pid=8142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1937 res=0 errno=0 [ 357.168939][ T29] audit: type=1326 audit(1719096409.466:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281d87d0a9 code=0x7ffc0000 [ 357.248381][ T29] audit: type=1326 audit(1719096409.496:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f281d87d0a9 code=0x7ffc0000 [ 357.276773][ T29] audit: type=1326 audit(1719096409.496:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281d87d0a9 code=0x7ffc0000 [ 357.348917][ T8167] syz-executor.4[8167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.349465][ T8167] syz-executor.4[8167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.389450][ T8167] loop4: detected capacity change from 0 to 64 [ 357.537545][ T5169] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 358.088959][ T29] audit: type=1326 audit(1719096409.546:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f281d87d0a9 code=0x7ffc0000 [ 358.155480][ T29] audit: type=1326 audit(1719096409.546:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281d87d0a9 code=0x7ffc0000 [ 358.323587][ T29] audit: type=1326 audit(1719096409.546:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f281d87d0a9 code=0x7ffc0000 [ 358.400843][ T29] audit: type=1326 audit(1719096409.546:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281d87d0a9 code=0x7ffc0000 [ 358.430123][ T5169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.442954][ T5169] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 358.464728][ T5169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.478098][ T5169] usb 3-1: config 0 descriptor?? [ 358.483952][ T29] audit: type=1326 audit(1719096409.546:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281d87d0a9 code=0x7ffc0000 [ 358.594661][ T5307] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 358.784632][ T5307] usb 1-1: Using ep0 maxpacket: 8 [ 358.809674][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 358.853877][ T5307] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 358.871205][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.895236][ T5169] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 358.912544][ T5307] usb 1-1: config 0 descriptor?? [ 358.940016][ T5169] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0010/input/input18 [ 359.125237][ T5169] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 360.295434][ T30] INFO: task syz-executor.3:7039 blocked for more than 143 seconds. 2024/06/22 22:46:52 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 360.476569][ T30] Not tainted 6.10.0-rc4-next-20240621-syzkaller #0 [ 360.485539][ T5124] Bluetooth: hci6: command 0x0406 tx timeout [ 360.527572][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 360.630412][ T30] task:syz-executor.3 state:D stack:24864 pid:7039 tgid:7038 ppid:6605 flags:0x00004006 [ 360.684452][ T30] Call Trace: [ 360.687899][ T30] [ 360.690860][ T30] __schedule+0x17e8/0x4a20 [ 360.732225][ T30] ? __pfx___schedule+0x10/0x10 [ 360.739214][ T30] ? __pfx_lock_release+0x10/0x10 [ 360.754441][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.760521][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.793308][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 360.804632][ T30] ? jfs_flush_journal+0x6df/0xec0 [ 360.809814][ T30] ? schedule+0x90/0x320 [ 360.814081][ T30] schedule+0x14b/0x320 [ 360.826099][ T30] ? jfs_flush_journal+0x6df/0xec0 [ 360.831271][ T30] jfs_flush_journal+0x72c/0xec0 [ 360.842336][ T30] ? __pfx_jfs_flush_journal+0x10/0x10 [ 360.850491][ T30] ? __pfx_default_wake_function+0x10/0x10 [ 360.861890][ T30] ? __pfx_dquot_writeback_dquots+0x10/0x10 [ 360.875763][ T30] ? _raw_spin_unlock+0x28/0x50 [ 360.880685][ T30] jfs_sync_fs+0x80/0xa0 [ 360.904613][ T30] sync_filesystem+0x1c8/0x230 [ 360.909537][ T30] jfs_remount+0x136/0x6b0 [ 360.913991][ T30] ? __pfx_jfs_remount+0x10/0x10 [ 360.937339][ T30] ? __might_fault+0xaa/0x120 [ 360.942276][ T30] ? hook_sb_remount+0x122/0x390 [ 360.954429][ T30] ? legacy_reconfigure+0xca/0x120 [ 360.959669][ T30] reconfigure_super+0x445/0x880 [ 360.964892][ T30] __se_sys_fsconfig+0xb6e/0xf80 [ 360.969954][ T30] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 360.980381][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.986696][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.993658][ T30] ? do_syscall_64+0x100/0x230 [ 360.998667][ T30] ? __x64_sys_fsconfig+0x20/0xc0 [ 361.003974][ T30] do_syscall_64+0xf3/0x230 [ 361.010200][ T30] ? clear_bhb_loop+0x35/0x90 [ 361.015007][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.020997][ T30] RIP: 0033:0x7f977387d0a9 [ 361.025807][ T30] RSP: 002b:00007f97745490c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 361.034478][ T30] RAX: ffffffffffffffda RBX: 00007f97739b3f80 RCX: 00007f977387d0a9 [ 361.042529][ T30] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 361.053675][ T30] RBP: 00007f97738ec074 R08: 0000000000000000 R09: 0000000000000000 [ 361.061900][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.094458][ T30] R13: 000000000000000b R14: 00007f97739b3f80 R15: 00007fffa38d18f8 [ 361.124504][ T30] [ 361.174881][ T30] [ 361.174881][ T30] Showing all locks held in the system: [ 361.243144][ T30] 3 locks held by kworker/0:0/8: [ 361.305617][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 361.354478][ T30] #1: ffffc900000d7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 361.414347][ T30] #2: ffffffff8e33ab78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 361.454374][ T30] 1 lock held by khungtaskd/30: [ 361.459296][ T30] #0: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 361.564419][ T30] 2 locks held by getty/4845: [ 361.569146][ T30] #0: ffff88802a4570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 361.674343][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 361.744457][ T30] 1 lock held by syz-fuzzer/5105: [ 361.749597][ T30] 3 locks held by kworker/0:7/5172: [ 361.784376][ T30] 5 locks held by kworker/1:8/5307: [ 361.789635][ T30] #0: ffff88801c6bfd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 361.833311][ T30] #1: ffffc900030dfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 361.864336][ T30] #2: ffff8880235ef190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 361.873512][ T30] #3: ffff888036196190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 361.901405][ T30] #4: ffff8880361cc160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 361.913554][ T30] 3 locks held by syz-executor.0/6439: [ 361.934504][ T30] 2 locks held by syz-executor.3/7039: [ 361.940054][ T30] #0: ffff88807aa06c70 (&fc->uapi_mutex){+.+.}-{3:3}, at: __se_sys_fsconfig+0x9a7/0xf80 [