last executing test programs: 6.699008204s ago: executing program 4 (id=9221): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_hsr\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08001efdffa565e9", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) (fail_nth: 5) 6.277012708s ago: executing program 4 (id=9223): r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query, @snprintf, @printk={@x}]}, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x56, &(0x7f0000000880)=""/86, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x0, 0x21e, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x42}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) r7 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 5.467394425s ago: executing program 4 (id=9253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) timer_getoverrun(0x0) clock_gettime(0x0, &(0x7f0000000080)) 5.384229641s ago: executing program 4 (id=9256): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) setpgid(0x0, 0x0) 5.383852721s ago: executing program 4 (id=9258): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x0, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000340)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@bsdgroups}, {@data_err_abort}]}, 0x11, 0x5f4, &(0x7f0000001bc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/51, 0x33) getdents64(r0, 0x0, 0x2e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a80)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.330282226s ago: executing program 4 (id=9261): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) dup(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8}, 0x48) setgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x805, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) r8 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) write$cgroup_freezer_state(r7, &(0x7f0000000400)='FROZEN\x00', 0x7) 5.235022483s ago: executing program 0 (id=9263): r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query, @snprintf, @printk={@x}]}, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='timer_start\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x56, &(0x7f0000000880)=""/86, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x0, 0x21e, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x42}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) r7 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 4.346037506s ago: executing program 0 (id=9286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 32) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000040ffff097b010008003950323030302e4c"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r3, @ANYBLOB="00fe"]) (async) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x40002, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000300)={0x50000001}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2042, 0x0) (rerun: 32) getrlimit(0x7, &(0x7f0000000000)) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000031889d5c7bb919944c69726b0f3612b180e548fba63722231fbb17346e177e3cfaedebab383620efc0a028aebbff3f4083d9ff68cbce6ea1b626b9ceae41ba0da6e5c8d2e413d4c0995920d79097a082ad04d25ab4e469081664f7e445fd942faf6987daa5529ae45bec3da2b979b6f36fa304f236cf8e0a4ac39bfd020f20a64b3425d5f84563453db4616985868059637063f756b1c226f88ba6b684daa74cabd8157832fa2353c35fe0672da4ac339d2f1941f018b759aab0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) (async) mknod$loop(0x0, 0x0, 0x1) (async) utimes(0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r8) (async) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b87030b0000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) syz_emit_ethernet(0xc4, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @tipc={{0x20, 0x4, 0x3, 0x1d, 0xb6, 0x67, 0x0, 0x7, 0x6, 0x0, @empty, @multicast1, {[@noop, @timestamp={0x44, 0x14, 0xa8, 0x0, 0x7, [0xbba, 0x4, 0x6, 0x0]}, @lsrr={0x83, 0xf, 0xc2, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x16}]}, @generic={0x0, 0x6, "25728179"}, @timestamp_prespec={0x44, 0x34, 0xf2, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@rand_addr=0x64010100, 0xfffff801}, {@private=0xa010100, 0xfffff933}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x41b}, {@private=0xa010101, 0x80000000}, {@rand_addr=0x64010101, 0x3ff}]}, @noop, @generic={0x7, 0xc, "0d18f6a2f90d7c67c626"}]}}, @payload_mcast={{{{{{0x36, 0x0, 0x0, 0x0, 0x1, 0xb, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4, 0x1, 0x4, 0xf65, 0x0, 0x4e23, 0x4e20}, 0x2, 0x2}, 0x3, 0x3}}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 4.193768158s ago: executing program 0 (id=9291): eventfd(0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x91e, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0xe9, 0x63, 0xb9, 0x40, 0x14b2, 0x3c23, 0x2bbd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90c, 0x3, 0x0, 0x8, 0x88, 0x80, [{{0x9, 0x4, 0x7b, 0x81, 0xc, 0x8d, 0xcc, 0xa8, 0x2, [], [{{0x9, 0x5, 0xa, 0x0, 0x88ec06b029acdce8, 0x2, 0x8, 0x8e, [@generic={0xf7, 0xb, "c7476e33ae3290b3d9ab716782357c41c1a1beeadbfc4e7b1ac2ccc6dc9c094de5005de33c8f1d93d6242b1a55a37704a0f2a309e93bda6449027e558a61caee3e11ac91e29350a141d61bd92280f672a606e77a80e6b50c173b9924fd24e231d56395f245365076e5097ed2ed7124480ea053a98810a04e2f1481b7f266ad76188cc3411f6a6faec2a7bd8ce3ff344eb12e788058d00ccb8c975b4261225c5f569b24281f20a0f97271f2a49f9a06b114fa58a332d6115435703beec8aa1ea3bd967868d7da8e9497fbe621d3264ff77d738d8006a5cbbc7d1f8a13a32396e3f209436c56adda9c984edac8cd537bfe6368492f42"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x8000}]}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x80, 0x1, 0x3}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xc, 0x3, 0x9, [@generic={0x101, 0xc, "6c7873f4d090014d0e2cd63c962c780fa254b18b6b212e31e79af90780bb0558dcfb8240bbf5341292671c035d370781e94df55e8febb7cfd980c96de04111f8b2cac2b2d9bc7c7b64dff9e7a28faf4e6bf59dec83e4e03ada890f1132c8faff21eaac3421731ffec05b193b35532424cae7a564e8274e2c813274c0aa6956c39a5bca9a261b864ee9d487360f077998e7dae712eb67647773adaba08d38e31790362bf858e8c44f344499e0b8abf39df2f43442f3070d1dc91c67640392a8ff76d96fdbcb1bfefe2afa904bcde0022f1040665df68b56c00a2d99ab7fb66fc8593fee38eadaf5e1d974706c2e6f23056ef9148c1d435cb2cb2e5204d8ff42"}, @generic={0x20, 0x0, "7d427a1f1c4bf03277d00981c1dad1eee5899d4a6a13bb58926545cbb52b"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x7, 0xf, 0x5, [@generic={0x82, 0x22, "50bf36d6851bdb35f5d7adf3883c516ec19b3070cdac0e813bdd19e6fb233789c2ea2a5e414649b2f18798224cae37611d2acbc7fedc10b107ca1cf31516a0cf84513e3f4c42c49925bdb729f1c240ae6d0a7480a880f91d3881e19926e6c007a949be00d5fe73d2df3b54ceb5ee602d270fd32e78b491157118442bbf66948e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x2, 0xfd, 0x7b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb2, 0x3}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x4, 0xa, 0x2}}, {{0x9, 0x5, 0xe, 0x1, 0x3ef, 0x7, 0x9, 0xcc}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9, 0x7, 0x3c}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x2, 0x81, 0xc}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0xfa, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3fc}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x6, 0x9, 0x3, [@generic={0xa8, 0x3e, "6c34966f5423483edc0ee3345eb5a2a5e476a8cd24d64832ada72e0c07cdc304b39653ec42908df86334f65f2ec05a4f73432d519046ceb5ec6a20e1a402388eef08f4813999e11dda98c167fba408dfece0d795d2867170670ea50819533ec839d064ea9ff3a6af4734b0fdeb4c21612d7fb004bbaeb6cbda4bfd0bd32b5da8427e0c77721740ca220e3b536faee0512f2aa54e716f12fde502eb82f4d821f6a1a393e4cd61"}]}}, {{0x9, 0x5, 0x80, 0x5, 0x8, 0x5, 0x2, 0x4, [@generic={0xdb, 0x0, "93304e11dbf8cd38ddff40bed7bfc31ed90a422cbc6988b490e385bb189c371382ef1d55aebb247a36094c530748e5914ee026190a9243f3de1768ffd87ad551d20c74ce962658af039152b35db6642e7bed24877d9d8e8d2c7f92f1ae7d2d80d9acfe59824c414c6fb79ccb91acaaf0443173939f0393e61f693d9d0f4c44fe60a5d2fd43d7cae0a4eeb9f1087cdd22c6a16c9b51a1366a588879113b315b3be8dadcc43d4fa44353bcfaedfb6fd365468c229c7702d90a5434bce72a4600ce89ac8ad1a8b9a72e95608dbea907af4b0e34643339a76bb6b4"}]}}]}}, {{0x9, 0x4, 0xda, 0x5, 0xc, 0x67, 0x7, 0x2c, 0x7, [], [{{0x9, 0x5, 0x8, 0x0, 0x200, 0x7, 0x1, 0x8}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x4000}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x101}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xe, 0x3, 0x55, [@generic={0x8e, 0x11, "309c852bb578120794b22bed29e3cbc7d53cdb92c46c86e3441fc60cb38b362140483928ffed8e7317299235d04b1f2fe45a9e93c0960065c9c99220d90a2026080bea0306179c92c629f3410fb23b257f10025353ed20450acf79f12724a583c841c6c8a6465c8ad39bee9957b87e6c7424ced6021fe9f3a93a00f2c221a94612995da3415cfcf24a47e4de"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x7}]}}, {{0x9, 0x5, 0x8d, 0x2, 0x8, 0x0, 0xcf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6}, @generic={0xe4, 0x31, "e6f03d65dfdae606ed58382946a92eec612f7f7b96297e3a6b567fe8f40480d3acf38c457ce49f6dc812d5fd4610bf597602ec6d17b1dc8f4be3c5342a9f695db0b28a16a82f734c0a4ba9d915df69900a972fc8a443a25d32c9f5c08972e7413ad279a136e1b5247caea3830a99da78de415652a67adc478a146224bb60f5824454267e09d48d1367e64fcb2da5abf275793f0e8acb3d1388de5e8f29aa6a2a94842fdfb896467871e7025a3403eae4469a2c85da759a43734441cb96db8f6fd6d65397480dc566bc0cefba2d5fb246489b5c87ce9debe8a25aacd92fd72e5f844d"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x0, 0x0, 0x5, 0x1}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x7, 0x4, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe0, 0xfff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x2, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0xa, 0xa1c}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x61, 0x8, 0x3}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x4, 0x1d, 0x7}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x5, 0x7, 0x4}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x7, 0x5, 0x91, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7}, @generic={0x16, 0x0, "4762a5c845602ceb76b7d7b623a05eb3451e7581"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x0, 0xa, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x7}, @generic={0xa9, 0xc, "e484a567be770c8161a7ee796cc012726669dfb951b0e909650f96f3c5feaf11240db4ebd36fdf2a8024a13ea0d933da9562e3f201227ae242b67b396f9a1ca4275e1a1f5ea17fd502f3e2da3b2d340676175deac2c04713cbc784d836634dd0bfd6670e0a5d9d55f1bc75b3b6955ddfb618a555bae49b38f8bf817e19d3f0f925ce97247d7c9a1f8bb5c25ae4881601d16b6e0e0959c89691586a1b1064d8f24afb45649a715c"}]}}]}}, {{0x9, 0x4, 0x5f, 0x9, 0x3, 0x83, 0x51, 0x2, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x38}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x9, "ff"}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0x0, "fcae2b"}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x2, 0x3, "334447a7"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x100, 0x3, 0x6, 0x8}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x26, "9a"}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0xadd, 0x6}]}, @uac_control={{0xa, 0x24, 0x1, 0x452, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x4, 0xfe, 0x0, 0x4, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x3, 0xb3, 0x4, 0x2, 0x18}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x5, 0x4, "42ec"}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x53}]}], [{{0x9, 0x5, 0xf, 0x2, 0x400, 0x2, 0x3, 0xfc, [@generic={0x2d, 0xc, "cfea632b9a460c6a0ca4ca3fb6ac9bfab2110cdd8d46cc7c31857baa1fb10d62f9708acee95e5067eff9ae"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x4}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x3, 0xe, 0x4, [@generic={0x40, 0x23, "237d062dd0c0bdb064f5355243a5c406104bae0edc2799402021bffc6286948fe23753502201bbc183eafe2b27c7e46a5964c4c10a9cd4eeda8239d20815"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x96a}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x7f, 0x1, 0xe, [@generic={0x65, 0x31, "ca620d0b4ac30dd54c05fd42afdc0badf3d7bd83e55a6c6cb7f6d5eb86fcf0cb9fe6fd0c56ca9ba9ee226a20053097dc1313cd65cb3faf6f67210fbed703adaf1b15a84a19cb1cd5a1b7efe86db3554f3e6a4029b6a661fb55c307e35125c1d1276c50"}, @generic={0x5, 0x1, "ed6e9c"}]}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x9, 0x6f, 0x2, 0x40, 0x83}, 0x4b, &(0x7f00000002c0)={0x5, 0xf, 0x4b, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x71, 0xa, 0x3, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x6, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0xc19b70, 0xf000, 0x6, [0xc0, 0xff0030, 0x3f30, 0xaa4e34fe70b6d5b6, 0x3f30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xb, 0x7f, 0x5, 0x10}]}, 0x6, [{0x100, &(0x7f00000004c0)=@string={0x100, 0x3, "34869aeaa64b7601d33c139c810471a5e1bdb1b495417a383b90cc6257abd80c176588e995c7693a4a7ac47e8987187c71825c215121cb32c6219e92828d4d90b90cf6195e226d5b684d2f64b1c1ffff71cf902b577ff393644d16c7e88b6e98afc39f0097a876249d6fa2c31bd2763d9d06a6fc406ec2d6119ded42395f961d95ebd337f011d40851216ad7f461dda3dce286f268ae379fb198d0b6adb010ae98729534d3df6c856415b2876c85e98546cedbbba4242cbe6e1300a0e3b4540b5d831ef03c84a42762836ca5eb059cbd5acb2a63bbe12ef378d6839ead1be196d8e1cb93793302323df51659b5738259e095ddcb443703b92bce25249302"}}, {0x4e, &(0x7f00000018c0)=ANY=[@ANYBLOB="4e7c91891189818b972d562881aec613d11f665fdd1199b386a01b3d6b04da76c96fae7673b60587f2099bf700165e8d92e355c6c7ecd8a36be0282c78e1e13646dd9c59000000000000000000009620f8394b8813bb37c25cd6c244064be894791f0255ce3fe4b59cb19def581bdf7d77870d9ca7a8d518b4d5c8ccf5aaff3414844ec88ef2cf"]}, {0x102, &(0x7f00000006c0)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1809}}, {0xc3, &(0x7f0000001980)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc04}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000001840)={{'\x00', 0x2}, {0x800}, 0x21, 0x0, 0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000001440)="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", 0x1a4, 0x0, &(0x7f0000001600)={0x2, 0x144, {0x1, 0xc, 0xb4, "e874aba4954959e8644c29522c4dc1ab3c10286c6d4b9480fa983dc6fc5df76da473f4c698b02a244910ddfbbbaf85685c0180c1a39dae22a8a27f2a3e77d4ef9ed77ee347469ee6dfd6c7265d327076de5a30dffba792a5a8bd9f98f31f25ea9831a40e1efec0a139d0424cb5640261331271aa56b2e53f9cc839bbebd8251b4c0412dcae443584058341e212c36483ee7bde5be9192ef2de430cf8dbc1a1b9520be601ac2781ca415d0553075066fd7d3b4a52", 0x83, "4f78a51d0395f7e933886938ed62f198ee0d9ac0921611a6f015a0b0ec7f297a25b2c0de97ac1f2d8a5c4b098ccad08907494aaf8ddc938f4f7c26ed42547a6279c712785297650f9ae3b2d6a376e5c197fc2ade4ad7eb4d85c9a1492b309d6f57b44479d5e7a13b3ebe67e29180dfeba73bb5eecac4f83607c10618c37eb9c0c92317"}, 0xe7, "c9a3a4f45b3a6ab6a88d8661bd3f11cc89de67f609cce277534ec070cc8b839b7e34ffc224eb18e07cf971d55f6ecfe3c8c2713ae0d53dcc1ac104895a5e2d8ee5241c533f445b39475d898916cb9d08077e37a67e04c2319463220b4251dde7b155eab99a76c35ced4f88a1cde76cf98a6c4c64a0ef52a3ab174b5cdeeef827fd57dc26f1a6cc28cab9da34d5eecdac88d562ab06ef9a5fdc2c408f9afc1c92adab84007a19ed1d6d3b5aff6e4248a7c9ea39acb72468e47f3056b36f69e3fae4e4d1842aae4c2afca815a63f74bab1d767e5fb62a47d6e6e99f036b033fcf9a41ecc2fb835aa"}, 0x237}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syslog(0x0, 0xfffffffffffffffd, 0x6b) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x11000) vmsplice(r6, &(0x7f0000000280)=[{&(0x7f00000001c0)="85", 0x1}], 0x1, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 3.426969311s ago: executing program 3 (id=9313): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @loopback={0xff00000000000000}}}) (async) getpid() (async, rerun: 32) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000000)=ANY=[@ANYRES32], 0x9, 0x2bc, &(0x7f0000000880)="$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") (rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) getrlimit(0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x4, 0x6, @link_local}, 0x10) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'veth1_to_batadv\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (rerun: 64) sched_setaffinity(r2, 0x8, &(0x7f0000000840)=0x2) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) (rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000400)) 3.079261639s ago: executing program 3 (id=9325): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r4, &(0x7f0000000740)=ANY=[], 0xff67) sendfile(r3, r4, &(0x7f0000000000), 0xfffb) fcntl$addseals(r4, 0x409, 0x8) fcntl$addseals(r4, 0x409, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 2.876932546s ago: executing program 2 (id=9333): r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000740), 0x0, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f00000007c0)) write$binfmt_elf64(r0, 0x0, 0x14) 2.875934576s ago: executing program 2 (id=9335): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f00000006c0)={[{@noextent_cache}, {@usrquota={'usrquota', 0x3d, 'hugetlb.2MB.usage_in_bytes\x00'}}, {@noinline_dentry}, {@nolazytime}]}, 0x1, 0x551d, &(0x7f000000ab00)="$eJzs3M9rI1UcAPA37XZ/u5bFg7cdWIQWNqHpj0VvVXfxB3Ypqx48aZpMQ3aTTGnStPbkwaN48D8RBU8e/Rs8ePYmHhRvgpJ5U7r1B6hNU7v9fGDyfe/lzXfeC6HwnSkJwLk1m/7yUxJuhCshhOkQwvUQinZSHoXVGJ4vh6aeOJI4fjhwMYRwNYRwY5Q85kzKtz67M7y98uObP3/97aUL1z7/6rtT2zRw6l4IIXS3Ynu3G2PeivFROV4ftovYXR6WMb7RfVz28xh3s40iw279YF69iEutOD/f2umP4man3hjFVnuzGN/qxQv2h62DPMUJj+rbRb+ZbRSx3c+L2NqP69rbj3/b9vuDmKdZ5vuwSB8Gg4MYx7O9LO5n63ERG71BOR7z5s1sbxSHZSwvFxp5p1msY+M4n/T/21vt3s5eOsy2++28l65Uay9Wa3crte28mQ2y5Uq927y7nM61OqNplUFW76628rzVyaqNvDufzrUajUqtls7dyzba9V5aq1WXqguVlfmydSd97cG7aaeZzo3iK+3ezqDd6aeb+XYaz5hPF6tLL82nt2vp22vr6frD+/fX1t95/957D15ee+PVctKflpXOLS4sLlZqC5XF2vw52v/H5aLHuH84luS0FwBw9vzL+j/cUv8DY3By9f/2wxBOvv4P6v+xOFP173mv/09g/3As6n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHPr+5kvXi8as7F/rRx/phy6WfaTEMJUCOG3vzAdLh7JOV3mmfmb+TN/WMM3SSgyjK5xqTyuhhBWy+PXZ0/6UwAAAICn15cf3fo0VuvxZfa0F8QkxZs2U9c/GFO+JIQwM/vDmLJNjV6eG1Oy4vt9IeyNKVtxA+vymJLFW24XxpXtH5k+Ei4/EZIYpia6HAAAYCKOVgKTrUIAAACYpE8Om2N7pMWk3Pzvpybh4FHmwbPg4j/vD78HV470AAAAgDMoOe0FAAAAACeuqP/9/h8AAAA83eLv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDv7NzNjdpAFADgZ4MD+VNQlHtayQ3KSAk55hhRQJqgBNJCGqAGcksBOUSwYjywC2JXYm2v2dX3SWY8lv14RnCYN2YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/amWs18/Pv9sGmezbaaduwEAAADOWVfLWdqZ1P23+fj7fOhj7hcRUUbEubH7IF4d4hVxG6e65/zqJIffESnC7tpR3t5ExJe8/f/Q9acAAAAAL9dqvphGDHa76WXSd0I8pbpoU7772lK8IiKqyd+WopW7eJ9aCpa+38P4fsEV/x54KCUVsMatJLYvuQ0bBrksm/RzP1Ttxneaom7K/ZmntbrHvBsAAHAdBkdN01EIAAAA1+tb3wnQj/Sofp7fy1OBo7rJ03uvj3oAAADAM1T0nQAAAADQuTT+b3v9vxjVfyaw/h8AAABch3r9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq0rpaz1XwxbRpns22mnbsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCG/XlHgRAIgzDYu74zmfsfVho0NTWpAuHjbwwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePO7v/yfmBpnkrnXxtLzSLJ2amydGnvnxtEfxtevAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC725yUFQiAIomDO+N9J3/+wkqBnECECGh5V1KIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6He//J+YGmeSudPG0vFIsnbV2Lpq7D1oHD0Yb/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC527uc1jioOAPibmZ2NrYprlD1ERMGDXux2U1t7Ew9K8OCfIIR0W2O3/kj3YEsRcvEmOfciehQRlHjr/9BzC73EWw57iOBZmdmZZPIDXCOd2SSfD7x93xmGed83CyHfeS8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNL4/b04yT46kzguzj3aubeS9Y8P9JkHG08WspbFUZ1JnwyvVg+ibnOJAAAAcHYkZX0fQthKN5eyPu7k9X9aXpPV/D88P4nLev5g3V/2Ze2ftd9/2355d6DOZJzsptdXh4OLh1NpPb1ZzrYX/vWKVv7k83cvSf6FxB+tvzRO8+cZfffw4QftPJyrI1sA4DgulH0RlL8PZX2/ycQAODNalcK7rP+TTrM5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANRhvB6eLeMohLDQ2oszj3furRzVP9h4slC2K/fvb1Tvmd0iDSFcXx0OLtY4l1l3+87dm8vD4WCt/uC1EEJTo79XTP/mJ1NcHMLxxmo38VQFh4K4+LJnJZ+TETT4QwkAgFMpLVpW12+lm0vZuWg+hL9/3F//v1mJw5T1//anVx5Vx6rW//3aZjj7eqNbX/Zu37n79uqt5RuDG4PP31nsv9u/dPXy5au9/F1JzxsTAAAA/p920ar1fzx/eP3/fCUOU9b/X33f/6Y6VqL+P9Leol/TmQAAAJxtL77+15/REeejdjt8vTwarfUnn5PjudHaYn682ECq/9lc0ar1fzLfdFYAAABAHcbr0b71/2uVOEy5/v/cT6/8Ur1nEkI4V6z/X1j5YnitvunMtDr+nLjpOQIAANCsc0Wrrv+n+f7/eHfLQxxCeOuNSVz8G8Cp6v/kw29/ro5V3f9/qb4pzqS4O3keed8NodVtOiMAAABOs2eKlhX7f6SbS5/9ev7jtv3/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHX7JwAA//+FcUGO") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="73686f72746e616d653d6d69786564070000005f786c6174653d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6d697865642c636865636b3d7374726963742c73686f72746e6e695f786c6174653d302c726f6469722c757466383d312c616c6c6f775f7574696d653d30303030303030303030303030303010303030373335312c6572726f72733d72656d6f756e742d726f2c736d61636b6673666c6f6f723d756e695f789afd74653d312c00"], 0x6, 0x2d0, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @rand_addr=0x64010102]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @remote]}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000780)={'#! ', '', [], 0xa, "09240e336ac158fae72d862dfd007ce33176873b9519920c4d72b9b72f937765daee20b30bb9d794bd86ce226c160d90158b6434e4d39286bbb2e77b59d9c8f64635108aca70fd7b91518950c5f8680860710372660ba27a7807bbbeaa74aed95a07cf266e02b9c692de1e15cbc6d435b5158138782db62bd61339c1d7901b9d1129f9d2562606d0ca80479b3711cfed6894ed697379dd33c26a00e84f83a8bd61213d1a88987bb7b701929739bb"}, 0xb2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) 2.875692886s ago: executing program 3 (id=9336): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061160402000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x80) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910080037"], 0x0}, 0x90) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = epoll_create1(0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000002100)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xa, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3266078b089b3b083844090890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b333b0d07680936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0afc9397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6258742317662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e0088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76ccc2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2e57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849d11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f9d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f0712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1ccced94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1025}}, 0x1006) read$ptp(r3, &(0x7f0000000140)=""/13, 0xd) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)={0x20000001}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)={&(0x7f00000003c0)=@getroute={0x14, 0x1a, 0xa30, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7000000000000009500"/31], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.402516344s ago: executing program 2 (id=9355): r0 = socket$inet(0x2, 0x0, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0xfff, 0x2003) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = io_uring_setup(0x488, &(0x7f0000000080)={0x0, 0xa58a, 0x0, 0x3, 0x4}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000040), 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup(r5) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="08001efb", 0x4}], 0x1, 0x0, 0x0, 0x60000000}, 0x4008000) 1.924350433s ago: executing program 0 (id=9366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000180), &(0x7f0000000840)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) dup(0xffffffffffffffff) io_setup(0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) 1.913387344s ago: executing program 0 (id=9368): r0 = socket$inet(0x2, 0x0, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0xfff, 0x2003) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = io_uring_setup(0x488, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (fail_nth: 5) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000040), 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup(r5) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="08001efb", 0x4}], 0x1, 0x0, 0x0, 0x60000000}, 0x4008000) 1.389003537s ago: executing program 2 (id=9382): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nombcache}]}, 0x1, 0x589, &(0x7f0000000bc0)="$eJzs3U9oHGUbAPBnJsnXr22+Ly0oqPRQVKhQukn6R6un9CoWCj0IXuKy2YaQTTZmN7UJPaT3IhYUlV7qTUGPiogH8eLRqxfFsyBaVJoeJDLZ3bRNsnGTdncl+/vBbOZ939l93jezz7szywwbQM86mj2kEU9GxIUkYui+tv6oNx6tbbdy+2rhbn8UklhdvfhrEklE3Ll9tdDYPqn/PRgRyxHxRER8MxBxPN0ct7K4NJ0vlYrz9fJwdWZuuLK4dGJqJj9ZnCzOnnrhxTNnT58ZPTn6yMZ6/ccbb13/7uVbNz7+9Mhy4d18EmMxWG+7fxyPUu1/MhBjG+pPtyNYFyXd7gC70lfP84GIeDyGoq+e9cDet7ovYhXoUcmO839/mDNgL2gcB2Tnv43lgQOE5fYef/xyrnYCksVdqS+1lv7adxPx37VzkwO/Jw+cmWTnm4fa2zV6wPK1iBjp79/8/k/q77/dG3kUHaStvj5X21Gb93+a7f83Pqlvt3H+GWx8d/qQGvPfyqb5L12f//qazH8XWozx12s/fdA0/rWIp7aMn6zHT7aIn0bE6y3Gv/nqF2ebta1+GHEsto7fkGz//fDwpalScaT2uGWMr44deWm78R9oEn9sm/FndXMtjv/zbz97utnHaBb/uWe23/9bxc+Owd9uMf7hOx+90qwtiz/RZPzbxc/qbrUY//mxoz+0uCkAAAAAAAAAALAD6dq1bEmaW19P01yudg/vY3EgLZUr1eOXyguzE7Vr3g7FQNq40mqoVk6y8mj9etxG+eSG8qmIOBwR7/TtXyvnCuXSRLcHDwAAAAAAAAAAAAAAAAAAAP8SBzfc//9HX+3+f6BH+Mlv6F3yH3rXg/mfdK0fQOf5/IfeJf+hdzXL/7tfdrgjQMc1/fwf6Gw/gM5z/A+9S/5D75L/0LvkPwAAAAAAAAAAAAAAAAAAAAAAAAAAtMWF8+ezZfXu7auFrDxxeXFhunz5xESxMp2bWSjkCuX5udxkuTxZKuYK5Zl/er1SuTw3ErMLV4arxUp1uLK4ND5TXpitjk/N5CeL40W/KAIAAAAAAAAAAAAAAAAAAACbDa4tSZqLiHRtPU1zuYj/RcShGEguTZWKIxHx/4j4vm9gX1Ye7XanAQAAAAAAAAAAAAAAAAAAYI+pLC5N50ul4vz2K2kL2+y9lYhY3lCzs9cZ/7Nzfc46u6unJ8sPFT2Jbu8mK2168wMAAAAAAAAAAAAAAAAAAB1176bfHT7xWps6BAAAAAAAAAAAAAAAAAAAAD0p/Tl7TCLi2NCzgxtb/5Os9K39jYg3b15870q+Wp0fzep/W6+vvl+vP9mF7gMta+RpI48BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAeyqLS9P5Uqk4v8uVfS28TpeHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALArfwcAAP//VB3RbA==") ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_LK(r2, &(0x7f0000000140)={0x28}, 0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x46, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r3, 0x2, 0x1000) getsockopt$inet6_int(r7, 0x29, 0x46, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.051660144s ago: executing program 0 (id=9396): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f646973636172640000008000000000ff5f78617474722c646973636172642c7768696e745f6d6f64653d757365722d6201010000000000006e6f696e6c696e48c8b8bd9db833403801c199ffba3691ebc17570972cb0aab560ecd4a62772a15b05a04f8812838b18c2fd700d6d154a85515cf6a313e8043c58707a92904e0d69fdd8fd380734190ccaff409ba8953c23b0c6f1c09d49447f1e1d0cedb97bb4daf266dcc2cec17b92cbbe1303abfc278ad789ffe0f34862de20f721a4b968385446d1964503b1815a337e284216bd6809000000000004000000d593d55b7516ceab7cd61a02b7aa1f09af6411cc77b8aeb6cb60fe02009fbd67bd8d700393ec17bc2e355467864b7e313f5f5ebead17e18e7fa077c6bf2fe6d11ac484b13898ad0c52ac011935f191a29c59989b29fbff40203633f6a872871902aac35c6283ac06e5e7ce247c941ac2b7fe4491e338e0b38c882074a6d0b7bd3fb2c80f2c39a2d41f44c8e0"], 0x1, 0x54f8, &(0x7f0000005980)="$eJzs3LtvW1UcB/DjpGn6okSIga1XqpASqbbiPCrYArTiIVJFPAYmcGzHcmv7RrHjhEwMjIiB/wSBxMTI38DAzIYYQGxIIN9zQpvyWOLECfl8pOvvvcfXv3uOVVX6XUc3ABfWXPbbL6VwM1wNIUyHEG6EUOyX0lZYi/FCCOFWCGHqia2Uxv8auBxCuBZCuJkKJqO3vrgzvL3681u/fvv97KXrX37zwwSWC5wRL4YQuttxf68bM2/FfJjGa8N2kd2VYcr4RvdROs5j7jU3iwp7tcPzakUut+L5+fZuf5RbnVp9lK32VjG+3YsX7A9bh3WKDzys7RTHjeZmke1+XmTrIM5r/yD+93bQH8Q6jVTv46J8GAwOM44395txPduPiqz3Bmk81s0bzf1RDlOmy4V63mkU89g8zjd9tr3d7u3uZ8PmTr+d97LVSvWlSvVuubqTN5qD5kq51m3cXcnmW53RaeVBs9Zda+V5q9Os1PPuQjbfqtfL1Wo2f6+52a71smq1slxZLK8upL072esP3s86jWx+lK+2e7uDdqefbeU7WfzEQrZUWX55Ibtdzd5d38g23rl/f33jvQ/vffDglfU3X0sn/W1a2fzS4tJSubpYXqouXKD1f5omPcb1w7GUJj0BgPPnRPv/uVizpP8HnnLe+/+g/x+Lc9X/XvT+/wTWD8ei/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLB+nPnqjWJnLh5fT+PPpKHn0nEphDAVQvjjH0yHy0dqTqc6M/9y/sxTc1gLoagwusZs2q6l8dH2+7Mn/S0AAADA/9fXn9z6PHbr8WVu0hPiNMWbNlM3PhpTvVIIYWbupzFVmxq9PD+mYsW/70thf0zVihtYV8ZULN5yuzSuav/h8X236SNx5YkoxZg6hekAAACn7GgncBpdCAAAAJPx2aQnwGSUwuPfBNMf8M/GSD8IXj1yBAAAAJxDpUlPAAAAADhxRf9/Fp7/913J8/8AAADgpMTn/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCf7NxPTsJAFAfg10IF/0Vi3HsVd3AMj+DSpeEAXoIj4BW8AGfAnUcwYGhLtAYTkw7FkO9L2jIT8uOVsHkzpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD69FfPJy9Ptc9uc1bqdNHcDAAAA7LIs5pPyxagan9fzl/XUdT3OIiKPiF29ey9OGpm9Oqf45f3FjxpeI8qEzWcM6uMsIu7q4+Nq398CAAAAHK/FdDauuvXqNDp0QXSpWrTJL+4T5WURUYzeE6Xlm9NNorDy992Px0Rp5QLWMFFYteTWT5X2J73GZfjtklWXvNNyAACATjQ7gW67EAAAALr0cOgCOIwstluZ273g8p/3XxuCp40RAAAA8L8Ndk1m3dcBAAAAdKzs/z3/DwAAAI5b9fw/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9mlZzCeL6WzcNme1bifN3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfLI/7ygQAmEQBnvXdyZz/8NKg6amJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxc79+8ZNxQEAf7bPF1pAHAFlCEIgMcBCr9fS0pUBFDHwJyBF6bUErvxoM9CqQsrChjJ3QTAihAQKW/6HzImUJWwZbggSc5B9duL8kDgIsa/J5yM9v+9Z1nvf50RRvn5OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDS8L2DOMkOnVEcF+c2dh8vZP3mkT6ztrI1m7UsjupM+unwavVDNNNcIgAAAFwcSVnfhxC209W5rI87ef2fltdkNf8Pz4/isp4/WveXfVn7Z+3333Ze3p+oM5onG/TO4qB/9XgqrbNb5WR74R+vaOV3Pn/2kuRfkPjD5ZeGaX4/o+/W199v5+FUHdkCAP/FlbIvgvL3oazvNZkYABdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6DJfDs2UchRBmWwdxZnP38cJJ/drK1mzZbj55slIdMxsiDSHcWRz0r9a4lkn34OGjz+YHg/79+oPXQgjNzV4EH49xTQhNZig4bRAX3+v/48h70QSs62yDhn8wAQBw7qRFy+r67XR1LjsXTYew9+Ph+v/NShzGrP93Prm5UZ2rWv/3alvh5Osu3fuy++Dho7cX783f7d/tf/7Otd67veu3bty41c2flXQ9MQEAAOB02kWr1v/x9PH9/8uVOIxZ/3/1fe+b6lyJ+v9EB5t+TWcCAABwsb34+l9/Riecj9rt8PX80tL93ui4//na6NhAqv/aVNGq9X8y3XRWAAAAQB2Gy9Gh/f/blTiMuf//3E+v/FIdMwkhXCr2/68sfDG4Xd9yJlodf07c9BoBAABo1qWiVff/0/z9/3j/lYc4hPDWG6O4+DeAY9X/yQff/lydq/r+//X6ljiR4pnR/cj7qRBaM01nBAAAwHn2TNGyYv+PdHXu018vf9T2/j8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3f4OAAD//xwcQP8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x250, 0x200000) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x802, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb, 0x2}, {0x4}}}, @IFLA_AF_SPEC={0x4}]}, 0x38}}, 0x0) bind$inet6(r1, &(0x7f0000000640)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x90) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x12, r8, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x64, 0x6, 0x518, 0x2b0, 0x3f0, 0x1e0, 0xf8, 0x1e0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x2ac, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@loopback, @local, [], [], 'veth0_to_bond\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'ip6gretap0\x00', 'pimreg\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@multicast2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r6, r5, 0x15, 0x0, @val=@tracing}, 0x40) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x64, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "02d0e86cbe4d68f75ce39f0dab"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x4}]}, @NL80211_ATTR_IE={0x9, 0x2a, [@supported_rates={0x1, 0x3, [{0xc, 0x1}, {0x48}, {0x12, 0x1}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]]}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@dstopts={{0x18}}], 0x18}}], 0x1, 0x0) syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x7, 0x24, 0x4, 0x0, 0x0, "0464"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0xfd, 0x0, {0x7}}}}}}}]}}, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) 809.683654ms ago: executing program 3 (id=9398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4}, 0x48) syz_open_procfs(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0) r4 = open(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000000000000000000000090", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 384.943128ms ago: executing program 2 (id=9399): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timerfd_create(0x500, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 267.020438ms ago: executing program 2 (id=9400): eventfd(0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x916, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0xe9, 0x63, 0xb9, 0x40, 0x14b2, 0x3c23, 0x2bbd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x904, 0x3, 0x0, 0x8, 0x88, 0x80, [{{0x9, 0x4, 0x7b, 0x81, 0xc, 0x8d, 0xcc, 0xa8, 0x2, [], [{{0x9, 0x5, 0xa, 0x0, 0x88ec06b029acdce8, 0x2, 0x8, 0x8e, [@generic={0xf7, 0xb, "c7476e33ae3290b3d9ab716782357c41c1a1beeadbfc4e7b1ac2ccc6dc9c094de5005de33c8f1d93d6242b1a55a37704a0f2a309e93bda6449027e558a61caee3e11ac91e29350a141d61bd92280f672a606e77a80e6b50c173b9924fd24e231d56395f245365076e5097ed2ed7124480ea053a98810a04e2f1481b7f266ad76188cc3411f6a6faec2a7bd8ce3ff344eb12e788058d00ccb8c975b4261225c5f569b24281f20a0f97271f2a49f9a06b114fa58a332d6115435703beec8aa1ea3bd967868d7da8e9497fbe621d3264ff77d738d8006a5cbbc7d1f8a13a32396e3f209436c56adda9c984edac8cd537bfe6368492f42"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x8000}]}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x80, 0x1, 0x3}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xc, 0x3, 0x9, [@generic={0x101, 0xc, "6c7873f4d090014d0e2cd63c962c780fa254b18b6b212e31e79af90780bb0558dcfb8240bbf5341292671c035d370781e94df55e8febb7cfd980c96de04111f8b2cac2b2d9bc7c7b64dff9e7a28faf4e6bf59dec83e4e03ada890f1132c8faff21eaac3421731ffec05b193b35532424cae7a564e8274e2c813274c0aa6956c39a5bca9a261b864ee9d487360f077998e7dae712eb67647773adaba08d38e31790362bf858e8c44f344499e0b8abf39df2f43442f3070d1dc91c67640392a8ff76d96fdbcb1bfefe2afa904bcde0022f1040665df68b56c00a2d99ab7fb66fc8593fee38eadaf5e1d974706c2e6f23056ef9148c1d435cb2cb2e5204d8ff42"}, @generic={0x20, 0x0, "7d427a1f1c4bf03277d00981c1dad1eee5899d4a6a13bb58926545cbb52b"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x7, 0xf, 0x5, [@generic={0x82, 0x22, "50bf36d6851bdb35f5d7adf3883c516ec19b3070cdac0e813bdd19e6fb233789c2ea2a5e414649b2f18798224cae37611d2acbc7fedc10b107ca1cf31516a0cf84513e3f4c42c49925bdb729f1c240ae6d0a7480a880f91d3881e19926e6c007a949be00d5fe73d2df3b54ceb5ee602d270fd32e78b491157118442bbf66948e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x2, 0xfd, 0x7b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb2, 0x3}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x4, 0xa, 0x2}}, {{0x9, 0x5, 0xe, 0x1, 0x3ef, 0x7, 0x9, 0xcc}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9, 0x7, 0x3c}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x2, 0x81, 0xc}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0xfa, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3fc}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x6, 0x9, 0x3, [@generic={0xa8, 0x3e, "6c34966f5423483edc0ee3345eb5a2a5e476a8cd24d64832ada72e0c07cdc304b39653ec42908df86334f65f2ec05a4f73432d519046ceb5ec6a20e1a402388eef08f4813999e11dda98c167fba408dfece0d795d2867170670ea50819533ec839d064ea9ff3a6af4734b0fdeb4c21612d7fb004bbaeb6cbda4bfd0bd32b5da8427e0c77721740ca220e3b536faee0512f2aa54e716f12fde502eb82f4d821f6a1a393e4cd61"}]}}, {{0x9, 0x5, 0x80, 0x5, 0x8, 0x5, 0x2, 0x4, [@generic={0xdb, 0x0, "93304e11dbf8cd38ddff40bed7bfc31ed90a422cbc6988b490e385bb189c371382ef1d55aebb247a36094c530748e5914ee026190a9243f3de1768ffd87ad551d20c74ce962658af039152b35db6642e7bed24877d9d8e8d2c7f92f1ae7d2d80d9acfe59824c414c6fb79ccb91acaaf0443173939f0393e61f693d9d0f4c44fe60a5d2fd43d7cae0a4eeb9f1087cdd22c6a16c9b51a1366a588879113b315b3be8dadcc43d4fa44353bcfaedfb6fd365468c229c7702d90a5434bce72a4600ce89ac8ad1a8b9a72e95608dbea907af4b0e34643339a76bb6b4"}]}}]}}, {{0x9, 0x4, 0xda, 0x5, 0xc, 0x67, 0x7, 0x2c, 0x7, [], [{{0x9, 0x5, 0x8, 0x0, 0x200, 0x7, 0x1, 0x8}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x4000}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x101}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xe, 0x3, 0x55, [@generic={0x8e, 0x11, "309c852bb578120794b22bed29e3cbc7d53cdb92c46c86e3441fc60cb38b362140483928ffed8e7317299235d04b1f2fe45a9e93c0960065c9c99220d90a2026080bea0306179c92c629f3410fb23b257f10025353ed20450acf79f12724a583c841c6c8a6465c8ad39bee9957b87e6c7424ced6021fe9f3a93a00f2c221a94612995da3415cfcf24a47e4de"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x7}]}}, {{0x9, 0x5, 0x8d, 0x2, 0x8, 0x0, 0xcf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6}, @generic={0xe4, 0x31, "e6f03d65dfdae606ed58382946a92eec612f7f7b96297e3a6b567fe8f40480d3acf38c457ce49f6dc812d5fd4610bf597602ec6d17b1dc8f4be3c5342a9f695db0b28a16a82f734c0a4ba9d915df69900a972fc8a443a25d32c9f5c08972e7413ad279a136e1b5247caea3830a99da78de415652a67adc478a146224bb60f5824454267e09d48d1367e64fcb2da5abf275793f0e8acb3d1388de5e8f29aa6a2a94842fdfb896467871e7025a3403eae4469a2c85da759a43734441cb96db8f6fd6d65397480dc566bc0cefba2d5fb246489b5c87ce9debe8a25aacd92fd72e5f844d"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x0, 0x0, 0x5, 0x1}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x7, 0x4, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe0, 0xfff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x2, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0xa, 0xa1c}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x61, 0x8, 0x3}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x4, 0x1d, 0x7}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x5, 0x7, 0x4}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x7, 0x5, 0x91, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7}, @generic={0x16, 0x0, "4762a5c845602ceb76b7d7b623a05eb3451e7581"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x0, 0xa, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x7}, @generic={0xa9, 0xc, "e484a567be770c8161a7ee796cc012726669dfb951b0e909650f96f3c5feaf11240db4ebd36fdf2a8024a13ea0d933da9562e3f201227ae242b67b396f9a1ca4275e1a1f5ea17fd502f3e2da3b2d340676175deac2c04713cbc784d836634dd0bfd6670e0a5d9d55f1bc75b3b6955ddfb618a555bae49b38f8bf817e19d3f0f925ce97247d7c9a1f8bb5c25ae4881601d16b6e0e0959c89691586a1b1064d8f24afb45649a715c"}]}}]}}, {{0x9, 0x4, 0x5f, 0x9, 0x3, 0x83, 0x51, 0x2, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x38}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x9, "ff"}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0x0, "fcae2b"}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x2, 0x3, "334447a7"}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x26, "9a21"}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0xadd, 0x6}]}, @uac_control={{0xa, 0x24, 0x1, 0x452, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x4, 0xfe, 0x0, 0x4, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x3, 0xb3, 0x4, 0x2, 0x18}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x5, 0x4, "42ec"}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x53}]}], [{{0x9, 0x5, 0xf, 0x2, 0x400, 0x2, 0x3, 0xfc, [@generic={0x2d, 0xc, "cfea632b9a460c6a0ca4ca3fb6ac9bfab2110cdd8d46cc7c31857baa1fb10d62f9708acee95e5067eff9ae"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x4}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x3, 0xe, 0x4, [@generic={0x40, 0x23, "237d062dd0c0bdb064f5355243a5c406104bae0edc2799402021bffc6286948fe23753502201bbc183eafe2b27c7e46a5964c4c10a9cd4eeda8239d20815"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x96a}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x7f, 0x1, 0xe, [@generic={0x65, 0x31, "ca620d0b4ac30dd54c05fd42afdc0badf3d7bd83e55a6c6cb7f6d5eb86fcf0cb9fe6fd0c56ca9ba9ee226a20053097dc1313cd65cb3faf6f67210fbed703adaf1b15a84a19cb1cd5a1b7efe86db3554f3e6a4029b6a661fb55c307e35125c1d1276c50"}, @generic={0x5, 0x1, "ed6e9c"}]}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x9, 0x6f, 0x2, 0x40, 0x83}, 0x4b, &(0x7f00000002c0)={0x5, 0xf, 0x4b, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x71, 0xa, 0x3, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x6, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0xc19b70, 0xf000, 0x6, [0xc0, 0xff0030, 0x3f30, 0xaa4e34fe70b6d5b6, 0x3f30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xb, 0x7f, 0x5, 0x10}]}, 0x6, [{0x100, &(0x7f00000004c0)=@string={0x100, 0x3, "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"}}, {0x4e, &(0x7f00000018c0)=ANY=[@ANYBLOB="4e7c91891189818b972d562881aec613d11f665fdd1199b386a01b3d6b04da76c96fae7673b60587f2099bf700165e8d92e355c6c7ecd8a36be0282c78e1e13646dd9c59000000000000000000009620f8394b8813bb37c25cd6c244064be894791f0255ce3fe4b59cb19def581bdf7d77870d9ca7a8d518b4d5c8ccf5aaff3414844ec88ef2cf"]}, {0x102, &(0x7f00000006c0)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1809}}, {0xc3, &(0x7f0000001980)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc04}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000001840)={{'\x00', 0x2}, {0x800}, 0x21, 0x0, 0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000001440)="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", 0x1a4, 0x0, &(0x7f0000001600)={0x2, 0x144, {0x1, 0xc, 0xb4, "e874aba4954959e8644c29522c4dc1ab3c10286c6d4b9480fa983dc6fc5df76da473f4c698b02a244910ddfbbbaf85685c0180c1a39dae22a8a27f2a3e77d4ef9ed77ee347469ee6dfd6c7265d327076de5a30dffba792a5a8bd9f98f31f25ea9831a40e1efec0a139d0424cb5640261331271aa56b2e53f9cc839bbebd8251b4c0412dcae443584058341e212c36483ee7bde5be9192ef2de430cf8dbc1a1b9520be601ac2781ca415d0553075066fd7d3b4a52", 0x83, "4f78a51d0395f7e933886938ed62f198ee0d9ac0921611a6f015a0b0ec7f297a25b2c0de97ac1f2d8a5c4b098ccad08907494aaf8ddc938f4f7c26ed42547a6279c712785297650f9ae3b2d6a376e5c197fc2ade4ad7eb4d85c9a1492b309d6f57b44479d5e7a13b3ebe67e29180dfeba73bb5eecac4f83607c10618c37eb9c0c92317"}, 0xe7, "c9a3a4f45b3a6ab6a88d8661bd3f11cc89de67f609cce277534ec070cc8b839b7e34ffc224eb18e07cf971d55f6ecfe3c8c2713ae0d53dcc1ac104895a5e2d8ee5241c533f445b39475d898916cb9d08077e37a67e04c2319463220b4251dde7b155eab99a76c35ced4f88a1cde76cf98a6c4c64a0ef52a3ab174b5cdeeef827fd57dc26f1a6cc28cab9da34d5eecdac88d562ab06ef9a5fdc2c408f9afc1c92adab84007a19ed1d6d3b5aff6e4248a7c9ea39acb72468e47f3056b36f69e3fae4e4d1842aae4c2afca815a63f74bab1d767e5fb62a47d6e6e99f036b033fcf9a41ecc2fb835aa"}, 0x237}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syslog(0x0, 0xfffffffffffffffd, 0x6b) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x11000) vmsplice(r6, &(0x7f0000000280)=[{&(0x7f00000001c0)="85", 0x1}], 0x1, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 116.87143ms ago: executing program 1 (id=9402): syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e010000062406"], 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='xprt_retransmit\x00', r2}, 0x10) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000458e5e080304c8f05602000000010902120001000000000904"], 0x0) 112.494421ms ago: executing program 1 (id=9403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1c9c7e, 0x0) syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "9a642c01bd4c"}, @input_terminal={0xc}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r4, r5, 0x9, 0x0, @val=@tcx}, 0x40) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',\x00']) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',privport,access=', @ANYRESDEC=r9]) lstat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000480)={0xa0, 0x19, 0x1, {0x2806, {0x10, 0x3, 0x1}, 0xd, r9, r10, 0x4, 0x5, 0x7fffffffffffffff, 0x10001, 0x5, 0x5, 0x3, 0x1, 0x7fff, 0x10000, 0x8000000000000001, 0x7, 0x4, 0x401, 0x7}}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r11 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FITRIM(r11, 0xc0185879, &(0x7f0000000180)={0x2000000, 0xaeae}) setsockopt$inet6_udp_encap(r11, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 86.521833ms ago: executing program 1 (id=9404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) (fail_nth: 4) 16.991508ms ago: executing program 1 (id=9405): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@u}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 16.812318ms ago: executing program 1 (id=9406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)) pipe2$9p(0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002c00)=ANY=[@ANYBLOB], 0xb0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0x4e21, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x84}, {0xc1, 0x0, 0x0, 0x0, 0x76d7, 0x0, 0xe60d, 0x6}, {0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@broadcast}, 0x2, @in=@private=0xa010100, 0x34ff, 0x7, 0x3, 0x0, 0xfffffff7, 0x4}}, 0xe8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000011000100"/20, @ANYRES32=r2, @ANYBLOB="41a00000"], 0x28}}, 0x0) 11.681349ms ago: executing program 3 (id=9407): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)) pipe2$9p(0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002c00)=ANY=[@ANYBLOB], 0xb0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0x4e21, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x84}, {0xc1, 0x0, 0x0, 0x0, 0x76d7, 0x0, 0xe60d, 0x6}, {0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@broadcast}, 0x2, @in=@private=0xa010100, 0x34ff, 0x7, 0x3, 0x0, 0xfffffff7, 0x4}}, 0xe8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000011000100"/20, @ANYRES32=r2, @ANYBLOB="41a00000"], 0x28}}, 0x0) (fail_nth: 4) 564.01µs ago: executing program 1 (id=9408): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008088100b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xcb, 0x7, 0x80, 0x9, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10, 0x1000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000001000001e0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000005cc0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030", @ANYRES64, @ANYBLOB="43b6dc379aa5bfc6081740cebe8f03a156a246f096b12cd4924faca4fabec302c6eed0860378e1a949379c97f0801187e51fc51dc15795c9f30124f3c5e4349d1618798c497893"], 0x15) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r12]) chdir(&(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000005c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x3000410, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x554d, &(0x7f00000006c0)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537S1EbiOMA/ks0av9RKX3vVfqmx+gR+ljoS/UAvYRHsFfoBTyD+7ZHWHQxGYQsBgQnG1Y+H8jEych3ZjQvM4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTpodou//359vfWnMPxNnlmAwAAAFyyr7bL+sO8qX9I1z+lS19SvYiIMiIurd1HMWlljlJO1fH96sUY/kfUCac+pul4HxHf0/H0ue9fAQAAAO7Xbr1ZNKv1ppgPPSBeU7NpU378kSmviIhq/pgprTwVXzOF1ff3OH5lSqs3sGaZwpott/HltkmuTtpGrVOayWxV/4l1reynXwAAYEjtlUDHKgQAAIA78HPoATCM4lycnzNOm1N6IPiuVQMAAADeoGLoAQAAAAC9q9f/3v8HAAAA9615/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB92lfb5W69WXS1r67MORyv8DsiOpryzQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Zn/eUSAEwiAM9q7vTOb+h5UGDY1NqkD4+BuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICL/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPii3/3yf2JqnEnmThtLxyPJ2lVj66qx96Bx9GC8/RsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnbvnjaMIAwA8t3t7+QCEMegKAwoSBTTEvoRASihAFgU/AclyzsFwIZC4IJEFcgMVch0hISgRQgKZLv8hNZbShC6FCyNRUQTNfjjrD+AUJbsX+3mk2Xl3vZ59Z+9k+fWsDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoLL1dnghKeM0bqaKuDr2+/bqYuw39/TRzfXbM7HFuLNv5HT37tdvPZoJTK4X6zun+rWdL5tPBgAAgKMhrVXkd7KN+dgnU3n9n1XnxJr/+6eKuKrn99b9m9urx8svzVT1/2+/3n1u50JTxXXioEvLo+Hc/lS6j2iKE+/p/z2jm9/5/G8vaf6CJO+tPbuV5fez882tW+/08vBYE9kCAA/idNWXQfX7UOwHbSYGwJHRrRXeVf2fTrWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEATttbCE1XcCSHMdO/H0eb26uJB/c312zNVe+PGjfX6mHGILISwtDwaZg3OZdJdvXb944XRaHil+eBUCKG9q5fBB2OcE8J/n1O+PUN7s/j3oDMZabQaJOXrMyn5PMygeu89/JFb+oEEAMChlZUt1vV3so35eKwzHcK9H3bX/69Ucb84PE79f/fDv+8Viu+t1/+Dxmc6uWZXLn06e/Xa9deWLy1cHF4cfvL6mcGbg7Pnz507Pxvv1dzsUkiGc22nCQAAwGOic8CxXtnq9X8yvX/9/+SeMcap/z/7bvBFefq3cZOq/w90f9Gv7UwAAACOot5O9MxLf/15UO3c6fXC5wsrK1cGxXZn/0yxbTTdB3SsbPX6P51uOysAAACgCVtrnV3r/xdqcRhz/f/JH5//uT5mGkI4EcLlEMLw9OLl0YXmpjPRmvhH5fxCvbZnCgAAQFtOlK2+/p/lz/8nO488JCGEV18u4uqzrsap/9N3v/qpfq368/9nm5viREr6xf3I+34I3X7bGQEAAHCYHS9bLPb/yDbmP/rl5Ps9z/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANO2fAAAA//8Nujoo") 0s ago: executing program 3 (id=9409): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@quota}, {@noload}, {@jqfmt_vfsold}]}, 0x2, 0x46a, &(0x7f0000000980)="$eJzs289vFFUcAPDvzLZFQWhFFEFUFI2NP1paUDl40WjiQRMTPeCxtoUACzW0JkKIVmPwaEi8G48m/gWe9GLUk4lXvBsSolxAT2tmd6Zsl93tLpRd6H4+yTbv7bzpe9+deTNv5s0EMLD2Zn+SiPsi4mJEjNayKyp5oazctSvnZv+9cm42iUrl3b+TarmrV87NFmWL9bbkmfE0Iv0iyStZbfHM2RMz5fL86Tw/uXTyw8nFM2dfOHZy5uj80flT04cOHTww9fJL0y+uS5xZfFd3f7KwZ9eb7194e/bwhQ9+/T7Jv4+GODox3EGZvVng/1SqGpc93U1ld4GtdelkqI8NoSuliBjK9+eLMRqluL7xRuONz/vaOOC2ys5Nm1ovXq4AG1gS/W4B0B/FiT67/i0+PRp63BEuv1q7AMrivpZ/akuGIs3LDDdc366nvRFxePm/b7JP3MR9CACAbv2YjX+ebzb+S6N+jLgtnxsai4j7I2J7RDwQETsi4sGIeCgidkbEw51Ve7xINE4N3Tj+SS/daoztZOO/V/K5rdXjv2L0F2OlPLe1Gv9wcuRYeX5//puMx/CmLD/Vpo6fXv/jq1bL6sd/2Ser//CqyaX00lDDDbq5maWZjiagOnD5s4jdQ83iT1ZmApKI2BURu7v719uKxLFnv9vTqlDT+POx8JrWYZ6p8m3EM7XtvxwN8ReS9vOTk/dEeX7/ZLFX3Oi338+/06r+W4p/HWTbf/Pq/b+xyFhSP1+72H0d5//8suU1zdrxN9//R5L3qsejkfy7j2eWlk5PRYwkb9XWqv9++vq6Rb4on8U/vq95/9+er5PF/0hEZDvxoxHxWEQ8nrf9iYh4MiL2tYn/l9eeOt5l/Embf7eusvjnmh7/VprQsP27T5RO/PxDq/o72/4Hq6nx/Jvq8W8NnTbwVn47AAAAuFuk1Wfgk3RiJZ2mExO1Z/h3xOa0vLC49NyRhY9OzdWelR+L4bS40zVadz90KlnOnyaO6tX3dH6vuFh+IL9v/HXp3mp+YnahPNfn2GHQbanr/9t3Xu//mb9Kq8uuzIh4vwM2Dv0ZBldj/0/71A6g95z/YXDp/zC49H8YXM36/6cN+VKP2gL0lvM/DK61+n/P3kYCes75HwaX/g8Dqd278cnNv/Iv0d9ELN/+KtI7ItLblRjpoINs6MSNx4oh4wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAu9H8AAAD//xjg70M=") chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000100)) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r4, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x10040, &(0x7f0000001900)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="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", @ANYRES16=r0, @ANYRESDEC=r4, @ANYRES8=r3, @ANYRESOCT=r4, @ANYRES64=r3], 0x7d, 0x222, &(0x7f00000016c0)="$eJzs2k2LW2UUB/Bz25HWKdNEfKMF8UE3urk0Wblw0UFaEAOKNoIK0lvnRkMyyZAbBiLSzs6tH8G1uHQnSL/AbPwEXbibzSy7EK+0KZ0X4mIQJ9j5/TY5cPKH5+FcLmdx9979YXPQq/JeMY1zWRYr12MnHmbRjHNxPuZ24u277zx47ZPPPv9gvdO58XFKN9dvtdoppcuv//bFdz+/cX966dNfLv96IXabX+7tt//YfWX3yt5ft77pV6lfpdF4mop0ZzyeFneGZdroV4M8pY+GZVGVqT+qysmRfm843tqapWK0sba6NSmrKhWjWRqUszQdp+lkloqvi/4o5Xme1laDf6P708O6jv36udtR1/XzP8al+7H2IBqRvZCyF69nL9/OXt3JruzXdWPZR+U/Yf5nm/mfbeZ/th1a6i5GbH6/3d3uzn/n/fVe9GMYZVyLRvwZjx6TJ+b1zfc7N66lx5qRNu89yd/b7p4/mm9FI5qL8615Ph3NX4jVw/l2NOKlxfn2wvzFeOvNQ/k8GvH7VzGOYWzEo+xB/m4rpfc+7BzLX338PwCAZ02enlq4v+X5P/Xn+RPsh8f2q5W4urLcuxNRzb4dFMNhOVEoFIqnxbLfTJyGg6Ev+yQAAAAAAAAAAACcxGl8TrjsOwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w9/BwAA///8j/If") creat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) kernel console output (not intermixed with test programs): 74] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1124.073166][T22474] EXT4-fs (loop4): 1 truncate cleaned up [ 1124.078675][T22474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1124.119759][ T7845] udevd[7845]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1124.135308][T22694] loop0: detected capacity change from 0 to 512 [ 1124.158224][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1124.170604][T22694] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1124.178619][ T224] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1124.196825][T22694] EXT4-fs (loop0): 1 truncate cleaned up [ 1124.202417][T22694] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1124.228315][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1124.536719][ T224] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.706734][ T224] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1124.720667][ T224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.744040][ T224] usb 3-1: Product: syz [ 1124.748082][ T224] usb 3-1: Manufacturer: syz [ 1124.752469][ T224] usb 3-1: SerialNumber: syz [ 1124.918022][ T9145] EXT4-fs (loop4): unmounting filesystem. [ 1124.930340][T19848] udevd[19848]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1124.971392][T25067] loop4: detected capacity change from 0 to 512 [ 1124.988771][T19848] udevd[19848]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1125.006129][T25067] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1125.018093][T21933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.029951][ T6148] EXT4-fs (loop0): unmounting filesystem. [ 1125.030451][T21933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.035715][T25067] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 1125.051186][T25067] System zones: 0-2, 18-18, 34-34 [ 1125.060730][T19848] udevd[19848]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1125.073270][T25067] EXT4-fs (loop4): 1 orphan inode deleted [ 1125.080128][T25067] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1125.089118][T25067] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038 (0x7fffffff) [ 1125.112681][T19848] udevd[19848]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1125.131222][T25067] EXT4-fs (loop4): unmounting filesystem. [ 1125.162813][T25539] FAULT_INJECTION: forcing a failure. [ 1125.162813][T25539] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.175752][T25539] CPU: 1 PID: 25539 Comm: syz.4.8348 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1125.185386][T25539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1125.195279][T25539] Call Trace: [ 1125.198396][T25539] [ 1125.201177][T25539] dump_stack_lvl+0x151/0x1b7 [ 1125.205686][T25539] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1125.210983][T25539] ? stack_trace_save+0x113/0x1c0 [ 1125.215842][T25539] dump_stack+0x15/0x1b [ 1125.219841][T25539] should_fail_ex+0x3d0/0x520 [ 1125.224539][T25539] ? p9_fid_create+0x53/0x360 [ 1125.229031][T25539] __should_failslab+0xaf/0xf0 [ 1125.233632][T25539] should_failslab+0x9/0x20 [ 1125.237970][T25539] __kmem_cache_alloc_node+0x3d/0x250 [ 1125.243181][T25539] ? p9_fid_create+0x53/0x360 [ 1125.247690][T25539] kmalloc_trace+0x2a/0xa0 [ 1125.251947][T25539] p9_fid_create+0x53/0x360 [ 1125.256285][T25539] p9_client_walk+0x103/0x6a0 [ 1125.260796][T25539] ? p9_client_rpc+0xaa0/0xaa0 [ 1125.265657][T25539] ? v9fs_fid_lookup+0x118/0x160 [ 1125.270428][T25539] v9fs_file_open+0x273/0xa10 [ 1125.274941][T25539] ? v9fs_vfs_write_folio_locked+0x3b0/0x3b0 [ 1125.280756][T25539] ? fsnotify_perm+0x470/0x5d0 [ 1125.285357][T25539] ? v9fs_vfs_write_folio_locked+0x3b0/0x3b0 [ 1125.291171][T25539] do_dentry_open+0x891/0x1250 [ 1125.292984][T25272] loop0: detected capacity change from 0 to 40427 [ 1125.295770][T25539] vfs_open+0x73/0x80 [ 1125.305840][T25539] path_openat+0x2532/0x2d60 [ 1125.310286][T25539] ? kasan_save_alloc_info+0x1f/0x30 [ 1125.315388][T25539] ? slab_post_alloc_hook+0x53/0x2c0 [ 1125.320506][T25539] ? getname+0x19/0x20 [ 1125.324415][T25539] ? do_filp_open+0x480/0x480 [ 1125.328924][T25539] do_filp_open+0x230/0x480 [ 1125.333260][T25539] ? vfs_tmpfile+0x480/0x480 [ 1125.337786][T25539] ? alloc_fd+0x4fa/0x5a0 [ 1125.341944][T25539] do_sys_openat2+0x13f/0x850 [ 1125.346452][T25539] ? __kasan_check_write+0x14/0x20 [ 1125.351400][T25539] ? mutex_unlock+0xb2/0x260 [ 1125.355833][T25539] ? bit_wait_io_timeout+0x120/0x120 [ 1125.360950][T25539] ? do_sys_open+0x220/0x220 [ 1125.365378][T25539] ? __kasan_check_write+0x14/0x20 [ 1125.370324][T25539] __x64_sys_openat+0x243/0x290 [ 1125.375011][T25539] ? __ia32_sys_open+0x270/0x270 [ 1125.379805][T25539] ? debug_smp_processor_id+0x17/0x20 [ 1125.384996][T25539] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1125.390892][T25539] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1125.396360][T25539] do_syscall_64+0x3d/0xb0 [ 1125.400614][T25539] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1125.406341][T25539] RIP: 0033:0x7f3b06175bd9 [ 1125.410592][T25539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1125.430136][T25539] RSP: 002b:00007f3b06f88048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1125.438371][T25539] RAX: ffffffffffffffda RBX: 00007f3b06303f60 RCX: 00007f3b06175bd9 [ 1125.446361][T25539] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 1125.454165][T25539] RBP: 00007f3b06f880a0 R08: 0000000000000000 R09: 0000000000000000 [ 1125.461973][T25539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.469784][T25539] R13: 000000000000000b R14: 00007f3b06303f60 R15: 00007ffc13f282b8 [ 1125.477601][T25539] [ 1125.484386][ T28] audit: type=1326 audit(1720786390.368:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21930 comm="syz.2.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d0f75bd9 code=0x7ffc0000 [ 1125.489785][T25272] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1125.517295][ T28] audit: type=1326 audit(1720786390.368:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21930 comm="syz.2.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f54d0f75bd9 code=0x7ffc0000 [ 1125.543816][T25272] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1125.544101][ T28] audit: type=1326 audit(1720786390.368:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21930 comm="syz.2.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d0f75bd9 code=0x7ffc0000 [ 1125.595252][ T28] audit: type=1326 audit(1720786390.368:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21930 comm="syz.2.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54d0f75bd9 code=0x7ffc0000 [ 1125.671411][ T28] audit: type=1326 audit(1720786390.368:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21930 comm="syz.2.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d0f75bd9 code=0x7ffc0000 [ 1125.707519][ T28] audit: type=1326 audit(1720786390.368:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21930 comm="syz.2.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54d0f75bd9 code=0x7ffc0000 [ 1125.731596][ T224] cdc_ncm 3-1:1.0: bind() failure [ 1125.842067][T25932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.849078][T25932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.856788][ T224] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1125.865997][T25932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.872981][T25932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.880172][T25932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.887041][T25932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.895024][ T224] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1125.895183][T25932] device bridge0 entered promiscuous mode [ 1125.903252][ T224] usb 3-1: USB disconnect, device number 93 [ 1126.043358][T26607] loop0: detected capacity change from 0 to 256 [ 1126.527978][T27636] loop2: detected capacity change from 0 to 128 [ 1126.536337][T27636] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1126.544269][T27636] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1126.553737][T27636] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038 (0x7fffffff) [ 1126.571383][T27636] FAULT_INJECTION: forcing a failure. [ 1126.571383][T27636] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.583910][T27636] CPU: 1 PID: 27636 Comm: syz.2.8378 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1126.593530][T27636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1126.603424][T27636] Call Trace: [ 1126.607328][T27636] [ 1126.610115][T27636] dump_stack_lvl+0x151/0x1b7 [ 1126.614624][T27636] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1126.619914][T27636] ? kasan_save_alloc_info+0x1f/0x30 [ 1126.625035][T27636] dump_stack+0x15/0x1b [ 1126.629028][T27636] should_fail_ex+0x3d0/0x520 [ 1126.633541][T27636] ? ext4_init_io_end+0x29/0x120 [ 1126.638310][T27636] __should_failslab+0xaf/0xf0 [ 1126.642911][T27636] should_failslab+0x9/0x20 [ 1126.647251][T27636] kmem_cache_alloc+0x3b/0x2c0 [ 1126.651853][T27636] ext4_init_io_end+0x29/0x120 [ 1126.656454][T27636] ext4_writepages+0xd2b/0x3fd0 [ 1126.661146][T27636] ? ext4_read_folio+0x240/0x240 [ 1126.665911][T27636] ? stack_trace_save+0x1c0/0x1c0 [ 1126.670771][T27636] ? kernel_text_address+0xa9/0xe0 [ 1126.675718][T27636] ? __kernel_text_address+0xd/0x40 [ 1126.680752][T27636] ? unwind_get_return_address+0x4d/0x90 [ 1126.686222][T27636] ? arch_stack_walk+0xf3/0x140 [ 1126.690908][T27636] ? __kasan_check_write+0x14/0x20 [ 1126.695858][T27636] ? _parse_integer+0x40/0x40 [ 1126.700370][T27636] ? __stack_depot_save+0x36/0x480 [ 1126.705319][T27636] ? ext4_read_folio+0x240/0x240 [ 1126.710099][T27636] do_writepages+0x385/0x620 [ 1126.714514][T27636] ? __writepage+0x130/0x130 [ 1126.718941][T27636] ? _kstrtol+0x150/0x150 [ 1126.723112][T27636] ? __kasan_check_write+0x14/0x20 [ 1126.728056][T27636] ? _raw_spin_lock+0xa4/0x1b0 [ 1126.732658][T27636] ? _raw_spin_unlock+0x4c/0x70 [ 1126.737344][T27636] filemap_fdatawrite_wbc+0x153/0x1b0 [ 1126.742552][T27636] filemap_write_and_wait_range+0x1a4/0x290 [ 1126.748278][T27636] ? __kasan_check_write+0x14/0x20 [ 1126.753223][T27636] ? filemap_range_has_writeback+0x620/0x620 [ 1126.759038][T27636] ? __kasan_check_write+0x14/0x20 [ 1126.763986][T27636] ? ext4_convert_inline_data+0x1cf/0x610 [ 1126.769542][T27636] ? rwsem_write_trylock+0x153/0x340 [ 1126.774664][T27636] ext4_punch_hole+0x11f/0xc00 [ 1126.779264][T27636] ext4_fallocate+0x318/0x1e90 [ 1126.783862][T27636] ? avc_policy_seqno+0x1b/0x70 [ 1126.788681][T27636] ? ext4_ext_truncate+0x320/0x320 [ 1126.793635][T27636] ? fsnotify_perm+0x6a/0x5d0 [ 1126.798145][T27636] vfs_fallocate+0x492/0x570 [ 1126.802568][T27636] __x64_sys_fallocate+0xc0/0x110 [ 1126.807429][T27636] do_syscall_64+0x3d/0xb0 [ 1126.811680][T27636] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1126.817411][T27636] RIP: 0033:0x7f54d0f75bd9 [ 1126.821663][T27636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1126.841102][T27636] RSP: 002b:00007f54d1d33048 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1126.849345][T27636] RAX: ffffffffffffffda RBX: 00007f54d1103f60 RCX: 00007f54d0f75bd9 [ 1126.857154][T27636] RDX: 0000000000080000 RSI: 0000000100000003 RDI: 0000000000000004 [ 1126.865097][T27636] RBP: 00007f54d1d330a0 R08: 0000000000000000 R09: 0000000000000000 [ 1126.872915][T27636] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.880717][T27636] R13: 000000000000000b R14: 00007f54d1103f60 R15: 00007ffcf989dfe8 [ 1126.888534][T27636] [ 1126.923312][T28849] loop4: detected capacity change from 0 to 2048 [ 1126.936768][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1126.952334][ T7845] udevd[7845]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1126.966723][T28950] input: syz0 as /devices/virtual/input/input94 [ 1126.973480][T28849] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1126.989948][ T7845] udevd[7845]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1127.014239][T29678] EXT4-fs (loop2): unmounting filesystem. [ 1127.025836][T29122] FAULT_INJECTION: forcing a failure. [ 1127.025836][T29122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1127.044053][T29122] CPU: 0 PID: 29122 Comm: syz.0.8392 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1127.053698][T29122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1127.063592][T29122] Call Trace: [ 1127.066713][T29122] [ 1127.069492][T29122] dump_stack_lvl+0x151/0x1b7 [ 1127.074008][T29122] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1127.079298][T29122] ? uinput_dev_event+0x23f/0x330 [ 1127.084161][T29122] ? __kasan_check_read+0x11/0x20 [ 1127.089020][T29122] ? input_pass_values+0xc17/0x1040 [ 1127.094055][T29122] dump_stack+0x15/0x1b [ 1127.098044][T29122] should_fail_ex+0x3d0/0x520 [ 1127.102559][T29122] should_fail+0xb/0x10 [ 1127.106551][T29122] should_fail_usercopy+0x1a/0x20 [ 1127.111411][T29122] _copy_from_user+0x1e/0xc0 [ 1127.115835][T29122] input_event_from_user+0x1dd/0x4a0 [ 1127.120957][T29122] ? input_handlers_seq_show+0x160/0x160 [ 1127.126423][T29122] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1127.132065][T29122] ? input_event+0xb4/0xd0 [ 1127.136321][T29122] uinput_write+0x46b/0x12b0 [ 1127.140744][T29122] ? uinput_read+0xc40/0xc40 [ 1127.145168][T29122] ? fsnotify_perm+0x6a/0x5d0 [ 1127.149681][T29122] ? security_file_permission+0x86/0xb0 [ 1127.155062][T29122] ? uinput_read+0xc40/0xc40 [ 1127.159488][T29122] vfs_write+0x41d/0xeb0 [ 1127.163571][T29122] ? putname+0xfa/0x150 [ 1127.167564][T29122] ? file_end_write+0x1c0/0x1c0 [ 1127.172248][T29122] ? __fget_files+0x2cb/0x330 [ 1127.176765][T29122] ? __fdget_pos+0x204/0x390 [ 1127.181187][T29122] ? ksys_write+0x77/0x2c0 [ 1127.185440][T29122] ksys_write+0x199/0x2c0 [ 1127.189607][T29122] ? __ia32_sys_read+0x90/0x90 [ 1127.194208][T29122] ? debug_smp_processor_id+0x17/0x20 [ 1127.199418][T29122] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1127.205324][T29122] __x64_sys_write+0x7b/0x90 [ 1127.209744][T29122] do_syscall_64+0x3d/0xb0 [ 1127.214002][T29122] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1127.219731][T29122] RIP: 0033:0x7f5f93b75bd9 [ 1127.223999][T29122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1127.243427][T29122] RSP: 002b:00007f5f948b7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1127.251662][T29122] RAX: ffffffffffffffda RBX: 00007f5f93d04038 RCX: 00007f5f93b75bd9 [ 1127.259473][T29122] RDX: 000000000000fe4f RSI: 0000000020000000 RDI: 0000000000000005 [ 1127.267287][T29122] RBP: 00007f5f948b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 1127.275098][T29122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.282979][T29122] R13: 000000000000006e R14: 00007f5f93d04038 R15: 00007fffc7e1c6d8 [ 1127.290728][T29122] [ 1127.306211][ T9145] EXT4-fs (loop4): unmounting filesystem. [ 1127.419113][T29284] loop4: detected capacity change from 0 to 256 [ 1127.487912][T29371] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8401'. [ 1127.578055][T29671] loop4: detected capacity change from 0 to 256 [ 1127.584542][T29671] FAT-fs (loop4): Unrecognized mount option "time_offset=0x0000000000000e e0®{1fa" or missing value [ 1127.664792][T30019] loop4: detected capacity change from 0 to 512 [ 1127.671958][T30019] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1127.676414][ T7845] udevd[7845]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1127.683416][T30019] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.8406: bg 0: block 264: padding at end of block bitmap is not set [ 1127.707129][T30019] EXT4-fs (loop4): Remounting filesystem read-only [ 1127.713508][T30019] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1127.726553][T30019] EXT4-fs (loop4): 1 truncate cleaned up [ 1127.732121][T30019] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1127.741562][T30019] EXT4-fs (loop4): unmounting filesystem. [ 1128.222159][T32482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8436'. [ 1128.240015][T32524] syz.0.8438[32524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1128.240091][T32524] syz.0.8438[32524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1128.556676][ T7967] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1128.926908][ T7967] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.949265][ T7967] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1129.037832][ T7967] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1129.058000][ T7967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1129.072804][ T7967] usb 1-1: SerialNumber: syz [ 1129.308032][ T2931] loop4: detected capacity change from 0 to 2048 [ 1129.329034][ T2931] loop4: p3 < > p4 < > [ 1129.333081][ T2931] loop4: partition table partially beyond EOD, truncated [ 1129.340541][ T2931] loop4: p3 start 4284289 is beyond EOD, truncated [ 1129.353531][ T2931] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2931 comm=syz.4.8468 [ 1129.357338][ T7967] usb 1-1: 0:2 : does not exist [ 1129.373651][T19848] udevd[19848]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1129.383357][ T7967] usb 1-1: unit 5: unexpected type 0x09 [ 1129.390295][T19848] udevd[19848]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1129.404007][ T7967] usb 1-1: USB disconnect, device number 113 [ 1129.423050][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 1129.423066][ T28] audit: type=1400 audit(1720786394.308:3488): avc: denied { lock } for pid=2930 comm="syz.4.8468" path="socket:[149996]" dev="sockfs" ino=149996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1129.506698][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1129.554355][ T3838] loop2: detected capacity change from 0 to 512 [ 1129.561337][ T3838] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 1129.565708][ T7845] udevd[7845]: symlink '../../loop2' '/dev/disk/by-label/\x86\x5b.tmp-b7:2' failed: Read-only file system [ 1129.574605][T19848] udevd[19848]: inotify_add_watch(7, /dev/loop75, 10) failed: No such file or directory [ 1129.584116][ T3838] block device autoloading is deprecated and will be removed. [ 1129.598350][ T3838] I/O error, dev loop75, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1129.608082][ T3838] EXT4-fs (loop2): couldn't read superblock of external journal [ 1129.716701][T19773] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1129.726284][ T4448] loop2: detected capacity change from 0 to 256 [ 1129.733204][ T4448] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 1130.193139][T19773] usb 5-1: Using ep0 maxpacket: 8 [ 1130.356723][T19773] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.413761][ T6587] loop2: detected capacity change from 0 to 2048 [ 1130.424916][ T7845] udevd[7845]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1130.428710][ T6587] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1130.450980][ T7845] udevd[7845]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1130.526731][T19773] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=9f.c0 [ 1130.535943][T19773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.544754][T19773] usb 5-1: Product: syz [ 1130.552863][T19773] usb 5-1: Manufacturer: syz [ 1130.557695][T19773] usb 5-1: SerialNumber: syz [ 1130.565510][T19773] usb 5-1: config 0 descriptor?? [ 1130.609203][T29678] EXT4-fs (loop2): unmounting filesystem. [ 1130.617448][T19773] usbserial_generic 5-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1130.628864][T19773] usbserial_generic 5-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1130.641679][T19773] usbserial_generic 5-1:0.0: device has no bulk endpoints [ 1130.641961][ T7320] FAULT_INJECTION: forcing a failure. [ 1130.641961][ T7320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1130.663305][ T7320] CPU: 1 PID: 7320 Comm: syz.2.8514 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1130.672852][ T7320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1130.682744][ T7320] Call Trace: [ 1130.685865][ T7320] [ 1130.688771][ T7320] dump_stack_lvl+0x151/0x1b7 [ 1130.693390][ T7320] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1130.698686][ T7320] dump_stack+0x15/0x1b [ 1130.702670][ T7320] should_fail_ex+0x3d0/0x520 [ 1130.707183][ T7320] should_fail+0xb/0x10 [ 1130.711286][ T7320] should_fail_usercopy+0x1a/0x20 [ 1130.716144][ T7320] strncpy_from_user+0x24/0x2b0 [ 1130.720830][ T7320] ? getname_flags+0xba/0x520 [ 1130.725347][ T7320] getname_flags+0xf2/0x520 [ 1130.729683][ T7320] ? _copy_from_user+0x90/0xc0 [ 1130.734373][ T7320] user_path_at_empty+0x2d/0x1a0 [ 1130.739149][ T7320] __se_sys_mount+0x285/0x3b0 [ 1130.743658][ T7320] ? ksys_write+0x260/0x2c0 [ 1130.747996][ T7320] ? __x64_sys_mount+0xd0/0xd0 [ 1130.752613][ T7320] ? debug_smp_processor_id+0x17/0x20 [ 1130.757808][ T7320] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1130.763701][ T7320] __x64_sys_mount+0xbf/0xd0 [ 1130.768150][ T7320] do_syscall_64+0x3d/0xb0 [ 1130.772387][ T7320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1130.778292][ T7320] RIP: 0033:0x7f54d0f75bd9 [ 1130.782539][ T7320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1130.802193][ T7320] RSP: 002b:00007f54d1d33048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1130.810432][ T7320] RAX: ffffffffffffffda RBX: 00007f54d1103f60 RCX: 00007f54d0f75bd9 [ 1130.818362][ T7320] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000020000140 [ 1130.819887][T19773] usb 5-1: USB disconnect, device number 106 [ 1130.826170][ T7320] RBP: 00007f54d1d330a0 R08: 0000000000000000 R09: 0000000000000000 [ 1130.826190][ T7320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.826201][ T7320] R13: 000000000000000b R14: 00007f54d1103f60 R15: 00007ffcf989dfe8 [ 1130.826218][ T7320] [ 1130.897816][ T28] audit: type=1400 audit(1720786395.788:3489): avc: denied { append } for pid=8001 comm="syz.0.8523" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1130.929464][ T8052] FAULT_INJECTION: forcing a failure. [ 1130.929464][ T8052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1130.943595][ T8052] CPU: 0 PID: 8052 Comm: syz.0.8524 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1130.953134][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1130.963031][ T8052] Call Trace: [ 1130.966151][ T8052] [ 1130.968931][ T8052] dump_stack_lvl+0x151/0x1b7 [ 1130.973443][ T8052] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1130.978735][ T8052] ? free_large_kmalloc+0xa9/0xe0 [ 1130.983594][ T8052] dump_stack+0x15/0x1b [ 1130.987584][ T8052] should_fail_ex+0x3d0/0x520 [ 1130.992099][ T8052] should_fail+0xb/0x10 [ 1130.996091][ T8052] should_fail_usercopy+0x1a/0x20 [ 1131.000961][ T8052] _copy_to_user+0x1e/0x90 [ 1131.005202][ T8052] map_get_next_key+0x3ac/0x4e0 [ 1131.010002][ T8052] __sys_bpf+0x3da/0x7f0 [ 1131.014074][ T8052] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1131.019289][ T8052] ? debug_smp_processor_id+0x17/0x20 [ 1131.024483][ T8052] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1131.030387][ T8052] __x64_sys_bpf+0x7c/0x90 [ 1131.034641][ T8052] do_syscall_64+0x3d/0xb0 [ 1131.038892][ T8052] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1131.044620][ T8052] RIP: 0033:0x7f5f93b75bd9 [ 1131.048876][ T8052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1131.068313][ T8052] RSP: 002b:00007f5f948d8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1131.076561][ T8052] RAX: ffffffffffffffda RBX: 00007f5f93d03f60 RCX: 00007f5f93b75bd9 [ 1131.084371][ T8052] RDX: 0000000000000020 RSI: 0000000020000080 RDI: 0000000000000004 [ 1131.092182][ T8052] RBP: 00007f5f948d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1131.099993][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.107803][ T8052] R13: 000000000000000b R14: 00007f5f93d03f60 R15: 00007fffc7e1c6d8 [ 1131.115622][ T8052] [ 1131.133035][ T8086] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8527'. [ 1131.160363][ T8124] loop2: detected capacity change from 0 to 512 [ 1131.179457][ T7845] udevd[7845]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1131.193997][ T8124] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1131.206361][ T8124] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1131.215136][ T8124] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1131.224389][ T8124] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.8529: attempt to clear invalid blocks 2 len 1 [ 1131.237561][ T8124] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1131.252020][ T8124] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.8529: invalid indirect mapped block 1819239214 (level 0) [ 1131.266831][ T8124] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.8529: invalid indirect mapped block 1819239214 (level 1) [ 1131.285650][ T8353] loop0: detected capacity change from 0 to 1024 [ 1131.286830][ T8124] EXT4-fs (loop2): 1 truncate cleaned up [ 1131.296003][ T8353] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1131.300112][ T8124] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1131.311982][ T8353] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1131.323769][ T8124] netlink: 'syz.2.8529': attribute type 6 has an invalid length. [ 1131.337068][ T8124] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 1131.344684][ T8124] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1131.345509][ T28] audit: type=1400 audit(1720786396.228:3490): avc: denied { remount } for pid=8121 comm="syz.2.8529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1131.377844][ T6148] EXT4-fs (loop0): unmounting filesystem. [ 1131.378426][ T8124] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 1131.401296][ T8546] loop0: detected capacity change from 0 to 512 [ 1131.407707][ T8546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1131.416295][ T8546] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1131.424298][T29678] EXT4-fs (loop2): unmounting filesystem. [ 1131.426545][ T8546] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #17: comm syz.0.8538: iget: bogus i_mode (0) [ 1131.450973][ T8546] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.8538: couldn't read orphan inode 17 (err -117) [ 1131.463266][ T8546] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1131.485730][ T28] audit: type=1400 audit(1720786396.368:3491): avc: denied { map } for pid=8527 comm="syz.0.8538" path="socket:[150689]" dev="sockfs" ino=150689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1131.520758][ T8731] loop4: detected capacity change from 0 to 512 [ 1131.527618][ T8731] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1131.534892][ T8731] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1131.544097][ T8731] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #17: comm syz.4.8541: iget: bogus i_mode (0) [ 1131.558580][ T8731] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.8541: couldn't read orphan inode 17 (err -117) [ 1131.574750][ T8731] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1131.656916][ T9105] loop2: detected capacity change from 0 to 1024 [ 1131.664361][ T9105] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1131.676362][ T9105] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1131.693821][T29678] EXT4-fs (loop2): unmounting filesystem. [ 1131.694542][ T9060] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.8541: bg 0: block 7: invalid block bitmap [ 1131.719797][ T9060] incfs: Can't find or create .index dir in ./file0 [ 1131.728599][ T9060] incfs: mount failed -28 [ 1131.745876][ T9245] loop2: detected capacity change from 0 to 512 [ 1131.758929][ T9245] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.8550: casefold flag without casefold feature [ 1131.771699][ T9245] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.8550: missing EA_INODE flag [ 1131.784581][ T9245] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.8550: error while reading EA inode 2 err=-117 [ 1131.796962][ T9245] EXT4-fs (loop2): 1 orphan inode deleted [ 1131.802722][ T9245] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1131.894476][T29678] EXT4-fs (loop2): unmounting filesystem. [ 1131.917555][ T28] audit: type=1400 audit(1720786396.808:3492): avc: denied { read } for pid=9961 comm="syz.2.8558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1132.119792][T10574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8561'. [ 1132.267934][ T6148] EXT4-fs (loop0): unmounting filesystem. [ 1132.278332][ T7845] udevd[7845]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1132.322166][T10804] FAULT_INJECTION: forcing a failure. [ 1132.322166][T10804] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.335636][T10804] CPU: 1 PID: 10804 Comm: syz.0.8570 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1132.345248][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1132.355346][T10804] Call Trace: [ 1132.358472][T10804] [ 1132.361338][T10804] dump_stack_lvl+0x151/0x1b7 [ 1132.365850][T10804] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1132.371141][T10804] ? __kasan_check_write+0x14/0x20 [ 1132.376088][T10804] dump_stack+0x15/0x1b [ 1132.380200][T10804] should_fail_ex+0x3d0/0x520 [ 1132.384717][T10804] __should_failslab+0xaf/0xf0 [ 1132.389322][T10804] should_failslab+0x9/0x20 [ 1132.393667][T10804] slab_pre_alloc_hook+0x2e/0x1b0 [ 1132.398512][T10804] kmem_cache_alloc_lru+0x49/0x220 [ 1132.403458][T10804] ? new_inode_pseudo+0x85/0x1d0 [ 1132.408244][T10804] new_inode_pseudo+0x85/0x1d0 [ 1132.412837][T10804] create_pipe_files+0x4f/0x6e0 [ 1132.417519][T10804] __do_pipe_flags+0x4c/0x210 [ 1132.422032][T10804] do_pipe2+0xd0/0x300 [ 1132.425936][T10804] ? pipe_fcntl+0x530/0x530 [ 1132.430275][T10804] ? debug_smp_processor_id+0x17/0x20 [ 1132.435484][T10804] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1132.441387][T10804] __x64_sys_pipe2+0x5a/0x70 [ 1132.445816][T10804] do_syscall_64+0x3d/0xb0 [ 1132.450066][T10804] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1132.455790][T10804] RIP: 0033:0x7f5f93b75bd9 [ 1132.460044][T10804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1132.479488][T10804] RSP: 002b:00007f5f948d8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 1132.487737][T10804] RAX: ffffffffffffffda RBX: 00007f5f93d03f60 RCX: 00007f5f93b75bd9 [ 1132.495544][T10804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001900 [ 1132.503355][T10804] RBP: 00007f5f948d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.511165][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.518982][T10804] R13: 000000000000000b R14: 00007f5f93d03f60 R15: 00007fffc7e1c6d8 [ 1132.526794][T10804] [ 1132.594064][ T9145] EXT4-fs (loop4): unmounting filesystem. [ 1132.663512][T11296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.674914][T11296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.682633][T11296] device bridge_slave_0 entered promiscuous mode [ 1132.690381][T11296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.697715][T11296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.705453][T11296] device bridge_slave_1 entered promiscuous mode [ 1132.729175][ T28] audit: type=1400 audit(1720786397.618:3493): avc: denied { accept } for pid=11814 comm="syz.4.8583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1132.814541][T12131] loop4: detected capacity change from 0 to 256 [ 1132.834241][T12162] loop2: detected capacity change from 0 to 256 [ 1132.910716][T11296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.917607][T11296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.924707][T11296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.931834][T11296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.943433][T12540] FAULT_INJECTION: forcing a failure. [ 1132.943433][T12540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1132.958761][T12540] CPU: 1 PID: 12540 Comm: syz.2.8592 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1132.968397][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1132.978292][T12540] Call Trace: [ 1132.981424][T12540] [ 1132.984190][T12540] dump_stack_lvl+0x151/0x1b7 [ 1132.988708][T12540] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1132.993998][T12540] ? kstrtouint+0xf6/0x180 [ 1132.998358][T12540] ? _kstrtol+0x150/0x150 [ 1133.002517][T12540] dump_stack+0x15/0x1b [ 1133.006508][T12540] should_fail_ex+0x3d0/0x520 [ 1133.011022][T12540] should_fail+0xb/0x10 [ 1133.015015][T12540] should_fail_usercopy+0x1a/0x20 [ 1133.019876][T12540] _copy_from_user+0x1e/0xc0 [ 1133.024304][T12540] copy_msghdr_from_user+0xaa/0x670 [ 1133.029344][T12540] ? sendmsg_copy_msghdr+0x70/0x70 [ 1133.034411][T12540] __sys_sendmsg+0x236/0x390 [ 1133.038839][T12540] ? ____sys_sendmsg+0x9a0/0x9a0 [ 1133.043608][T12540] ? __kasan_check_write+0x14/0x20 [ 1133.048560][T12540] ? mutex_unlock+0xb2/0x260 [ 1133.052981][T12540] ? __kasan_check_write+0x14/0x20 [ 1133.057931][T12540] ? debug_smp_processor_id+0x17/0x20 [ 1133.063136][T12540] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1133.069038][T12540] __x64_sys_sendmsg+0x7f/0x90 [ 1133.073639][T12540] do_syscall_64+0x3d/0xb0 [ 1133.077893][T12540] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1133.083617][T12540] RIP: 0033:0x7f54d0f75bd9 [ 1133.087874][T12540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1133.107402][T12540] RSP: 002b:00007f54d1d12048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1133.115731][T12540] RAX: ffffffffffffffda RBX: 00007f54d1104038 RCX: 00007f54d0f75bd9 [ 1133.123540][T12540] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 000000000000000b [ 1133.131353][T12540] RBP: 00007f54d1d120a0 R08: 0000000000000000 R09: 0000000000000000 [ 1133.139163][T12540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.146978][T12540] R13: 000000000000006e R14: 00007f54d1104038 R15: 00007ffcf989dfe8 [ 1133.154799][T12540] [ 1133.160169][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1133.171455][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1133.180830][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1133.196370][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1133.205654][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1133.214166][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1133.228350][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1133.240067][T11296] device veth0_vlan entered promiscuous mode [ 1133.246715][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1133.254660][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1133.263493][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1133.280834][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1133.290407][T11296] device veth1_macvtap entered promiscuous mode [ 1133.300688][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1133.313306][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1133.391272][T13929] loop3: detected capacity change from 0 to 2048 [ 1133.406009][ T7845] udevd[7845]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1133.408573][T13929] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1133.468922][ T7845] udevd[7845]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1133.556794][ T28] audit: type=1400 audit(1720786398.448:3494): avc: denied { ioctl } for pid=13928 comm="syz.3.8612" path="socket:[151158]" dev="sockfs" ino=151158 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1133.612343][T14201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.619447][T14201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.628168][T14201] device bridge_slave_0 entered promiscuous mode [ 1133.635438][T14201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.642576][T14201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.650507][T14201] device bridge_slave_1 entered promiscuous mode [ 1133.811848][T14201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.818730][T14201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.825815][T14201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.832620][T14201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.907624][T15133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8624'. [ 1134.112180][ T580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.119600][ T580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.131793][T15343] FAULT_INJECTION: forcing a failure. [ 1134.131793][T15343] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.144376][T15343] CPU: 1 PID: 15343 Comm: syz.2.8633 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1134.154003][T15343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1134.163895][T15343] Call Trace: [ 1134.167021][T15343] [ 1134.169806][T15343] dump_stack_lvl+0x151/0x1b7 [ 1134.174397][T15343] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1134.179781][T15343] ? __kasan_check_write+0x14/0x20 [ 1134.184728][T15343] ? kstrtouint_from_user+0x124/0x180 [ 1134.189932][T15343] dump_stack+0x15/0x1b [ 1134.193925][T15343] should_fail_ex+0x3d0/0x520 [ 1134.198440][T15343] ? netlink_realloc_groups+0x127/0x2d0 [ 1134.203819][T15343] __should_failslab+0xaf/0xf0 [ 1134.208421][T15343] should_failslab+0x9/0x20 [ 1134.212760][T15343] __kmem_cache_alloc_node+0x3d/0x250 [ 1134.218224][T15343] ? netlink_table_grab+0x1d9/0x270 [ 1134.223262][T15343] ? netlink_remove_tap+0x210/0x210 [ 1134.228294][T15343] ? netlink_realloc_groups+0x127/0x2d0 [ 1134.234890][T15343] __kmalloc_node_track_caller+0xa2/0x1e0 [ 1134.240446][T15343] krealloc+0x64/0xf0 [ 1134.244264][T15343] netlink_realloc_groups+0x127/0x2d0 [ 1134.249474][T15343] netlink_bind+0x234/0xf80 [ 1134.253820][T15343] ? netlink_release+0x1750/0x1750 [ 1134.258758][T15343] ? security_socket_bind+0x82/0xb0 [ 1134.263795][T15343] __sys_bind+0x233/0x2e0 [ 1134.268047][T15343] ? __ia32_sys_socketpair+0xb0/0xb0 [ 1134.273177][T15343] ? debug_smp_processor_id+0x17/0x20 [ 1134.278373][T15343] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1134.284283][T15343] __x64_sys_bind+0x7a/0x90 [ 1134.288616][T15343] do_syscall_64+0x3d/0xb0 [ 1134.292870][T15343] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1134.298598][T15343] RIP: 0033:0x7f54d0f75bd9 [ 1134.302851][T15343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1134.322288][T15343] RSP: 002b:00007f54d1d33048 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1134.330536][T15343] RAX: ffffffffffffffda RBX: 00007f54d1103f60 RCX: 00007f54d0f75bd9 [ 1134.338346][T15343] RDX: 000000000000000c RSI: 0000000020000080 RDI: 0000000000000007 [ 1134.346158][T15343] RBP: 00007f54d1d330a0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.353969][T15343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.361782][T15343] R13: 000000000000000b R14: 00007f54d1103f60 R15: 00007ffcf989dfe8 [ 1134.369594][T15343] [ 1134.379382][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1134.401405][T15343] loop2: detected capacity change from 0 to 2048 [ 1134.412954][T11296] EXT4-fs (loop3): unmounting filesystem. [ 1134.419185][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1134.439189][T10502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1134.448469][T10502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.455348][T10502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.472751][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1134.481451][ T580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.488333][ T580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.500026][T15343] Alternate GPT is invalid, using primary GPT. [ 1134.507110][T15343] loop2: p1 p2 p3 [ 1134.511358][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1134.519281][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1134.519313][T19848] udevd[19848]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1134.530681][T17896] udevd[17896]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1134.546351][ T7845] udevd[7845]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1135.283073][T15559] loop4: detected capacity change from 0 to 16 [ 1135.301684][T19848] udevd[19848]: symlink '../../loop4' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:4' failed: Read-only file system [ 1135.309381][ T7845] udevd[7845]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1135.316352][T17922] udevd[17922]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1135.327079][T17896] udevd[17896]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1135.340576][T14201] device veth0_vlan entered promiscuous mode [ 1135.352408][T15560] loop2: detected capacity change from 0 to 2048 [ 1135.358710][T15559] erofs: (device loop4): mounted with root inode @ nid 36. [ 1135.370127][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1135.383934][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1135.396802][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1135.403957][T15560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1135.404703][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1135.428096][T15740] loop4: detected capacity change from 0 to 512 [ 1135.435263][T15740] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1135.449869][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1135.463392][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1135.493564][T14201] device veth1_macvtap entered promiscuous mode [ 1135.500354][T15740] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1135.507819][T15740] EXT4-fs (loop4): mount failed [ 1135.514183][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1135.522258][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1135.530993][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1135.547566][ T43] device bridge_slave_1 left promiscuous mode [ 1135.554699][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.607462][ T43] device bridge_slave_0 left promiscuous mode [ 1135.627497][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.635664][ T43] device veth1_macvtap left promiscuous mode [ 1135.642699][ T43] device veth0_vlan left promiscuous mode [ 1135.904158][ T316] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1136.041763][T19773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1136.049941][T19773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1136.058318][T19773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1136.066464][T19773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1136.077428][T16276] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8641'. [ 1136.086754][T16276] device gretap0 entered promiscuous mode [ 1136.093438][T16278] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8641'. [ 1136.102516][T16278] 0ªX¹¦D: renamed from gretap0 [ 1136.108462][T16278] device 30ªX¹¦D left promiscuous mode [ 1136.114575][T16278] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1136.194072][T29678] EXT4-fs (loop2): unmounting filesystem. [ 1136.212810][T16972] loop2: detected capacity change from 0 to 256 [ 1136.227081][ T224] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1136.596700][ T795] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1136.617283][ T224] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1136.636667][ T224] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 1136.666687][ T224] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1136.675559][ T224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.718395][T16277] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1136.956753][ T224] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1136.956770][ T795] usb 5-1: config 1 has an invalid descriptor of length 187, skipping remainder of the config [ 1136.956787][ T795] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1136.964248][ T224] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input95 [ 1137.029051][ T224] usb 1-1: USB disconnect, device number 114 [ 1137.057459][ T795] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1137.069248][ T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1137.077360][ T795] usb 5-1: SerialNumber: syz [ 1137.336532][T17285] loop4: detected capacity change from 0 to 2048 [ 1137.355892][T17896] udevd[17896]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1137.381748][T17285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1137.390458][T17285] ext4 filesystem being mounted at /47/bus supports timestamps until 2038 (0x7fffffff) [ 1137.407622][T19848] udevd[19848]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1137.467316][ T795] usb 5-1: 0:2 : does not exist [ 1137.505192][T21660] loop2: detected capacity change from 0 to 1024 [ 1137.521781][T19848] udevd[19848]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1137.522571][T21660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1137.555588][T19848] udevd[19848]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1137.571997][ T795] usb 5-1: USB disconnect, device number 107 [ 1137.652232][T21818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8704'. [ 1137.662104][T21818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8704'. [ 1137.907985][T10502] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1137.921521][ T9145] EXT4-fs (loop4): unmounting filesystem. [ 1137.930599][ T7845] udevd[7845]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1137.950936][T23312] loop4: detected capacity change from 0 to 2048 [ 1137.962337][ T7845] udevd[7845]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1137.975576][T23312] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1137.988286][T23312] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1138.004909][ T7845] udevd[7845]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1138.005212][T23312] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 28 [ 1138.028570][T23312] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1138.028570][T23312] [ 1138.038074][T23312] EXT4-fs (loop4): Total free blocks count 0 [ 1138.039317][T23616] FAULT_INJECTION: forcing a failure. [ 1138.039317][T23616] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.043828][T23312] EXT4-fs (loop4): Free/Dirty block details [ 1138.043842][T23312] EXT4-fs (loop4): free_blocks=2415919104 [ 1138.056393][T23616] CPU: 0 PID: 23616 Comm: syz.4.8726 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1138.062449][T23312] EXT4-fs (loop4): dirty_blocks=32 [ 1138.067517][T23616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1138.067528][T23616] Call Trace: [ 1138.067533][T23616] [ 1138.067539][T23616] dump_stack_lvl+0x151/0x1b7 [ 1138.067561][T23616] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1138.077565][T23312] EXT4-fs (loop4): Block reservation details [ 1138.082098][T23616] ? memset+0x35/0x40 [ 1138.082118][T23616] ? __es_remove_extent+0x3e2/0x1f60 [ 1138.092772][T23312] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 1138.095117][T23616] dump_stack+0x15/0x1b [ 1138.132187][T23616] should_fail_ex+0x3d0/0x520 [ 1138.136697][T23616] ? __es_insert_extent+0x72a/0x17c0 [ 1138.141818][T23616] __should_failslab+0xaf/0xf0 [ 1138.146417][T23616] should_failslab+0x9/0x20 [ 1138.150915][T23616] kmem_cache_alloc+0x3b/0x2c0 [ 1138.155514][T23616] __es_insert_extent+0x72a/0x17c0 [ 1138.160459][T23616] ? _raw_write_lock+0xa4/0x170 [ 1138.165149][T23616] ext4_es_insert_extent+0x5a2/0x2ff0 [ 1138.170358][T23616] ? ext4_es_scan_clu+0x340/0x340 [ 1138.175218][T23616] ? _raw_read_unlock+0x25/0x40 [ 1138.179901][T23616] ? ext4_es_find_extent_range+0xde/0x320 [ 1138.185452][T23616] ? trace_ext4_ext_convert_to_initialized_fastpath+0x160/0x160 [ 1138.192922][T23616] ext4_ext_map_blocks+0x2625/0x7390 [ 1138.198051][T23616] ? kasan_set_track+0x60/0x70 [ 1138.202637][T23616] ? kasan_set_track+0x4b/0x70 [ 1138.207241][T23616] ? kasan_save_alloc_info+0x1f/0x30 [ 1138.212362][T23616] ? kmem_cache_alloc+0x175/0x2c0 [ 1138.217220][T23616] ? alloc_buffer_head+0x26/0x110 [ 1138.222083][T23616] ? down_read+0xeb7/0x1aa0 [ 1138.226516][T23616] ? __x64_sys_pwritev2+0xe5/0x100 [ 1138.231465][T23616] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1138.237369][T23616] ? ext4_ext_release+0x10/0x10 [ 1138.242051][T23616] ? __down_common+0x690/0x690 [ 1138.246658][T23616] ? _raw_read_unlock+0x25/0x40 [ 1138.251340][T23616] ? ext4_es_lookup_extent+0x33b/0x950 [ 1138.256636][T23616] ext4_da_get_block_prep+0x795/0x13e0 [ 1138.261929][T23616] ? folio_add_lru+0x280/0x3f0 [ 1138.266527][T23616] ? ext4_da_release_space+0x480/0x480 [ 1138.272079][T23616] ? _raw_spin_lock+0xa4/0x1b0 [ 1138.276681][T23616] ? _raw_spin_unlock+0x4c/0x70 [ 1138.281363][T23616] ext4_block_write_begin+0x55e/0x1200 [ 1138.286665][T23616] ? ext4_da_release_space+0x480/0x480 [ 1138.291952][T23616] ? ext4_print_free_blocks+0x360/0x360 [ 1138.297333][T23616] ? folio_wait_stable+0x70/0x90 [ 1138.302105][T23616] ext4_da_write_begin+0x51f/0x920 [ 1138.307056][T23616] ? ext4_dirty_folio+0xf0/0xf0 [ 1138.311744][T23616] generic_perform_write+0x2f9/0x5c0 [ 1138.316864][T23616] ? generic_file_direct_write+0x6b0/0x6b0 [ 1138.322506][T23616] ? generic_write_checks_count+0x490/0x490 [ 1138.328233][T23616] ? arch_stack_walk+0xf3/0x140 [ 1138.332921][T23616] ext4_buffered_write_iter+0x360/0x640 [ 1138.338301][T23616] ext4_file_write_iter+0x194/0x1570 [ 1138.343414][T23616] ? __stack_depot_save+0x36/0x480 [ 1138.348363][T23616] ? putname+0xfa/0x150 [ 1138.352360][T23616] ? putname+0xfa/0x150 [ 1138.356346][T23616] ? kstrtouint+0xf6/0x180 [ 1138.360597][T23616] ? avc_policy_seqno+0x1b/0x70 [ 1138.365284][T23616] ? ext4_file_read_iter+0x470/0x470 [ 1138.370405][T23616] ? fsnotify_perm+0x6a/0x5d0 [ 1138.374919][T23616] do_iter_write+0x6e6/0xc50 [ 1138.379559][T23616] ? __import_iovec+0x24f/0x430 [ 1138.384238][T23616] ? vfs_iter_write+0xa0/0xa0 [ 1138.388752][T23616] ? import_iovec+0xe5/0x120 [ 1138.393178][T23616] vfs_writev+0x2d4/0x590 [ 1138.397342][T23616] ? do_writev+0x340/0x340 [ 1138.401598][T23616] ? __fdget+0x1b7/0x240 [ 1138.405673][T23616] __se_sys_pwritev2+0x1c6/0x2c0 [ 1138.410448][T23616] ? __x64_sys_pwritev2+0x100/0x100 [ 1138.415480][T23616] ? debug_smp_processor_id+0x17/0x20 [ 1138.420689][T23616] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1138.426588][T23616] __x64_sys_pwritev2+0xe5/0x100 [ 1138.431364][T23616] do_syscall_64+0x3d/0xb0 [ 1138.435616][T23616] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1138.441348][T23616] RIP: 0033:0x7f3b06175bd9 [ 1138.445598][T23616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1138.465038][T23616] RSP: 002b:00007f3b06f67048 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1138.473281][T23616] RAX: ffffffffffffffda RBX: 00007f3b06304038 RCX: 00007f3b06175bd9 [ 1138.481094][T23616] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1138.488903][T23616] RBP: 00007f3b06f670a0 R08: 0000000000000000 R09: 0000000000000000 [ 1138.496715][T23616] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000001 [ 1138.504527][T23616] R13: 000000000000006e R14: 00007f3b06304038 R15: 00007ffc13f282b8 [ 1138.512344][T23616] [ 1138.515589][T23616] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 1138.546421][ T7845] udevd[7845]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1138.558911][T29678] EXT4-fs (loop2): unmounting filesystem. [ 1138.567208][T10502] usb 1-1: Using ep0 maxpacket: 16 [ 1138.580575][ T28] audit: type=1400 audit(1720786403.468:3495): avc: denied { map } for pid=24660 comm="syz.4.8742" path="/dev/binderfs/binder0" dev="binder" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1138.604790][T24662] loop4: detected capacity change from 0 to 128 [ 1138.607181][T24742] IPv6: addrconf: prefix option has invalid lifetime [ 1138.618344][ T7845] udevd[7845]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 1138.636535][ T7845] udevd[7845]: symlink '../../loop4' '/dev/disk/by-uuid/8AF1-3A24.tmp-b7:4' failed: Read-only file system [ 1138.661333][T24815] loop4: detected capacity change from 0 to 2048 [ 1138.688055][T24815] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1138.706721][T10502] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1138.716764][T10502] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1138.726369][T10502] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1138.736064][T10502] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1138.745776][T10502] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1138.758505][T10502] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1138.765045][T10502] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1138.775176][T10502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.789527][T24984] FAULT_INJECTION: forcing a failure. [ 1138.789527][T24984] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.802270][T24984] CPU: 1 PID: 24984 Comm: syz.2.8743 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1138.811886][T24984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1138.821865][T24984] Call Trace: [ 1138.824988][T24984] [ 1138.827764][T24984] dump_stack_lvl+0x151/0x1b7 [ 1138.832278][T24984] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1138.837658][T24984] ? __stack_depot_save+0x36/0x480 [ 1138.842604][T24984] dump_stack+0x15/0x1b [ 1138.846597][T24984] should_fail_ex+0x3d0/0x520 [ 1138.851113][T24984] __should_failslab+0xaf/0xf0 [ 1138.855712][T24984] should_failslab+0x9/0x20 [ 1138.860051][T24984] slab_pre_alloc_hook+0x2e/0x1b0 [ 1138.864910][T24984] kmem_cache_alloc_lru+0x49/0x220 [ 1138.869858][T24984] ? shmem_alloc_inode+0x28/0x40 [ 1138.874636][T24984] ? expand_files+0xd3/0x700 [ 1138.879061][T24984] shmem_alloc_inode+0x28/0x40 [ 1138.883658][T24984] ? shmem_match+0x180/0x180 [ 1138.888083][T24984] new_inode_pseudo+0x65/0x1d0 [ 1138.892685][T24984] new_inode+0x28/0x1c0 [ 1138.896676][T24984] ? _raw_spin_lock+0xa4/0x1b0 [ 1138.901277][T24984] shmem_get_inode+0x32d/0xc20 [ 1138.905877][T24984] __shmem_file_setup+0x111/0x2a0 [ 1138.910738][T24984] shmem_file_setup+0x2f/0x40 [ 1138.915252][T24984] __se_sys_memfd_create+0x1e1/0x3e0 [ 1138.920373][T24984] __x64_sys_memfd_create+0x5b/0x70 [ 1138.925405][T24984] do_syscall_64+0x3d/0xb0 [ 1138.929658][T24984] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1138.935386][T24984] RIP: 0033:0x7f54d0f75bd9 [ 1138.939638][T24984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1138.959078][T24984] RSP: 002b:00007f54d1cf0e28 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 1138.967323][T24984] RAX: ffffffffffffffda RBX: 0000000000000595 RCX: 00007f54d0f75bd9 [ 1138.975134][T24984] RDX: 00007f54d1cf0f00 RSI: 0000000000000000 RDI: 00007f54d0fe3d24 [ 1138.982945][T24984] RBP: 0000000020000b40 R08: 00007f54d1cf0bc7 R09: 00007f54d1cf0e50 [ 1138.990757][T24984] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000000 [ 1138.998567][T24984] R13: 00007f54d1cf0f00 R14: 00007f54d1cf0ec0 R15: 0000000020000180 [ 1139.006383][T24984] [ 1139.254766][T10502] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 1139.318642][T10502] scsi host1: usb-storage 1-1:1.0 [ 1139.520428][T10502] usb 1-1: USB disconnect, device number 115 [ 1139.536398][ T9145] EXT4-fs (loop4): unmounting filesystem. [ 1139.848242][ T28] audit: type=1400 audit(1720786404.738:3496): avc: denied { append } for pid=26100 comm="syz.4.8760" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1139.874767][T26101] loop4: detected capacity change from 0 to 512 [ 1139.881129][T26101] EXT4-fs: Ignoring removed nobh option [ 1139.886601][T26101] EXT4-fs: dax option not supported [ 1139.992092][T26608] overlayfs: unrecognized mount option "/" or missing value [ 1140.194551][T27519] loop0: detected capacity change from 0 to 2048 [ 1140.210474][T27519] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1140.768603][T28080] loop2: detected capacity change from 0 to 40427 [ 1140.793265][T28080] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1140.830083][T28080] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1140.849684][T29678] syz-executor: attempt to access beyond end of device [ 1140.849684][T29678] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1141.065539][T14201] EXT4-fs (loop0): unmounting filesystem. [ 1141.206729][ T224] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1141.346688][T18021] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1141.606761][ T224] usb 3-1: not running at top speed; connect to a high speed hub [ 1141.706758][T18021] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.717863][T18021] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.727524][ T224] usb 3-1: config 1 has an invalid interface number: 139 but max is 1 [ 1141.735617][T18021] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1141.745449][ T224] usb 3-1: config 1 has an invalid interface number: 149 but max is 1 [ 1141.753606][T18021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.761545][ T224] usb 3-1: config 1 has an invalid interface number: 202 but max is 1 [ 1141.770131][ T224] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1141.781219][T18021] usb 1-1: config 0 descriptor?? [ 1141.786045][ T224] usb 3-1: config 1 has no interface number 0 [ 1141.791934][ T224] usb 3-1: config 1 has no interface number 1 [ 1141.797824][ T224] usb 3-1: config 1 has no interface number 2 [ 1141.803846][ T224] usb 3-1: config 1 interface 139 altsetting 10 has a duplicate endpoint with address 0xA, skipping [ 1141.814726][ T224] usb 3-1: config 1 interface 139 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1141.828736][ T224] usb 3-1: too many endpoints for config 1 interface 149 altsetting 168: 224, using maximum allowed: 30 [ 1141.839750][ T224] usb 3-1: config 1 interface 149 altsetting 168 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1141.851053][ T224] usb 3-1: config 1 interface 149 altsetting 168 has an invalid endpoint with address 0x80, skipping [ 1141.861766][ T224] usb 3-1: config 1 interface 149 altsetting 168 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1141.871899][ T224] usb 3-1: config 1 interface 149 altsetting 168 has an invalid endpoint with address 0xC1, skipping [ 1141.883089][ T224] usb 3-1: config 1 interface 149 altsetting 168 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1141.894367][ T224] usb 3-1: config 1 interface 149 altsetting 168 has an invalid endpoint with address 0x0, skipping [ 1141.905084][ T224] usb 3-1: config 1 interface 149 altsetting 168 endpoint 0x7 has invalid maxpacket 520, setting to 64 [ 1141.916143][ T224] usb 3-1: config 1 interface 149 altsetting 168 has a duplicate endpoint with address 0x9, skipping [ 1141.927271][ T224] usb 3-1: config 1 interface 149 altsetting 168 has a duplicate endpoint with address 0xE, skipping [ 1141.937989][ T224] usb 3-1: config 1 interface 149 altsetting 168 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1141.948933][ T224] usb 3-1: config 1 interface 149 altsetting 168 has an invalid endpoint with address 0x0, skipping [ 1141.959510][ T224] usb 3-1: config 1 interface 149 altsetting 168 has 12 endpoint descriptors, different from the interface descriptor's value: 224 [ 1141.972789][ T224] usb 3-1: config 1 interface 202 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 1141.983610][ T224] usb 3-1: config 1 interface 202 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 1141.994478][ T224] usb 3-1: config 1 interface 202 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 1142.005099][ T224] usb 3-1: config 1 interface 202 altsetting 11 has a duplicate endpoint with address 0x2, skipping [ 1142.015878][ T224] usb 3-1: config 1 interface 202 altsetting 11 has an invalid endpoint with address 0x80, skipping [ 1142.026809][ T224] usb 3-1: config 1 interface 202 altsetting 11 has a duplicate endpoint with address 0xA, skipping [ 1142.037586][ T224] usb 3-1: config 1 interface 202 altsetting 11 has a duplicate endpoint with address 0x6, skipping [ 1142.048710][ T224] usb 3-1: config 1 interface 202 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 1142.059363][ T224] usb 3-1: config 1 interface 202 altsetting 11 has a duplicate endpoint with address 0x7, skipping [ 1142.069952][ T224] usb 3-1: config 1 interface 202 altsetting 11 endpoint 0xC has an invalid bInterval 33, changing to 4 [ 1142.080859][ T224] usb 3-1: config 1 interface 202 altsetting 11 endpoint 0xC has invalid maxpacket 55769, setting to 1023 [ 1142.091970][ T224] usb 3-1: config 1 interface 202 altsetting 11 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1142.103023][ T224] usb 3-1: config 1 interface 202 altsetting 11 has an invalid endpoint with address 0xEE, skipping [ 1142.113979][ T224] usb 3-1: config 1 interface 202 altsetting 11 has 14 endpoint descriptors, different from the interface descriptor's value: 12 [ 1142.127354][ T224] usb 3-1: config 1 interface 139 has no altsetting 0 [ 1142.133951][ T224] usb 3-1: config 1 interface 149 has no altsetting 0 [ 1142.140734][ T224] usb 3-1: config 1 interface 202 has no altsetting 0 [ 1142.266945][T18021] hid (null): bogus close delimiter [ 1142.306753][ T224] usb 3-1: New USB device found, idVendor=050f, idProduct=0190, bcdDevice=74.40 [ 1142.316043][ T224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.324039][ T224] usb 3-1: Manufacturer: " [ 1142.329824][ T224] usb 3-1: SerialNumber: и [ 1142.606809][T18021] usb 1-1: string descriptor 0 read error: -71 [ 1142.626740][T18021] uclogic 0003:256C:006D.0019: failed retrieving string descriptor #200: -71 [ 1142.635497][T18021] uclogic 0003:256C:006D.0019: failed retrieving pen parameters: -71 [ 1142.656675][T18021] uclogic 0003:256C:006D.0019: failed probing pen v2 parameters: -71 [ 1142.664761][T18021] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 1142.686681][T18021] uclogic: probe of 0003:256C:006D.0019 failed with error -71 [ 1142.707487][T18021] usb 1-1: USB disconnect, device number 116 [ 1142.823880][ T28] audit: type=1400 audit(1720786407.708:3497): avc: denied { setattr } for pid=29279 comm="syz.2.8792" path="socket:[152974]" dev="sockfs" ino=152974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1142.950066][ T224] usb 3-1: USB disconnect, device number 94 [ 1143.046689][ T7967] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1143.374894][ T6993] loop0: detected capacity change from 0 to 256 [ 1143.408405][ T7967] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.686777][ T7967] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1143.697960][ T7967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.702409][ T7420] loop0: detected capacity change from 0 to 2048 [ 1143.713769][ T7967] usb 5-1: Product: syz [ 1143.719609][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1143.730996][ T7967] usb 5-1: Manufacturer: syz [ 1143.739163][ T7420] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1143.740135][ T7967] usb 5-1: SerialNumber: syz [ 1143.758366][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1143.869530][ T7929] loop2: detected capacity change from 0 to 512 [ 1144.127792][ T4915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.143468][ T4915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.144456][ T7845] udevd[7845]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1144.166341][ T7929] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.8907: casefold flag without casefold feature [ 1144.179233][ T7929] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.8907: missing EA_INODE flag [ 1144.196406][ T7929] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.8907: error while reading EA inode 2 err=-117 [ 1144.214436][ T7929] EXT4-fs (loop2): 1 orphan inode deleted [ 1144.221029][ T7929] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1144.242150][ T7845] udevd[7845]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1144.360012][ T28] audit: type=1326 audit(1720786409.248:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.8876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b06175bd9 code=0x7ffc0000 [ 1144.383330][ T28] audit: type=1326 audit(1720786409.248:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.8876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b06175bd9 code=0x7ffc0000 [ 1144.407045][ T28] audit: type=1326 audit(1720786409.248:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.8876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f3b06175bd9 code=0x7ffc0000 [ 1144.431489][ T28] audit: type=1326 audit(1720786409.248:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.8876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b06175bd9 code=0x7ffc0000 [ 1144.455277][ T28] audit: type=1326 audit(1720786409.248:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.8876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b06175bd9 code=0x7ffc0000 [ 1144.479437][ T28] audit: type=1326 audit(1720786409.248:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.8876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b06175bd9 code=0x7ffc0000 [ 1144.503289][ T28] audit: type=1326 audit(1720786409.248:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.8876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b06175bd9 code=0x7ffc0000 [ 1144.529867][ T28] audit: type=1326 audit(1720786409.248:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.8876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b06175bd9 code=0x7ffc0000 [ 1144.576145][ T28] audit: type=1326 audit(1720786409.248:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.8876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b06175bd9 code=0x7ffc0000 [ 1144.622348][T14201] EXT4-fs (loop0): unmounting filesystem. [ 1144.636010][ T7845] udevd[7845]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1144.636751][ T7967] cdc_ncm 5-1:1.0: bind() failure [ 1144.678563][ T28] audit: type=1326 audit(1720786409.248:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.8876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b06175bd9 code=0x7ffc0000 [ 1144.686728][ T7967] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 1144.704540][ T8839] loop0: detected capacity change from 0 to 2048 [ 1144.728172][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1144.754352][ T8839] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1144.756713][ T7967] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 1144.772362][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1144.786354][ T7967] usb 5-1: USB disconnect, device number 108 [ 1144.882452][T29678] EXT4-fs (loop2): unmounting filesystem. [ 1144.890936][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1144.919821][ T8955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.926916][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.934908][ T8955] device bridge_slave_0 entered promiscuous mode [ 1144.943642][ T8955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.957892][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.965271][ T8955] device bridge_slave_1 entered promiscuous mode [ 1145.060614][ T9517] FAULT_INJECTION: forcing a failure. [ 1145.060614][ T9517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1145.073783][ T9517] CPU: 1 PID: 9517 Comm: syz.2.8931 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1145.083313][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1145.093208][ T9517] Call Trace: [ 1145.096331][ T9517] [ 1145.099108][ T9517] dump_stack_lvl+0x151/0x1b7 [ 1145.103625][ T9517] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1145.108914][ T9517] ? __schedule+0xcaf/0x1550 [ 1145.113339][ T9517] dump_stack+0x15/0x1b [ 1145.117334][ T9517] should_fail_ex+0x3d0/0x520 [ 1145.121847][ T9517] should_fail_alloc_page+0x68/0x90 [ 1145.126881][ T9517] __alloc_pages+0x1f4/0x780 [ 1145.131314][ T9517] ? __kasan_check_read+0x11/0x20 [ 1145.136170][ T9517] ? prep_new_page+0x110/0x110 [ 1145.140769][ T9517] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 1145.146668][ T9517] ? irqentry_exit+0x30/0x40 [ 1145.151099][ T9517] __kmalloc_large_node+0x9e/0x1b0 [ 1145.156048][ T9517] ? io_alloc_hash_table+0x3f/0xc0 [ 1145.160992][ T9517] __kmalloc+0xef/0x1e0 [ 1145.164986][ T9517] io_alloc_hash_table+0x3f/0xc0 [ 1145.169766][ T9517] io_ring_ctx_alloc+0xcd/0xb6f [ 1145.174444][ T9517] io_uring_create+0x29d/0xdec [ 1145.179047][ T9517] ? __kasan_check_write+0x14/0x20 [ 1145.183994][ T9517] __x64_sys_io_uring_setup+0x22a/0x2a0 [ 1145.189374][ T9517] ? release_firmware_map_entry+0x191/0x191 [ 1145.195102][ T9517] ? __ia32_sys_io_uring_enter+0x100/0x100 [ 1145.200865][ T9517] ? ksys_write+0x260/0x2c0 [ 1145.205210][ T9517] ? switch_fpu_return+0xe/0x10 [ 1145.209891][ T9517] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 1145.215359][ T9517] do_syscall_64+0x3d/0xb0 [ 1145.219615][ T9517] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1145.225339][ T9517] RIP: 0033:0x7f54d0f75bd9 [ 1145.229593][ T9517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1145.249036][ T9517] RSP: 002b:00007f54d1cf1048 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1145.257283][ T9517] RAX: ffffffffffffffda RBX: 00007f54d1104110 RCX: 00007f54d0f75bd9 [ 1145.265093][ T9517] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 00000000000013b5 [ 1145.272901][ T9517] RBP: 00007f54d1cf10a0 R08: 0000000000000000 R09: 0000000000000000 [ 1145.280712][ T9517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.288698][ T9517] R13: 000000000000006e R14: 00007f54d1104110 R15: 00007ffcf989dfe8 [ 1145.296602][ T9517] [ 1145.414661][ T8955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.421564][ T8955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.428673][ T8955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.435418][ T8955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.454718][T10126] loop4: detected capacity change from 0 to 256 [ 1145.685709][ T7967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.693592][ T7967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.701958][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1145.711726][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1145.715137][T14201] EXT4-fs (loop0): unmounting filesystem. [ 1145.726584][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1145.763798][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.770721][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.771390][T10346] loop0: detected capacity change from 0 to 2048 [ 1145.778955][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1145.792580][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.793474][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1145.799469][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.825198][T10502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1145.841320][T10502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1145.852013][T10346] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1145.867991][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1145.881358][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1145.903566][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1145.913191][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1145.921413][ T8955] device veth0_vlan entered promiscuous mode [ 1145.931638][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1145.939461][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1145.953759][T10502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1145.962121][T10502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1145.971576][ T8955] device veth1_macvtap entered promiscuous mode [ 1145.982594][T10502] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1145.990437][T10502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1146.000701][T10502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1146.019305][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1146.027938][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1146.080707][T14201] EXT4-fs (loop0): unmounting filesystem. [ 1146.199759][T11327] futex_wake_op: syz.4.8957 tries to shift op by -1; fix this program [ 1146.235109][T11437] fuse: Unknown parameter 'use' [ 1146.248911][T11437] /dev/loop0: Can't open blockdev [ 1146.259041][T11449] loop4: detected capacity change from 0 to 2048 [ 1146.290419][T11449] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1146.703050][T11857] loop2: detected capacity change from 0 to 512 [ 1146.730085][T11857] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.8965: inode #1: comm syz.2.8965: iget: illegal inode # [ 1146.744885][T11857] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.8965: error while reading EA inode 1 err=-117 [ 1146.767000][T11857] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.8965: inode #1: comm syz.2.8965: iget: illegal inode # [ 1146.791295][T11857] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.8965: error while reading EA inode 1 err=-117 [ 1146.807120][T11857] EXT4-fs (loop2): 1 orphan inode deleted [ 1146.812748][T11857] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1146.851469][T29678] EXT4-fs (loop2): unmounting filesystem. [ 1146.882014][T12260] fuse: Unknown parameter '<ɧ“ ¿' [ 1147.125597][ T9145] EXT4-fs (loop4): unmounting filesystem. [ 1147.498648][ T795] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1147.976724][ T795] usb 5-1: Using ep0 maxpacket: 16 [ 1148.034538][T14950] fuse: Unknown parameter 'use' [ 1148.042232][T14950] /dev/loop0: Can't open blockdev [ 1148.066669][T18021] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1148.116810][ T795] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1148.288953][ T795] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 1148.297899][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.305643][ T795] usb 5-1: Product: syz [ 1148.309791][ T795] usb 5-1: Manufacturer: syz [ 1148.314201][ T795] usb 5-1: SerialNumber: syz [ 1148.326909][ T795] usb 5-1: config 0 descriptor?? [ 1148.367366][ T795] usb_ehset_test: probe of 5-1:0.0 failed with error -32 [ 1148.446736][T18021] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1148.459212][T18021] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1148.469510][T18021] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1148.478804][T18021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.569879][T10502] usb 5-1: USB disconnect, device number 109 [ 1148.917331][T15467] loop0: detected capacity change from 0 to 131072 [ 1148.941853][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9023'. [ 1149.103755][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:0' failed: Read-only file system [ 1149.104773][T15467] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1149.154471][T15467] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1149.166143][T15467] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1149.168616][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:0' failed: Read-only file system [ 1149.175584][T15467] 9pnet_fd: Insufficient options for proto=fd [ 1149.547283][T18021] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1149.555459][T18021] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input98 [ 1149.564742][T18021] input: failed to attach handler kbd to device input98, error: -5 [ 1149.583665][T18021] usb 3-1: USB disconnect, device number 95 [ 1149.642212][T19294] futex_wake_op: syz.3.9050 tries to shift op by -1; fix this program [ 1149.664079][T19369] FAULT_INJECTION: forcing a failure. [ 1149.664079][T19369] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.676703][T19369] CPU: 0 PID: 19369 Comm: syz.3.9052 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1149.686326][T19369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1149.696222][T19369] Call Trace: [ 1149.699345][T19369] [ 1149.702123][T19369] dump_stack_lvl+0x151/0x1b7 [ 1149.706639][T19369] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1149.711929][T19369] ? arch_stack_walk+0xf3/0x140 [ 1149.716620][T19369] dump_stack+0x15/0x1b [ 1149.720608][T19369] should_fail_ex+0x3d0/0x520 [ 1149.725132][T19369] ? kvmalloc_node+0x221/0x640 [ 1149.729721][T19369] __should_failslab+0xaf/0xf0 [ 1149.734320][T19369] should_failslab+0x9/0x20 [ 1149.738661][T19369] __kmem_cache_alloc_node+0x3d/0x250 [ 1149.743870][T19369] ? kvmalloc_node+0x221/0x640 [ 1149.748476][T19369] __kmalloc_node+0xa3/0x1e0 [ 1149.752896][T19369] kvmalloc_node+0x221/0x640 [ 1149.757327][T19369] ? vm_mmap+0xb0/0xb0 [ 1149.761239][T19369] ? timer_update_keys+0xa0/0xb0 [ 1149.766011][T19369] ? debug_smp_processor_id+0x17/0x20 [ 1149.771210][T19369] __kvm_mmu_topup_memory_cache+0x317/0x4a0 [ 1149.776937][T19369] ? __kasan_check_write+0x14/0x20 [ 1149.781883][T19369] kvm_mmu_topup_memory_cache+0x22/0x30 [ 1149.787267][T19369] kvm_mmu_load+0x111/0x2970 [ 1149.791692][T19369] ? __kasan_check_write+0x14/0x20 [ 1149.796640][T19369] ? mutex_unlock+0xb2/0x260 [ 1149.801094][T19369] ? kvm_mmu_unload+0x120/0x120 [ 1149.805751][T19369] ? xa_find+0x2e0/0x2e0 [ 1149.809830][T19369] ? memset+0x35/0x40 [ 1149.813658][T19369] ? vmx_flush_tlb_all+0xc2/0x380 [ 1149.818510][T19369] ? vmx_get_if_flag+0x40/0x40 [ 1149.823111][T19369] ? queue_delayed_work_on+0x13f/0x180 [ 1149.828414][T19369] ? kvm_apic_has_interrupt+0x9d0/0xa70 [ 1149.833789][T19369] ? kvm_hv_activate_synic+0x100/0x100 [ 1149.839083][T19369] vcpu_enter_guest+0x6c78/0x9490 [ 1149.843941][T19369] ? pvclock_gtod_update_fn+0x2b0/0x2b0 [ 1149.849321][T19369] ? native_send_call_func_single_ipi+0x5f/0x70 [ 1149.855396][T19369] ? send_call_function_single_ipi+0x188/0x2d0 [ 1149.861386][T19369] ? ttwu_do_activate+0x290/0x290 [ 1149.866244][T19369] ? is_bpf_text_address+0x172/0x190 [ 1149.871367][T19369] ? generic_exec_single+0x272/0x400 [ 1149.876485][T19369] ? __kernel_text_address+0xd/0x40 [ 1149.881520][T19369] ? smp_call_function_single+0x510/0x510 [ 1149.887077][T19369] ? smp_call_function_single+0xa2/0x510 [ 1149.892543][T19369] ? smp_call_function_single+0x403/0x510 [ 1149.898100][T19369] ? loaded_vmcs_clear+0x80/0x80 [ 1149.902872][T19369] ? memset+0x35/0x40 [ 1149.906693][T19369] ? vmx_vcpu_pi_load+0x12b/0x7f0 [ 1149.911550][T19369] ? _parse_integer+0x40/0x40 [ 1149.916062][T19369] ? __stack_depot_save+0x36/0x480 [ 1149.921014][T19369] ? nested_vmx_inject_exception_vmexit+0x4d0/0x4d0 [ 1149.927433][T19369] ? __kasan_check_write+0x14/0x20 [ 1149.932379][T19369] ? vmx_vcpu_load_vmcs+0x5a1/0x780 [ 1149.937417][T19369] ? __this_cpu_preempt_check+0x13/0x20 [ 1149.942794][T19369] ? xfd_validate_state+0x6f/0x170 [ 1149.947742][T19369] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 1149.953485][T19369] ? save_fpregs_to_fpstate+0x220/0x220 [ 1149.958854][T19369] ? __local_bh_enable_ip+0x58/0x80 [ 1149.963884][T19369] ? fpu_swap_kvm_fpstate+0x4e2/0x5d0 [ 1149.969094][T19369] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 1149.974214][T19369] kvm_arch_vcpu_ioctl_run+0x1478/0x2270 [ 1149.979689][T19369] ? __kvm_request_immediate_exit+0x70/0x70 [ 1149.985413][T19369] ? vfs_write+0xbb3/0xeb0 [ 1149.989674][T19369] kvm_vcpu_ioctl+0x7eb/0xcf0 [ 1149.994179][T19369] ? xa_release+0x40/0x40 [ 1149.998342][T19369] ? selinux_file_ioctl+0x3cc/0x540 [ 1150.003376][T19369] ? __mutex_lock_slowpath+0x10/0x10 [ 1150.008498][T19369] ? selinux_file_alloc_security+0x120/0x120 [ 1150.014314][T19369] ? __fget_files+0x2cb/0x330 [ 1150.018834][T19369] ? security_file_ioctl+0x84/0xb0 [ 1150.023776][T19369] ? xa_release+0x40/0x40 [ 1150.027944][T19369] __se_sys_ioctl+0x114/0x190 [ 1150.032467][T19369] __x64_sys_ioctl+0x7b/0x90 [ 1150.036882][T19369] do_syscall_64+0x3d/0xb0 [ 1150.041133][T19369] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1150.046861][T19369] RIP: 0033:0x7ff73af75bd9 [ 1150.051130][T19369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1150.070559][T19369] RSP: 002b:00007ff73bcf9048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1150.078801][T19369] RAX: ffffffffffffffda RBX: 00007ff73b103f60 RCX: 00007ff73af75bd9 [ 1150.086610][T19369] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1150.094423][T19369] RBP: 00007ff73bcf90a0 R08: 0000000000000000 R09: 0000000000000000 [ 1150.102235][T19369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.110047][T19369] R13: 000000000000000b R14: 00007ff73b103f60 R15: 00007ffe2d1ef348 [ 1150.117860][T19369] [ 1150.126991][ T795] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1150.177417][T19625] loop3: detected capacity change from 0 to 128 [ 1150.188953][ T7845] udevd[7845]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system [ 1150.205124][ T7845] udevd[7845]: symlink '../../loop3' '/dev/disk/by-uuid/1DD9-F30B.tmp-b7:3' failed: Read-only file system [ 1150.376763][ T795] usb 1-1: Using ep0 maxpacket: 32 [ 1150.506775][ T795] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1150.686889][ T795] usb 1-1: New USB device found, idVendor=0424, idProduct=9909, bcdDevice= 1.89 [ 1150.702539][ T795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.710730][ T795] usb 1-1: Product: syz [ 1150.714711][ T795] usb 1-1: Manufacturer: syz [ 1150.719297][ T795] usb 1-1: SerialNumber: syz [ 1150.724916][ T795] usb 1-1: config 0 descriptor?? [ 1150.738396][ T224] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1150.976716][ T224] usb 3-1: Using ep0 maxpacket: 8 [ 1150.987634][T18021] usb 1-1: USB disconnect, device number 117 [ 1150.999107][T23216] device pim6reg1 entered promiscuous mode [ 1151.054793][T23433] loop4: detected capacity change from 0 to 2048 [ 1151.066468][ T7845] udevd[7845]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1151.068810][T23433] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1151.091647][ T7845] udevd[7845]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1151.154039][ T224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.165680][ T224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.175931][ T224] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1151.185377][ T224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.193816][ T224] usb 3-1: config 0 descriptor?? [ 1151.426695][ T795] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1151.531275][T24673] syz.0.9115[24673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1151.531354][T24673] syz.0.9115[24673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1151.543936][T24673] 9pnet_fd: Insufficient options for proto=fd [ 1151.565362][T24673] FAULT_INJECTION: forcing a failure. [ 1151.565362][T24673] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.578727][T24673] CPU: 0 PID: 24673 Comm: syz.0.9115 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1151.588348][T24673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1151.598244][T24673] Call Trace: [ 1151.601366][T24673] [ 1151.604145][T24673] dump_stack_lvl+0x151/0x1b7 [ 1151.608659][T24673] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1151.613954][T24673] dump_stack+0x15/0x1b [ 1151.617943][T24673] should_fail_ex+0x3d0/0x520 [ 1151.622457][T24673] ? vm_area_dup+0x27/0x290 [ 1151.626890][T24673] __should_failslab+0xaf/0xf0 [ 1151.631490][T24673] should_failslab+0x9/0x20 [ 1151.635830][T24673] kmem_cache_alloc+0x3b/0x2c0 [ 1151.640439][T24673] vm_area_dup+0x27/0x290 [ 1151.644594][T24673] ? __split_vma+0x1aa/0x8e0 [ 1151.649026][T24673] __split_vma+0x1c0/0x8e0 [ 1151.653275][T24673] ? mas_prev+0x21f/0x3f0 [ 1151.657444][T24673] do_mas_align_munmap+0x85b/0x1400 [ 1151.662478][T24673] ? putname+0xfa/0x150 [ 1151.666470][T24673] ? do_mas_munmap+0x2b0/0x2b0 [ 1151.671071][T24673] ? mas_find+0x4e4/0x520 [ 1151.675238][T24673] do_mas_munmap+0x23e/0x2b0 [ 1151.679665][T24673] do_munmap+0x181/0x1d0 [ 1151.683746][T24673] ? do_mas_align_munmap+0x1400/0x1400 [ 1151.689176][T24673] ? vfs_write+0xbb3/0xeb0 [ 1151.693430][T24673] __se_sys_mremap+0xda3/0x16b0 [ 1151.698114][T24673] ? mutex_unlock+0xb2/0x260 [ 1151.702539][T24673] ? __mutex_lock_slowpath+0x10/0x10 [ 1151.707664][T24673] ? __x64_sys_mremap+0xd0/0xd0 [ 1151.712353][T24673] ? fput+0x15b/0x1b0 [ 1151.716165][T24673] ? ksys_write+0x260/0x2c0 [ 1151.720505][T24673] ? debug_smp_processor_id+0x17/0x20 [ 1151.725710][T24673] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1151.731615][T24673] __x64_sys_mremap+0xbf/0xd0 [ 1151.736132][T24673] do_syscall_64+0x3d/0xb0 [ 1151.740382][T24673] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1151.746110][T24673] RIP: 0033:0x7f36d2b75bd9 [ 1151.750361][T24673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1151.769807][T24673] RSP: 002b:00007f36d3919048 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1151.778048][T24673] RAX: ffffffffffffffda RBX: 00007f36d2d03f60 RCX: 00007f36d2b75bd9 [ 1151.785856][T24673] RDX: 0000000000400000 RSI: 0000000000001000 RDI: 0000000020a96000 [ 1151.793671][T24673] RBP: 00007f36d39190a0 R08: 0000000020000000 R09: 0000000000000000 [ 1151.801481][T24673] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1151.809299][T24673] R13: 000000000000000b R14: 00007f36d2d03f60 R15: 00007fff72d8a208 [ 1151.817111][T24673] [ 1151.840833][T25486] overlayfs: missing 'workdir' [ 1151.914243][ T9145] EXT4-fs (loop4): unmounting filesystem. [ 1151.982677][T25697] FAULT_INJECTION: forcing a failure. [ 1151.982677][T25697] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.996037][T25697] CPU: 0 PID: 25697 Comm: syz.0.9129 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1152.005684][T25697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1152.015565][T25697] Call Trace: [ 1152.018685][T25697] [ 1152.021477][T25697] dump_stack_lvl+0x151/0x1b7 [ 1152.025979][T25697] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1152.031275][T25697] dump_stack+0x15/0x1b [ 1152.035263][T25697] should_fail_ex+0x3d0/0x520 [ 1152.039783][T25697] ? getname_flags+0xba/0x520 [ 1152.044293][T25697] __should_failslab+0xaf/0xf0 [ 1152.048893][T25697] should_failslab+0x9/0x20 [ 1152.053240][T25697] kmem_cache_alloc+0x3b/0x2c0 [ 1152.057832][T25697] getname_flags+0xba/0x520 [ 1152.062175][T25697] user_path_at_empty+0x2d/0x1a0 [ 1152.066948][T25697] do_fchownat+0xec/0x240 [ 1152.071113][T25697] ? chown_common+0x8b0/0x8b0 [ 1152.075624][T25697] ? debug_smp_processor_id+0x17/0x20 [ 1152.080881][T25697] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1152.086737][T25697] __x64_sys_chown+0x82/0x90 [ 1152.091162][T25697] do_syscall_64+0x3d/0xb0 [ 1152.095412][T25697] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1152.101142][T25697] RIP: 0033:0x7f36d2b75bd9 [ 1152.105395][T25697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1152.124841][T25697] RSP: 002b:00007f36d3919048 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 1152.133081][T25697] RAX: ffffffffffffffda RBX: 00007f36d2d03f60 RCX: 00007f36d2b75bd9 [ 1152.140889][T25697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000380 [ 1152.148700][T25697] RBP: 00007f36d39190a0 R08: 0000000000000000 R09: 0000000000000000 [ 1152.156511][T25697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1152.164325][T25697] R13: 000000000000000b R14: 00007f36d2d03f60 R15: 00007fff72d8a208 [ 1152.172143][T25697] [ 1152.177109][ T795] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1152.190435][ T795] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1152.200736][ T795] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1152.209982][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.311227][T26033] syz.0.9134[26033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.311336][T26033] syz.0.9134[26033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.464746][T26341] loop0: detected capacity change from 0 to 2048 [ 1152.489350][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1152.490160][T26341] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1152.514406][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1153.086744][T15163] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1153.176994][ T795] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1153.189692][ T795] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input99 [ 1153.199709][ T795] input: failed to attach handler kbd to device input99, error: -5 [ 1153.210341][ T795] usb 4-1: USB disconnect, device number 93 [ 1153.323198][T14201] EXT4-fs (loop0): unmounting filesystem. [ 1153.337145][T15163] usb 5-1: Using ep0 maxpacket: 8 [ 1153.342849][T29149] loop0: detected capacity change from 0 to 1024 [ 1153.350607][T29149] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1153.355888][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1153.375840][T29149] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1153.393282][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1153.405170][T14201] EXT4-fs (loop0): unmounting filesystem. [ 1153.466752][T15163] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1153.481417][T15163] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1153.492379][T15163] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1153.492411][T15163] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1153.525319][T29666] loop0: detected capacity change from 0 to 256 [ 1153.532894][T29666] exfat: Deprecated parameter 'utf8' [ 1153.538450][T29666] exfat: Deprecated parameter 'utf8' [ 1153.545985][T29666] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 1153.576730][ T224] usbhid 3-1:0.0: can't add hid device: -71 [ 1153.582621][ T224] usbhid: probe of 3-1:0.0 failed with error -71 [ 1153.585267][ T224] usb 3-1: USB disconnect, device number 96 [ 1153.666800][T15163] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1153.675672][T15163] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.692560][T15163] usb 5-1: Product: syz [ 1153.702156][T30087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9184'. [ 1153.711093][T15163] usb 5-1: Manufacturer: syz [ 1153.715606][T15163] usb 5-1: SerialNumber: syz [ 1153.968267][T27204] 9pnet_fd: Insufficient options for proto=fd [ 1153.974893][T27204] 9pnet_fd: Insufficient options for proto=fd [ 1153.981961][T27204] overlayfs: failed to resolve './file1': -2 [ 1154.066791][T15163] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1154.091629][T15163] usb 5-1: USB disconnect, device number 110 [ 1154.697921][ T665] loop3: detected capacity change from 0 to 2048 [ 1154.707559][ T680] FAULT_INJECTION: forcing a failure. [ 1154.707559][ T680] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.709374][ T668] loop2: detected capacity change from 0 to 1024 [ 1154.723572][ T7845] udevd[7845]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1154.737851][ T680] CPU: 0 PID: 680 Comm: syz.4.9221 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1154.738998][ T668] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1154.747307][ T680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1154.747321][ T680] Call Trace: [ 1154.747326][ T680] [ 1154.747334][ T680] dump_stack_lvl+0x151/0x1b7 [ 1154.747357][ T680] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1154.747372][ T680] ? do_syscall_64+0x3d/0xb0 [ 1154.747388][ T680] ? avc_has_perm_noaudit+0x348/0x430 [ 1154.763445][ T665] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1154.765705][ T680] dump_stack+0x15/0x1b [ 1154.765732][ T680] should_fail_ex+0x3d0/0x520 [ 1154.777975][ T7845] udevd[7845]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1154.781417][ T680] ? dst_alloc+0x164/0x1e0 [ 1154.781444][ T680] __should_failslab+0xaf/0xf0 [ 1154.827854][ T680] should_failslab+0x9/0x20 [ 1154.829441][T19848] udevd[19848]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1154.832186][ T680] kmem_cache_alloc+0x3b/0x2c0 [ 1154.848012][ T668] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1154.848072][ T680] dst_alloc+0x164/0x1e0 [ 1154.860832][ T680] ip_route_output_key_hash_rcu+0x14ad/0x2040 [ 1154.866736][ T680] ? copyin+0x74/0x90 [ 1154.867573][ T7845] udevd[7845]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1154.870553][ T680] ip_route_output_flow+0x16b/0x340 [ 1154.886874][ T680] ? ipv4_sk_update_pmtu+0x1e60/0x1e60 [ 1154.892168][ T680] ? ping_v4_sendmsg+0x7d0/0x1f40 [ 1154.897027][ T680] ping_v4_sendmsg+0xefb/0x1f40 [ 1154.901714][ T680] ? ping_pre_connect+0x80/0x80 [ 1154.906397][ T680] ? ip4_datagram_release_cb+0x8d9/0xe70 [ 1154.911868][ T680] ? release_sock+0x163/0x1b0 [ 1154.916377][ T680] ? inet_send_prepare+0x1b8/0x4a0 [ 1154.921324][ T680] inet_sendmsg+0xa1/0xc0 [ 1154.925489][ T680] ? inet_send_prepare+0x4a0/0x4a0 [ 1154.930436][ T680] ____sys_sendmsg+0x5d3/0x9a0 [ 1154.935043][ T680] ? __sys_sendmsg_sock+0x40/0x40 [ 1154.939897][ T680] __sys_sendmsg+0x2a9/0x390 [ 1154.944321][ T680] ? ____sys_sendmsg+0x9a0/0x9a0 [ 1154.949099][ T680] ? __kasan_check_write+0x14/0x20 [ 1154.954041][ T680] ? mutex_unlock+0xb2/0x260 [ 1154.958486][ T680] ? __kasan_check_write+0x14/0x20 [ 1154.963434][ T680] ? debug_smp_processor_id+0x17/0x20 [ 1154.968627][ T680] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1154.974541][ T680] __x64_sys_sendmsg+0x7f/0x90 [ 1154.979126][ T680] do_syscall_64+0x3d/0xb0 [ 1154.983376][ T680] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1154.989107][ T680] RIP: 0033:0x7f3b06175bd9 [ 1154.993361][ T680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1155.012809][ T680] RSP: 002b:00007f3b06f88048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1155.021046][ T680] RAX: ffffffffffffffda RBX: 00007f3b06303f60 RCX: 00007f3b06175bd9 [ 1155.028859][ T680] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1155.036673][ T680] RBP: 00007f3b06f880a0 R08: 0000000000000000 R09: 0000000000000000 [ 1155.044479][ T680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.052293][ T680] R13: 000000000000000b R14: 00007f3b06303f60 R15: 00007ffc13f282b8 [ 1155.060109][ T680] [ 1155.065601][T29678] EXT4-fs (loop2): unmounting filesystem. [ 1155.081711][ T7845] udevd[7845]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1155.238420][ T8955] EXT4-fs (loop3): unmounting filesystem. [ 1155.271551][ T1208] loop3: detected capacity change from 0 to 1024 [ 1155.285176][ T7845] udevd[7845]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1155.298001][ T1208] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1155.308480][ T1208] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1155.323628][ T7845] udevd[7845]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1155.339145][ T8955] EXT4-fs (loop3): unmounting filesystem. [ 1155.486793][T15458] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1155.626759][ T224] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1155.866784][T15458] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.878025][T15458] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.887855][T15458] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 1155.898899][T15458] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.908136][T15458] usb 3-1: config 0 descriptor?? [ 1155.990658][ T3157] loop4: detected capacity change from 0 to 1024 [ 1155.997035][ T224] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.011940][ T3157] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1156.013537][ T7845] udevd[7845]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1156.023089][ T3157] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1156.045793][ T7845] udevd[7845]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1156.060285][ T9145] EXT4-fs (loop4): unmounting filesystem. [ 1156.257120][ T224] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1156.267789][ T224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.275750][ T224] usb 4-1: Product: syz [ 1156.280653][ T224] usb 4-1: Manufacturer: syz [ 1156.285205][ T224] usb 4-1: SerialNumber: syz [ 1156.370858][ T1101] loop2: detected capacity change from 0 to 256 [ 1156.397222][ T7845] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1156.398710][ T1101] netlink: 508 bytes leftover after parsing attributes in process `syz.2.9229'. [ 1156.439048][T15458] wacom 0003:056A:0016.001A: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 1156.452576][T15458] wacom 0003:056A:0016.001A: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.2-1/input0 [ 1156.464931][T15458] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0016.001A/input/input100 [ 1156.588685][ T1354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.597188][ T1354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.653492][T15458] usb 3-1: USB disconnect, device number 97 [ 1156.818787][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 1156.818804][ T28] audit: type=1326 audit(1720786421.708:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73af75bd9 code=0x7ffc0000 [ 1156.848132][ T28] audit: type=1326 audit(1720786421.708:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73af75bd9 code=0x7ffc0000 [ 1156.872001][ T28] audit: type=1326 audit(1720786421.708:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7ff73af75bd9 code=0x7ffc0000 [ 1156.895504][ T28] audit: type=1326 audit(1720786421.708:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73af75bd9 code=0x7ffc0000 [ 1156.918850][ T28] audit: type=1326 audit(1720786421.708:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff73af75bd9 code=0x7ffc0000 [ 1156.942703][ T28] audit: type=1326 audit(1720786421.708:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73af75bd9 code=0x7ffc0000 [ 1156.966031][ T28] audit: type=1326 audit(1720786421.708:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff73af75bd9 code=0x7ffc0000 [ 1156.990313][ T28] audit: type=1326 audit(1720786421.708:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73af75bd9 code=0x7ffc0000 [ 1157.013807][ T28] audit: type=1326 audit(1720786421.708:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff73af75bd9 code=0x7ffc0000 [ 1157.037880][ T28] audit: type=1326 audit(1720786421.708:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73af75bd9 code=0x7ffc0000 [ 1157.204739][ T6204] FAULT_INJECTION: forcing a failure. [ 1157.204739][ T6204] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.206705][ T224] cdc_ncm 4-1:1.0: bind() failure [ 1157.220428][ T6204] CPU: 0 PID: 6204 Comm: syz.2.9292 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1157.231686][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1157.236726][ T224] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 1157.241575][ T6204] Call Trace: [ 1157.241585][ T6204] [ 1157.253727][ T6204] dump_stack_lvl+0x151/0x1b7 [ 1157.258252][ T6204] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1157.263538][ T6204] ? do_syscall_64+0x3d/0xb0 [ 1157.267960][ T6204] dump_stack+0x15/0x1b [ 1157.271948][ T6204] should_fail_ex+0x3d0/0x520 [ 1157.276463][ T6204] ? dst_alloc+0x164/0x1e0 [ 1157.280724][ T6204] __should_failslab+0xaf/0xf0 [ 1157.285316][ T6204] should_failslab+0x9/0x20 [ 1157.289654][ T6204] kmem_cache_alloc+0x3b/0x2c0 [ 1157.294255][ T6204] dst_alloc+0x164/0x1e0 [ 1157.298340][ T6204] ip_route_output_key_hash_rcu+0x14ad/0x2040 [ 1157.304234][ T6204] ? copyin+0x74/0x90 [ 1157.308055][ T6204] ip_route_output_flow+0x16b/0x340 [ 1157.313086][ T6204] ? ipv4_sk_update_pmtu+0x1e60/0x1e60 [ 1157.318382][ T6204] ? ping_v4_sendmsg+0x7d0/0x1f40 [ 1157.323242][ T6204] ping_v4_sendmsg+0xefb/0x1f40 [ 1157.327932][ T6204] ? ping_pre_connect+0x80/0x80 [ 1157.332614][ T6204] ? ip4_datagram_release_cb+0x8d9/0xe70 [ 1157.338085][ T6204] ? release_sock+0x163/0x1b0 [ 1157.342595][ T6204] ? inet_send_prepare+0x1b8/0x4a0 [ 1157.347545][ T6204] inet_sendmsg+0xa1/0xc0 [ 1157.351708][ T6204] ? inet_send_prepare+0x4a0/0x4a0 [ 1157.356658][ T6204] ____sys_sendmsg+0x5d3/0x9a0 [ 1157.361329][ T6204] ? __sys_sendmsg_sock+0x40/0x40 [ 1157.366117][ T6204] __sys_sendmsg+0x2a9/0x390 [ 1157.370544][ T6204] ? ____sys_sendmsg+0x9a0/0x9a0 [ 1157.375319][ T6204] ? __kasan_check_write+0x14/0x20 [ 1157.380263][ T6204] ? mutex_unlock+0xb2/0x260 [ 1157.384692][ T6204] ? __kasan_check_write+0x14/0x20 [ 1157.389642][ T6204] ? debug_smp_processor_id+0x17/0x20 [ 1157.394855][ T6204] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1157.400747][ T6204] __x64_sys_sendmsg+0x7f/0x90 [ 1157.405348][ T6204] do_syscall_64+0x3d/0xb0 [ 1157.409601][ T6204] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1157.415327][ T6204] RIP: 0033:0x7f54d0f75bd9 [ 1157.419580][ T6204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1157.439023][ T6204] RSP: 002b:00007f54d1d33048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.447266][ T6204] RAX: ffffffffffffffda RBX: 00007f54d1103f60 RCX: 00007f54d0f75bd9 [ 1157.455077][ T6204] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1157.463049][ T6204] RBP: 00007f54d1d330a0 R08: 0000000000000000 R09: 0000000000000000 [ 1157.470846][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.478661][ T6204] R13: 000000000000000b R14: 00007f54d1103f60 R15: 00007ffcf989dfe8 [ 1157.486475][ T6204] [ 1157.492377][ T224] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 1157.504899][ T224] usb 4-1: USB disconnect, device number 94 [ 1157.526312][ T6411] loop2: detected capacity change from 0 to 2048 [ 1157.538773][ T7845] udevd[7845]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1157.549643][ T6411] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1157.637747][T19773] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1157.865123][ T7510] loop3: detected capacity change from 0 to 512 [ 1157.880999][ T7510] EXT4-fs (loop3): 1 orphan inode deleted [ 1157.886804][ T7510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1157.895527][ T7510] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 1157.922852][ T7510] device syzkaller0 entered promiscuous mode [ 1157.963016][ T8955] EXT4-fs (loop3): unmounting filesystem. [ 1157.978711][ T7958] loop3: detected capacity change from 0 to 128 [ 1158.008455][ T7845] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1158.018272][ T7958] loop3: detected capacity change from 0 to 128 [ 1158.018324][ T7845] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1158.038911][T19773] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.040573][ T7958] loop3: detected capacity change from 0 to 128 [ 1158.064527][ T7958] loop3: detected capacity change from 0 to 128 [ 1158.083885][ T7958] loop3: detected capacity change from 0 to 128 [ 1158.094061][ T7958] loop3: detected capacity change from 0 to 128 [ 1158.108317][ T7958] loop3: detected capacity change from 0 to 128 [ 1158.119979][ T7958] loop3: detected capacity change from 0 to 128 [ 1158.140414][ T7958] loop3: detected capacity change from 0 to 128 [ 1158.156193][ T7958] loop3: detected capacity change from 0 to 128 [ 1158.180998][ T7958] loop3: detected capacity change from 0 to 128 [ 1158.198830][ T7958] loop3: detected capacity change from 0 to 128 [ 1158.214005][ T7958] loop3: detected capacity change from 0 to 128 [ 1158.246720][T19773] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1158.255682][T19773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.263597][T19773] usb 1-1: Product: syz [ 1158.267793][T19773] usb 1-1: Manufacturer: syz [ 1158.272234][T19773] usb 1-1: SerialNumber: syz [ 1158.278027][ T7845] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1158.290067][ T7958] loop3: detected capacity change from 0 to 128 [ 1158.382153][T29678] EXT4-fs (loop2): unmounting filesystem. [ 1158.401606][ T9366] bridge: RTM_NEWNEIGH with invalid ether address [ 1158.424885][ T9447] loop2: detected capacity change from 0 to 512 [ 1158.438331][ T9447] request_module fs- žð-ùËòöè€Ó8/ succeeded, but still no fs? [ 1158.527490][ T6201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.536343][ T6201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1158.672431][ T9660] loop2: detected capacity change from 0 to 40427 [ 1158.679968][ T9660] F2FS-fs (loop2): Invalid segment count (0) [ 1158.686391][ T9660] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1158.694649][ T9660] F2FS-fs (loop2): Unrecognized mount option "usrquota=hugetlb.2MB.usage_in_bytes" or missing value [ 1158.783187][ T9660] overlayfs: missing 'lowerdir' [ 1158.790232][ T9660] loop2: detected capacity change from 0 to 256 [ 1158.796595][ T9660] FAT-fs (loop2): Unrecognized mount option "shortname=mixed" or missing value [ 1158.796712][T15163] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1158.946763][T19773] cdc_ncm 1-1:1.0: bind() failure [ 1158.984210][T19773] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1158.997859][T11492] loop2: detected capacity change from 0 to 1024 [ 1159.007393][T19773] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1159.012215][T11492] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1159.015623][T19773] usb 1-1: USB disconnect, device number 118 [ 1159.066726][T15163] usb 4-1: Using ep0 maxpacket: 16 [ 1159.367071][T15163] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1159.378324][T15163] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1159.388448][T15163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.397352][T15163] usb 4-1: config 0 descriptor?? [ 1159.485134][T12650] loop0: detected capacity change from 0 to 1024 [ 1159.501210][T12650] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1159.658935][T13137] FAULT_INJECTION: forcing a failure. [ 1159.658935][T13137] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.671437][T13137] CPU: 1 PID: 13137 Comm: syz.0.9368 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1159.680992][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1159.690891][T13137] Call Trace: [ 1159.694015][T13137] [ 1159.696791][T13137] dump_stack_lvl+0x151/0x1b7 [ 1159.701302][T13137] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1159.706650][T13137] dump_stack+0x15/0x1b [ 1159.710586][T13137] should_fail_ex+0x3d0/0x520 [ 1159.715102][T13137] __should_failslab+0xaf/0xf0 [ 1159.719702][T13137] should_failslab+0x9/0x20 [ 1159.724042][T13137] slab_pre_alloc_hook+0x2e/0x1b0 [ 1159.728907][T13137] kmem_cache_alloc_lru+0x49/0x220 [ 1159.733846][T13137] ? __d_alloc+0x34/0x700 [ 1159.738018][T13137] __d_alloc+0x34/0x700 [ 1159.742016][T13137] d_alloc_parallel+0xe6/0x12e0 [ 1159.746790][T13137] ? rcu_read_unlock_special+0xdb/0x4e0 [ 1159.752164][T13137] ? __kasan_check_write+0x14/0x20 [ 1159.757110][T13137] ? __rcu_read_unlock+0xd0/0xd0 [ 1159.761888][T13137] ? d_hash_and_lookup+0x1e0/0x1e0 [ 1159.766826][T13137] ? rwsem_mark_wake+0x770/0x770 [ 1159.771612][T13137] path_openat+0x976/0x2d60 [ 1159.775947][T13137] ? release_firmware_map_entry+0x191/0x191 [ 1159.781678][T13137] ? do_filp_open+0x480/0x480 [ 1159.786346][T13137] do_filp_open+0x230/0x480 [ 1159.790681][T13137] ? vfs_tmpfile+0x480/0x480 [ 1159.795114][T13137] ? alloc_fd+0x4fa/0x5a0 [ 1159.799275][T13137] do_sys_openat2+0x13f/0x850 [ 1159.803782][T13137] ? __kasan_check_write+0x14/0x20 [ 1159.808731][T13137] ? mutex_unlock+0xb2/0x260 [ 1159.813162][T13137] ? sysvec_reschedule_ipi+0x80/0x160 [ 1159.818367][T13137] ? do_sys_open+0x220/0x220 [ 1159.822899][T13137] ? __kasan_check_write+0x14/0x20 [ 1159.827848][T13137] __x64_sys_openat+0x243/0x290 [ 1159.832530][T13137] ? __ia32_sys_open+0x270/0x270 [ 1159.837306][T13137] ? switch_fpu_return+0xe/0x10 [ 1159.841991][T13137] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 1159.847460][T13137] do_syscall_64+0x3d/0xb0 [ 1159.851710][T13137] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1159.857440][T13137] RIP: 0033:0x7f36d2b75bd9 [ 1159.861690][T13137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1159.881136][T13137] RSP: 002b:00007f36d38d7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1159.889378][T13137] RAX: ffffffffffffffda RBX: 00007f36d2d04110 RCX: 00007f36d2b75bd9 [ 1159.897190][T13137] RDX: 000000000000275a RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 1159.905002][T13137] RBP: 00007f36d38d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.912817][T13137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.920627][T13137] R13: 000000000000006e R14: 00007f36d2d04110 R15: 00007fff72d8a208 [ 1159.928444][T13137] [ 1159.959802][T29678] EXT4-fs (loop2): unmounting filesystem. [ 1159.974090][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1159.979068][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.000391][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.005044][T14082] loop2: detected capacity change from 0 to 1024 [ 1160.024379][T14082] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1160.032792][T14082] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038 (0x7fffffff) [ 1160.048968][ T7845] udevd[7845]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1160.086847][T15163] usbhid 4-1:0.0: can't add hid device: -71 [ 1160.093004][T15163] usbhid: probe of 4-1:0.0 failed with error -71 [ 1160.101072][T15163] usb 4-1: USB disconnect, device number 95 [ 1160.337473][T14201] EXT4-fs (loop0): unmounting filesystem. [ 1160.350061][ T7845] udevd[7845]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1160.472690][T15407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.479623][T15407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.487039][T15407] device bridge_slave_0 entered promiscuous mode [ 1160.494058][T15407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.501100][T15407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.508505][T15407] device bridge_slave_1 entered promiscuous mode [ 1160.542865][T15406] loop0: detected capacity change from 0 to 40427 [ 1160.549971][T15406] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1160.556417][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 1160.557495][T15406] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1160.558502][T15406] F2FS-fs (loop0): invalid crc value [ 1160.650048][T15416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9398'. [ 1160.796902][T15406] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1160.912873][T15406] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1160.914218][T15407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.919770][T15406] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1160.926595][T15407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.938151][ T7845] udevd[7845]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 1160.941013][T15407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.961356][T15407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.994315][T14003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1161.002655][T14003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.010757][T14003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.011174][T29678] EXT4-fs (loop2): unmounting filesystem. [ 1161.034939][T10502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1161.043040][T10502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.049930][T10502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.057226][T10502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1161.065285][T10502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.072165][T10502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.087830][T10502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1161.095764][T10502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1161.112608][T14003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1161.125649][T15407] device veth0_vlan entered promiscuous mode [ 1161.134060][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1161.142390][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1161.149829][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1161.163445][T15407] device veth1_macvtap entered promiscuous mode [ 1161.170212][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1161.181550][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1161.191369][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1161.246712][T10502] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1161.268318][T11753] device bridge_slave_1 left promiscuous mode [ 1161.274421][T11753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.281837][T11753] device bridge_slave_0 left promiscuous mode [ 1161.288083][T11753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.296121][T11753] device veth1_macvtap left promiscuous mode [ 1161.302723][T11753] device veth0_vlan left promiscuous mode [ 1161.396234][T16139] loop3: detected capacity change from 0 to 512 [ 1161.404792][T16139] EXT4-fs (loop3): 1 truncate cleaned up [ 1161.410678][T16139] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1161.412533][T15458] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1161.425730][ T7845] udevd[7845]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1161.434438][T16139] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1161.455204][T16139] EXT4-fs warning (device loop3): ext4_group_add:1723: Can't resize non-sparse filesystem further [ 1161.471769][T16139] ================================================================== [ 1161.474571][ T7845] udevd[7845]: symlink '../../loop3' '/dev/disk/by-label/aaaaaaaaaaaaaaaa.tmp-b7:3' failed: Read-only file system [ 1161.479655][T16139] BUG: KASAN: use-after-free in ext4_search_dir+0xf7/0x1b0 [ 1161.479685][T16139] Read of size 1 at addr ffff88817bbe766d by task syz.3.9409/16139 [ 1161.479700][T16139] [ 1161.479705][T16139] CPU: 1 PID: 16139 Comm: syz.3.9409 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0 [ 1161.479724][T16139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1161.479737][T16139] Call Trace: [ 1161.479744][T16139] [ 1161.479751][T16139] dump_stack_lvl+0x151/0x1b7 [ 1161.479777][T16139] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1161.479799][T16139] ? _printk+0xd1/0x111 [ 1161.479817][T16139] ? __virt_addr_valid+0x242/0x2f0 [ 1161.492960][ T7845] udevd[7845]: symlink '../../loop3' '/dev/disk/by-uuid/61616161-6161-6161-6161-616161616161.tmp-b7:3' failed: Read-only file system [ 1161.498615][T16139] print_report+0x158/0x4e0 [ 1161.498651][T16139] ? __virt_addr_valid+0x242/0x2f0 [ 1161.498678][T16139] ? kasan_addr_to_slab+0xd/0x80 [ 1161.498701][T16139] ? ext4_search_dir+0xf7/0x1b0 [ 1161.498720][T16139] kasan_report+0x13c/0x170 [ 1161.566954][T10502] usb 1-1: Using ep0 maxpacket: 32 [ 1161.567009][T16139] ? ext4_search_dir+0xf7/0x1b0 [ 1161.599734][T16139] __asan_report_load1_noabort+0x14/0x20 [ 1161.605196][T16139] ext4_search_dir+0xf7/0x1b0 [ 1161.609711][T16139] ext4_find_inline_entry+0x4b6/0x5e0 [ 1161.614923][T16139] ? ext4_try_create_inline_dir+0x320/0x320 [ 1161.620650][T16139] ? avc_has_perm_noaudit+0x2dd/0x430 [ 1161.625855][T16139] __ext4_find_entry+0x2b0/0x1af0 [ 1161.630718][T16139] ? ext4_fname_setup_ci_filename+0x70/0x480 [ 1161.636532][T16139] ? ext4_ci_compare+0x660/0x660 [ 1161.641299][T16139] ? memcpy+0x56/0x70 [ 1161.645118][T16139] ? ext4_fname_prepare_lookup+0x3b5/0x4e0 [ 1161.651264][T16139] ? may_create+0x65a/0x900 [ 1161.655598][T16139] ? generic_set_encrypted_ci_d_ops+0x91/0xf0 [ 1161.661505][T16139] ext4_lookup+0x176/0x740 [ 1161.665903][T16139] ? show_sid+0x270/0x270 [ 1161.670066][T16139] ? ext4_add_entry+0xed0/0xed0 [ 1161.674760][T16139] ? selinux_inode_create+0x22/0x30 [ 1161.679792][T16139] ? security_inode_create+0xbc/0x100 [ 1161.685000][T16139] ? ext4_add_entry+0xed0/0xed0 [ 1161.689778][T16139] path_openat+0x10fd/0x2d60 [ 1161.694213][T16139] ? do_filp_open+0x480/0x480 [ 1161.698722][T16139] do_filp_open+0x230/0x480 [ 1161.703056][T16139] ? vfs_tmpfile+0x480/0x480 [ 1161.707494][T16139] ? alloc_fd+0x4fa/0x5a0 [ 1161.711660][T16139] do_sys_openat2+0x13f/0x850 [ 1161.716167][T16139] ? do_sys_open+0x220/0x220 [ 1161.720597][T16139] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 1161.726612][T16139] ? save_fpregs_to_fpstate+0x220/0x220 [ 1161.731996][T16139] __x64_sys_creat+0x11f/0x160 [ 1161.736591][T16139] ? __x64_compat_sys_openat+0x290/0x290 [ 1161.742066][T16139] ? switch_fpu_return+0xe/0x10 [ 1161.746744][T16139] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 1161.752607][T16139] do_syscall_64+0x3d/0xb0 [ 1161.756855][T16139] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1161.762578][T16139] RIP: 0033:0x7ff73af75bd9 [ 1161.766847][T16139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1161.786271][T16139] RSP: 002b:00007ff73bcf9048 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1161.794516][T16139] RAX: ffffffffffffffda RBX: 00007ff73b103f60 RCX: 00007ff73af75bd9 [ 1161.802326][T16139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000440 [ 1161.810137][T16139] RBP: 00007ff73afe4e60 R08: 0000000000000000 R09: 0000000000000000 [ 1161.817951][T16139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1161.825761][T16139] R13: 000000000000000b R14: 00007ff73b103f60 R15: 00007ffe2d1ef348 [ 1161.833576][T16139] [ 1161.836437][T16139] [ 1161.838604][T16139] The buggy address belongs to the physical page: [ 1161.844859][T16139] page:ffffea0005eef9c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x17bbe7 [ 1161.855305][T16139] flags: 0x4000000000000000(zone=1) [ 1161.860341][T16139] raw: 4000000000000000 ffffea000529c008 ffffea0005eef988 0000000000000000 [ 1161.866735][T10502] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.868767][T16139] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 1161.878749][T10502] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1161.887070][T16139] page dumped because: kasan: bad access detected [ 1161.887097][T16139] page_owner tracks the page as freed [ 1161.887102][T16139] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 11492, tgid 11490 (syz.2.9355), ts 1159038779849, free_ts 1159940746188 [ 1161.898144][T10502] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1161.901999][T16139] post_alloc_hook+0x213/0x220 [ 1161.938539][T16139] prep_new_page+0x1b/0x110 [ 1161.942875][T16139] get_page_from_freelist+0x27ea/0x2870 [ 1161.948256][T16139] __alloc_pages+0x3a1/0x780 [ 1161.952685][T16139] __folio_alloc+0x15/0x40 [ 1161.956936][T16139] shmem_alloc_and_acct_folio+0x78c/0xa50 [ 1161.962492][T16139] shmem_get_folio_gfp+0x12d4/0x24b0 [ 1161.967616][T16139] shmem_fault+0x1f7/0x840 [ 1161.971869][T16139] do_fault+0xdb6/0x1cd0 [ 1161.975944][T16139] handle_mm_fault+0x189f/0x30e0 [ 1161.980716][T16139] __get_user_pages+0x377/0xf20 [ 1161.985410][T16139] __mm_populate+0x375/0x570 [ 1161.989831][T16139] vm_mmap_pgoff+0x290/0x430 [ 1161.994261][T16139] ksys_mmap_pgoff+0xed/0x1e0 [ 1161.998771][T16139] __x64_sys_mmap+0x103/0x120 [ 1162.003282][T16139] do_syscall_64+0x3d/0xb0 [ 1162.007537][T16139] page last free stack trace: [ 1162.012051][T16139] free_unref_page_prepare+0x83d/0x850 [ 1162.017348][T16139] free_unref_page_list+0xf1/0x7b0 [ 1162.022291][T16139] release_pages+0xf7f/0xfe0 [ 1162.026717][T16139] __pagevec_release+0x84/0x100 [ 1162.031403][T16139] shmem_undo_range+0x5fc/0x1660 [ 1162.036177][T16139] shmem_evict_inode+0x25f/0xa30 [ 1162.040950][T16139] evict+0x2a3/0x630 [ 1162.044682][T16139] iput+0x642/0x870 [ 1162.048327][T16139] dentry_unlink_inode+0x34f/0x440 [ 1162.053275][T16139] __dentry_kill+0x447/0x650 [ 1162.057703][T16139] dentry_kill+0xc0/0x2a0 [ 1162.061872][T16139] dput+0x40/0x80 [ 1162.065338][T16139] __fput+0x5f0/0x870 [ 1162.069160][T16139] ____fput+0x15/0x20 [ 1162.072977][T16139] task_work_run+0x24d/0x2e0 [ 1162.077403][T16139] do_exit+0xbd5/0x2b80 [ 1162.081398][T16139] [ 1162.083566][T16139] Memory state around the buggy address: [ 1162.089036][T16139] ffff88817bbe7500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1162.096937][T16139] ffff88817bbe7580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1162.104831][T16139] >ffff88817bbe7600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1162.112728][T16139] ^ [ 1162.120026][T16139] ffff88817bbe7680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1162.127918][T16139] ffff88817bbe7700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1162.135815][T16139] ================================================================== [ 1162.148418][T16139] Disabling lock debugging due to kernel taint [ 1162.154503][T16139] EXT4-fs error (device loop3): ext4_check_all_de:655: inode #12: block 7: comm syz.3.9409: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=95227824, rec_len=26915, size=108 fake=0 [ 1162.182147][ T7845] udevd[7845]: symlink '../../loop3' '/dev/disk/by-label/aaaaaaaaaaaaaaaa.tmp-b7:3' failed: Read-only file system [ 1162.182436][ T8955] EXT4-fs error (device loop3): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 1162.201420][ T7845] udevd[7845]: symlink '../../loop3' '/dev/disk/by-uuid/61616161-6161-6161-6161-616161616161.tmp-b7:3' failed: Read-only file system [ 1162.214991][ T8955] EXT4-fs error (device loop3): ext4_lookup:1855: inode #11: comm syz-executor: iget: bad extra_isize 21339 (inode size 256) [ 1162.227855][T10502] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1162.227882][T10502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.227900][T10502] usb 1-1: Product: syz [ 1162.227914][T10502] usb 1-1: Manufacturer: syz [ 1162.227925][T10502] usb 1-1: SerialNumber: syz [ 1162.270832][ T8955] EXT4-fs error (device loop3): ext4_lookup:1855: inode #11: comm syz-executor: iget: bad extra_isize 21339 (inode size 256) [ 1162.338181][ T8955] EXT4-fs (loop3): unmounting filesystem. [ 1162.436725][T15458] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.546826][T10502] usb 1-1: 0:2 : does not exist [ 1162.565670][T10502] usb 1-1: USB disconnect, device number 119 [ 1162.606714][T15458] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1162.615600][T15458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.623683][T15458] usb 3-1: Product: syz [ 1162.627824][T15458] usb 3-1: Manufacturer: syz [ 1162.632269][T15458] usb 3-1: SerialNumber: syz [ 1162.887742][T15424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.899848][T15424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.917423][T11753] device bridge_slave_1 left promiscuous mode [ 1162.923438][T11753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.931033][T11753] device bridge_slave_0 left promiscuous mode [ 1162.936998][T11753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.945013][T11753] device veth1_macvtap left promiscuous mode [ 1162.950945][T11753] device veth0_vlan left promiscuous mode [ 1163.003746][T14201] syz-executor: attempt to access beyond end of device [ 1163.003746][T14201] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1163.133046][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 1163.133063][ T28] audit: type=1326 audit(1720786428.018:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.9400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d0f75bd9 code=0x7ffc0000 [ 1163.188496][ T28] audit: type=1326 audit(1720786428.018:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.9400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f54d0f75bd9 code=0x7ffc0000 [ 1163.212147][ T28] audit: type=1326 audit(1720786428.018:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.9400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d0f75bd9 code=0x7ffc0000 [ 1163.236597][ T28] audit: type=1326 audit(1720786428.018:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.9400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54d0f75bd9 code=0x7ffc0000 [ 1163.260754][ T28] audit: type=1326 audit(1720786428.018:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.9400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d0f75bd9 code=0x7ffc0000 [ 1163.284255][ T28] audit: type=1326 audit(1720786428.018:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.9400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54d0f75bd9 code=0x7ffc0000 [ 1163.317854][ T28] audit: type=1326 audit(1720786428.018:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.9400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d0f75bd9 code=0x7ffc0000 [ 1163.341584][ T28] audit: type=1326 audit(1720786428.018:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.9400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54d0f75bd9 code=0x7ffc0000 [ 1163.369103][ T28] audit: type=1326 audit(1720786428.018:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.9400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d0f75bd9 code=0x7ffc0000 [ 1163.393820][ T28] audit: type=1326 audit(1720786428.048:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.9400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f54d0f75bd9 code=0x7ffc0000 [ 1163.396722][T15458] cdc_ncm 3-1:1.0: bind() failure [ 1163.456710][T15458] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1163.476758][T15458] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1163.484900][T15458] usb 3-1: USB disconnect, device number 98