last executing test programs: 9m23.027318635s ago: executing program 0 (id=129): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x6, 0x81, 0x42}, 0x10) listen(r1, 0x2) accept4(r1, 0x0, 0x0, 0x80000) 9m21.457393196s ago: executing program 3 (id=133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0xa, 0x1a0}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x8, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) 9m20.737841989s ago: executing program 3 (id=137): openat$kvm(0x0, 0x0, 0x40840, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) shutdown(r7, 0x2) 9m18.761220424s ago: executing program 3 (id=140): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 9m18.56973752s ago: executing program 0 (id=142): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m18.287791679s ago: executing program 0 (id=143): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2}) r2 = creat(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f0000000280)=""/43, 0x2b}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000700)=""/9, 0x9}, {&(0x7f0000000740)=""/235, 0xeb}], 0x9, &(0x7f0000001940)=""/220, 0xdc}, 0x6}, {{&(0x7f0000001a40)=@caif=@dgm, 0x80, 0x0, 0x0, &(0x7f0000001c40)=""/44, 0x2c}, 0x8}, {{&(0x7f0000001c80)=@sco, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001d00)=""/187, 0xbb}, {&(0x7f0000001dc0)=""/248, 0xf8}, {&(0x7f0000001ec0)=""/25, 0x19}, {&(0x7f0000001f00)=""/191, 0xbf}], 0x4, &(0x7f0000002000)=""/141, 0x8d}, 0x3ff}, {{&(0x7f00000020c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002140)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000002240)=""/16, 0x10}, 0xb}, {{0x0, 0x0, &(0x7f00000035c0)=[{0x0}, {&(0x7f0000003480)=""/143, 0x8f}, {&(0x7f0000003540)=""/73, 0x49}], 0x3, &(0x7f0000003600)=""/34, 0x22}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003f00)=[{0x0}, {0x0}, {&(0x7f0000003c80)=""/89, 0x59}, {&(0x7f0000003d00)=""/47, 0x2f}, {&(0x7f0000003d40)=""/122, 0x7a}], 0x5}, 0xb931}, {{0x0, 0x0, &(0x7f0000004400)}, 0x80000000}], 0x8, 0x2020, &(0x7f0000004900)={0x0, 0x989680}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup2(r4, r0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 9m17.666806499s ago: executing program 0 (id=146): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noquota}, {@sysvgroups}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") syz_mount_image$exfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xe1c00, 0x0, 0x4, 0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, 0x0, 0x40c2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x5c) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 9m16.988435892s ago: executing program 0 (id=150): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000020) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)}, 0x32120) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 9m15.420358492s ago: executing program 0 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x6, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x4000000005, 0xffffffffffffffff, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0xecb, 0x0, 0x0, 0x2000, 0xfffffdfd, r2, 0x0, 0x10b, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$P9_RXATTRWALK(r3, 0x0, 0x0) 9m14.536780381s ago: executing program 32 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x6, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x4000000005, 0xffffffffffffffff, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0xecb, 0x0, 0x0, 0x2000, 0xfffffdfd, r2, 0x0, 0x10b, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$P9_RXATTRWALK(r3, 0x0, 0x0) 9m14.26019222s ago: executing program 3 (id=159): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noquota}, {@sysvgroups}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") syz_mount_image$exfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xe1c00, 0x0, 0x4, 0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, 0x0, 0x40c2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x5c) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 9m13.404894378s ago: executing program 3 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x3, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)={0x200f, 0x200f, 0x2, 0x2, 0xc, '\a\x00\x00\x00\t\x00'}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m11.909568626s ago: executing program 3 (id=164): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2}) r2 = creat(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f0000000280)=""/43, 0x2b}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000700)=""/9, 0x9}, {&(0x7f0000000740)=""/235, 0xeb}], 0x9, &(0x7f0000001940)=""/220, 0xdc}, 0x6}, {{&(0x7f0000001a40)=@caif=@dgm, 0x80, 0x0, 0x0, &(0x7f0000001c40)=""/44, 0x2c}, 0x8}, {{&(0x7f0000001c80)=@sco, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001d00)=""/187, 0xbb}, {&(0x7f0000001dc0)=""/248, 0xf8}, {&(0x7f0000001ec0)=""/25, 0x19}, {&(0x7f0000001f00)=""/191, 0xbf}], 0x4, &(0x7f0000002000)=""/141, 0x8d}, 0x3ff}, {{&(0x7f00000020c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002140)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000002240)=""/16, 0x10}, 0xb}, {{&(0x7f0000002280)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002340)}}, {{0x0, 0x0, &(0x7f00000035c0)=[{0x0}, {&(0x7f0000003480)=""/143, 0x8f}, {&(0x7f0000003540)=""/73, 0x49}], 0x3, &(0x7f0000003600)=""/34, 0x22}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003f00)=[{0x0}, {0x0}, {&(0x7f0000003c80)=""/89, 0x59}, {&(0x7f0000003d00)=""/47, 0x2f}, {&(0x7f0000003d40)=""/122, 0x7a}], 0x5}, 0xb931}, {{0x0, 0x0, &(0x7f0000004400)}, 0x80000000}], 0x9, 0x2020, &(0x7f0000004900)={0x0, 0x989680}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup2(r4, r0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 9m11.581691377s ago: executing program 33 (id=164): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2}) r2 = creat(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f0000000280)=""/43, 0x2b}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000700)=""/9, 0x9}, {&(0x7f0000000740)=""/235, 0xeb}], 0x9, &(0x7f0000001940)=""/220, 0xdc}, 0x6}, {{&(0x7f0000001a40)=@caif=@dgm, 0x80, 0x0, 0x0, &(0x7f0000001c40)=""/44, 0x2c}, 0x8}, {{&(0x7f0000001c80)=@sco, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001d00)=""/187, 0xbb}, {&(0x7f0000001dc0)=""/248, 0xf8}, {&(0x7f0000001ec0)=""/25, 0x19}, {&(0x7f0000001f00)=""/191, 0xbf}], 0x4, &(0x7f0000002000)=""/141, 0x8d}, 0x3ff}, {{&(0x7f00000020c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002140)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000002240)=""/16, 0x10}, 0xb}, {{&(0x7f0000002280)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002340)}}, {{0x0, 0x0, &(0x7f00000035c0)=[{0x0}, {&(0x7f0000003480)=""/143, 0x8f}, {&(0x7f0000003540)=""/73, 0x49}], 0x3, &(0x7f0000003600)=""/34, 0x22}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003f00)=[{0x0}, {0x0}, {&(0x7f0000003c80)=""/89, 0x59}, {&(0x7f0000003d00)=""/47, 0x2f}, {&(0x7f0000003d40)=""/122, 0x7a}], 0x5}, 0xb931}, {{0x0, 0x0, &(0x7f0000004400)}, 0x80000000}], 0x9, 0x2020, &(0x7f0000004900)={0x0, 0x989680}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup2(r4, r0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.851815972s ago: executing program 2 (id=1974): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmmsg$unix(r1, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10183, 0x0) 4.013147239s ago: executing program 1 (id=1981): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2}) r2 = creat(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f0000000280)=""/43, 0x2b}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000700)=""/9, 0x9}, {&(0x7f0000000740)=""/235, 0xeb}], 0x9, &(0x7f0000001940)=""/220, 0xdc}, 0x6}, {{&(0x7f0000001a40)=@caif=@dgm, 0x80, 0x0, 0x0, &(0x7f0000001c40)=""/44, 0x2c}, 0x8}, {{&(0x7f0000001c80)=@sco, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001d00)=""/187, 0xbb}, {&(0x7f0000001dc0)=""/248, 0xf8}, {&(0x7f0000001ec0)=""/25, 0x19}, {&(0x7f0000001f00)=""/191, 0xbf}], 0x4, &(0x7f0000002000)=""/141, 0x8d}, 0x3ff}, {{&(0x7f00000020c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002140)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000002240)=""/16, 0x10}, 0xb}, {{&(0x7f0000002280)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002340), 0x0, &(0x7f0000002380)=""/253, 0xfd}}, {{0x0, 0x0, &(0x7f00000035c0)=[{0x0}, {&(0x7f0000003480)=""/143, 0x8f}, {&(0x7f0000003540)=""/73, 0x49}], 0x3, &(0x7f0000003600)=""/34, 0x22}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003f00)=[{0x0}, {0x0}, {&(0x7f0000003c80)=""/89, 0x59}, {&(0x7f0000003d00)=""/47, 0x2f}, {&(0x7f0000003d40)=""/122, 0x7a}], 0x5}, 0xb931}, {{0x0, 0x0, &(0x7f0000004400)}, 0x80000000}], 0x9, 0x2020, &(0x7f0000004900)={0x0, 0x989680}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) dup2(r4, r0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.837216625s ago: executing program 2 (id=1984): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x6, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r4, 0x8f5, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)={'a', ' *:* ', 'm\x00'}, 0x8) write(r2, 0x0, 0x0) 3.518775255s ago: executing program 5 (id=1988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0xfffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000140)={0x100, r4}, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 3.506007336s ago: executing program 2 (id=1989): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 3.117907168s ago: executing program 1 (id=1990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0xfffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 2.861652266s ago: executing program 1 (id=1991): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r2 = socket(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000280), 0x0) write(r2, &(0x7f0000000000), 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r1, r0, 0x4, r0}, 0x10) syz_open_dev$video(&(0x7f0000000000), 0x5, 0x139080) 2.725087291s ago: executing program 1 (id=1992): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2}) r2 = creat(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f0000000280)=""/43, 0x2b}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000700)=""/9, 0x9}, {&(0x7f0000000740)=""/235, 0xeb}], 0x9, &(0x7f0000001940)=""/220, 0xdc}, 0x6}, {{&(0x7f0000001a40)=@caif=@dgm, 0x80, 0x0, 0x0, &(0x7f0000001c40)=""/44, 0x2c}, 0x8}, {{&(0x7f0000001c80)=@sco, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001d00)=""/187, 0xbb}, {&(0x7f0000001dc0)=""/248, 0xf8}, {&(0x7f0000001ec0)=""/25, 0x19}, {&(0x7f0000001f00)=""/191, 0xbf}], 0x4, &(0x7f0000002000)=""/141, 0x8d}, 0x3ff}, {{&(0x7f00000020c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002140)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000002240)=""/16, 0x10}, 0xb}, {{&(0x7f0000002280)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002340), 0x0, &(0x7f0000002380)=""/253, 0xfd}}, {{0x0, 0x0, &(0x7f00000035c0)=[{0x0}, {&(0x7f0000003480)=""/143, 0x8f}, {&(0x7f0000003540)=""/73, 0x49}], 0x3, &(0x7f0000003600)=""/34, 0x22}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003f00)=[{0x0}, {0x0}, {&(0x7f0000003c80)=""/89, 0x59}, {&(0x7f0000003d00)=""/47, 0x2f}, {&(0x7f0000003d40)=""/122, 0x7a}], 0x5}, 0xb931}, {{0x0, 0x0, &(0x7f0000004400)}, 0x80000000}], 0x9, 0x2020, &(0x7f0000004900)={0x0, 0x989680}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) dup2(r4, r0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.521609808s ago: executing program 5 (id=1995): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)='a\'', 0x2}], 0x1}}], 0x3, 0x40) recvmmsg(r2, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/31, 0x1f}], 0x1}, 0x7}], 0x1, 0x40012000, 0x0) 2.310191455s ago: executing program 4 (id=1997): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x9764, &(0x7f00000097c0)="$eJzs3QeYJHWhcP1ZYMkZRERRVFSMRAkiShAQCRIVFBAkSw5KkiQiQVEQUAQk55xzzjnnnHPOme9ZdldxPaD3/e774r3nnOfZnenqqpqa/6+7anqqp3vJeRabc2Bg9IGhTTEwYrfcOedCG+805xX77LzXKVOMOf7kwyYPW2DSYRcnHTTs40gDAwMjDVvPsGljPXriSSMNjPLu9L831hhjDhpnYGC6YRdnH/ZxpqEfJnps+HzvjNCIGzrobxcH7TD037uNN+RLDPlk6ZsvPGdgYGD89yw/ZJFp/ukblbbkHPPO83erv7kNsRo87PP3/ht16MeJHhgYmOjeAb59jDDv//OGfM3xN5133W0/hK/9P64l55h3vhH8h9wXRx42baYh9/ER74PGRryd37zKrHsMG8J3b28DA0N2cf9wX/kf0ZJzzLPAwPvv5wceHnPcM955d7851rMDA2M9NzAw1vMDA2O9MDAw1osDA2O99GG71P+/5phz+jmH3N+HXx7GPvy2PD7dLvZZ/cW9BwYGRhs6z1hvDz1ejD3F8GNCVVVV/Wc3x5zTzwXH/9E/6Pi/9TZz3Nrxv6qq6n9u880x5/RDjuMjHP/H/qDj//duvHGNob/7n32moUu9/eF+E1VVVfVfap758Pg//gcd/8fb8fr9O/5XVVX9z23RBd89/o89wvF/4g86/q8x/52XDZtv+M8Nb71nle8+f2zY9DfeM33k90x//T3TB79nPe+df9T3TH/1PdNHHxgY69Fh09/8++Sxnh2yzD+vZ6yX//58nElHec/0V94zfdT3TH912DYNmT7ae6a/9Z75R//79LGH/DfFsK/72gcMdVVV1X9Mi04/z1wD73me/bDJw5/Yj88LPeaYbe76sLa3qqqqqqqqqv7rvf3U6Wf//W++Pznwnr9d/dvfsA77vcCgY8+99toPbUP/Mxr0z78P2fLD3qb/vw1xHv3wKQYG1lriw96U+hD6H/O36vV/pfzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9z7nP//29//D9z7pR2HzTrLZHfet9jfl5x0YLVhn91y55wLrfYhbPuH0P/W8/8Dqw0aGBjmO/4Qy4XmWHTxqQYGBha7787JZhz423UzD7lu1glHfvePOQcGpnr3/8GTvs+ah73Lwrtv7jDx39Zx7Lvrn++d/UYeNMJGvKfZzrn/oFWXfGWGET9+4f2/j7+9v8RSL+835fC/ZRlphJlGf5+Fh69/+PcyovOwbZ9qyLZPvcGa60y9/sabfHW1NZdfZaVVVlpruummnWH6GWeY7uuzTL3yamusNM3Q/99nzIa+dcXI/86YjT3imD01x3vHbMTvbYKTD8Ix++d39fiHVby7xvNme/jy4WM2yr85ZsO/3sgfPGZTrDbsC006MHhguXeHZtDAwKSjDB7YaMiFaUcbGJh08LB5Jx0y7zcnHGlgYKe/f6ODhr3Y6NB5Bm05ZJ7/sPctmWXYiGw2fL4RX2d9xA39V+9bcsLYu945wvuW/N/q/+j4/09eMw/620ANfwOEYfMM9fqQ32fin7Z3ilHePci93/Z+wOvivBvdvtZc9bEl/rteF4e2d+wP2N4PeB2/993eqaZ9Zs+hq/pv294R9nULDL3y39nXDXzwvm5kWn6lqyYfcV83//tv4j/cj4eP0WgjzPR++7qd5j9viyHrH/jgfd0Cqw178YC/7+tGGhiYdOTh+7ohO75RBw/sNOTCdEMujDZ44NAhF6Z/98IYA+cOufC1FdZeY8VB777MwLD1TjNkvbNPOGjoHeimg1Ydbdd33hll2La8PNY/buuw28cU7z2ezzHhsMEctuzw9Q6Zdfh6X9126HWjDlvvK/+F9Q5flrZ30rOGXjfasPW+OsJ6B3/Aeocv+0/3h6kG/cMTVWF/8199X6NR/zvf14juv6N/wPZ+wOtw4+3tXfcpl334v+F1uAe93/aO8sHb+37vG/K+2/v45U/s+9/1uuF0O7t3n6G3ldGH3c7e+i/cfocvO+J+bOgLgQzd7Y/+7+zHpvin/dhWI480wmC/p/f7OXdFmH/YPeJva1vxwFdWGz72g0dY77/6Ofc938sg2I+NP8LjuUFb7DswiMb80TVe2PDtXT54zAcP/ONji+FjPnzZDxrz0f6dMf/EB4/5iD8nv9+YT/XZodcPHmH73zvmi+w++03Dx3zUEdb7r8Z8tA8+dvzzmA8MDKYx32myoeP2QfvT9xvz4csOH/MhX2fWCUcZmHtgYGDKYWM+6r8z5pP+99zOx4T5h36+0t8mPTvjwl8ZPuYjjvG/GvNR/4tjvvm9f7udT/nudZ8ZaWDUUQc2Wn6DDdabduj/wy9ON/R/3hc9u+LQcf6gY+n7GQ1f9oPuF6P8O0bj/1tGg/6V0WSjvJ/R3+9aIx+06HP/p/uiUf6rRufyvujUeYeO2wf9XPR+Yz58WToOTvye5Ud8HPoBr5+F39O74zP/dsMf7/0nvH7W8Me7/yNfP2v47yRXG3EnX/9u/f7fXf7u8neXv7v8xb3P+f8php//f2fsAyYZ9qBz8FUz3zr7h729H3L/q8//D/P9h/P/s98681VDHloNu+4Dz88Onec/8vzsTEM/TPTY8PlGPD844ob+q/Oz++y2wVX/j87P/h81/L76bzwubv/vLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yF/c+5/+nGf48gIcWX+j7w06EDt5s2qM2+7C390Puf/X5/2G+/3D+f7Ojpt1spIG/XfeB5/+HzuM4/3//glss8598/n/4fbXz//Uvyt9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xb3P+f/Zhz8P4IjZ5v7c8OcD3LD9fnt+2Nv7Ife/9fx/7//vrf2/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9yw8/8DI7xN4sLdLjA4//8/u/fxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yB+z+P8wf8ziv2T+mMV/qfwxi/+P8scs/j/OH7P4L50/ZvFfJn/M4r9s/pjF/yf5Yxb/5fLHLP7L549Z/H+aP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yx/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP6/yB+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/X+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/6/yxyz+W+ePWfx/nT9m8d8mf8zi/5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/j/Nn/M4v+7/DGL/475Yxb/3+ePWfz/kD9m8d8pf8ziv3P+mMX/j/ljFv9d8scs/rvmj1n8d8sfs/j/KX/M4v/n/DGL/+75Yxb/v+SPWfz3yB+z+O+ZP2bx3yt/zOL/1/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+gwbyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyR/zOI/Sf6Yxf+j+WMW/0nzxyz+H8sfs/hPlj9m8f94/pjF/xP5Yxb/yfPHLP6fzB+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/D+bP2bxnzJ/zOL/ufwxi//n88cs/l/IH7P4T5U/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6Yxf9r+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf/r+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0b+mMV/1vwxi/8388cs/rPlj1n8v5U/ZvH/dv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+TP2bxnzt/zOI/T/6YxX/e/DGL/3fzxyz+8+WPWfy/lz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/+/nj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/x/kj1n8f5g/ZvFfMn/M4r9U/pjF/0f5Yxb/H+ePWfyXzh+z+C+TP2bxXzZ/zOL/k/wxi/9y+WMW/+Xzxyz+P80fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/lj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf/n+WMW/1/kj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/8v88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMX/V/ljFv+t88cs/r/OH7P4b5M/ZvH/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/H+bP2bx/13+mMV/x/wxi//v88cs/n/IH7P475Q/ZvHfOX/M4v/H/DGL/y75Yxb/XfPHLP675Y9Z/P+UP2bx/3P+mMV/9/wxi/9f8scs/nvkj1n898wfs/jvlT9m8f9r/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r839tWwz+x+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TPybxf/fT/P85i/+g/DGL/0j5Yxb/kfPHLP6j5I9Z/Afnj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP4fyR+z+E+SP2bx/2j+mMV/0vwxi//H8scs/pPlj1n8P54/ZvH/RP6YxX/y/DGL/yfzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/z+aPWfynzB+z+H8uf8zi//n8MYv/F/LHLP5T5Y9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/3r+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kT9m8Z81f8zi/838MYv/bPljFv9v5Y9Z/L+dP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/7+SPWfznzh+z+M+TP2bxnzd/zOL/3fwxi/98+WMW/+/lj1n8588fs/gvkD9m8V8wf8ziv1D+mMX/+/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/B/ljFv8f5o9Z/JfMH7P4L5U/ZvH/Uf6Yxf/H+WMW/6Xzxyz+y+SPWfyXzR+z+P8kf8ziv1z+mMV/+fwxi/9P88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/5/lj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx/3n+mMX/F/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8d80f8zi/8v8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8f9V/pjFf+v8MYv/r/PHLP7b5I9Z/H+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/3+aPWfx/lz9m8d8xf8zi//v8MYv/H/LHLP475Y9Z/HfOH7P4/zF/zOK/S/6YxX/X/DGL/275Yxb/P+WPWfz/nD9m8d89f8zi/5f8MYv/HvljFv8988cs/nvlj1n8/5o/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjEf+SB/DGL/6D8MYv/SPljFv+R88cs/qPkj1n8B+ePWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/h/JH7P4T5I/ZvH/aP6YxX/S/DGL/8fyxyz+k+WPWfw/nj9m8f9E/pjFf/L8MYv/J/PHLP6fyh+z+E+RP2bx/3T+mMX/M/ljFv/P5o9Z/KfMH7P4fy5/zOL/+fwxi/8X8scs/lPlj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/ev6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+RP2bxnzV/zOL/zfwxi/9s+WMW/2/lj1n8v50/ZvGfPX/M4j9H/pjFf878MYv/XPljFv/v5I9Z/OfOH7P4z5M/ZvGfN3/M4v/d/DGL/3z5Yxb/7+WPWfznzx+z+C+QP2bxXzB/zOK/UP6Yxf/7+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf8H+WMW/x/mj1n8l8wfs/gvlT9m8f9R/pjF/8f5Yxb/pfPHLP7L5I9Z/JfNH7P4/yR/zOK/XP6YxX/5/DGL/0/zxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/n+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/ef6Yxf8X+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOL/y/wxi/9m+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bx/1X+mMV/6/wxi/+v88cs/tvkj1n8f5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv/f5o9Z/H+XP2bx3zF/zOL/+/wxi/8f8scs/jvlj1n8d84fs/j/MX/M4r9L/pjFf9f8MYv/bvljFv8/5Y9Z/P+cP2bx3z1/zOL/l/wxi/8e+WMW/z3zxyz+e+WPWfz/mj9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w1X+74z3785p8T9C5f/vZ/E/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMX/7fwxi/87+WMS/1EG8scs/oPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8kf8ziP0n+mMX/o/ljFv9J88cs/h/LH7P4T5Y/ZvH/eP6Yxf8T+WMW/8nzxyz+n8wfs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfw/mz9m8Z8yf8zi/7n8MYv/5/PHLP5fyB+z+E+VP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/6/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9G/pjFf9b8MYv/N/PHLP6z5Y9Z/L+VP2bx/3b+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/kz9m8Z87f8ziP0/+mMV/3vwxi/9388cs/vPlj1n8v5c/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv/v549Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8f5I9Z/H+YP2bxXzJ/zOK/VP6Yxf9H+WMW/x/nj1n8l84fs/gvkz9m8V82f8zi/5P8MYv/cvljFv/l88cs/j/NH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/5/ljFv9f5I9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/L/PHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjF/1f5Yxb/rfPHLP6/zh+z+G+TP2bx/03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx/mz9m8f9d/pjFf8f8MYv/7/PHLP5/yB+z+O+UP2bx3zl/zOL/x/wxi/8u+WMW/13zxyz+u+WPWfz/lD9m8f9z/pjFf/f8MYv/X/LHLP575I9Z/PfMH7P475U/ZvH/a/6YxX/v/DGL/z75Yxb/ffPHLP77Sf1H+xfXW/z3l/r/qyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/8ED+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/j+SPWfwnyR+z+H80f8ziP2n+mMX/Y/ljFv/J8scs/h/PH7P4fyJ/zOI/ef6Yxf+T+WMW/0/lj1n8p8gfs/h/On/M4v+Z/DGL/2fzxyz+U+aPWfw/lz9m8f98/pjF/wv5Yxb/qfLHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H89f8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+38gfs/jPmj9m8f9m/pjFf7b8MYv/t/LHLP7fzh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/3fyxyz+c+ePWfznyR+z+M+bP2bx/27+mMV/vvwxi//38scs/vPnj1n8F8gfs/gvmD9m8V8of8zi//38MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi/4P8MYv/D/PHLP5L5o9Z/JfKH7P4/yh/zOL/4/wxi//S+WMW/2Xyxyz+y+aPWfx/kj9m8V8uf8ziv3z+mMX/p/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//P8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P88f8zi/4v8MYv/hvljFv+N8scs/hvnj1n8N8kfs/hvmj9m8f9l/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/j/Kn/M4r91/pjF/9f5Yxb/bfLHLP6/yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/2/zxyz+v8sfs/jvmD9m8f99/pjF/w/5Yxb/nfLHLP47549Z/P+YP2bx3yV/zOK/a/6YxX+3/DGL/5/yxyz+f84fs/jvnj9m8f9L/pjFf4/8MYv/nvljFv+98scs/n/NH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4j/qQP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv+P5I9Z/CfJH7P4fzR/zOI/af6Yxf9j+WMW/8nyxyz+H88fs/h/In/M4j95/pjF/5P5Yxb/T+WPWfynyB+z+H86f8zi/5n8MYv/Z/PHLP5T5o9Z/D+XP2bx/3z+mMX/C/ljFv+p8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fz1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP7fyB+z+M+aP2bx/2b+mMV/tvwxi/+38scs/t/OH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/d/LHLP5z549Z/OfJH7P4z5s/ZvH/bv6YxX++/DGL//fyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/8P88cs/kvmj1n8l8ofs/j/KH/M4v/j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+SP2bxXy5/zOK/fP6Yxf+n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/8/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/zx/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx/2X+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+P8qf8ziv3X+mMX/1/ljFv9t8scs/r/JH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/b/PHLP6/yx+z+O+YP2bx/33+mMX/D/ljFv+d8scs/jvnj1n8/5g/ZvHfJX/M4r9r/pjFf7f8MYv/n/LHLP5/zh+z+O+eP2bx/0v+mMV/j/wxi/+e+WMW/73yxyz+f80fs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP9pA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/kj1n8J8kfs/h/NH/M4j9p/pjF/2P5Yxb/yfLHLP4fzx+z+H8if8ziP3n+mMX/k/ljFv9P5Y9Z/KfIH7P4fzp/zOL/mfwxi/9n88cs/lPmj1n8P5c/ZvH/fP6Yxf8L+WMW/6nyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/PX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/IH7P4z5o/ZvH/Zv6YxX+2/DGL/7fyxyz+384fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi/938scs/nPnj1n858kfs/jPmz9m8f9u/pjFf778MYv/9/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/9/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+D/DGL/w/zxyz+S+aPWfyXyh+z+P8of8zi/+P8MYv/0vljFv9l8scs/svmj1n8f5I/ZvFfLn/M4r98/pjF/6f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/z/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/PH/M4v+L/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvH/Zf6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4/yp/zOK/df6Yxf/X+WMW/23yxyz+v8kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/9v88cs/r/LH7P475g/ZvH/ff6Yxf8P+WMW/53yxyz+O+ePWfz/mD9m8d8lf8ziv2v+mMV/t/wxi/+f8scs/n/OH7P4754/ZvH/S/6YxX+P/DGL/575Yxb/vfLHLP5/zR+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/TOI/+kD+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/odj/nS3e/zqL/0Ri/w/K4j9x/pjF/yP5Yxb/SfLHLP4fzR+z+E+aP2bx/1j+mMV/svwxi//H88cs/p/IH7P4T54/ZvH/ZP6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4v/Z/DGL/5T5Yxb/z+WPWfw/nz9m8f9C/pjFf6r8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fzx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/zfyxyz+s+aPWfy/mT9m8Z8tf8zi/638MYv/t/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v+d/DGL/9z5Yxb/efLHLP7z5o9Z/L+bP2bxny9/zOL/vfwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+H8/f8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+P8gf8zi/8P8MYv/kvljFv+l8scs/j/KH7P4/zh/zOK/dP6YxX+Z/DGL/7L5Yxb/n+SPWfyXyx+z+C+fP2bx/2n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/s/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4/zx+z+P8if8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfx/mT9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+v8ofs/hvnT9m8f91/pjFf5v8MYv/b/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/b/DGL/+/yxyz+O+aPWfx/nz9m8f9D/pjFf6f8MYv/zvljFv8/5o9Z/HfJH7P475o/ZvHfLX/M4v+n/DGL/5/zxyz+u+ePWfz/kj9m8d8jf8ziv2f+mMV/r/wxi/9f88cs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj1n838kfk/iPMZA/ZvEflD9m8R8pf8ziP3L+mMV/lPwxi//g/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMX/I/ljFv9J8scs/h/NH7P4T5o/ZvH/WP6YxX+y/DGL/8fzxyz+n8gfs/hPnj9m8f9k/pjF/1P5Yxb/KfLHLP6fzh+z+H8mf8zi/9n8MYv/lPljFv/P5Y9Z/D+fP2bx/0L+mMV/qvwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/PH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/N/LHLP6z5o9Z/L+ZP2bxny1/zOL/rfwxi/+388cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/538MYv/3PljFv958scs/vPmj1n8v5s/ZvGfL3/M4v+9/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fz9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yB/zOL/w/wxi/+S+WMW/6Xyxyz+P8ofs/j/OH/M4r90/pjFf5n8MYv/svljFv+f5I9Z/JfLH7P4L58/ZvH/af6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+z/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/PH7P4/yJ/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/H+ZP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP6/yh+z+G+dP2bx/3X+mMV/m/wxi/9v8scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/9v8MYv/7/LHLP475o9Z/H+fP2bx/0P+mMV/p/wxi//O+WMW/z/mj1n8d8kfs/jvmj9m8d8tf8zi/6f8MYv/n/PHLP67549Z/P+SP2bx3yN/zOK/Z/6YxX+v/DGL/1/zxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I85kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf8j+WMW/0nyxyz+H80fs/hPmj9m8f9Y/pjFf7L8MYv/x/PHLP6fyB+z+E+eP2bx/2T+mMX/U/ljFv8p8scs/p/OH7P4fyZ/zOL/2fwxi/+U+WMW/8/lj1n8P58/ZvH/Qv6YxX+q/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X88fs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/838scs/rPmj1n8v5k/ZvGfLX/M4v+t/DGL/7fzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/nfwxi//c+WMW/3nyxyz+8+aPWfy/mz9m8Z8vf8zi/738MYv//PljFv8F8scs/gvmj1n8F8ofs/h/P3/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/j/IH/M4v/D/DGL/5L5Yxb/pfLHLP4/yh+z+P84f8ziv3T+mMV/mfwxi/+y+WMW/5/kj1n8l8sfs/gvnz9m8f9p/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/7P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+P88fs/j/In/M4r9h/pjFfyOZ/2j/5nwW/41l/v9uFv9N8scs/pvmj1n8f5k/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/r/KH7P4b50/ZvH/df6YxX+b/DGL/2/yxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/2/wxi//v8scs/jvmj1n8f58/ZvH/Q/6YxX+n/DGL/875Yxb/P+aPWfx3yR+z+O+aP2bx3y1/zOL/p/wxi/+f88cs/rvnj1n8/5I/ZvHfI3/M4r9n/pjFf6/8MYv/X/PHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH5P4jzWQP2bxH5Q/ZvEfKX/M4j9y/pjFf5T8MYv/4Pwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjF/yP5Yxb/SfLHLP4fzR+z+E+aP2bx/1j+mMV/svwxi//H88cs/p/IH7P4T54/ZvH/ZP6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4v/Z/DGL/5T5Yxb/z+WPWfw/nz9m8f9C/pjFf6r8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fzx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/zfyxyz+s+aPWfy/mT9m8Z8tf8zi/638MYv/t/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v+d/DGL/9z5Yxb/efLHLP7z5o9Z/L+bP2bxny9/zOL/vfwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+H8/f8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+P8gf8zi/8P8MYv/kvljFv+l8scs/j/KH7P4/zh/zOK/dP6YxX+Z/DGL/7L5Yxb/n+SPWfyXyx+z+C+fP2bx/2n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/s/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4/zx+z+P8if8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfx/mT9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+v8ofs/hvnT9m8f91/pjFf5v8MYv/b/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/b/DGL/+/yxyz+O+aPWfx/nz9m8f9D/pjFf6f8MYv/zvljFv8/5o9Z/HfJH7P475o/ZvHfLX/M4v+n/DGL/5/zxyz+u+ePWfz/kj9m8d8jf8ziv2f+mMV/r/wxi/9f88cs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj1n838kfk/iPPZA/ZvEflD9m8R8pf8ziP3L+mMV/lPwxi//g/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMX/I/ljFv9J3tf/7Xfeeef/zab9J2bx/2j3f8ziP2n+mMX/Y/ljFv/J8scs/h/PH7P4fyJ/zOI/ef6Yxf+T+WMW/0/lj1n8p8gfs/h/On/M4v+Z/DGL/2fzxyz+U+aPWfw/lz9m8f98/pjF/wv5Yxb/qfLHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H89f8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+38gfs/jPmj9m8f9m/pjFf7b8MYv/t/LHLP7fzh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/3fyxyz+c+ePWfznyR+z+M+bP2bx/27+mMV/vvwxi//38scs/vPnj1n8F8gfs/gvmD9m8V8of8zi//38MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi/4P8MYv/D/PHLP5L5o9Z/JfKH7P4/yh/zOL/4/wxi//S+WMW/2Xyxyz+y+aPWfx/kj9m8V8uf8ziv3z+mMX/p/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//P8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P88f8zi/4v8MYv/hvljFv+N8scs/hvnj1n8N8kfs/hvmj9m8f9l/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/j/Kn/M4r91/pjF/9f5Yxb/bfLHLP6/yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/2/zxyz+v8sfs/jvmD9m8f99/pjF/w/5Yxb/nfLHLP47549Z/P+YP2bx3yV/zOK/a/6YxX+3/DGL/5/yxyz+f84fs/jvnj9m8f9L/pjFf4/8MYv/nvljFv+98scs/n/NH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/Kf0iDRhwDi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+4wzkj1n8B+WPWfxHyh+z+I+cP2bxHyV/zOI/OH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bx/0j+mMV/kvwxi/9H88cs/pPmj1n8P5Y/ZvGfLH/M4v/x/DGL/yfyxyz+k+ePWfw/mT9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+H82f8ziP2X+mMX/c/ljFv/P549Z/L+QP2bxnyp/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi//X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi//X88cs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/438MYv/rPljFv9v5o9Z/GfLH7P4fyt/zOL/7fwxi//s+WMW/znyxyz+c+aPWfznyh+z+H8nf8ziP3f+mMV/nvwxi/+8+WMW/+/mj1n858sfs/h/L3/M4j9//pjFf4H8MYv/gvljFv+F8scs/t/PH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/j/IH7P4/zB/zOK/ZP6YxX+p/DGL/4/yxyz+P84fs/gvnT9m8V8mf8ziv2z+mMX/J/ljFv/l8scs/svnj1n8f5o/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/j/LH/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi//P88cs/r/IH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv9f5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/r/LHLP5b549Z/H+dP2bx3yZ/zOL/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+P82f8zi/7v8MYv/jvljFv/f549Z/P+QP2bx3yl/zOK/c/6Yxf+P+WMW/13yxyz+u+aPWfx3yx+z+P8pf8zi/+f8MYv/7vljFv+/5I9Z/PfIH7P475k/ZvHfK3/M4v/X/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP7jDuSPWfwH5Y9Z/EfKH7P4j5w/ZvEfJX/M4j84f8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvH/SP6YxX+S/DGL/0fzxyz+k+aPWfw/lj9m8Z8sf8zi//H8MYv/J/LHLP6T549Z/D+ZP2bx/1T+mMV/ivwxi/+n88cs/p/JH7P4fzZ/zOI/Zf6Yxf9z+WMW/8/nj1n8v5A/ZvGfKn/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/9fzxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/jfwxi/+s+WMW/2/mj1n8Z8sfs/h/K3/M4v/t/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fyd/zOI/d/6YxX+e/DGL/7z5Yxb/7+aPWfznyx+z+H8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+388fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8gfs/j/MH/M4r9k/pjFf6n8MYv/j/LHLP4/zh+z+C+dP2bxXyZ/zOK/bP6Yxf8n+WMW/+Xyxyz+y+ePWfx/mj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P8sf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/8/zxyz+v8gfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+m+WMW/1/mj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi/+v8scs/lvnj1n8f50/ZvHfJn/M4v+b/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P4/zZ/zOL/u/wxi/+O+WMW/9/nj1n8/5A/ZvHfKX/M4r9z/pjF/4/5Yxb/XfLHLP675o9Z/HfLH7P4/yl/zOL/5/wxi//u+WMW/7/kj1n898gfs/jvmT9m8d8rf8zi/9f8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv938sck/uMN5I9Z/Aflj1n8R8ofs/iPnD9m8R8lf8ziPzh/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8f9I/pjFf5L8MYv/R/PH/j/26CltFAKAAuCt/szHbNu2bdu2bdu2bdu2bdvWe99ZQWdmC9PyP6r/qOV/NP9Ry//o/qOW/zH8Ry3/Y/qPWv7H8h+1/I/tP2r5H8d/1PI/rv+o5X88/1HL//j+o5b/CfxHLf8T+o9a/ifyH7X8T+w/avmfxH/U8j+p/6jlfzL/Ucv/5P6jlv8p/Ect/1P6j1r+p/IftfxP7T9q+Z/Gf9TyP63/qOV/Ov9Ry//0/qOW/xn8Ry3/M/qPWv5n8h+1/M/sP2r5n8V/1PI/q/+o5X82/1HL/+z+o5b/OfxHLf9z+o9a/ufyH7X8z+0/avmfx3/U8j+v/6jlfz7/Ucv//P6jlv8F/Ect/wv6j1r+F/Iftfwv7D9q+V/Ef9Tyv6j/qOV/Mf9Ry//i/qOW/yX8Ry3/S/qPWv6X8h+1/C/tP2r5X8Z/1PK/rP+o5X85/1HL//L+o5b/FfxHLf8r+o9a/lfyH7X8r+w/avlfxX/U8r+q/6jlfzX/Ucv/6v6jlv81/Ect/2v6j1r+1/Iftfyv7T9q+V/Hf9Tyv67/qOV/Pf9Ry//6/qOW/w38Ry3/G/qPWv438h+1/G/sP2r538R/1PK/qf+o5X8z/1HL/+b+o5b/LfxHLf9b+o9a/rfyH7X8b+0/avnfxn/U8r+t/6jlfzv/Ucv/9v6jlv8d/Ect/zv6j1r+d/Iftfzv7D9q+d/Ff9Tyv6v/qOV/N/9Ry//u/qOW/z38Ry3/e/qPWv738h+1/O/tP2r538d/1PK/r/+o5X8//1HL//7+o5b/A/xHLf8H+o9a/g/yH7X8H+w/avk/xH/U8n+o/6jl/zD/Ucv/4f6jlv8j/Ect/0f6j1r+j/Iftfwf7T9q+T/Gf9Tyf6z/qOX/OP9Ry//x/qOW/xP8Ry3/J/qPWv5P8h+1/J/sP2r5P8V/1PJ/qv+o5f80/1HL/+n+o5b/M/xHLf9n+o9a/s/yH7X8n+0/avk/x3/U8n+u/6jl/zz/Ucv/+f6jlv8L/Ect/xf6j1r+L/Iftfxf7D9q+b/Ef9Tyf6n/qOX/Mv9Ry//l/qOW/yv8Ry3/V/qPWv6v8h+1/F/tP2r5v8Z/1PJ/rf+o5f86/1HL//X+o5b/G/xHLf83+o9a/m/yH7X83+w/avm/xX/U8n+r/6jl/zb/Ucv/7f6jlv87/Ect/3f6j1r+7/Iftfzf7T9q+b/Hf9Tyf6//qOX/Pv9Ry//9/qOW/wf8Ry3/D/qPWv4f8h+1/D/sP2r5f8R/1PL/qP+o5f8x/1HL/+P+o5b/J/xHLf9P+o9a/p/yH7X8P+0/avl/xn/U8v+s/6jl/zn/Ucv/8/6jlv8X/Ect/y/6j1r+X/Iftfy/7D9q+X/Ff9Ty/6r/qOX/Nf9Ry//r/qOW/zf8Ry3/b/qPWv7f8h+1/L/tP2r5f8d/1PL/rv+o5f89/1HL//v+o5b/D/xHLf8f+o9a/j/yH7X8f+w/avn/xH/U8v+p/6jl/zP/Ucv/5/6jlv8v/P/XwKCi/y/9Ry3/X/mPWv6/9h+1/H/jP2r5/9Z/1PL/nf+o5f97/1HL/w/+o5b/H/1HLf8/+Y9a/n/2H7X8/+I/avn/1X/U8v+b/6jl/3f/Ucv/H/6jlv8//Uct/3/5j1r+//Yftfz/4z8q+R9lkP+o5X8w/1HL/+D+o5b/IfxHLf8D/qOW/yH9Ry3/Q/mPWv6H9h+1/A/jP2r5H9Z/1PI/nP+o5X94/1HL/wj+o5b/Ef1HLf8j+Y9a/kf2H/3v/gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Ze9uY/MqCz+On67tnv7s3805vIYMBptu4srWrkwGmw/1sWCqjsWACWQLK6NSmHsIbqBWgxKDMUxGgoi6Td0EEmPGi2ECwkqiEqeicSIa4hDURUwNExnRuNTcbe/S3mub9arXtRf7fF609znld7ot+e6csjUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICUNm+75Ya1HR1tm7zwwgsvBl6c6t+ZgNRei/5U/0gAAAAAAAAAAAAAAICR5Ph2olP9cwQAAAAAgNNNS+u7uqurhpyqHnww5+dtve+bXr3y+j3PP76y/L7/w5cPc8kJgw96enp6Xmrumtl/OKkoitJnm95/PLlyXLp+Z9fl2/uOQvHbZ5tbt21vPrjzK19/eO7U6XNqe8/WFmuua+9oWzKhKEJ1bbG1dNBQVRRhYm2xvXTQWDqYVFvcXzpY2nswpThQOrjw2g0d60onTvjUcNppaf1sUT2k2GLI7waD++/s2rSr/H6US5avVlP091/X/MO9FR8rG6H/8vVDVWX/Y/4JAiMaW/+3Lyy/H+WSJ9z/H22vWzXcx0buv3z9MEH/kM4wz/9DGu193t+zf8YIz/9zh7nkwP6nf1nZVer/pl++UN9/quZknv9Ln6/vKFRX9j9hyPN/6Tm+pvz8P6koQu04fzngtNLS+rnu0e7/ld0P7b/mrIpN1eD+j67aU13q//BdD7y//1TtSfU/cP1QM8r9v+ozB4b+WIGxaWnd3VNx/x9D/8WCYS450P/83ceuKvV/xs4j+wZ9bCz911b2v3jLjZ9YvHnbLfXtN65d37a+7abGxoampcuaGi9avrj3kaDv7Th/VeD0ML77fzG1YlNVFG0D+0UfXvZSqf+D5/7jb/2nJo+x/4mj3v+fc/+HYZ0/oZg4sdi6dsuWTQ19b8uHjX1v+/6zYfo/8ev/EfufV/7/gOWvu0tfkA/sf/POr36k1P+9k1Y90H9q4hj7nzRa/52vfV4gwjjv/+sqNkP6b3/1O+tK/f/pleOH+k+N9ev/yaP2v8v9H8ajpbXiL/z8j5X6X/2vw8P9OcFJCFP8+R+kk6P/rdN+8c24dZiqf0gnR/9LN7dF/mXb8H/6h3Ry9P+rHVVH4tbhDP1DOjn6/1r3gxvj1mGa/iGdHP3vn/3IU3Hr8P/6h3Ry9H98/fSr4tahTv+QTo7+L/vS3tVx6zBd/5BOjv6rXpn2RNw6zNA/pJOj//qqsz8Vtw6v0z+kk6P/6zoffjFuHWbqH9LJ0f/nd/468vt0wuv1D+nk6P+pP27dEbcOs/QP6eTo/4VZ7fVx63Cm/iGdHP3ff8MTj8Stwxv0D+nk6P/pb33wWNw6BP1DOjn6/8azR9bErcNs/UM6Ofrft/DYH+LW4Sz9Qzo5+v/3R6/+QNw6vFH/kE6O/sP+5d+NW4ez9Q/p5Oj/iifvaohbhzn6h3Ry9N+54rY749bhHP1DOjn6b2peODtuHc7VP6STo/8Zf/773XHrMFf/kE6O/j9233sr/93vkxTO0z+kk6P/mzesfjRuHc7XP6STo/+VM3ouiFuHefqHdHL0f/jofT+KW4f5+od0cvR/951LrohbhzfpH9LJ0f8Pbj2vO24d3qx/SCdH/y/X3nFr3Dos0D+kk6P/L/+sZlncOizUP6STo/8fP/T9XXHr8Bb9Qzo5+n/xfY+dE7cOF+gf0snR/+6LZ30xbh3eqn9IJ0f/735m4/q4dVikf0gnR/+T9/7+aNw61Osf0snR//xVBz8Utw4X6h/SydH/hkVrfhe3Dov1D+nk6P+ZA08filuHJfqHdHL0v+OxTzfHrUOD/iGdHP0/flnHf+LWoVH/kE6O/v/Z9JOPx63DUv1DOjn6P/PQt78Qtw5N+od0cvR/9YOTZ8atw0X6h3Ry9L/xmtnfi1uHZfqHdHL0f8nchy6NW4e36R/SydH/e/664ua4dbhY/5BOjv7r7rnnubh1WK5/SCdH//Ouvf2auHW4RP+QTo7+r59T/2TcOlyqf0gnR/93HG9ZELcOK/QP6eTov+u25/fFrcNK/UM6Ofrv/uTLdXHr8Hb9Qzo5+t875cp749bhHfoHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+CgAA//9kJdJC") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xc0) sendfile(r1, r1, 0x0, 0x7a680000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000300)={@desc={0x1, 0x0, @desc4}}) 2.175114919s ago: executing program 2 (id=1998): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="5dde9c0f6d45c34ec93a5fb406", @ANYRES16=0x0, @ANYRES16], 0x1, 0x210, &(0x7f0000000200)="$eJzs3c9uEl0UAPADpcB8+RbdmZiYjHGhq0Z9Ao2piZHEpIaF7prYVVnBBti0j+Er+F4+gOmKjRlDhylIpwRJB/zz+y3aA2fO5V5uuLDhkEXu673P0W7Xov4ikpjU4iDqUbgIAOBvMsmy+Jblfr26UcWUAICKrfH+/33LUwIAKvb+w8e3Lzudo+M0bUdcXgy7w27+P8+/ftM5eppeOZhXXQ6H3b3r/LN0+bPDNL8f/83yz/P69DrdjIhuM548yvPT3Kt3nfTn+lZ8qnjtAAAAAAAAAAAAAAAAAAAAAACwKw8iLZT29zk8XM4ns3x+a6E/0FL/nkbcL9oDz9sDZefbWBQAAAAAAAAAAAAAAAAAAAD8YQaj8dlJr3fanwetiFi8p1Fyze1BbTbwWhfvPqjHZuXJbJkbPGht9hRVu8CkfHPXCaLxu+zOpkF6VwO2im2+mUqitqI8y6ZB+augaItxa3kzIlZP7PHxpuuaZFnW+/KwPxhFtvLi+RnRKj86mtWcSAAAAAAAAAAAAAAAAAAA8O9a+Nb3De29XcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALZvMBoXv/I/Pjvp9U77g9HawXlE/B+lqWRhwOng7YjYv/oLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd+9HAAAA//+TmBrH") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, 0x0) removexattr(&(0x7f0000000080)='./file0/file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) statfs(&(0x7f0000000140)='./file1\x00', &(0x7f0000000440)=""/139) write$FUSE_INIT(r0, &(0x7f00000026c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x2, 0x80, 0x8001, 0x9, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x2}}, 0x26) write$FUSE_CREATE_OPEN(r0, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x1, 0x2, 0x3, 0x2, 0x9, 0x51, {0x5, 0x0, 0xa9, 0x2, 0x6, 0x9f18, 0x2, 0x5c, 0x40, 0xa000, 0x0, 0x0, 0x0, 0x67f000, 0x3}}, {0x0, 0x11}}}, 0xa0) 1.961063146s ago: executing program 2 (id=1999): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2}) r2 = creat(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f0000000280)=""/43, 0x2b}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000700)=""/9, 0x9}, {&(0x7f0000000740)=""/235, 0xeb}], 0x9, &(0x7f0000001940)=""/220, 0xdc}, 0x6}, {{&(0x7f0000001a40)=@caif=@dgm, 0x80, 0x0, 0x0, &(0x7f0000001c40)=""/44, 0x2c}, 0x8}, {{&(0x7f0000001c80)=@sco, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001d00)=""/187, 0xbb}, {&(0x7f0000001dc0)=""/248, 0xf8}, {&(0x7f0000001ec0)=""/25, 0x19}, {&(0x7f0000001f00)=""/191, 0xbf}], 0x4, &(0x7f0000002000)=""/141, 0x8d}, 0x3ff}, {{&(0x7f00000020c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002140)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000002240)=""/16, 0x10}, 0xb}, {{&(0x7f0000002280)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002340), 0x0, &(0x7f0000002380)=""/253, 0xfd}}, {{0x0, 0x0, &(0x7f00000035c0)=[{0x0}, {&(0x7f0000003480)=""/143, 0x8f}, {&(0x7f0000003540)=""/73, 0x49}], 0x3, &(0x7f0000003600)=""/34, 0x22}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003f00)=[{0x0}, {0x0}, {&(0x7f0000003c80)=""/89, 0x59}, {&(0x7f0000003d00)=""/47, 0x2f}, {&(0x7f0000003d40)=""/122, 0x7a}], 0x5}, 0xb931}, {{0x0, 0x0, &(0x7f0000004400)}, 0x80000000}], 0x9, 0x2020, &(0x7f0000004900)={0x0, 0x989680}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) dup2(r4, r0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.8304918s ago: executing program 1 (id=2000): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0xfffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000140)={0x100, r4}, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 1.512216851s ago: executing program 5 (id=2001): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x7) ioprio_get$pid(0x1, r1) ftruncate(r0, 0x0) 1.133046833s ago: executing program 5 (id=2002): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2}) creat(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f0000000280)=""/43, 0x2b}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000700)=""/9, 0x9}, {&(0x7f0000000740)=""/235, 0xeb}], 0x9, &(0x7f0000001940)=""/220, 0xdc}, 0x6}, {{&(0x7f0000001a40)=@caif=@dgm, 0x80, 0x0, 0x0, &(0x7f0000001c40)=""/44, 0x2c}, 0x8}, {{&(0x7f0000001c80)=@sco, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001d00)=""/187, 0xbb}, {&(0x7f0000001dc0)=""/248, 0xf8}, {&(0x7f0000001ec0)=""/25, 0x19}, {&(0x7f0000001f00)=""/191, 0xbf}], 0x4, &(0x7f0000002000)=""/141, 0x8d}, 0x3ff}, {{&(0x7f00000020c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002140)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000002240)=""/16, 0x10}, 0xb}, {{&(0x7f0000002280)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002340), 0x0, &(0x7f0000002380)=""/253, 0xfd}}, {{0x0, 0x0, &(0x7f00000035c0)=[{0x0}, {&(0x7f0000003480)=""/143, 0x8f}, {&(0x7f0000003540)=""/73, 0x49}], 0x3, &(0x7f0000003600)=""/34, 0x22}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003f00)=[{0x0}, {0x0}, {&(0x7f0000003c80)=""/89, 0x59}, {&(0x7f0000003d00)=""/47, 0x2f}, {&(0x7f0000003d40)=""/122, 0x7a}], 0x5}, 0xb931}, {{0x0, 0x0, &(0x7f0000004400)}, 0x80000000}], 0x9, 0x2020, &(0x7f0000004900)={0x0, 0x989680}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup2(r3, r0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.073304725s ago: executing program 2 (id=2003): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) timerfd_create(0x0, 0x800) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x20, 0x2, 0x13, {0x13, 0x14, "0907bee86dccaa3fce9194d90d844631a7"}}, &(0x7f0000000100)={0x0, 0x3, 0x18, @string={0x18, 0x3, "ea0d20f0d0f1da94b36f8bfe0e61e592759b56a841fd"}}, 0x0, 0x0}, 0x0) 822.467033ms ago: executing program 1 (id=2004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0xfffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000140)={0x100, r4}, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 753.124465ms ago: executing program 4 (id=2005): sendmmsg(0xffffffffffffffff, &(0x7f0000008000)=[{{&(0x7f0000000080)=@generic={0xa, "b704e23b0230ec5547cb9d39b541177c2624047cdfbb1183e37a472edac14ed1f62fb01983111172d9fb0690eabb9ebc9bceb1c74212721ca59952e9cffa4005f2eab850139f1d84d13af2977f6d6284def2415254ad7188efd400d337d9272e0fa9e31051bbce00647a040627a7e0d3f6ad4319066929d5f578afb23137"}, 0x80, 0x0}}], 0x1, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 552.455472ms ago: executing program 4 (id=2006): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2}) r2 = creat(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f0000000280)=""/43, 0x2b}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000700)=""/9, 0x9}, {&(0x7f0000000740)=""/235, 0xeb}], 0x9, &(0x7f0000001940)=""/220, 0xdc}, 0x6}, {{&(0x7f0000001a40)=@caif=@dgm, 0x80, 0x0, 0x0, &(0x7f0000001c40)=""/44, 0x2c}, 0x8}, {{&(0x7f0000001c80)=@sco, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001d00)=""/187, 0xbb}, {&(0x7f0000001dc0)=""/248, 0xf8}, {&(0x7f0000001ec0)=""/25, 0x19}, {&(0x7f0000001f00)=""/191, 0xbf}], 0x4, &(0x7f0000002000)=""/141, 0x8d}, 0x3ff}, {{&(0x7f00000020c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002140)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000002240)=""/16, 0x10}, 0xb}, {{&(0x7f0000002280)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002340), 0x0, &(0x7f0000002380)=""/253, 0xfd}}, {{0x0, 0x0, &(0x7f00000035c0)=[{0x0}, {&(0x7f0000003480)=""/143, 0x8f}, {&(0x7f0000003540)=""/73, 0x49}], 0x3, &(0x7f0000003600)=""/34, 0x22}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003f00)=[{0x0}, {0x0}, {&(0x7f0000003c80)=""/89, 0x59}, {&(0x7f0000003d00)=""/47, 0x2f}, {&(0x7f0000003d40)=""/122, 0x7a}], 0x5}, 0xb931}, {{0x0, 0x0, &(0x7f0000004400)}, 0x80000000}], 0x9, 0x2020, &(0x7f0000004900)={0x0, 0x989680}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) dup2(r4, r0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 213.870713ms ago: executing program 4 (id=2007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 213.470292ms ago: executing program 5 (id=2008): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2}) r2 = creat(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f0000000280)=""/43, 0x2b}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000700)=""/9, 0x9}, {&(0x7f0000000740)=""/235, 0xeb}], 0x9, &(0x7f0000001940)=""/220, 0xdc}, 0x6}, {{&(0x7f0000001a40)=@caif=@dgm, 0x80, 0x0, 0x0, &(0x7f0000001c40)=""/44, 0x2c}, 0x8}, {{&(0x7f0000001c80)=@sco, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001d00)=""/187, 0xbb}, {&(0x7f0000001dc0)=""/248, 0xf8}, {&(0x7f0000001ec0)=""/25, 0x19}, {&(0x7f0000001f00)=""/191, 0xbf}], 0x4, &(0x7f0000002000)=""/141, 0x8d}, 0x3ff}, {{&(0x7f00000020c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002140)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000002240)=""/16, 0x10}, 0xb}, {{&(0x7f0000002280)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002340), 0x0, &(0x7f0000002380)=""/253, 0xfd}}, {{0x0, 0x0, &(0x7f00000035c0)=[{0x0}, {&(0x7f0000003480)=""/143, 0x8f}, {&(0x7f0000003540)=""/73, 0x49}], 0x3, &(0x7f0000003600)=""/34, 0x22}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003f00)=[{0x0}, {0x0}, {&(0x7f0000003c80)=""/89, 0x59}, {&(0x7f0000003d00)=""/47, 0x2f}, {&(0x7f0000003d40)=""/122, 0x7a}], 0x5}, 0xb931}, {{0x0, 0x0, &(0x7f0000004400)}, 0x80000000}], 0x9, 0x2020, &(0x7f0000004900)={0x0, 0x989680}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) dup2(r4, r0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 186.430943ms ago: executing program 4 (id=2009): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(0x0, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) read$usbmon(r0, 0x0, 0x0) read$usbmon(r0, &(0x7f0000000180)=""/159, 0x9f) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 33.248899ms ago: executing program 4 (id=2010): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 0s ago: executing program 5 (id=2011): socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2b1403, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00') kernel console output (not intermixed with test programs): no interface number 0 [ 158.424342][ T23] usb 2-1: config 0 interface 184 has no altsetting 0 [ 158.464061][ T23] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 158.479992][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.504770][ T23] usb 2-1: Product: syz [ 158.514929][ T23] usb 2-1: Manufacturer: syz [ 158.519581][ T6474] veth0_vlan: entered promiscuous mode [ 158.539977][ T6474] veth1_vlan: entered promiscuous mode [ 158.557077][ T23] usb 2-1: SerialNumber: syz [ 158.577464][ T6501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.591830][ T23] usb 2-1: config 0 descriptor?? [ 158.628135][ T23] smsc75xx v1.0.0 [ 158.681755][ T6474] veth0_macvtap: entered promiscuous mode [ 158.732218][ T6474] veth1_macvtap: entered promiscuous mode [ 158.778877][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.807538][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.828222][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.872244][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.883811][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.908579][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.933615][ T6474] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.944301][ T6474] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.953467][ T6474] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.962663][ T6474] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.028551][ T1206] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.124312][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.150783][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.222104][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.247455][ T1206] usb 3-1: Using ep0 maxpacket: 8 [ 159.253953][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 159.262677][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.277299][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.296787][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 159.317197][ T1206] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.342440][ T1206] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 159.366889][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.417989][ T1206] usb 3-1: config 0 descriptor?? [ 159.512264][ T6501] veth0_vlan: entered promiscuous mode [ 159.565533][ T6501] veth1_vlan: entered promiscuous mode [ 159.674798][ T6501] veth0_macvtap: entered promiscuous mode [ 159.710039][ T6501] veth1_macvtap: entered promiscuous mode [ 159.742478][ T1206] usbhid 3-1:0.0: can't add hid device: -71 [ 159.762597][ T1206] usbhid: probe of 3-1:0.0 failed with error -71 [ 159.775454][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.795875][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.810788][ T1206] usb 3-1: USB disconnect, device number 4 [ 159.824691][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.855720][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.902955][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.972515][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.988777][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.003669][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.015210][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.047365][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.374643][ T6501] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.415654][ T6501] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.462462][ T6501] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.476992][ T6501] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.609029][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 160.667731][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 160.684799][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 160.695653][ T23] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 160.729894][ T23] usb 2-1: USB disconnect, device number 3 [ 161.123462][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.134066][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.203755][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.216817][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.918261][ T6773] team0: Port device team_slave_0 removed [ 162.444477][ T6796] loop1: detected capacity change from 0 to 164 [ 163.656128][ T5814] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 163.886276][ T5814] usb 5-1: Using ep0 maxpacket: 32 [ 164.004067][ T5814] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 164.197982][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.367616][ T5814] usb 5-1: Product: syz [ 164.371901][ T5814] usb 5-1: Manufacturer: syz [ 164.406407][ T5814] usb 5-1: SerialNumber: syz [ 164.460439][ T5814] usb 5-1: config 0 descriptor?? [ 164.536062][ T5814] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 164.631377][ T6823] Bluetooth: MGMT ver 1.22 [ 165.665540][ T6838] overlayfs: failed to get inode (-116) [ 165.687277][ T6838] overlayfs: failed to get inode (-116) [ 165.703141][ T6838] overlayfs: failed to get inode (-116) [ 165.726281][ T6838] overlayfs: failed to get inode (-116) [ 165.753085][ T6843] overlayfs: failed to get inode (-116) [ 165.771292][ T6843] overlayfs: failed to get inode (-116) [ 165.781248][ T6843] overlayfs: failed to get inode (-116) [ 166.694768][ T6862] loop2: detected capacity change from 0 to 164 [ 166.805860][ T5814] gspca_ov534_9: reg_w failed -71 [ 167.288465][ T5814] gspca_ov534_9: Unknown sensor 0000 [ 167.288866][ T5814] ov534_9: probe of 5-1:0.0 failed with error -22 [ 167.483792][ T5814] usb 5-1: USB disconnect, device number 2 [ 168.376305][ T1206] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 168.581467][ T1206] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.594627][ T27] audit: type=1800 audit(1774928928.839:4): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.233" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 168.595063][ T1206] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.655593][ T1206] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.670558][ T1206] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.708282][ T1206] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.737846][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.772371][ T1206] usb 2-1: Product: syz [ 168.786747][ T5814] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 168.792265][ T1206] usb 2-1: Manufacturer: syz [ 168.816423][ T1206] cdc_wdm 2-1:1.0: skipping garbage [ 168.822237][ T1206] cdc_wdm 2-1:1.0: skipping garbage [ 168.868736][ T6901] loop4: detected capacity change from 0 to 2048 [ 168.904371][ T1206] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 168.920112][ T1206] cdc_wdm 2-1:1.0: Unknown control protocol [ 168.976140][ T5814] usb 6-1: Using ep0 maxpacket: 8 [ 169.012758][ T5814] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 169.043832][ T5814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.052984][ T6901] NILFS (loop4): invalid segment: Checksum error in segment payload [ 169.056629][ T1206] usb 2-1: USB disconnect, device number 4 [ 169.070412][ T6901] NILFS (loop4): trying rollback from an earlier position [ 169.079007][ T5814] usb 6-1: Product: syz [ 169.083187][ T5814] usb 6-1: Manufacturer: syz [ 169.089609][ T5814] usb 6-1: SerialNumber: syz [ 169.108386][ T5814] usb 6-1: config 0 descriptor?? [ 169.141932][ T6901] NILFS (loop4): recovery complete [ 169.170174][ T6907] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.369399][ T5814] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 169.391476][ T27] audit: type=1800 audit(1774928929.639:5): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.235" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 169.579277][ T6917] loop2: detected capacity change from 0 to 164 [ 169.677742][ T1206] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 169.890011][ T1206] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.921713][ T1206] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.957720][ T1206] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.987434][ T1206] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.021416][ T1206] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 170.052023][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 170.071382][ T1206] usb 2-1: Product: syz [ 170.075618][ T1206] usb 2-1: Manufacturer: syz [ 170.110528][ T1206] cdc_wdm 2-1:1.0: skipping garbage [ 170.127644][ T1206] cdc_wdm 2-1:1.0: skipping garbage [ 170.143250][ T1206] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 170.160682][ T1206] cdc_wdm 2-1:1.0: Unknown control protocol [ 170.800082][ T5814] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 170.829093][ T5814] usb 6-1: USB disconnect, device number 2 [ 171.026366][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 171.033388][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 171.044977][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 171.051752][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 171.059646][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 171.066387][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 171.076280][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 171.082946][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 171.090478][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 171.097117][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 171.105470][ T1206] usb 2-1: USB disconnect, device number 5 [ 171.111526][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 171.111552][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 171.111569][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 172.035421][ T6966] binder: BINDER_SET_CONTEXT_MGR already set [ 172.045138][ T6966] binder: 6963:6966 ioctl 4018620d 2000000002c0 returned -16 [ 172.844002][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 175.416564][ T7012] loop2: detected capacity change from 0 to 164 [ 178.418347][ T27] audit: type=1804 audit(1774928938.659:6): pid=7047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.254" name="/newroot/9/file0/file1" dev="overlay" ino=74 res=1 errno=0 [ 179.397720][ T7076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 179.465280][ T7079] overlayfs: statfs failed on './file0' [ 180.606754][ T5811] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 180.866235][ T5811] usb 2-1: Using ep0 maxpacket: 8 [ 180.876789][ T5811] usb 2-1: unable to get BOS descriptor or descriptor too short [ 180.885120][ T5811] usb 2-1: too many configurations: 141, using maximum allowed: 8 [ 180.895727][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.908659][ T5811] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.927844][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.941987][ T5811] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.958259][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.972649][ T5811] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.989186][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.000073][ T5811] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.015468][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.031533][ T5811] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.056433][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.066908][ T5811] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.081571][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.092774][ T5811] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.108410][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.119067][ T5811] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.136137][ T5811] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 181.145642][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.154219][ T5811] usb 2-1: Product: syz [ 181.159837][ T5811] usb 2-1: Manufacturer: syz [ 181.164611][ T5811] usb 2-1: SerialNumber: syz [ 181.445584][ T5811] usb 2-1: USB disconnect, device number 6 [ 181.825691][ T7124] loop4: detected capacity change from 0 to 256 [ 181.913263][ T7124] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 182.127077][ T7128] syzkaller0: entered promiscuous mode [ 182.157821][ T7128] syzkaller0: entered allmulticast mode [ 182.226281][ T7128] tipc: Started in network mode [ 182.246707][ T7128] tipc: Node identity c693166e5ffd, cluster identity 4711 [ 182.267671][ T7128] tipc: Enabled bearer , priority 0 [ 182.305598][ T7127] tipc: Resetting bearer [ 182.340736][ T7133] loop1: detected capacity change from 0 to 2048 [ 182.385557][ T7127] tipc: Disabling bearer [ 182.441610][ T7133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.764434][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.771924][ T7141] loop4: detected capacity change from 0 to 2048 [ 182.858618][ T7141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.924542][ T7150] netlink: 260 bytes leftover after parsing attributes in process `syz.1.281'. [ 183.164461][ T6474] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.753630][ T7158] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 183.824847][ T7158] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 183.843810][ T7158] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 183.886451][ T7158] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 183.910966][ T7158] kvm: requested 189409 ns i8254 timer period limited to 200000 ns [ 183.996608][ T7158] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 184.225380][ T7158] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 185.360962][ T7211] loop2: detected capacity change from 0 to 164 [ 185.772304][ T7215] 0x000000000008-0x000000000016 : "" [ 185.823432][ T7215] ftl_cs: FTL header corrupt! [ 186.327306][ T7236] loop5: detected capacity change from 0 to 164 [ 186.843145][ T7241] [ 188.268225][ T7271] loop4: detected capacity change from 0 to 2048 [ 188.329295][ T7274] loop2: detected capacity change from 0 to 164 [ 188.383307][ T7271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.436409][ T7271] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.287054][ T6474] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.173228][ T7336] syzkaller0: entered promiscuous mode [ 193.191415][ T7336] syzkaller0: entered allmulticast mode [ 193.534297][ T7320] loop4: detected capacity change from 0 to 32768 [ 193.620309][ T7345] loop5: detected capacity change from 0 to 164 [ 193.663729][ T7320] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 193.884221][ T7320] XFS (loop4): Ending clean mount [ 193.932716][ T7320] XFS (loop4): syz.4.316 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 194.096962][ T6474] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 194.316131][ T27] audit: type=1804 audit(1774928954.559:7): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.323" name="/newroot/97/file1" dev="fuse" ino=1 res=1 errno=0 [ 194.382998][ T27] audit: type=1800 audit(1774928954.559:8): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.323" name="/" dev="fuse" ino=1 res=0 errno=0 [ 194.683309][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.690039][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.830229][ T7381] loop4: detected capacity change from 0 to 2048 [ 194.879816][ T7381] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362 [ 194.939330][ T7381] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 194.979303][ T7381] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 195.039388][ T7381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.608777][ T7391] capability: warning: `syz.2.329' uses deprecated v2 capabilities in a way that may be insecure [ 195.656262][ T7391] program syz.2.329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.367864][ T7402] loop2: detected capacity change from 0 to 40427 [ 196.440298][ T5847] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 196.451564][ T7402] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 196.459641][ T7402] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 196.535100][ T7402] F2FS-fs (loop2): Image doesn't support compression [ 196.542489][ T7402] F2FS-fs (loop2): Image doesn't support compression [ 196.550023][ T7402] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x216 [ 196.570215][ T7402] F2FS-fs (loop2): invalid crc value [ 196.989911][ T7402] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 196.997125][ T7402] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 197.341286][ T5847] usb 5-1: Using ep0 maxpacket: 16 [ 197.383436][ T5847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.395962][ C0] sched: RT throttling activated [ 197.434747][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.506379][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 197.548214][ T5847] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 197.603559][ T5847] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.688357][ T5847] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 197.741392][ T5847] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 197.794091][ T5847] usb 5-1: Manufacturer: syz [ 197.860276][ T5847] usb 5-1: config 0 descriptor?? [ 198.206330][ T1206] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 198.426071][ T5847] rc_core: IR keymap rc-hauppauge not found [ 198.432255][ T5847] Registered IR keymap rc-empty [ 198.438639][ T1206] usb 2-1: Using ep0 maxpacket: 8 [ 198.449820][ T1206] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 198.459496][ T1206] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.477761][ T5847] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 198.520697][ T1206] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.543349][ T5847] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 198.566493][ T1206] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 198.595121][ T1206] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.609472][ T5847] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 198.656167][ T1206] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 198.668701][ T5847] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 198.700247][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.755287][ T5847] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 198.850369][ T5847] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 198.896392][ T5847] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 198.946208][ T5847] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 198.962781][ T1206] usb 2-1: GET_CAPABILITIES returned 0 [ 198.975678][ T1206] usbtmc 2-1:16.0: can't read capabilities [ 198.996476][ T5847] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 199.056264][ T5847] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 199.086717][ T5847] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 199.136544][ T5847] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 199.189778][ T5847] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 199.226112][ T5847] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 199.260444][ T1206] usb 2-1: USB disconnect, device number 7 [ 199.270117][ T5847] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 199.323762][ T5847] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 199.360020][ T5847] usb 5-1: USB disconnect, device number 3 [ 200.990083][ T7459] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 201.250134][ T7470] loop1: detected capacity change from 0 to 164 [ 202.290734][ T7493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.505010][ T7500] syzkaller0: entered promiscuous mode [ 202.546449][ T7500] syzkaller0: entered allmulticast mode [ 204.750273][ T7525] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 206.081499][ T7543] syzkaller0: entered promiscuous mode [ 206.102804][ T7543] syzkaller0: entered allmulticast mode [ 206.290599][ T7549] overlayfs: failed to create directory ./file2/work (errno: 13); mounting read-only [ 206.330345][ T7549] overlayfs: fs on './file2' does not support file handles, falling back to index=off,nfs_export=off. [ 206.344548][ T7549] overlayfs: conflicting lowerdir path [ 206.762083][ T7563] syzkaller0: entered promiscuous mode [ 206.784916][ T7563] syzkaller0: entered allmulticast mode [ 206.991177][ T7568] netlink: 'syz.4.361': attribute type 13 has an invalid length. [ 206.999227][ T5772] Bluetooth: hci1: command 0x0406 tx timeout [ 206.999372][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 207.712840][ T7590] loop5: detected capacity change from 0 to 164 [ 208.678155][ T7608] loop1: detected capacity change from 0 to 164 [ 210.469190][ T7628] binder: BINDER_SET_CONTEXT_MGR already set [ 210.475261][ T7628] binder: 7626:7628 ioctl 4018620d 200000000040 returned -16 [ 210.641666][ T7605] loop4: detected capacity change from 0 to 32768 [ 210.699059][ T7605] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.367 (7605) [ 210.780231][ T7605] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.812823][ T7605] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 210.846483][ T7605] BTRFS info (device loop4): setting nodatasum [ 210.870593][ T7605] BTRFS info (device loop4): force zlib compression, level 3 [ 210.901035][ T7605] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 210.929528][ T7638] loop5: detected capacity change from 0 to 256 [ 210.950649][ T7605] BTRFS info (device loop4): use lzo compression, level 0 [ 210.971622][ T7605] BTRFS info (device loop4): turning on flush-on-commit [ 211.002619][ T7605] BTRFS info (device loop4): enabling auto defrag [ 211.029629][ T7605] BTRFS info (device loop4): max_inline at 4096 [ 211.045249][ T7605] BTRFS info (device loop4): using free space tree [ 211.227640][ T7605] BTRFS info (device loop4): enabling ssd optimizations [ 211.478383][ T7667] random: crng reseeded on system resumption [ 211.808047][ T6474] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.442076][ T27] audit: type=1804 audit(1774928973.689:9): pid=7686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.379" name="/newroot/95/file1" dev="fuse" ino=1 res=1 errno=0 [ 213.566126][ T27] audit: type=1800 audit(1774928973.719:10): pid=7686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.379" name="/" dev="fuse" ino=1 res=0 errno=0 [ 213.629070][ T27] audit: type=1800 audit(1774928973.739:11): pid=7686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.379" name="/" dev="fuse" ino=1 res=0 errno=0 [ 213.701057][ T2133] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 213.927919][ T2133] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.945605][ T2133] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.979089][ T2133] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.049841][ T2133] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.126083][ T2133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.177659][ T2133] usb 5-1: config 0 descriptor?? [ 214.371843][ T7715] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 214.700936][ T7693] loop4: detected capacity change from 0 to 1024 [ 214.839908][ T7693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.852462][ T5814] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 215.024377][ T2133] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x4 [ 215.054378][ T2133] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 215.100377][ T2133] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 215.139421][ T5814] usb 6-1: config 0 has no interfaces? [ 215.172620][ T5814] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 215.294622][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.376994][ T5814] usb 6-1: config 0 descriptor?? [ 215.651566][ T5811] usb 5-1: USB disconnect, device number 4 [ 215.897552][ T5811] usb 6-1: USB disconnect, device number 3 [ 215.923413][ T7737] syzkaller0: entered promiscuous mode [ 215.929906][ T7737] syzkaller0: entered allmulticast mode [ 216.202623][ T7746] syzkaller0: entered promiscuous mode [ 216.212895][ T7746] syzkaller0: entered allmulticast mode [ 217.329443][ T6474] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.469635][ T7756] loop5: detected capacity change from 0 to 164 [ 217.595220][ T7761] bond1: entered promiscuous mode [ 217.654750][ T7761] ip6gretap1: entered promiscuous mode [ 217.663203][ T7761] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 217.909568][ T7765] loop1: detected capacity change from 0 to 32768 [ 217.958207][ T7765] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.393 (7765) [ 218.004867][ T7761] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 218.013811][ T7765] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 218.024089][ T7765] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 218.032896][ T7765] BTRFS info (device loop1): using free space tree [ 218.113335][ T7761] ip6gretap1: left promiscuous mode [ 218.148988][ T7761] bond1 (unregistering): Released all slaves [ 218.157021][ T7765] BTRFS info (device loop1): enabling ssd optimizations [ 218.164057][ T7765] BTRFS info (device loop1): auto enabling async discard [ 219.294335][ T5770] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 220.053412][ T7286] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (7286) [ 220.187502][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 220.490370][ T7815] loop2: detected capacity change from 0 to 164 [ 220.738344][ T7819] syzkaller0: entered promiscuous mode [ 220.743905][ T7819] syzkaller0: entered allmulticast mode [ 220.927713][ T7807] tipc: Enabled bearer , priority 0 [ 221.002228][ T7804] tipc: Resetting bearer [ 221.201612][ T7804] tipc: Disabling bearer [ 222.853805][ T7835] syzkaller0: entered promiscuous mode [ 222.876071][ T7835] syzkaller0: entered allmulticast mode [ 223.234457][ T7841] loop5: detected capacity change from 0 to 1024 [ 223.304579][ T7841] EXT4-fs: Ignoring removed orlov option [ 223.425624][ T7841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.606334][ T5153] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 223.826383][ T5153] usb 2-1: Using ep0 maxpacket: 16 [ 224.016300][ T5153] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.181660][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.430552][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 224.514287][ T5153] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 224.561132][ T5153] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.625536][ T5153] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 224.673368][ T5153] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 224.673598][ T6501] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.717650][ T5153] usb 2-1: Manufacturer: syz [ 224.817302][ T5153] usb 2-1: config 0 descriptor?? [ 225.361841][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 225.405119][ T5153] rc_core: IR keymap rc-hauppauge not found [ 225.417375][ T5153] Registered IR keymap rc-empty [ 225.443019][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 225.507034][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 225.579291][ T5153] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 225.631910][ T5153] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 225.686569][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 225.776229][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 225.826290][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 225.850175][ T7885] kvm_intel: kvm [7879]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x10164ff [ 225.866173][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 225.900554][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 225.917579][ T7892] netlink: 'syz.2.411': attribute type 1 has an invalid length. [ 225.941663][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.006396][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.036775][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.053035][ T7892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.066133][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.097430][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 226.108305][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.148090][ T5153] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 226.167725][ T5153] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 226.199062][ T5153] usb 2-1: USB disconnect, device number 8 [ 226.447270][ T7892] bond1: (slave gretap1): making interface the new active one [ 226.471654][ T7892] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 226.608193][ T7892] syz.2.411 (7892) used greatest stack depth: 19504 bytes left [ 226.875851][ T7907] loop2: detected capacity change from 0 to 764 [ 226.926284][ T7286] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 227.616108][ T7927] loop4: detected capacity change from 0 to 164 [ 227.636584][ T7929] loop5: detected capacity change from 0 to 164 [ 228.810732][ T7941] loop5: detected capacity change from 0 to 164 [ 229.497037][ T7951] loop2: detected capacity change from 0 to 164 [ 231.056257][ T5811] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 231.350028][ T5811] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 231.619951][ T5811] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 231.796237][ T5811] usb 2-1: config 1 interface 0 has no altsetting 0 [ 231.852031][ T5811] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 231.901478][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.947703][ T5811] usb 2-1: Product: syz [ 231.976457][ T5811] usb 2-1: Manufacturer: syz [ 231.981137][ T5811] usb 2-1: SerialNumber: syz [ 232.011755][ T7978] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 232.013060][ T8000] loop2: detected capacity change from 0 to 164 [ 232.020682][ T7978] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 232.973822][ T5811] rtl8150 2-1:1.0: couldn't reset the device [ 232.980863][ T5811] rtl8150: probe of 2-1:1.0 failed with error -5 [ 232.995470][ T5811] usb 2-1: USB disconnect, device number 9 [ 233.136380][ T8022] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 233.160871][ T8022] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 234.871852][ T8042] syzkaller0: entered promiscuous mode [ 234.877857][ T8042] syzkaller0: entered allmulticast mode [ 235.873138][ T8057] syzkaller0: entered promiscuous mode [ 235.879376][ T8057] syzkaller0: entered allmulticast mode [ 235.904642][ T8061] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 235.990051][ T8062] fuse: Unknown parameter 'grou00000000000000000000' [ 236.184762][ T8066] loop1: detected capacity change from 0 to 512 [ 236.859198][ T8077] loop4: detected capacity change from 0 to 256 [ 238.626191][ T5153] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 238.836222][ T5153] usb 3-1: Using ep0 maxpacket: 16 [ 238.910352][ T5153] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.932599][ T5153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.833018][ T5153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.853560][ T5153] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 239.913763][ T5153] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.977957][ T5153] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 240.011242][ T5153] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 240.023522][ T5153] usb 3-1: Manufacturer: syz [ 240.043890][ T5153] usb 3-1: config 0 descriptor?? [ 240.636172][ T5153] rc_core: IR keymap rc-hauppauge not found [ 240.642273][ T5153] Registered IR keymap rc-empty [ 240.647519][ T5153] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.677340][ T5153] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.707407][ T5153] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 240.721380][ T5153] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 240.740828][ T5153] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.777688][ T5153] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.816148][ T5153] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.846269][ T5153] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.977423][ T5153] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.016055][ T5153] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.046154][ T5153] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.076206][ T5153] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.114958][ T5153] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.166152][ T5153] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.218497][ T5153] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.269437][ T5153] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 241.282508][ T5153] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 242.156391][ T5153] usb 3-1: USB disconnect, device number 5 [ 242.778312][ T8145] loop2: detected capacity change from 0 to 164 [ 243.139046][ T8152] syzkaller0: entered promiscuous mode [ 243.146457][ T8152] syzkaller0: entered allmulticast mode [ 243.440559][ T8157] syzkaller0: entered promiscuous mode [ 243.446614][ T8157] syzkaller0: entered allmulticast mode [ 244.347377][ T8160] syzkaller0: entered promiscuous mode [ 244.353014][ T8160] syzkaller0: entered allmulticast mode [ 244.701251][ T8172] tipc: Started in network mode [ 244.710621][ T8172] tipc: Node identity 4e8b6fe9d144, cluster identity 4711 [ 244.721570][ T8172] tipc: Enabled bearer , priority 0 [ 244.734516][ T8172] syzkaller0: entered promiscuous mode [ 244.746122][ T8172] syzkaller0: entered allmulticast mode [ 244.796872][ T8172] tipc: Resetting bearer [ 244.816563][ T8171] tipc: Resetting bearer [ 244.867702][ T8171] tipc: Disabling bearer [ 244.899732][ T8178] loop1: detected capacity change from 0 to 164 [ 245.296952][ T8188] syzkaller0: entered promiscuous mode [ 245.302537][ T8188] syzkaller0: entered allmulticast mode [ 253.028916][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.516'. [ 255.343825][ T8297] syzkaller0: entered promiscuous mode [ 255.369787][ T8297] syzkaller0: entered allmulticast mode [ 255.607759][ T8300] syzkaller0: entered promiscuous mode [ 255.614813][ T8300] syzkaller0: entered allmulticast mode [ 256.538328][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.545630][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.396188][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 263.402600][ T5772] Bluetooth: hci3: command 0x0406 tx timeout [ 263.967234][ T8392] loop1: detected capacity change from 0 to 164 [ 265.481696][ T8402] loop1: detected capacity change from 0 to 512 [ 265.527937][ T8402] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 265.561451][ T8404] netlink: 76 bytes leftover after parsing attributes in process `syz.2.546'. [ 265.601948][ T8402] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 265.633415][ T8402] EXT4-fs (loop1): 1 truncate cleaned up [ 265.654516][ T8402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.317022][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.337579][ T8467] syzkaller0: entered promiscuous mode [ 271.343440][ T8467] syzkaller0: entered allmulticast mode [ 279.940395][ T8589] loop1: detected capacity change from 0 to 164 [ 284.937473][ T8634] syzkaller0: entered promiscuous mode [ 284.964217][ T8634] syzkaller0: entered allmulticast mode [ 285.180886][ T8639] netlink: 'syz.5.596': attribute type 8 has an invalid length. [ 286.738728][ T8652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.600'. [ 286.814134][ T8657] loop2: detected capacity change from 0 to 128 [ 286.911324][ T8657] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 286.936058][ T8657] hpfs: filesystem error: improperly stopped [ 286.962727][ T8657] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 287.003339][ T8657] hpfs: You really don't want any checks? You are crazy... [ 287.043588][ T8657] hpfs: Code page index out of array [ 287.068276][ T8657] hpfs: code page support is disabled [ 287.089237][ T8657] hpfs: hpfs_map_4sectors(): unaligned read [ 287.246722][ T8657] hpfs: hpfs_map_4sectors(): unaligned read [ 287.252714][ T8657] hpfs: filesystem error: unable to find root dir [ 290.379738][ T8698] loop1: detected capacity change from 0 to 1024 [ 290.397427][ T8698] EXT4-fs: Ignoring removed nomblk_io_submit option [ 290.848545][ T8698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.548954][ T27] audit: type=1800 audit(1774929051.799:12): pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.612" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 293.377459][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.859170][ T8731] syz.1.619 (8731): drop_caches: 2 [ 295.197742][ T8730] loop2: detected capacity change from 0 to 164 [ 297.373882][ T8768] syzkaller0: entered promiscuous mode [ 297.379504][ T8768] syzkaller0: entered allmulticast mode [ 299.706042][ T5811] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 300.468349][ T5811] usb 3-1: config 0 has no interfaces? [ 300.485586][ T5811] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 300.512103][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 300.590706][ T8812] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.641'. [ 301.236110][ T5811] usb 3-1: Product: syz [ 301.240367][ T5811] usb 3-1: Manufacturer: syz [ 301.245304][ T5811] usb 3-1: SerialNumber: syz [ 301.278943][ T5811] usb 3-1: config 0 descriptor?? [ 301.377698][ T8814] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 301.411327][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.5.642'. [ 301.472223][ T8814] vlan2: entered promiscuous mode [ 301.482153][ T8814] syz_tun: entered promiscuous mode [ 301.920471][ T5848] usb 3-1: USB disconnect, device number 6 [ 305.476731][ T8837] overlayfs: failed to clone upperpath [ 306.440270][ T8849] loop2: detected capacity change from 0 to 164 [ 306.468772][ T8850] loop1: detected capacity change from 0 to 164 [ 307.921587][ T8861] tipc: Enabling of bearer rejected, failed to enable media [ 308.025634][ T8863] netlink: 44 bytes leftover after parsing attributes in process `syz.2.656'. [ 311.606926][ T8902] tipc: Enabling of bearer rejected, failed to enable media [ 312.872993][ T8918] loop1: detected capacity change from 0 to 164 [ 318.542959][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.556435][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.694032][ T8976] tipc: Enabled bearer , priority 0 [ 318.717384][ T8976] syzkaller0: entered promiscuous mode [ 318.722934][ T8976] syzkaller0: entered allmulticast mode [ 318.796838][ T8976] tipc: Resetting bearer [ 318.826597][ T8975] tipc: Resetting bearer [ 318.979862][ T8975] tipc: Disabling bearer [ 319.056486][ T8978] tipc: Enabling of bearer rejected, failed to enable media [ 321.866739][ T8990] nbd: socks must be embedded in a SOCK_ITEM attr [ 322.341737][ T8990] block nbd0: shutting down sockets [ 322.776066][ T2133] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 323.285979][ T2133] usb 3-1: device not accepting address 7, error -71 [ 327.052582][ T9038] loop1: detected capacity change from 0 to 40427 [ 327.066628][ T9038] F2FS-fs (loop1): invalid crc value [ 327.088577][ T9038] F2FS-fs (loop1): Found nat_bits in checkpoint [ 327.144421][ T9038] F2FS-fs (loop1): Start checkpoint disabled! [ 327.171594][ T9038] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 327.403465][ T27] audit: type=1800 audit(1774929087.649:13): pid=9038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.698" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 327.579588][ T27] audit: type=1800 audit(1774929087.759:14): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.698" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 327.619579][ T9049] syz.1.698: attempt to access beyond end of device [ 327.619579][ T9049] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 327.643396][ T9049] syz.1.698: attempt to access beyond end of device [ 327.643396][ T9049] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 327.660654][ T9049] syz.1.698: attempt to access beyond end of device [ 327.660654][ T9049] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 327.677776][ T9049] syz.1.698: attempt to access beyond end of device [ 327.677776][ T9049] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 327.700704][ T9049] syz.1.698: attempt to access beyond end of device [ 327.700704][ T9049] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 327.983598][ T9049] syz.1.698: attempt to access beyond end of device [ 327.983598][ T9049] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 328.038816][ T9049] syz.1.698: attempt to access beyond end of device [ 328.038816][ T9049] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 328.344274][ T9053] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.361787][ T4444] kworker/u4:9: attempt to access beyond end of device [ 328.361787][ T4444] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 328.394447][ T4444] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 328.402338][ T4444] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 329.518673][ T9065] tipc: Enabling of bearer rejected, failed to enable media [ 329.591720][ T9067] netlink: 44 bytes leftover after parsing attributes in process `syz.4.704'. [ 329.764960][ T9073] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 330.239840][ T9080] loop1: detected capacity change from 0 to 164 [ 333.946494][ T9116] fuse: Bad value for 'fd' [ 334.920234][ T9124] loop1: detected capacity change from 0 to 164 [ 336.009962][ T9135] tipc: Enabling of bearer rejected, failed to enable media [ 336.042646][ T9138] tipc: Enabling of bearer rejected, failed to enable media [ 336.200593][ T2133] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 336.411447][ T2133] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.443010][ T2133] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.477731][ T2133] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 336.498308][ T2133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 336.520905][ T2133] usb 3-1: SerialNumber: syz [ 336.712583][ T9153] netlink: 'syz.5.724': attribute type 1 has an invalid length. [ 337.433277][ T2133] usb 3-1: 0:2 : does not exist [ 337.452390][ T9153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 337.549152][ T9157] macvlan2: entered promiscuous mode [ 337.587521][ T9157] macvlan2: entered allmulticast mode [ 337.605458][ T9157] bond2: entered allmulticast mode [ 337.611753][ T9163] loop1: detected capacity change from 0 to 164 [ 337.631992][ T9157] bond2: entered promiscuous mode [ 337.646223][ T9157] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 337.660924][ T2133] usb 3-1: USB disconnect, device number 9 [ 337.752708][ T9157] team0: Port device macvlan2 added [ 337.840538][ T9008] udevd[9008]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.915556][ T9158] bond2: (slave ip6gretap1): making interface the new active one [ 338.009986][ T9158] ip6gretap1: entered promiscuous mode [ 338.019310][ T9158] ip6gretap1: entered allmulticast mode [ 338.066530][ T9158] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 338.797503][ T9180] tipc: Enabled bearer , priority 0 [ 338.806804][ T9180] syzkaller0: entered promiscuous mode [ 338.812345][ T9180] syzkaller0: entered allmulticast mode [ 338.882874][ T9180] tipc: Resetting bearer [ 338.918357][ T9179] tipc: Resetting bearer [ 339.005428][ T9179] tipc: Disabling bearer [ 339.137927][ T9187] tipc: Enabled bearer , priority 0 [ 339.148235][ T9187] syzkaller0: entered promiscuous mode [ 339.153767][ T9187] syzkaller0: entered allmulticast mode [ 339.319537][ T9187] tipc: Resetting bearer [ 339.453231][ T9186] tipc: Resetting bearer [ 339.868217][ T9186] tipc: Disabling bearer [ 340.004681][ T9194] tipc: Enabling of bearer rejected, failed to enable media [ 340.376636][ T9199] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.733'. [ 340.402419][ T9199] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 343.418838][ T9209] loop1: detected capacity change from 0 to 164 [ 344.945959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 346.301188][ T9225] loop1: detected capacity change from 0 to 256 [ 346.387721][ T9225] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 347.269220][ T9231] tipc: Enabled bearer , priority 0 [ 347.308207][ T9231] syzkaller0: entered promiscuous mode [ 347.313798][ T9231] syzkaller0: entered allmulticast mode [ 347.490785][ T9235] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.745'. [ 348.086525][ T9229] tipc: Resetting bearer [ 348.342575][ T9229] tipc: Disabling bearer [ 348.356298][ T9235] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 350.015603][ T9247] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 352.015198][ T9254] loop1: detected capacity change from 0 to 32768 [ 352.081678][ T9254] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.749 (9254) [ 352.270279][ T9267] loop2: detected capacity change from 0 to 164 [ 352.604833][ T9254] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 352.615228][ T9254] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 352.624382][ T9254] BTRFS info (device loop1): enabling disk space caching [ 352.631701][ T9254] BTRFS info (device loop1): force clearing of disk cache [ 352.638926][ T9254] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 352.648708][ T9254] BTRFS info (device loop1): use zstd compression, level 3 [ 352.655990][ T9254] BTRFS info (device loop1): disk space caching is enabled [ 353.243243][ T9254] BTRFS info (device loop1): enabling ssd optimizations [ 353.250570][ T9254] BTRFS info (device loop1): auto enabling async discard [ 353.261200][ T9254] BTRFS info (device loop1): rebuilding free space tree [ 353.416313][ T27] audit: type=1800 audit(1774929113.659:15): pid=9263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.752" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 353.425193][ T9254] BTRFS info (device loop1): disabling free space tree [ 353.444079][ T9254] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 353.455083][ T9254] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 354.437668][ T9293] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.756'. [ 354.450268][ T9293] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 355.066577][ T5770] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 355.540157][ T9306] befs: (nbd2): No write support. Marking filesystem read-only [ 355.563451][ T9306] syz.2.759: attempt to access beyond end of device [ 355.563451][ T9306] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 357.970305][ T9311] loop2: detected capacity change from 0 to 32768 [ 358.064713][ T9311] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 358.282108][ T9311] XFS (loop2): Ending clean mount [ 359.563447][ T9336] tipc: Enabling of bearer rejected, failed to enable media [ 359.571734][ T5767] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 361.746582][ T9350] netlink: 32 bytes leftover after parsing attributes in process `syz.1.770'. [ 369.456740][ T9394] loop1: detected capacity change from 0 to 164 [ 369.802648][ T9397] syzkaller0: entered promiscuous mode [ 369.808327][ T9397] syzkaller0: entered allmulticast mode [ 371.242768][ T9405] bond0: (slave bond_slave_1): Releasing backup interface [ 371.348370][ T9410] tipc: Enabled bearer , priority 0 [ 371.372115][ T9411] syzkaller0: entered promiscuous mode [ 371.379943][ T9411] syzkaller0: entered allmulticast mode [ 371.470232][ T9407] tipc: Resetting bearer [ 371.531064][ T9404] tipc: Resetting bearer [ 376.552409][ T9404] tipc: Disabling bearer [ 377.869530][ T9439] loop1: detected capacity change from 0 to 164 [ 379.099527][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.106103][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.537450][ T5775] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 379.609841][ T5775] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 379.684802][ T9464] loop2: detected capacity change from 0 to 2048 [ 379.714752][ T9464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.299147][ T9469] tipc: Enabling of bearer rejected, failed to enable media [ 380.702749][ T9480] loop2: detected capacity change from 0 to 164 [ 381.487023][ T9457] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 381.989707][ T9500] loop2: detected capacity change from 0 to 512 [ 382.046764][ T9500] EXT4-fs (loop2): orphan cleanup on readonly fs [ 382.056614][ T9500] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 382.074210][ T9500] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 382.087606][ T9500] EXT4-fs error (device loop2): ext4_ext_check_inode:530: inode #13: comm syz.2.810: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 382.108715][ T9500] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.810: couldn't read orphan inode 13 (err -117) [ 382.141946][ T9500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 382.935279][ T9505] syzkaller0: entered promiscuous mode [ 382.965621][ T9505] syzkaller0: entered allmulticast mode [ 383.002607][ T9505] TC_ACT_REPEAT abuse ? [ 383.096987][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.077055][ T9511] syzkaller0: entered promiscuous mode [ 384.105084][ T9511] syzkaller0: entered allmulticast mode [ 385.127660][ T9522] syzkaller0: entered promiscuous mode [ 385.138381][ T9522] syzkaller0: entered allmulticast mode [ 387.431154][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.444356][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.454642][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.465104][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.474944][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.485441][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.567419][ T9547] loop1: detected capacity change from 0 to 512 [ 387.623980][ T9547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.668315][ T9553] loop2: detected capacity change from 0 to 164 [ 387.686739][ T9547] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.122739][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.308999][ T9586] loop2: detected capacity change from 0 to 164 [ 392.886802][ T9601] loop1: detected capacity change from 0 to 164 [ 393.294608][ T9604] 9pnet_fd: p9_fd_create_unix (9604): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 393.314074][ T9604] netlink: 16 bytes leftover after parsing attributes in process `syz.5.832'. [ 393.420977][ T9604] openvswitch: netlink: Missing key (keys=40, expected=80) [ 394.042603][ T9610] loop2: detected capacity change from 0 to 512 [ 394.187077][ T27] audit: type=1400 audit(1774929154.279:16): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9599 comm="syz.2.834" [ 394.819108][ T9610] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.834: inode has both inline data and extents flags [ 394.844617][ T9610] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.834: couldn't read orphan inode 15 (err -117) [ 394.866449][ T9610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.958057][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.340475][ T9627] loop2: detected capacity change from 0 to 164 [ 399.562593][ T9645] tipc: Enabling of bearer rejected, failed to enable media [ 399.673310][ T9648] loop2: detected capacity change from 0 to 128 [ 399.686932][ T9648] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 399.742535][ T9648] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 399.762224][ T2133] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 400.485598][ T2133] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 400.536006][ T2133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.565974][ T2133] usb 2-1: Product: syz [ 400.590762][ T2133] usb 2-1: Manufacturer: syz [ 400.621182][ T2133] usb 2-1: SerialNumber: syz [ 400.642919][ T2133] usb 2-1: config 0 descriptor?? [ 400.897242][ T2133] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 400.949317][ T1084] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 401.810045][ T9660] loop2: detected capacity change from 0 to 128 [ 401.895817][ T9660] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 401.941368][ T9660] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 403.570586][ T9673] fscrypt: Error allocating hmac(sha512): -2 [ 403.996399][ T2133] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 404.017324][ T2133] usb 2-1: USB disconnect, device number 10 [ 404.084755][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.153815][ T5775] Bluetooth: hci1: unexpected event for opcode 0x0803 [ 404.174068][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'. [ 406.125089][ T9716] loop2: detected capacity change from 0 to 512 [ 406.304326][ T9716] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 408.199622][ T5775] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 408.210036][ T5775] Bluetooth: hci1: Injecting HCI hardware error event [ 408.219484][ T5775] Bluetooth: hci1: hardware error 0x00 [ 408.242081][ T9716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.463589][ T9726] loop1: detected capacity change from 0 to 164 [ 409.552368][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.386658][ T5775] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 414.059230][ T9775] tipc: Enabled bearer , priority 0 [ 414.079395][ T9775] syzkaller0: entered promiscuous mode [ 414.085106][ T9775] syzkaller0: entered allmulticast mode [ 414.185061][ T9775] tipc: Resetting bearer [ 414.338284][ T9774] tipc: Resetting bearer [ 415.976455][ T9774] tipc: Disabling bearer [ 416.008526][ T5153] tipc: Node number set to 2681171945 [ 416.244351][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 416.253353][ T9792] batadv_slave_0: Caught tx_queue_len zero misconfig [ 418.108591][ T9804] autofs4:pid:9804:autofs_fill_super: called with bogus options [ 421.759126][ T9833] loop2: detected capacity change from 0 to 164 [ 423.429815][ T9847] autofs4:pid:9847:autofs_fill_super: called with bogus options [ 424.818790][ T9855] loop2: detected capacity change from 0 to 512 [ 424.927317][ T9855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.976723][ T9855] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.779166][ T9870] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 425.797823][ T9870] Quota error (device loop2): write_blk: dquota write failed [ 425.805973][ T9870] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 425.816093][ T9870] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.892: Failed to acquire dquot type 0 [ 426.184092][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.611439][ T9883] loop1: detected capacity change from 0 to 164 [ 428.645234][ T9886] loop2: detected capacity change from 0 to 164 [ 431.080763][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 431.343019][ T9912] loop2: detected capacity change from 0 to 4096 [ 432.625523][ T9912] EXT4-fs: Ignoring removed i_version option [ 432.645953][ T9912] EXT4-fs: Ignoring removed oldalloc option [ 432.666894][ T9912] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 432.675771][ T9912] EXT4-fs (loop2): Test dummy encryption mode enabled [ 432.683855][ T9912] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 433.611134][ T9937] loop2: detected capacity change from 0 to 256 [ 434.458697][ T9934] netlink: 'syz.2.903': attribute type 4 has an invalid length. [ 434.469313][ T9934] netlink: 'syz.2.903': attribute type 16 has an invalid length. [ 434.479361][ T9934] netlink: 38166 bytes leftover after parsing attributes in process `syz.2.903'. [ 434.862927][ T1206] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 434.889717][ T9944] loop2: detected capacity change from 0 to 164 [ 435.736259][ T1206] usb 2-1: Using ep0 maxpacket: 32 [ 435.750646][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.802841][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.882930][ T1206] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 435.896075][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.916889][ T1206] usb 2-1: config 0 descriptor?? [ 436.463916][ T1206] nintendo 0003:057E:200E.0003: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.1-1/input0 [ 436.898129][ T1206] nintendo 0003:057E:200E.0003: Failed charging grip handshake [ 437.004040][ T1206] nintendo 0003:057E:200E.0003: Failed to initialize controller; ret=-110 [ 437.032319][ T1206] nintendo 0003:057E:200E.0003: probe - fail = -110 [ 437.050143][ T1206] nintendo: probe of 0003:057E:200E.0003 failed with error -110 [ 437.282864][ T9964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.309356][ T9964] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.382165][ T9964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.219509][ T9973] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 439.079836][ T5775] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 439.079955][ T5775] Bluetooth: hci2: Malformed LE Event: 0x02 [ 440.440669][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.456408][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.047787][ T5848] usb 2-1: USB disconnect, device number 11 [ 441.803643][ T9981] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.813171][ T9981] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.149407][T10008] loop2: detected capacity change from 0 to 40427 [ 443.199336][T10008] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 443.246231][T10008] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 443.259827][T10008] F2FS-fs (loop2): invalid crc value [ 443.405725][ T9981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.437915][T10008] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 443.473935][ T9981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.535919][T10008] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 445.504708][ T5767] syz-executor: attempt to access beyond end of device [ 445.504708][ T5767] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 445.555734][ T5767] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 447.197203][ T9981] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.209135][ T9981] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.218378][ T9981] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.229890][ T9981] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.336580][ T9982] netlink: 'syz.4.919': attribute type 13 has an invalid length. [ 447.344747][ T9982] netlink: 'syz.4.919': attribute type 17 has an invalid length. [ 447.398479][ T9982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.407249][ T9982] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.418461][ T9982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.471178][T10005] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 447.936095][T10005] usb 3-1: Using ep0 maxpacket: 16 [ 449.302058][T10053] overlay: ./file0 is not a directory [ 449.692808][T10005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.151030][T10005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.162093][T10005] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 450.256437][T10005] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 450.295865][T10005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.422808][T10063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.934'. [ 451.434398][T10005] usb 3-1: config 0 descriptor?? [ 451.539307][T10005] usb 3-1: can't set config #0, error -71 [ 451.879996][T10005] usb 3-1: USB disconnect, device number 10 [ 452.443053][T10070] autofs4:pid:10070:autofs_fill_super: called with bogus options [ 452.900660][T10081] overlayfs: failed to clone upperpath [ 454.582702][T10097] overlay: ./file0 is not a directory [ 457.024931][T10096] xt_TPROXY: Can be used only with -p tcp or -p udp [ 458.030597][T10111] loop2: detected capacity change from 0 to 164 [ 460.000413][T10126] overlay: ./file0 is not a directory [ 461.727876][T10122] autofs4:pid:10122:autofs_fill_super: called with bogus options [ 461.794105][T10131] overlayfs: failed to clone upperpath [ 463.146485][T10140] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 464.070639][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.952'. [ 464.079960][T10147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.454056][T10156] xt_l2tp: unknown flags: 10 [ 464.915257][T10147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.001979][ T27] audit: type=1326 audit(1774929481.154:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48539c819 code=0x7ffc0000 [ 465.165959][T10161] loop2: detected capacity change from 0 to 1024 [ 465.688577][ T27] audit: type=1326 audit(1774929481.154:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48539c819 code=0x7ffc0000 [ 465.856477][T10006] IPVS: starting estimator thread 0... [ 465.873150][T10161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 465.885574][T10161] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.956142][T10165] IPVS: using max 18 ests per chain, 43200 per kthread [ 465.962914][ T27] audit: type=1326 audit(1774929481.154:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc48539c819 code=0x7ffc0000 [ 466.196270][ T27] audit: type=1326 audit(1774929481.154:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48539c819 code=0x7ffc0000 [ 466.393985][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 466.406008][ T27] audit: type=1326 audit(1774929481.154:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48539c819 code=0x7ffc0000 [ 466.575413][T10174] loop2: detected capacity change from 0 to 164 [ 469.638112][T10189] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 470.606192][T10190] loop2: detected capacity change from 0 to 512 [ 471.129690][T10190] EXT4-fs (loop2): Test dummy encryption mode enabled [ 471.136866][T10190] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 471.293376][T10190] EXT4-fs error (device loop2): ext4_orphan_get:1424: comm syz.2.961: bad orphan inode 131083 [ 471.350030][T10190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.798482][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.941173][ T5775] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1 [ 471.950163][ T5775] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 474.450890][T10214] netlink: 68 bytes leftover after parsing attributes in process `syz.1.965'. [ 474.979492][T10214] loop1: detected capacity change from 0 to 512 [ 475.011618][T10214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.452286][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.460172][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.968'. [ 475.957574][ T5775] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 475.967044][ T5775] Bluetooth: hci2: Injecting HCI hardware error event [ 475.981609][ T5781] Bluetooth: hci2: hardware error 0x00 [ 478.187727][T10246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.973'. [ 478.207393][T10243] netlink: 'syz.2.974': attribute type 13 has an invalid length. [ 478.671482][T10238] cifs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ [ 478.756484][ T5781] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 478.849051][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.694462][T10259] netlink: 44 bytes leftover after parsing attributes in process `syz.5.977'. [ 480.789034][T10259] netlink: 'syz.5.977': attribute type 5 has an invalid length. [ 481.170336][T10267] loop1: detected capacity change from 0 to 2048 [ 481.731395][T10267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 482.239748][T10270] overlayfs: missing 'lowerdir' [ 484.603956][T10284] loop2: detected capacity change from 0 to 164 [ 487.931510][ T27] audit: type=1326 audit(1774929504.174:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04599c819 code=0x7ffc0000 [ 487.966205][ T27] audit: type=1326 audit(1774929504.174:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04599c819 code=0x7ffc0000 [ 487.988555][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.998578][ T27] audit: type=1326 audit(1774929504.174:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fa04599c819 code=0x7ffc0000 [ 488.021658][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.073112][ T27] audit: type=1326 audit(1774929504.174:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04599c819 code=0x7ffc0000 [ 488.162025][ T27] audit: type=1326 audit(1774929504.174:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04599c819 code=0x7ffc0000 [ 488.184717][ T27] audit: type=1326 audit(1774929504.174:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa04599c819 code=0x7ffc0000 [ 488.241561][ T27] audit: type=1326 audit(1774929504.174:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04599c819 code=0x7ffc0000 [ 490.120328][ T27] audit: type=1326 audit(1774929504.174:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04599c819 code=0x7ffc0000 [ 490.142721][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.254979][ T27] audit: type=1326 audit(1774929504.174:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa04599c819 code=0x7ffc0000 [ 490.278769][ T27] audit: type=1326 audit(1774929504.174:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04599c819 code=0x7ffc0000 [ 491.071206][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 491.080211][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 498.634308][ T1206] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 500.294197][T10363] loop1: detected capacity change from 0 to 16 [ 500.311525][T10363] erofs: (device loop1): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 500.645184][T10350] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 501.355083][T10373] warning: `syz.2.1000' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 502.286335][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.292636][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.907999][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 503.936049][T10382] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 505.016223][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 505.016240][ T27] audit: type=1326 audit(1774929521.244:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10381 comm="syz.1.1002" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f633c19c819 code=0x0 [ 510.275613][T10438] tmpfs: Unknown parameter 'fscontext' [ 511.299108][T10442] loop2: detected capacity change from 0 to 2048 [ 511.352227][T10442] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 514.395455][T10472] loop2: detected capacity change from 0 to 4096 [ 514.411725][T10472] ext4: Unknown parameter 'noacl' [ 518.850142][T10501] loop2: detected capacity change from 0 to 164 [ 523.608226][T10539] loop1: detected capacity change from 0 to 128 [ 523.618918][T10539] EXT4-fs: Ignoring removed nobh option [ 524.648825][T10539] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 524.683252][T10539] ext4 filesystem being mounted at /232/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 526.354447][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 526.400222][T10561] loop2: detected capacity change from 0 to 164 [ 527.400066][T10568] loop1: detected capacity change from 0 to 164 [ 527.487143][T10568] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=82 [ 527.928974][T10579] overlayfs: missing 'lowerdir' [ 528.876975][T10586] loop1: detected capacity change from 0 to 164 [ 529.056118][ T1206] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 529.314478][ T1206] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 529.372475][ T1206] usb 3-1: config 0 has no interface number 0 [ 529.433014][ T1206] usb 3-1: config 0 interface 113 altsetting 2 has an invalid endpoint with address 0x14, skipping [ 529.456792][ T1206] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 529.467544][ T1206] usb 3-1: config 0 interface 113 has no altsetting 0 [ 529.485331][ T1206] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 529.778927][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.055891][ T1206] usb 3-1: Product: syz [ 530.060146][ T1206] usb 3-1: Manufacturer: syz [ 530.064774][ T1206] usb 3-1: SerialNumber: syz [ 530.072317][ T1206] usb 3-1: config 0 descriptor?? [ 530.080221][ T1206] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 530.155455][T10599] loop1: detected capacity change from 0 to 256 [ 531.685885][T10599] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 531.704835][T10004] usb 3-1: USB disconnect, device number 11 [ 532.140586][T10616] loop1: detected capacity change from 0 to 256 [ 534.350535][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1070'. [ 534.540974][ T5781] Bluetooth: hci3: unexpected cc 0x2039 length: 9 > 1 [ 534.551261][ T5781] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 535.504979][T10651] loop1: detected capacity change from 0 to 164 [ 537.825368][T10671] loop1: detected capacity change from 0 to 164 [ 538.028657][ T5781] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 538.597491][ T5781] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 538.608848][ T5781] Bluetooth: hci3: Injecting HCI hardware error event [ 538.622849][ T5781] Bluetooth: hci3: hardware error 0x00 [ 539.262369][T10687] geneve1: entered allmulticast mode [ 539.510731][T10690] loop2: detected capacity change from 0 to 128 [ 539.522691][T10690] EXT4-fs: Ignoring removed nobh option [ 540.337330][T10690] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 540.368271][T10690] ext4 filesystem being mounted at /266/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 540.431659][T10701] loop1: detected capacity change from 0 to 128 [ 540.508520][T10701] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 540.687879][ T5770] sysv_free_block: flc_count > flc_size [ 540.702141][ T5770] sysv_free_block: flc_count > flc_size [ 540.708355][ T5770] sysv_free_block: flc_count > flc_size [ 540.714130][ T5770] sysv_free_block: flc_count > flc_size [ 540.725235][ T5770] sysv_free_block: flc_count > flc_size [ 540.733312][ T5770] sysv_free_block: flc_count > flc_size [ 540.742649][ T5770] sysv_free_block: flc_count > flc_size [ 540.752657][ T5770] sysv_free_block: flc_count > flc_size [ 540.760203][ T5770] sysv_free_block: flc_count > flc_size [ 540.770101][ T5770] sysv_free_block: flc_count > flc_size [ 540.779589][ T5770] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 540.916080][ T5781] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 540.947341][T10710] loop1: detected capacity change from 0 to 1024 [ 541.242642][T10714] overlayfs: missing 'lowerdir' [ 542.111554][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 542.453904][T10710] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 542.467181][T10710] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 542.630976][ T6350] hfsplus: b-tree write err: -5, ino 25 [ 542.676462][ T6350] hfsplus: b-tree write err: -5, ino 4 [ 542.682606][ T6350] hfsplus: b-tree write err: -5, ino 2 [ 542.717271][ T6350] hfsplus: b-tree write err: -5, ino 23 [ 544.162517][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 544.188757][T10736] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 544.306410][T10743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1092'. [ 544.338561][ T27] audit: type=1326 audit(1774929560.584:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.2.1089" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f233a99c819 code=0x0 [ 545.097155][T10763] loop2: detected capacity change from 0 to 164 [ 546.448878][T10753] loop1: detected capacity change from 0 to 32768 [ 546.551560][T10753] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 546.567798][T10753] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 546.751017][T10753] XFS (loop1): Ending clean mount [ 546.828700][T10790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1106'. [ 546.834381][T10753] XFS (loop1): Quotacheck needed: Please wait. [ 546.869449][T10790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1106'. [ 546.897660][T10792] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1106'. [ 547.051244][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 547.064479][T10753] XFS (loop1): Quotacheck: Done. [ 547.081078][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1108'. [ 547.110904][T10795] netlink: 'syz.4.1108': attribute type 13 has an invalid length. [ 547.120199][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'. [ 547.131459][T10795] netlink: 'syz.4.1108': attribute type 12 has an invalid length. [ 547.274541][ T5770] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 547.481990][T10805] loop2: detected capacity change from 0 to 512 [ 547.623622][T10805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.680942][T10805] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.722336][T10814] loop1: detected capacity change from 0 to 256 [ 547.757127][T10805] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1114: corrupted xattr block 33: invalid ea_ino [ 547.788966][T10814] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 547.879702][ T989] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 547.948400][ T989] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 548.016119][ T989] EXT4-fs (loop2): This should not happen!! Data will be lost [ 548.016119][ T989] [ 548.043921][ T989] EXT4-fs (loop2): Total free blocks count 0 [ 548.063874][ T989] EXT4-fs (loop2): Free/Dirty block details [ 548.076243][ T989] EXT4-fs (loop2): free_blocks=65280 [ 548.081663][ T989] EXT4-fs (loop2): dirty_blocks=33 [ 548.087424][ T989] EXT4-fs (loop2): Block reservation details [ 548.096800][ T989] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 548.131135][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.319023][T10832] tipc: Enabling of bearer rejected, failed to enable media [ 548.856555][T10005] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 549.073452][T10005] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.105631][T10005] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.132114][T10005] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 549.150880][T10005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.171696][T10005] usb 3-1: Product: syz [ 549.185349][T10005] usb 3-1: Manufacturer: syz [ 549.194980][T10005] usb 3-1: SerialNumber: syz [ 549.497807][ T27] audit: type=1326 audit(1774929565.744:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 549.528147][T10005] usb 3-1: 0:1 : does not exist [ 549.533143][T10005] usb 3-1: unit 0 not found! [ 549.591502][ T27] audit: type=1326 audit(1774929565.744:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 549.636612][T10005] usb 3-1: USB disconnect, device number 12 [ 549.697134][ T27] audit: type=1326 audit(1774929565.784:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 549.724995][T10609] udevd[10609]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.809450][ T27] audit: type=1326 audit(1774929565.784:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 549.892935][ T27] audit: type=1326 audit(1774929565.784:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 550.022146][ T27] audit: type=1326 audit(1774929565.804:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 550.121071][ T27] audit: type=1326 audit(1774929565.804:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 550.144745][ T27] audit: type=1326 audit(1774929565.804:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 551.712797][T10897] loop2: detected capacity change from 0 to 512 [ 551.838525][T10897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.871782][T10897] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.109694][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.619745][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1180'. [ 557.645439][T11034] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1202'. [ 560.143010][T11088] loop2: detected capacity change from 0 to 40427 [ 560.153528][T11088] F2FS-fs (loop2): invalid crc value [ 560.195564][T11088] F2FS-fs (loop2): Found nat_bits in checkpoint [ 560.322309][T11088] F2FS-fs (loop2): Start checkpoint disabled! [ 560.347427][T11088] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 560.356126][ T5775] Bluetooth: hci4: command 0x1003 tx timeout [ 560.356248][ T5781] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 561.152506][ T6350] kworker/u4:14: attempt to access beyond end of device [ 561.152506][ T6350] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 561.204964][ T6350] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 561.451334][T11101] loop1: detected capacity change from 0 to 32768 [ 561.460086][T11101] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1230 (11101) [ 561.497109][T11101] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 561.527160][T11101] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 561.581010][T11101] BTRFS info (device loop1): turning on sync discard [ 561.635144][T11101] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 561.676033][T11101] BTRFS info (device loop1): use zstd compression, level 3 [ 561.683434][T11101] BTRFS info (device loop1): turning on async discard [ 561.780631][T11101] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 561.905950][T11101] BTRFS info (device loop1): trying to use backup root at mount time [ 561.946844][T11101] BTRFS info (device loop1): enabling auto defrag [ 561.982992][T11101] BTRFS info (device loop1): using free space tree [ 562.184917][ T6350] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 562.248274][T11101] BTRFS error (device loop1): failed to load root extent [ 562.286715][T11101] BTRFS warning (device loop1): try to load backup roots slot 1 [ 562.315323][ T6360] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 562.362485][T11101] BTRFS warning (device loop1): couldn't read tree root [ 562.387487][T11101] BTRFS warning (device loop1): try to load backup roots slot 2 [ 562.446967][ T4444] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 562.498267][T11101] BTRFS warning (device loop1): couldn't read tree root [ 562.535858][T11101] BTRFS warning (device loop1): try to load backup roots slot 3 [ 562.596385][T11101] BTRFS info (device loop1): enabling ssd optimizations [ 562.631082][T11101] BTRFS info (device loop1): rebuilding free space tree [ 562.702900][T11101] BTRFS info (device loop1): checking UUID tree [ 563.299520][ T5770] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 563.323147][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.329634][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.290990][T11203] loop1: detected capacity change from 0 to 164 [ 566.673832][T11223] syzkaller1: entered promiscuous mode [ 566.706568][T11223] syzkaller1: entered allmulticast mode [ 567.996124][T10004] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 568.206568][T10004] usb 3-1: Using ep0 maxpacket: 32 [ 568.219621][T10004] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 568.259519][T10004] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 568.329842][T10004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.341066][T10004] usb 3-1: config 0 descriptor?? [ 568.354400][T10004] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 568.624564][ T5847] usb 3-1: USB disconnect, device number 13 [ 568.805376][T11300] overlayfs: failed to clone upperpath [ 569.684156][T11318] loop1: detected capacity change from 0 to 256 [ 569.731774][T11318] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 570.621329][T11328] loop1: detected capacity change from 0 to 32768 [ 570.636239][T10005] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 570.672939][T11328] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 570.744923][T11328] XFS (loop1): Ending clean mount [ 570.771556][T11328] XFS (loop1): Quotacheck needed: Please wait. [ 570.855627][T10005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.861030][T11328] XFS (loop1): Quotacheck: Done. [ 570.867738][T10005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.903031][T10005] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 570.937589][ T27] audit: type=1800 audit(1774929587.164:64): pid=11328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1297" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 570.977279][T10005] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 570.995418][T10005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.010145][T10005] usb 3-1: config 0 descriptor?? [ 571.263562][ T5770] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 571.466935][T10005] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 571.549687][T11369] overlayfs: failed to clone upperpath [ 571.555707][T10005] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 573.625200][T10004] usb 3-1: USB disconnect, device number 14 [ 575.855957][T11441] loop1: detected capacity change from 0 to 131072 [ 575.887563][T11441] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 575.895815][T11441] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 575.906392][T11441] F2FS-fs (loop1): invalid crc value [ 576.065198][T11441] F2FS-fs (loop1): Found nat_bits in checkpoint [ 576.121468][T11441] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 576.128652][T11441] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 577.055580][T11465] loop2: detected capacity change from 0 to 164 [ 579.668010][ T5809] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 579.878077][ T5809] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 579.907253][ T5809] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 579.932488][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.971246][ T5809] usb 3-1: Product: syz [ 579.975528][ T5809] usb 3-1: Manufacturer: syz [ 580.015647][ T5809] usb 3-1: SerialNumber: syz [ 580.041117][ T5809] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 581.139141][ T5847] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 581.355452][T11498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.368877][T11498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.379084][T10004] usb 3-1: USB disconnect, device number 15 [ 582.198327][ T5847] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 582.219107][ T5847] ath9k_htc: Failed to initialize the device [ 582.244010][T10004] usb 3-1: ath9k_htc: USB layer deinitialized [ 582.425358][T11528] loop1: detected capacity change from 0 to 40427 [ 582.464451][T11528] F2FS-fs (loop1): invalid crc value [ 582.522507][T11528] F2FS-fs (loop1): Found nat_bits in checkpoint [ 582.635931][T10004] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 582.706800][T11528] F2FS-fs (loop1): Start checkpoint disabled! [ 582.793974][T11528] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 583.652028][ T6342] kworker/u4:10: attempt to access beyond end of device [ 583.652028][ T6342] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 583.671650][ T6342] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 583.680363][ T6342] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 583.693923][ T6342] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 584.010429][T11573] overlayfs: failed to clone upperpath [ 586.917525][ T27] audit: type=1326 audit(1774929603.164:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 586.983018][ T27] audit: type=1326 audit(1774929603.164:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 587.046319][ T27] audit: type=1326 audit(1774929603.194:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 587.121517][ T27] audit: type=1326 audit(1774929603.194:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 587.262660][ T27] audit: type=1326 audit(1774929603.194:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 587.348136][ T27] audit: type=1326 audit(1774929603.204:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 587.403387][ T27] audit: type=1326 audit(1774929603.204:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 587.432867][ T27] audit: type=1326 audit(1774929603.204:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 587.468450][ T27] audit: type=1326 audit(1774929603.224:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 587.538054][ T27] audit: type=1326 audit(1774929603.224:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633c19c819 code=0x7ffc0000 [ 589.001878][T11691] Illegal XDP return value 4294967294 on prog (id 32) dev N/A, expect packet loss! [ 591.957634][T11730] loop2: detected capacity change from 0 to 32768 [ 592.075043][T11730] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 592.287188][T11730] XFS (loop2): Ending clean mount [ 592.318078][T11730] XFS (loop2): Quotacheck needed: Please wait. [ 592.444032][T11730] XFS (loop2): Quotacheck: Done. [ 592.833404][ T5767] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 595.923580][T11805] kvm: kvm [11804]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 603.538756][T11944] loop1: detected capacity change from 0 to 512 [ 603.620057][T11944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.106344][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.850851][T12137] loop1: detected capacity change from 0 to 4096 [ 613.863900][T12137] EXT4-fs: Ignoring removed mblk_io_submit option [ 613.910845][T12137] EXT4-fs (loop1): Test dummy encryption mode enabled [ 614.073473][T12137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.485261][T12137] fscrypt (loop1): Error allocating 'cts(cbc(aes))' transform: -4 [ 614.704120][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.561078][T12306] loop1: detected capacity change from 0 to 512 [ 624.760703][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.767942][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.833986][T12306] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 626.669488][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1624'. [ 626.769694][T12358] ip6gre1: entered promiscuous mode [ 626.801641][T12358] ip6gre1: entered allmulticast mode [ 626.965505][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 627.027755][T10006] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 627.047311][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 627.219865][T10006] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 627.336896][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1628'. [ 627.711380][T10006] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 628.911733][T12396] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 631.316002][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 634.071712][T12490] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1667'. [ 634.469190][T12502] loop2: detected capacity change from 0 to 512 [ 634.526455][T12502] EXT4-fs (loop2): 1 truncate cleaned up [ 634.545405][T12502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.064774][T12520] trusted_key: syz.4.1677 sent an empty control message without MSG_MORE. [ 636.078024][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.810352][T12589] netlink: 'syz.5.1701': attribute type 2 has an invalid length. [ 638.836109][T12589] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1701'. [ 639.448302][T12602] overlayfs: failed to clone lowerpath [ 639.724197][T12611] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1707'. [ 639.752737][T12611] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.762281][T12611] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.771158][T12611] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.779952][T12611] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.832964][T12611] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.842145][T12611] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.851399][T12611] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.860480][T12611] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.988859][T12611] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1707'. [ 640.025377][T12611] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 640.034800][T12611] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 640.043954][T12611] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 640.053226][T12611] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 640.100161][T12611] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.109548][T12611] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.120419][T12611] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.126456][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 640.129388][T12611] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.856030][T10004] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 643.065977][T10004] usb 2-1: Using ep0 maxpacket: 8 [ 643.097602][T10004] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.126107][T10004] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 643.156479][T10004] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 643.184988][T10004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.197788][T10004] usb 2-1: config 0 descriptor?? [ 643.455375][T12666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.521358][T12666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.597575][T12666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.649671][T12666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.696008][T10004] usb 2-1: USB disconnect, device number 13 [ 644.323040][T12672] loop2: detected capacity change from 0 to 40427 [ 644.425128][T12672] F2FS-fs (loop2): invalid crc value [ 644.448883][T12672] F2FS-fs (loop2): Found nat_bits in checkpoint [ 644.676296][T12672] F2FS-fs (loop2): Start checkpoint disabled! [ 644.703254][T12672] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 645.083952][T12709] loop1: detected capacity change from 0 to 4096 [ 645.119168][T12709] __ntfs_warning: 7 callbacks suppressed [ 645.119188][T12709] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 645.222782][T12709] ntfs: volume version 3.1. [ 645.229890][ T6350] kworker/u4:14: attempt to access beyond end of device [ 645.229890][ T6350] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 645.301799][ T6350] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 645.338360][ T6350] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 645.356193][ T6350] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 645.375810][ T6350] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 645.390122][ T27] audit: type=1804 audit(1774929661.614:82): pid=12709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1740" name="/newroot/385/file0/file1" dev="loop1" ino=67 res=1 errno=0 [ 648.194599][T12733] loop2: detected capacity change from 0 to 64 [ 648.778998][ T6350] kworker/u4:14: attempt to access beyond end of device [ 648.778998][ T6350] loop2: rw=1, sector=65, nr_sectors = 1 limit=64 [ 648.831903][ T6350] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 648.882504][ T6350] kworker/u4:14: attempt to access beyond end of device [ 648.882504][ T6350] loop2: rw=1, sector=66, nr_sectors = 1 limit=64 [ 648.917805][ T6350] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 648.955799][ T6350] kworker/u4:14: attempt to access beyond end of device [ 648.955799][ T6350] loop2: rw=1, sector=67, nr_sectors = 1 limit=64 [ 648.982097][ T6350] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 649.016117][ T6350] kworker/u4:14: attempt to access beyond end of device [ 649.016117][ T6350] loop2: rw=1, sector=68, nr_sectors = 1 limit=64 [ 649.063430][ T6350] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 649.081821][ T6350] kworker/u4:14: attempt to access beyond end of device [ 649.081821][ T6350] loop2: rw=1, sector=72, nr_sectors = 1 limit=64 [ 649.102664][ T6350] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 649.124469][ T6350] kworker/u4:14: attempt to access beyond end of device [ 649.124469][ T6350] loop2: rw=1, sector=73, nr_sectors = 1 limit=64 [ 649.664207][ T6350] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 649.740447][ T6350] kworker/u4:14: attempt to access beyond end of device [ 649.740447][ T6350] loop2: rw=1, sector=76, nr_sectors = 1 limit=64 [ 649.754306][ T6350] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 649.763240][ T6350] kworker/u4:14: attempt to access beyond end of device [ 649.763240][ T6350] loop2: rw=1, sector=77, nr_sectors = 1 limit=64 [ 649.784412][ T6350] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 649.806289][ T6350] kworker/u4:14: attempt to access beyond end of device [ 649.806289][ T6350] loop2: rw=1, sector=78, nr_sectors = 4057 limit=64 [ 656.124060][T12893] overlayfs: failed to clone upperpath [ 656.942018][ T27] audit: type=1326 audit(1774929673.184:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48539c819 code=0x7ffc0000 [ 656.991236][ T27] audit: type=1326 audit(1774929673.214:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48539c819 code=0x7ffc0000 [ 657.053645][ T27] audit: type=1326 audit(1774929673.214:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48539c819 code=0x7ffc0000 [ 657.128762][ T27] audit: type=1326 audit(1774929673.214:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48539c819 code=0x7ffc0000 [ 657.187226][ T27] audit: type=1326 audit(1774929673.214:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48539c819 code=0x7ffc0000 [ 657.247581][ T27] audit: type=1326 audit(1774929673.214:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc48539c819 code=0x7ffc0000 [ 657.274055][ T27] audit: type=1326 audit(1774929673.264:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48539c819 code=0x7ffc0000 [ 657.298544][ T27] audit: type=1326 audit(1774929673.264:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48539c819 code=0x7ffc0000 [ 657.322384][ T27] audit: type=1326 audit(1774929673.264:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc48539c582 code=0x7ffc0000 [ 657.393703][ T27] audit: type=1326 audit(1774929673.264:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc48539c617 code=0x7ffc0000 [ 657.770505][T12919] kvm: kvm [12918]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 658.035887][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.051590][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1807'. [ 658.086304][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1807'. [ 658.416323][T10006] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 658.625915][T10006] usb 2-1: Using ep0 maxpacket: 16 [ 658.710229][T10006] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 658.762304][T10006] usb 2-1: config 0 interface 0 has no altsetting 0 [ 658.804016][T10006] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 658.866451][T10006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.909810][T10006] usb 2-1: config 0 descriptor?? [ 659.177264][T10006] usbhid 2-1:0.0: can't add hid device: -71 [ 659.183338][T10006] usbhid: probe of 2-1:0.0 failed with error -71 [ 659.238829][T10006] usb 2-1: USB disconnect, device number 14 [ 660.975859][ T5847] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 661.196314][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 661.219857][ T5847] usb 3-1: unable to get BOS descriptor or descriptor too short [ 661.256386][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.298246][ T5847] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 661.355897][ T5847] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 661.386123][ T5847] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 661.428862][ T5847] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 661.474687][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.495151][ T5847] usb 3-1: Product: syz [ 661.499561][ T5847] usb 3-1: Manufacturer: syz [ 661.504329][ T5847] usb 3-1: SerialNumber: syz [ 662.192117][ T5847] usb 3-1: 0:2 : does not exist [ 662.239671][ T5847] usb 3-1: USB disconnect, device number 17 [ 662.319299][T10609] udevd[10609]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 664.356111][ T5809] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 664.571308][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 664.585382][ T5809] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 664.627474][ T5809] usb 2-1: config 0 has no interface number 0 [ 664.633774][ T5809] usb 2-1: config 0 interface 12 has no altsetting 0 [ 664.664551][ T5809] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 664.678944][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.688671][ T5809] usb 2-1: Product: syz [ 664.692901][ T5809] usb 2-1: Manufacturer: syz [ 664.706198][ T5809] usb 2-1: SerialNumber: syz [ 664.717655][ T5809] usb 2-1: config 0 descriptor?? [ 664.881014][T10006] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 665.085850][T10006] usb 3-1: Using ep0 maxpacket: 8 [ 665.110720][T10006] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 665.128174][T10006] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 665.152487][T10006] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 665.172032][T10006] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 665.182675][T10006] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.202552][T10006] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 665.212243][T10006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.445557][T10006] usb 3-1: usb_control_msg returned -32 [ 665.467115][T10006] usbtmc 3-1:16.0: can't read capabilities [ 665.801609][T10006] usb 3-1: USB disconnect, device number 18 [ 665.807923][T13041] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 665.908504][T13063] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -19 [ 666.389055][ T5809] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 666.397133][ T5809] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 666.404467][ T5809] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 666.412938][ T5809] f81534: probe of 2-1:0.12 failed with error -71 [ 666.431008][ T5809] usb 2-1: USB disconnect, device number 15 [ 668.873011][T13106] kvm: pic: non byte write [ 668.898774][T13106] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3248122246 (415759647488 ns) > initial count (263516361344 ns). Using initial count to start timer. [ 672.018914][T13168] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 672.341107][T13118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 672.902189][T13177] kvm: pic: level sensitive irq not supported [ 673.469238][T13196] loop1: detected capacity change from 0 to 512 [ 673.490087][T13196] EXT4-fs: Ignoring removed mblk_io_submit option [ 673.597742][T13196] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 673.673504][T13196] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1894: attempt to clear invalid blocks 2 len 1 [ 673.787216][T13196] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 673.829428][T13196] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1894: invalid indirect mapped block 1819239214 (level 0) [ 673.851515][T13196] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1894: invalid indirect mapped block 1819239214 (level 1) [ 673.874336][T13196] EXT4-fs (loop1): 1 truncate cleaned up [ 673.892183][T13196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.014715][T13196] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 674.068258][T13196] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 674.097028][T13196] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 674.189143][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.776109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 675.956235][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 679.073412][T13293] loop1: detected capacity change from 0 to 2048 [ 679.105903][T13293] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 679.164545][T10609] udevd[10609]: incorrect nilfs2 checksum on /dev/loop1 [ 679.174677][T13298] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 680.516700][T10004] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 680.719842][T10004] usb 3-1: Using ep0 maxpacket: 8 [ 680.789358][T10004] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 680.810924][T10004] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 680.831653][T10004] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 680.854741][T10004] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 680.905906][T10004] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 680.925337][T10004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.179058][T10004] usb 3-1: GET_CAPABILITIES returned 0 [ 681.184648][T10004] usbtmc 3-1:16.0: can't read capabilities [ 681.401968][T10004] usb 3-1: USB disconnect, device number 19 [ 682.801125][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1953'. [ 683.658762][T13377] overlayfs: failed to clone upperpath [ 686.216334][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.231181][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.871526][T13456] syzkaller1: entered promiscuous mode [ 686.881702][T13456] syzkaller1: entered allmulticast mode [ 687.837074][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'. [ 689.021692][T13506] loop2: detected capacity change from 0 to 256 [ 689.069855][T13506] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000003) [ 689.080810][T13506] FAT-fs (loop2): Filesystem has been set read-only [ 690.485831][ T5848] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 690.705786][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 690.715374][ T5848] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.733600][ T5848] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.746937][ T5848] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 690.757467][ T5848] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 690.766537][ T5848] usb 3-1: Product: syz [ 690.771735][ T5848] usb 3-1: Manufacturer: syz [ 690.786574][ T5848] hub 3-1:4.0: USB hub found [ 690.988211][ T5848] hub 3-1:4.0: 9 ports detected [ 690.993820][ T5848] hub 3-1:4.0: insufficient power available to use all downstream ports [ 691.192063][ T5848] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 691.208985][ T5848] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 691.256910][ T5848] usb 3-1: USB disconnect, device number 20 [ 691.319131][ C1] ------------[ cut here ]------------ [ 691.325129][ C1] ODEBUG: free active (active state 0) object: ffff88801e3d7890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 691.338557][ C1] WARNING: CPU: 1 PID: 13528 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 691.348833][ C1] Modules linked in: [ 691.352765][ C1] CPU: 1 PID: 13528 Comm: syz.1.2004 Not tainted syzkaller #0 [ 691.360404][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.370540][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 691.377168][ C1] Code: 4c 8b 4d 00 48 c7 c7 60 93 1c 8b 48 c7 c6 c0 8f 1c 8b 48 c7 c2 e0 94 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 8e 91 1f fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 b3 f0 59 [ 691.396951][ C1] RSP: 0000:ffffc900001f0a50 EFLAGS: 00010296 [ 691.403159][ C1] RAX: fd56626d745c9300 RBX: ffffffff9749c9e8 RCX: ffff88802f2a8000 [ 691.411400][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 691.419649][ C1] RBP: ffffffff8accac00 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 691.427821][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff88801e3d7a00 [ 691.435966][ C1] R13: ffffffff897ac5a0 R14: ffff88801e3d7000 R15: ffff88801e3d7890 [ 691.444167][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 691.453221][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.459971][ C1] CR2: 00007fa045c085a8 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 691.468150][ C1] Call Trace: [ 691.471487][ C1] [ 691.474388][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 691.479873][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 691.485045][ C1] __kmem_cache_free+0xba/0x1e0 [ 691.490024][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 691.495010][ C1] call_timer_fn+0x189/0x540 [ 691.499803][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 691.504884][ C1] ? call_timer_fn+0xd2/0x540 [ 691.509753][ C1] ? __run_timers+0x800/0x800 [ 691.514676][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 691.520793][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 691.526078][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 691.531152][ C1] __run_timers+0x542/0x800 [ 691.535754][ C1] ? detach_timer+0x2b0/0x2b0 [ 691.540574][ C1] ? lock_chain_count+0x20/0x20 [ 691.545501][ C1] run_timer_softirq+0x67/0xf0 [ 691.550540][ C1] handle_softirqs+0x280/0x820 [ 691.556481][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 691.561429][ C1] ? do_softirq+0x1a0/0x1a0 [ 691.566542][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 691.571807][ C1] __irq_exit_rcu+0xd3/0x190 [ 691.576481][ C1] ? irq_exit_rcu+0x20/0x20 [ 691.581049][ C1] irq_exit_rcu+0x9/0x20 [ 691.585437][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 691.591157][ C1] [ 691.594130][ C1] [ 691.597132][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 691.603163][ C1] RIP: 0010:unwind_next_frame+0x240/0x2970 [ 691.609051][ C1] Code: 00 44 39 fd 0f 86 4f 1d 00 00 44 89 f8 4c 8d 2c 85 48 4e b2 8f 4c 89 e8 48 c1 e8 03 48 bb 00 00 00 00 00 fc ff df 0f b6 04 18 <84> c0 0f 85 de 21 00 00 45 8b 6d 00 44 89 f8 ff c0 48 8d 2c 85 48 [ 691.629212][ C1] RSP: 0000:ffffc9000da1edd8 EFLAGS: 00000a06 [ 691.635434][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 691.643601][ C1] RDX: ffff88802f2a8000 RSI: 00000000000075c0 RDI: 000000000009c000 [ 691.651744][ C1] RBP: 000000000009c000 R08: ffffc9000da1ef70 R09: 0000000000000000 [ 691.659803][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000da1eea8 [ 691.667843][ C1] R13: ffffffff8fb42548 R14: ffffc9000da1eedd R15: 00000000000075c0 [ 691.675917][ C1] ? unwind_next_frame+0x217/0x2970 [ 691.681177][ C1] ? stack_trace_save+0xa9/0x100 [ 691.686284][ C1] ? stack_trace_save+0xaa/0x100 [ 691.691274][ C1] ? stack_trace_save+0xaa/0x100 [ 691.696347][ C1] ? stack_trace_save+0x100/0x100 [ 691.701435][ C1] arch_stack_walk+0x144/0x190 [ 691.706286][ C1] ? stack_trace_save+0xaa/0x100 [ 691.711376][ C1] stack_trace_save+0xaa/0x100 [ 691.716223][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 691.721426][ C1] save_stack+0x125/0x230 [ 691.725933][ C1] ? __reset_page_owner+0x190/0x190 [ 691.731193][ C1] ? page_ext_get+0x22/0x2b0 [ 691.735866][ C1] ? page_ext_get+0x1e2/0x2b0 [ 691.740600][ C1] __reset_page_owner+0x4e/0x190 [ 691.745597][ C1] ? rcu_is_watching+0x15/0xb0 [ 691.750656][ C1] free_unref_page_prepare+0x7b2/0x8c0 [ 691.756219][ C1] free_unref_page_list+0xbe/0x860 [ 691.761397][ C1] ? __folio_memcg+0x63/0x160 [ 691.766256][ C1] ? folio_memcg+0x127/0x480 [ 691.770901][ C1] release_pages+0x1f7a/0x2200 [ 691.775786][ C1] ? lru_cache_disable+0x30/0x30 [ 691.780863][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 691.786271][ C1] __folio_batch_release+0x71/0xe0 [ 691.791625][ C1] shmem_undo_range+0x630/0x1b20 [ 691.796689][ C1] ? shmem_truncate_range+0xa0/0xa0 [ 691.801938][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 691.808091][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 691.813441][ C1] ? inode_wait_for_writeback+0x1e3/0x230 [ 691.819283][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 691.824441][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 691.829838][ C1] shmem_evict_inode+0x245/0x9e0 [ 691.834923][ C1] ? inode_wait_for_writeback+0x1e3/0x230 [ 691.840901][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 691.846552][ C1] ? sb_clear_inode_writeback+0x360/0x360 [ 691.852680][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 691.858352][ C1] ? bit_waitqueue+0x30/0x30 [ 691.863009][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 691.868329][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 691.873929][ C1] evict+0x4ca/0x8d0 [ 691.877963][ C1] ? proc_nr_inodes+0x230/0x230 [ 691.882955][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 691.888367][ C1] ? _raw_spin_unlock+0x28/0x40 [ 691.893377][ C1] ? iput+0x706/0x920 [ 691.897474][ C1] __dentry_kill+0x431/0x650 [ 691.902223][ C1] dentry_kill+0xb8/0x290 [ 691.906674][ C1] ? dput+0x3b/0x1e0 [ 691.910632][ C1] dput+0xfe/0x1e0 [ 691.914442][ C1] __fput+0x5e5/0x970 [ 691.918548][ C1] task_work_run+0x1d4/0x260 [ 691.923297][ C1] ? task_work_cancel+0x220/0x220 [ 691.928625][ C1] do_exit+0x95a/0x2460 [ 691.932849][ C1] ? put_task_struct+0xc0/0xc0 [ 691.937809][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 691.943836][ C1] ? get_signal+0x1068/0x13f0 [ 691.948638][ C1] ? lock_chain_count+0x20/0x20 [ 691.953619][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 691.958840][ C1] do_group_exit+0x21b/0x2d0 [ 691.963565][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 691.968860][ C1] get_signal+0x12fc/0x13f0 [ 691.973438][ C1] arch_do_signal_or_restart+0xc2/0x800 [ 691.979090][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 691.985119][ C1] ? get_sigframe_size+0x20/0x20 [ 691.990189][ C1] ? __x64_sys_recvmmsg+0x199/0x250 [ 691.995440][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 692.001110][ C1] exit_to_user_mode_loop+0x70/0x110 [ 692.006494][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 692.012208][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 692.017918][ C1] do_syscall_64+0x61/0xa0 [ 692.022390][ C1] ? clear_bhb_loop+0x40/0x90 [ 692.027218][ C1] ? clear_bhb_loop+0x40/0x90 [ 692.031948][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.038119][ C1] RIP: 0033:0x7f633c19c819 [ 692.042667][ C1] Code: Unable to access opcode bytes at 0x7f633c19c7ef. [ 692.049887][ C1] RSP: 002b:00007f633d0b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 692.058399][ C1] RAX: fffffffffffffe00 RBX: 00007f633c415fa0 RCX: 00007f633c19c819 [ 692.066478][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 692.074760][ C1] RBP: 00007f633c232c91 R08: 0000000000000000 R09: 0000000000000000 [ 692.082929][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 692.090988][ C1] R13: 00007f633c416038 R14: 00007f633c415fa0 R15: 00007fffe7fefe68 [ 692.099090][ C1] [ 692.102150][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 692.109468][ C1] CPU: 1 PID: 13528 Comm: syz.1.2004 Not tainted syzkaller #0 [ 692.116960][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 692.127281][ C1] Call Trace: [ 692.130570][ C1] [ 692.133430][ C1] dump_stack_lvl+0x18c/0x250 [ 692.138141][ C1] ? show_regs_print_info+0x20/0x20 [ 692.143356][ C1] ? load_image+0x400/0x400 [ 692.147883][ C1] panic+0x2dc/0x730 [ 692.151810][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 692.156339][ C1] __warn+0x2e0/0x470 [ 692.160416][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 692.166248][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 692.172154][ C1] report_bug+0x2be/0x4f0 [ 692.176495][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 692.182232][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 692.187964][ C1] ? debug_check_no_obj_freed+0x448/0x540 [ 692.193789][ C1] handle_bug+0xcf/0x120 [ 692.198051][ C1] exc_invalid_op+0x1a/0x50 [ 692.202565][ C1] asm_exc_invalid_op+0x1a/0x20 [ 692.207434][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 692.213955][ C1] Code: 4c 8b 4d 00 48 c7 c7 60 93 1c 8b 48 c7 c6 c0 8f 1c 8b 48 c7 c2 e0 94 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 8e 91 1f fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 b3 f0 59 [ 692.233831][ C1] RSP: 0000:ffffc900001f0a50 EFLAGS: 00010296 [ 692.239915][ C1] RAX: fd56626d745c9300 RBX: ffffffff9749c9e8 RCX: ffff88802f2a8000 [ 692.247899][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 692.255963][ C1] RBP: ffffffff8accac00 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 692.264030][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff88801e3d7a00 [ 692.272008][ C1] R13: ffffffff897ac5a0 R14: ffff88801e3d7000 R15: ffff88801e3d7890 [ 692.279993][ C1] ? rose_transmit_link+0x740/0x740 [ 692.285237][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 692.290720][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 692.296016][ C1] __kmem_cache_free+0xba/0x1e0 [ 692.300889][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 692.305834][ C1] call_timer_fn+0x189/0x540 [ 692.310436][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 692.315565][ C1] ? call_timer_fn+0xd2/0x540 [ 692.320251][ C1] ? __run_timers+0x800/0x800 [ 692.324946][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 692.330251][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 692.335458][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 692.340661][ C1] __run_timers+0x542/0x800 [ 692.345269][ C1] ? detach_timer+0x2b0/0x2b0 [ 692.350137][ C1] ? lock_chain_count+0x20/0x20 [ 692.355012][ C1] run_timer_softirq+0x67/0xf0 [ 692.359788][ C1] handle_softirqs+0x280/0x820 [ 692.364657][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 692.369430][ C1] ? do_softirq+0x1a0/0x1a0 [ 692.373960][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 692.379269][ C1] __irq_exit_rcu+0xd3/0x190 [ 692.383869][ C1] ? irq_exit_rcu+0x20/0x20 [ 692.388386][ C1] irq_exit_rcu+0x9/0x20 [ 692.392665][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 692.398400][ C1] [ 692.401427][ C1] [ 692.404361][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 692.410353][ C1] RIP: 0010:unwind_next_frame+0x240/0x2970 [ 692.416253][ C1] Code: 00 44 39 fd 0f 86 4f 1d 00 00 44 89 f8 4c 8d 2c 85 48 4e b2 8f 4c 89 e8 48 c1 e8 03 48 bb 00 00 00 00 00 fc ff df 0f b6 04 18 <84> c0 0f 85 de 21 00 00 45 8b 6d 00 44 89 f8 ff c0 48 8d 2c 85 48 [ 692.435869][ C1] RSP: 0000:ffffc9000da1edd8 EFLAGS: 00000a06 [ 692.441945][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 692.449923][ C1] RDX: ffff88802f2a8000 RSI: 00000000000075c0 RDI: 000000000009c000 [ 692.457903][ C1] RBP: 000000000009c000 R08: ffffc9000da1ef70 R09: 0000000000000000 [ 692.465985][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000da1eea8 [ 692.474351][ C1] R13: ffffffff8fb42548 R14: ffffc9000da1eedd R15: 00000000000075c0 [ 692.482452][ C1] ? unwind_next_frame+0x217/0x2970 [ 692.487682][ C1] ? stack_trace_save+0xa9/0x100 [ 692.492741][ C1] ? stack_trace_save+0xaa/0x100 [ 692.497699][ C1] ? stack_trace_save+0xaa/0x100 [ 692.502653][ C1] ? stack_trace_save+0x100/0x100 [ 692.507684][ C1] arch_stack_walk+0x144/0x190 [ 692.512559][ C1] ? stack_trace_save+0xaa/0x100 [ 692.517513][ C1] stack_trace_save+0xaa/0x100 [ 692.522318][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 692.527449][ C1] save_stack+0x125/0x230 [ 692.531789][ C1] ? __reset_page_owner+0x190/0x190 [ 692.537012][ C1] ? page_ext_get+0x22/0x2b0 [ 692.541700][ C1] ? page_ext_get+0x1e2/0x2b0 [ 692.546391][ C1] __reset_page_owner+0x4e/0x190 [ 692.551542][ C1] ? rcu_is_watching+0x15/0xb0 [ 692.556324][ C1] free_unref_page_prepare+0x7b2/0x8c0 [ 692.562153][ C1] free_unref_page_list+0xbe/0x860 [ 692.567453][ C1] ? __folio_memcg+0x63/0x160 [ 692.572145][ C1] ? folio_memcg+0x127/0x480 [ 692.576753][ C1] release_pages+0x1f7a/0x2200 [ 692.581536][ C1] ? lru_cache_disable+0x30/0x30 [ 692.586482][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 692.591701][ C1] __folio_batch_release+0x71/0xe0 [ 692.596828][ C1] shmem_undo_range+0x630/0x1b20 [ 692.601793][ C1] ? shmem_truncate_range+0xa0/0xa0 [ 692.607000][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 692.613004][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 692.618221][ C1] ? inode_wait_for_writeback+0x1e3/0x230 [ 692.624049][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 692.629079][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 692.634119][ C1] shmem_evict_inode+0x245/0x9e0 [ 692.639160][ C1] ? inode_wait_for_writeback+0x1e3/0x230 [ 692.644893][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 692.650450][ C1] ? sb_clear_inode_writeback+0x360/0x360 [ 692.656184][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 692.661220][ C1] ? bit_waitqueue+0x30/0x30 [ 692.665920][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 692.671129][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 692.676772][ C1] evict+0x4ca/0x8d0 [ 692.680692][ C1] ? proc_nr_inodes+0x230/0x230 [ 692.685552][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 692.690848][ C1] ? _raw_spin_unlock+0x28/0x40 [ 692.695800][ C1] ? iput+0x706/0x920 [ 692.699883][ C1] __dentry_kill+0x431/0x650 [ 692.704491][ C1] dentry_kill+0xb8/0x290 [ 692.708925][ C1] ? dput+0x3b/0x1e0 [ 692.712835][ C1] dput+0xfe/0x1e0 [ 692.717118][ C1] __fput+0x5e5/0x970 [ 692.721126][ C1] task_work_run+0x1d4/0x260 [ 692.725822][ C1] ? task_work_cancel+0x220/0x220 [ 692.730951][ C1] do_exit+0x95a/0x2460 [ 692.735137][ C1] ? put_task_struct+0xc0/0xc0 [ 692.740010][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 692.746089][ C1] ? get_signal+0x1068/0x13f0 [ 692.750965][ C1] ? lock_chain_count+0x20/0x20 [ 692.755833][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 692.760961][ C1] do_group_exit+0x21b/0x2d0 [ 692.765695][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 692.770933][ C1] get_signal+0x12fc/0x13f0 [ 692.775460][ C1] arch_do_signal_or_restart+0xc2/0x800 [ 692.781111][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 692.787103][ C1] ? get_sigframe_size+0x20/0x20 [ 692.792072][ C1] ? __x64_sys_recvmmsg+0x199/0x250 [ 692.797282][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 692.802846][ C1] exit_to_user_mode_loop+0x70/0x110 [ 692.808241][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 692.813802][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 692.819447][ C1] do_syscall_64+0x61/0xa0 [ 692.823876][ C1] ? clear_bhb_loop+0x40/0x90 [ 692.828562][ C1] ? clear_bhb_loop+0x40/0x90 [ 692.833250][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.839155][ C1] RIP: 0033:0x7f633c19c819 [ 692.843668][ C1] Code: Unable to access opcode bytes at 0x7f633c19c7ef. [ 692.850863][ C1] RSP: 002b:00007f633d0b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 692.859289][ C1] RAX: fffffffffffffe00 RBX: 00007f633c415fa0 RCX: 00007f633c19c819 [ 692.867531][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 692.875598][ C1] RBP: 00007f633c232c91 R08: 0000000000000000 R09: 0000000000000000 [ 692.883581][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 692.891556][ C1] R13: 00007f633c416038 R14: 00007f633c415fa0 R15: 00007fffe7fefe68 [ 692.899557][ C1] [ 692.903026][ C1] Kernel Offset: disabled [ 692.907451][ C1] Rebooting in 86400 seconds..