last executing test programs: 10m51.048164154s ago: executing program 0 (id=1): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004894}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000) 10m47.463504308s ago: executing program 0 (id=16): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYRES16], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x20008800) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 10m32.288461784s ago: executing program 32 (id=16): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYRES16], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x20008800) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 8m53.467488966s ago: executing program 4 (id=178): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 8m49.708557677s ago: executing program 4 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000280), 0x2000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000050000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8m48.165361934s ago: executing program 4 (id=185): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0xa, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 8m46.607505983s ago: executing program 4 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x1ff, 0x1, 0x4, 0x7, 0x0, 0xd}, 0xc) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 8m44.603101444s ago: executing program 4 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) kexec_load(0x0, 0x0, 0x0, 0x0) pipe(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448) 8m31.850876316s ago: executing program 4 (id=215): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) 8m16.87226072s ago: executing program 33 (id=215): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) 7m10.485757659s ago: executing program 1 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r6, 0x1) 7m8.154831561s ago: executing program 1 (id=308): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x2000000000000021, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) socket$kcm(0x2, 0x3, 0x2) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 7m1.391009249s ago: executing program 1 (id=320): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) getegid() fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000001c0)={{0x5, 0x1}, 0x100, './file0/bus/file0\x00'}) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x6210, 0x0) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x271b, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000) 6m57.973270902s ago: executing program 1 (id=325): socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x18d883, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233", 0xa, 0xfffffffffffffffe) r4 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1205848, 0x0) 6m55.16452219s ago: executing program 1 (id=329): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xff, 0x27c, &(0x7f0000000280)="$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") write(0xffffffffffffffff, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x23) getdents(r0, 0x0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6200, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x20fffe82) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x880c33, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) truncate(0x0, 0x8da6) open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) 6m49.125795228s ago: executing program 1 (id=337): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x200001, &(0x7f0000000200)=ANY=[@ANYBLOB="00160573c84e1c6ecbe86345a5ffdb0e3a8e7e7057e47b25ad327fb4e305000000000000001de103edbd3c66388dce8f81013f254c5b7601a90661e40ff44a95d2edba110f6323b9bcc226f6ac719e0fa21a71892a"], 0xfd, 0x22c, &(0x7f0000000580)="$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") sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f000000cf00)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM++bN888b1gWnpmSAC6s+eTXn0txI65ExHREXI/IzkvFkVnPwwsRcTMiph47SsX8nxOXIuJqRNwYJc9zloq3Pr89vLX201u/fPPd5ZlrX3z9/eR2DUzaixHR3cnP97t5TFt5fFjM14btLHZXh0XM3+g+KsZpHvebW1mG/drRuloWV1r5+nRnrz+K251afRRb7e1sfqeXX7A/bB3lyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsoSx+DwVHM55sHzXw/O4+yWO8Nivk8b9poHozisIjF5aKedhpZHVsn+aafbG+3e3sHybC522+nvWStUn2pUr1Tru6mjeaguVqudRt3VpOFVme0rDxo1rrrrTRtdZqVetpdTBZa9Xq5Wk0W7ja32rVeUq1WVipL5bXF4ux28vr995JOI1kYxVfbvb1Bu9NPttPdJP/EYrJcWXl5MblVTd7Z2Ew2H9y7t7H57gd337//ysabrxWL/lFWsrC8tLxcri6Vl6uLF2j/nxRFj3H/cCKlSRcAcP7o/4FJOL3+f/dBxOn3/6H/H4tz1f9e9P7/FPYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4sH6Y/fKN7GQ+H18r5p8ppp4rxqWImIqI3//FdFw6lnO6yDP7H+tn/1bDt6XIMoyucbk4rkbEenH89uxpfwsAAADw9Prq45uf5d16/jI/6YI4S/lNm6nrH44p31xEzM7/OKZsU6OX58eULPv3PRMHY8qW3cCaG1Oy/JbbzLiy/S/Tx8LcY6GUh6kzLQcAADgTxzuBs+1CAAAAOEufTroAJqMUR48yj54FZ395/9cDwSvHRgAAAMA5VJp0AQAAAMCpy/p/v/8HAAAAT7f89/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bu5zZxIIoD8LPBC/tPi1Z731b2BmVsCXvcY0QBaYICciAtpAFqILeUEEGExyEQcYjksa1E3yc5k7HMjzcIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KX7ar24vfp93TZnt28nz2gAAACAS7bVelH/M0v9r839782tn02/iIgyIi7N3Ufx6Sxz1ORUL8/fnD5fvarhLqJOOLzHpLm+RMSf5nr80fWnAAAAAB/XZrmap9l6+jMbuiD6lBZtym9/M+UVEVHNHjKllYe8X5nC6u/3OP5nSqsXsKaZwtKS2zhX2pvUP/fjqt30pClSU1582bHIbGMHAAB6NDpr+p2FAAAA0Kd/QxfAMIp43so8bgVOUtNs730+6wEAAADvUDF0AQAAAEDn6vl/T+f/7Z3/BwAAAMNI5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21XmyWq3nbnN2+nTyjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCf25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5n9c4qjgA4G9mdra2Kq5R9hARBQ96sdttbe1NPCjBg3+CENJtjd36o83BliLm4k1y7kX0KCIo8db/IecEcom3HPYQwbMyszPZyQ9w/TWzST4fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBp9PYkTrJDZxzHxbnNvYdLWb91qM88Xtuez1oWR3UmfTK8WP0QdZtLBAAAgLMjKev7EMJOur6Q9XEnr//T8pqs5v/26XFc1vOH6/6yL2v/rP3y8+7z+wN1xuNkN725PBxcOppK6/+b5Wx75i+vaOVPPn/3kuRfSPze6nOjNH+e0dcbG++08/BcHdkCAP/ExbIvgvL3oazvN5kYAGdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6jFbDk2UchRDmW5M4s7X3cOm4/vHa9nzZrj16tBa+nNwzu0UaQri5PBxcqnU2s+3e/Qe3F4fDwd36g5dCCE2N/lYx/dsfTHFxCI08H8F/FMTFlz0r+ZyMoMEfSgAAnEpp0bK6fiddX8jORXMh/PHdwfr/1Uocpqz/dz+8tlkdq1r/92ub4ezrrdz5tHfv/oPXl+8s3hrcGnz8xuX+m/0r169evd7L35X0vDEBAADg32kXrVr/x3NH1/8vVOIwZf3/2Tf9L6pjJer/Y00W/ZrOBAAA4Gx79uXff4uOOR+12+HzxZWVu/3xcf/z5fGxgVT/tnNFq9b/yVzTWQEAAAB1GK1GB9b/b1TiMOX6/1Pfv/Bj9Z5JCOF8sf5/cemT4Y36pjPT6vhz4qbnCAAAQLPOF626/p/m+//j/S0PcQjhtVfGcfFvAKeq/5N3v/qhOlZ1//+V+qY4k+Lu+HnkfTeEVrfpjAAAADjNnihaVuz/mq4vfPTThffb9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3PAAAA//9WwT6Z") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) pwritev2(r0, &(0x7f0000000800), 0x0, 0x1, 0xc2a, 0x1) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 6m47.590456111s ago: executing program 34 (id=337): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x200001, &(0x7f0000000200)=ANY=[@ANYBLOB="00160573c84e1c6ecbe86345a5ffdb0e3a8e7e7057e47b25ad327fb4e305000000000000001de103edbd3c66388dce8f81013f254c5b7601a90661e40ff44a95d2edba110f6323b9bcc226f6ac719e0fa21a71892a"], 0xfd, 0x22c, &(0x7f0000000580)="$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") sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f000000cf00)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM++bN888b1gWnpmSAC6s+eTXn0txI65ExHREXI/IzkvFkVnPwwsRcTMiph47SsX8nxOXIuJqRNwYJc9zloq3Pr89vLX201u/fPPd5ZlrX3z9/eR2DUzaixHR3cnP97t5TFt5fFjM14btLHZXh0XM3+g+KsZpHvebW1mG/drRuloWV1r5+nRnrz+K251afRRb7e1sfqeXX7A/bB3lyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsoSx+DwVHM55sHzXw/O4+yWO8Nivk8b9poHozisIjF5aKedhpZHVsn+aafbG+3e3sHybC522+nvWStUn2pUr1Tru6mjeaguVqudRt3VpOFVme0rDxo1rrrrTRtdZqVetpdTBZa9Xq5Wk0W7ja32rVeUq1WVipL5bXF4ux28vr995JOI1kYxVfbvb1Bu9NPttPdJP/EYrJcWXl5MblVTd7Z2Ew2H9y7t7H57gd337//ysabrxWL/lFWsrC8tLxcri6Vl6uLF2j/nxRFj3H/cCKlSRcAcP7o/4FJOL3+f/dBxOn3/6H/H4tz1f9e9P7/FPYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4sH6Y/fKN7GQ+H18r5p8ppp4rxqWImIqI3//FdFw6lnO6yDP7H+tn/1bDt6XIMoyucbk4rkbEenH89uxpfwsAAADw9Prq45uf5d16/jI/6YI4S/lNm6nrH44p31xEzM7/OKZsU6OX58eULPv3PRMHY8qW3cCaG1Oy/JbbzLiy/S/Tx8LcY6GUh6kzLQcAADgTxzuBs+1CAAAAOEufTroAJqMUR48yj54FZ395/9cDwSvHRgAAAMA5VJp0AQAAAMCpy/p/v/8HAAAAT7f89/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bu5zZxIIoD8LPBC/tPi1Z731b2BmVsCXvcY0QBaYICciAtpAFqILeUEEGExyEQcYjksa1E3yc5k7HMjzcIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KX7ar24vfp93TZnt28nz2gAAACAS7bVelH/M0v9r839782tn02/iIgyIi7N3Ufx6Sxz1ORUL8/fnD5fvarhLqJOOLzHpLm+RMSf5nr80fWnAAAAAB/XZrmap9l6+jMbuiD6lBZtym9/M+UVEVHNHjKllYe8X5nC6u/3OP5nSqsXsKaZwtKS2zhX2pvUP/fjqt30pClSU1582bHIbGMHAAB6NDpr+p2FAAAA0Kd/QxfAMIp43so8bgVOUtNs730+6wEAAADvUDF0AQAAAEDn6vl/T+f/7Z3/BwAAAMNI5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21XmyWq3nbnN2+nTyjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCf25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5n9c4qjgA4G9mdra2Kq5R9hARBQ96sdttbe1NPCjBg3+CENJtjd36o83BliLm4k1y7kX0KCIo8db/IecEcom3HPYQwbMyszPZyQ9w/TWzST4fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBp9PYkTrJDZxzHxbnNvYdLWb91qM88Xtuez1oWR3UmfTK8WP0QdZtLBAAAgLMjKev7EMJOur6Q9XEnr//T8pqs5v/26XFc1vOH6/6yL2v/rP3y8+7z+wN1xuNkN725PBxcOppK6/+b5Wx75i+vaOVPPn/3kuRfSPze6nOjNH+e0dcbG++08/BcHdkCAP/ExbIvgvL3oazvN5kYAGdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6jFbDk2UchRDmW5M4s7X3cOm4/vHa9nzZrj16tBa+nNwzu0UaQri5PBxcqnU2s+3e/Qe3F4fDwd36g5dCCE2N/lYx/dsfTHFxCI08H8F/FMTFlz0r+ZyMoMEfSgAAnEpp0bK6fiddX8jORXMh/PHdwfr/1Uocpqz/dz+8tlkdq1r/92ub4ezrrdz5tHfv/oPXl+8s3hrcGnz8xuX+m/0r169evd7L35X0vDEBAADg32kXrVr/x3NH1/8vVOIwZf3/2Tf9L6pjJer/Y00W/ZrOBAAA4Gx79uXff4uOOR+12+HzxZWVu/3xcf/z5fGxgVT/tnNFq9b/yVzTWQEAAAB1GK1GB9b/b1TiMOX6/1Pfv/Bj9Z5JCOF8sf5/cemT4Y36pjPT6vhz4qbnCAAAQLPOF626/p/m+//j/S0PcQjhtVfGcfFvAKeq/5N3v/qhOlZ1//+V+qY4k+Lu+HnkfTeEVrfpjAAAADjNnihaVuz/mq4vfPTThffb9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3PAAAA//9WwT6Z") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) pwritev2(r0, &(0x7f0000000800), 0x0, 0x1, 0xc2a, 0x1) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 14.019274687s ago: executing program 5 (id=885): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private2, 0xfffffffb}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, 0x0) 12.984095668s ago: executing program 5 (id=890): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpid() pipe2$watch_queue(0x0, 0x80) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) close(0xffffffffffffffff) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f0000000300)={&(0x7f0000000240)=""/134, 0x86}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 9.36051843s ago: executing program 3 (id=895): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000100)=0x808c) close_range(r0, 0xffffffffffffffff, 0x0) 9.328553225s ago: executing program 5 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) prlimit64(0x0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000000c0)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) close_range(r3, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000240)=[{0x3, 0x2, 0x4, 0x5}]}) 8.833143583s ago: executing program 3 (id=897): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x19, 0x0, 0x0) fchdir(r5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x24, 0x2) lseek(r7, 0xd48a, 0x0) getdents64(r7, 0x0, 0x22) 8.124557673s ago: executing program 2 (id=899): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000005, 0x12, 0xffffffffffffffff, 0x81000000) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d63703933322c706172746974696f6e3d30303030303030303030303030303030303030332c6769643d666f726765742c6769643d666f726765742c6e6f6164696e6963622c756e64656c6574652c7569643d666f726765742c00fb5ebc1bbec00aea8217b7375ace1f91cad4e856ac3ce827902dd91a9a936650ca99205dc1adee73bc464ab6ea2dad7091eea47594f5ef5227a72684b2ed98640aa52eba3e04c81c829036f312ecb1c7483575d32ed9eef652c6b7284dc45cecea6a0ae3a01c5cd7b60af90431eddc00"/225], 0xfe, 0xc24, &(0x7f0000001480)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) rename(0x0, &(0x7f0000000080)='./file2\x00') 6.842268496s ago: executing program 2 (id=900): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x1, {0x2, 0xf0, 0x3}, 0xfd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) fcntl$lock(r1, 0x7, &(0x7f0000000240)={0x0, 0x2, 0x9, 0x9, r2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x908, 0x6, {0x77359400}, {0x0, 0xea60}, {0x2, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x6, 0x2, 0x0, 0x0, "9875191956e3815d10949beeebf3ef8bb9b04d9775e2c962566c9dd1bbbec8c9a87ab2f1e7a346ebde97e016446eedb60794d3e25d72781cfa352f6ee460ad2e"}}, 0x80}, 0x1, 0x0, 0x0, 0x4010}, 0x20040811) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), 0x0}, 0x20) shutdown(r0, 0x2) 6.841670059s ago: executing program 3 (id=901): gettid() timer_settime(0x0, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000080) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x6, &(0x7f0000006680)) socket$packet(0x11, 0x3, 0x300) epoll_create1(0x0) r1 = syz_open_dev$vbi(&(0x7f00000003c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000000c0)) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x800, &(0x7f0000000300)='usrquota') chdir(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x80085}, 0x8004) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0xb, 0x4, 0xa000200000a958, 0x3, 0xfffffffffffffffb, 0x6a1c000, 0x5e96, 0x800000000000001, 0x3}) 6.835465429s ago: executing program 5 (id=902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) prlimit64(0x0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000000c0)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) close_range(r3, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000240)=[{0x3, 0x2, 0x4, 0x5}]}) 5.84104415s ago: executing program 2 (id=903): syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, 0x0, &(0x7f0000000000), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$netlink(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) gettid() sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) r3 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x88003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000000)) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.252443179s ago: executing program 3 (id=904): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '`\n\t\xe5[\x19\xde!o\xf4\xd7\xd2\x03\n\xa2\xb3-|Nt\xf83\xad\x13\xaf\x9cF\x92\x85\v\xc1`R\xe0\xfd;}v\x87\xb1\a\x00\xacJ:\xc6\xd60R\xa0\x92\x1c\x93\xe2:\x9f>\xdd\xf5w\ay\xe17\xa3x\xf1q\x85\x95Wq\xdfgG\x01.\x91\x9cs\x19\x06\xf1/\xe2\x992\xc9\x12\xcbJ\xc6\xfd\xbb\x80Q\x11f\xf9b{\xe6J\xbd\xaa\xdf\x8eN\xdd<\xc0N\xd1N\x1f%\xf1\xcaw\xfc\xd0\x1c\"\x80Cg\xed\t K1:[oW\x1e\x89\xf7\x86\r\x85\x9c{#ou\xfb\xd4\xba\x9b\xde\xa1oS\xc1\xae0\xf6T\x11@P\xe1\x9f\x17\xcbL\xe1z}e<'}, {0x20, '\x00\x88'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad07"}, 0xe9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000280)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1000, 0x1) 3.585471091s ago: executing program 2 (id=905): futex(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000000580)='*\x00\x00\x00\x00\x00\x000\x00\xa5^y\xa9n\x00\xe3\xa3\x89\x90&)\bT\x91\x14\xba\x190\xb3\x00\x00:\xb2\xbe\x1d\x00', 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000240)=0x1c) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, 0x7, 0xd792, 0x3, 0x300, 0x92c, 0x2810020}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000800)={'tunl0\x00', 0x0, 0x7800, 0x10, 0x5, 0x5, {{0x12, 0x4, 0x0, 0x17, 0x48, 0x68, 0x0, 0x4, 0x4, 0x0, @loopback, @multicast1, {[@timestamp_addr={0x44, 0x34, 0xd0, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x5}, {@empty, 0x4}, {@broadcast, 0x3d20e38b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}, {@multicast1, 0x7}, {@broadcast, 0x744c}]}]}}}}}) r4 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r4, 0x4) r5 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3}) readv(r5, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000080)={r6, r7+10000000}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 3.352417813s ago: executing program 3 (id=906): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x60}}, 0x20040481) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000080)=0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) syz_io_uring_setup(0x1073, &(0x7f0000000300)={0x0, 0xa902, 0x0, 0x2, 0xbfdbfdfc}, &(0x7f0000000000), &(0x7f00000001c0), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x28) 1.99723721s ago: executing program 2 (id=907): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 1.927215081s ago: executing program 3 (id=908): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 1.669754381s ago: executing program 5 (id=909): syz_open_dev$vcsa(0x0, 0x1, 0x102) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x640, 0x0) syz_io_uring_setup(0x3ec3, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$key(0xf, 0x3, 0x2) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="696e6f646533322c61707072616973655f747970653d696d617369672c6673757569643d65333232626362642d656530342d336635622d1cdc7c9b3def0e896058326238382d610061"]) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002340)=ANY=[@ANYBLOB="48000000110001002bbd7000fedbdf257f000001140000000000000000000000000004d402003200060000005b0735000900000014000e00ac1e010100"/71], 0x48}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x20, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) 229.081111ms ago: executing program 2 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040) r4 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 0s ago: executing program 5 (id=911): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000005, 0x12, 0xffffffffffffffff, 0x81000000) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d63703933322c706172746974696f6e3d30303030303030303030303030303030303030332c6769643d666f726765742c6769643d666f726765742c6e6f6164696e6963622c756e64656c6574652c7569643d666f726765742c00fb5ebc1bbec00aea8217b7375ace1f91cad4e856ac3ce827902dd91a9a936650ca99205dc1adee73bc464ab6ea2dad7091eea47594f5ef5227a72684b2ed98640aa52eba3e04c81c829036f312ecb1c7483575d32ed9eef652c6b7284dc45cecea6a0ae3a01c5cd7b60af90431eddc00"/225], 0xfe, 0xc24, &(0x7f0000001480)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) rename(0x0, &(0x7f0000000080)='./file2\x00') kernel console output (not intermixed with test programs): F-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.289831][ T5634] Bluetooth: hci4: command tx timeout [ 439.383950][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.390363][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.938521][ T8279] geneve2: entered promiscuous mode [ 439.945676][ T8279] geneve2: entered allmulticast mode [ 439.964531][ T8279] batman_adv: batadv0: Adding interface: geneve2 [ 439.978197][ T8279] batman_adv: batadv0: Interface activated: geneve2 [ 440.018543][ T5285] 8021q: adding VLAN 0 to HW filter on device eth14 [ 440.039115][ T8015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.070962][ T8015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.135711][ T8015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.325945][ T8015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.432222][ T8015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.440323][ T5634] Bluetooth: hci4: command tx timeout [ 441.169408][ T8015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.608169][ T8327] loop5: detected capacity change from 0 to 2048 [ 442.512064][ T5634] Bluetooth: hci4: command tx timeout [ 442.569325][ T8327] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 443.120207][ T8327] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 443.144794][ T8015] hsr_slave_0: entered promiscuous mode [ 443.185442][ T8015] hsr_slave_1: entered promiscuous mode [ 443.206089][ T8327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.216694][ T8015] debugfs: 'hsr0' already exists in 'hsr' [ 443.231579][ T8015] Cannot create hsr debugfs directory [ 444.605996][ T5634] Bluetooth: hci4: command tx timeout [ 445.213152][ T8161] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.257238][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.291221][ T8161] bridge_slave_0: entered allmulticast mode [ 445.299347][ T8161] bridge_slave_0: entered promiscuous mode [ 445.502559][ T3324] bridge_slave_1: left allmulticast mode [ 445.519061][ T3324] bridge_slave_1: left promiscuous mode [ 445.539768][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.571169][ T3324] bridge_slave_0: left allmulticast mode [ 445.584039][ T3324] bridge_slave_0: left promiscuous mode [ 445.596608][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.819254][ T3324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.849324][ T8363] loop2: detected capacity change from 0 to 2048 [ 445.865811][ T8363] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 445.876650][ T8363] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 445.890131][ T8363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 445.958081][ T3324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.995455][ T3324] bond0 (unregistering): Released all slaves [ 446.019621][ T8161] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.027563][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.039993][ T8161] bridge_slave_1: entered allmulticast mode [ 446.072003][ T8161] bridge_slave_1: entered promiscuous mode [ 446.238012][ T5285] 8021q: adding VLAN 0 to HW filter on device eth15 [ 446.605878][ T3324] hsr_slave_0: left promiscuous mode [ 446.612620][ T3324] hsr_slave_1: left promiscuous mode [ 446.618810][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.627139][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.686786][ T8369] loop3: detected capacity change from 0 to 40427 [ 446.696497][ T8369] F2FS-fs (loop3): invalid crc value [ 446.776907][ T8369] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 446.791749][ T8369] F2FS-fs (loop3): Start checkpoint disabled! [ 446.805150][ T8369] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 446.814087][ T8369] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 447.683697][ T8375] loop5: detected capacity change from 0 to 2048 [ 447.809995][ T8375] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 447.941537][ T8375] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 448.087141][ T8375] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 450.286361][ T6189] kworker/u8:15: attempt to access beyond end of device [ 450.286361][ T6189] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 450.325913][ T6189] CPU: 1 UID: 0 PID: 6189 Comm: kworker/u8:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.325954][ T6189] Tainted: [L]=SOFTLOCKUP [ 450.325963][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 450.325979][ T6189] Workqueue: writeback wb_workfn (flush-7:3) [ 450.326029][ T6189] Call Trace: [ 450.326038][ T6189] [ 450.326048][ T6189] dump_stack_lvl+0xe8/0x150 [ 450.326079][ T6189] f2fs_stop_checkpoint+0x3c7/0x590 [ 450.326115][ T6189] f2fs_write_end_io+0x1274/0x1740 [ 450.326173][ T6189] __submit_merged_bio+0x256/0x6a0 [ 450.326210][ T6189] __submit_merged_write_cond+0x3c9/0x4e0 [ 450.326248][ T6189] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 450.326291][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.326330][ T6189] f2fs_write_data_pages+0x287e/0x34f0 [ 450.326361][ T6189] ? f2fs_build_free_nids+0xdc/0x1810 [ 450.326434][ T6189] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 450.326482][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.326510][ T6189] ? f2fs_inode_chksum_verify+0x192/0x810 [ 450.326587][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.326617][ T6189] ? __lock_acquire+0x6b5/0x2cf0 [ 450.326660][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.326694][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.326723][ T6189] ? __lock_acquire+0x6b5/0x2cf0 [ 450.326768][ T6189] ? set_shrinker_bit+0x7c/0x350 [ 450.326792][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.326825][ T6189] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 450.326860][ T6189] do_writepages+0x32e/0x550 [ 450.326894][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.326923][ T6189] ? reacquire_held_locks+0x104/0x190 [ 450.326960][ T6189] ? writeback_sb_inodes+0x463/0x19d0 [ 450.326997][ T6189] __writeback_single_inode+0x133/0x10e0 [ 450.327029][ T6189] ? do_raw_spin_unlock+0xf5/0x210 [ 450.327072][ T6189] writeback_sb_inodes+0x979/0x19d0 [ 450.327100][ T6189] ? __lock_acquire+0x6b5/0x2cf0 [ 450.327160][ T6189] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 450.327187][ T6189] ? do_raw_spin_lock+0x12b/0x2f0 [ 450.327269][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.327299][ T6189] ? rcu_is_watching+0x15/0xb0 [ 450.327331][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.327369][ T6189] wb_writeback+0x445/0xb00 [ 450.327410][ T6189] ? queue_io+0x1f1/0x470 [ 450.327447][ T6189] ? __pfx_wb_writeback+0x10/0x10 [ 450.327473][ T6189] ? do_raw_spin_lock+0x12b/0x2f0 [ 450.327529][ T6189] wb_workfn+0x3f8/0xf10 [ 450.327566][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.327594][ T6189] ? look_up_lock_class+0x57/0x110 [ 450.327655][ T6189] ? __pfx_wb_workfn+0x10/0x10 [ 450.327697][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.327726][ T6189] ? do_raw_spin_lock+0x12b/0x2f0 [ 450.327761][ T6189] ? lock_acquire+0x106/0x350 [ 450.327790][ T6189] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 450.327831][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.327864][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.327899][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.327932][ T6189] ? process_scheduled_works+0xa70/0x1860 [ 450.327958][ T6189] ? process_scheduled_works+0xa70/0x1860 [ 450.327987][ T6189] process_scheduled_works+0xb5d/0x1860 [ 450.328013][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.328078][ T6189] ? __pfx_process_scheduled_works+0x10/0x10 [ 450.328113][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.328142][ T6189] ? assign_work+0x3d5/0x5e0 [ 450.328174][ T6189] worker_thread+0xa53/0xfc0 [ 450.328203][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.328250][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.328290][ T6189] kthread+0x389/0x470 [ 450.328325][ T6189] ? __pfx_worker_thread+0x10/0x10 [ 450.328350][ T6189] ? __pfx_kthread+0x10/0x10 [ 450.328385][ T6189] ret_from_fork+0x514/0xb70 [ 450.328419][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.328451][ T6189] ? __pfx_ret_from_fork+0x10/0x10 [ 450.328477][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.328505][ T6189] ? __switch_to+0xc79/0x1410 [ 450.328546][ T6189] ? __pfx_kthread+0x10/0x10 [ 450.328581][ T6189] ret_from_fork_asm+0x1a/0x30 [ 450.328631][ T6189] [ 450.388089][ T8384] loop5: detected capacity change from 0 to 1764 [ 450.399045][ T6189] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 450.759991][ T3324] team0 (unregistering): Port device team_slave_1 removed [ 450.877578][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 451.028557][ T3324] team0 (unregistering): Port device team_slave_0 removed [ 452.026088][ T8392] ubi31: attaching mtd0 [ 452.063641][ T8392] ubi31: scanning is finished [ 452.068443][ T8392] ubi31: empty MTD device detected [ 452.694122][ T8161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.694881][ T8392] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 452.733117][ T8161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.980582][ T8015] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 453.069096][ T8015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.077621][ T8015] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 453.090525][ T8015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.102182][ T8161] team0: Port device team_slave_0 added [ 453.378622][ T8398] loop5: detected capacity change from 0 to 2048 [ 454.084858][ T8398] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 454.157308][ T8015] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 454.177914][ T8398] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 454.297528][ T8406] loop2: detected capacity change from 0 to 2048 [ 454.311103][ T8398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.377452][ T8406] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 455.294010][ T8406] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 455.402522][ T8406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 457.618073][ T8015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 457.646337][ T8161] team0: Port device team_slave_1 added [ 457.751979][ T8015] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 458.338533][ T8015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.054318][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.074014][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.135466][ T8161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.197471][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.281814][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.370889][ T8161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.527737][ T8015] kthread_run failed with err -4 [ 459.986250][ T8161] hsr_slave_0: entered promiscuous mode [ 460.049305][ T8161] hsr_slave_1: entered promiscuous mode [ 460.595151][ T8449] qrtr: Invalid version 48 [ 463.368458][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 463.395666][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 463.420011][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 463.474048][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 463.515610][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 463.554259][ T5285] 8021q: adding VLAN 0 to HW filter on device eth16 [ 463.829751][ T8464] loop2: detected capacity change from 0 to 4096 [ 463.849397][ T8464] EXT4-fs: inline encryption not supported [ 463.937160][ T8464] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e042c018, mo2=0003] [ 463.979205][ T8464] System zones: 0-5 [ 464.024448][ T8464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.067469][ T8474] loop3: detected capacity change from 0 to 1024 [ 465.544333][ T5628] Bluetooth: hci0: command tx timeout [ 465.772822][ T8284] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.784162][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.790369][ T8284] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.817721][ T8284] bridge_slave_0: entered allmulticast mode [ 465.843041][ T8284] bridge_slave_0: entered promiscuous mode [ 465.862333][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.891086][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.929962][ T8284] bridge_slave_1: entered allmulticast mode [ 465.949034][ T8483] loop5: detected capacity change from 0 to 1024 [ 465.955342][ T8284] bridge_slave_1: entered promiscuous mode [ 467.639921][ T5628] Bluetooth: hci0: command tx timeout [ 468.077501][ T8505] loop5: detected capacity change from 0 to 2048 [ 469.077263][ T8505] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 469.146172][ T8505] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 469.208197][ T8505] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 469.478632][ T8520] loop2: detected capacity change from 0 to 2048 [ 469.597045][ T8520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.700649][ T5628] Bluetooth: hci0: command tx timeout [ 470.427579][ T8284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.181802][ T8284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.220418][ T8525] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 471.321519][ T8503] tipc: Started in network mode [ 471.351312][ T8503] tipc: Node identity @, cluster identity 4711 [ 471.379700][ T8503] tipc: Enabling of bearer rejected, failed to enable media [ 471.765612][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.783712][ T5628] Bluetooth: hci0: command tx timeout [ 473.683475][ T8542] loop5: detected capacity change from 0 to 2048 [ 473.752748][ T8542] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 473.785059][ T8284] team0: Port device team_slave_0 added [ 473.807815][ T8542] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 473.868509][ T8542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.016040][ T8284] team0: Port device team_slave_1 added [ 474.150313][ T8550] loop2: detected capacity change from 0 to 4096 [ 474.173498][ T8550] EXT4-fs: inline encryption not supported [ 474.239515][ T8550] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e042c018, mo2=0003] [ 474.306351][ T8550] System zones: 0-5 [ 474.765213][ T8550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.255587][ T8570] loop5: detected capacity change from 0 to 2048 [ 476.293654][ T8570] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 476.354939][ T8570] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 476.403970][ T8570] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 476.533779][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.145552][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.231452][ T8583] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 478.745825][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.771943][ T8284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.785109][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.816790][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.889313][ T8284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.002390][ T8597] loop5: detected capacity change from 0 to 1764 [ 481.401250][ T5634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 481.419846][ T5634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 481.432878][ T5634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 481.462867][ T5634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 481.478926][ T5634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 482.802981][ T8284] hsr_slave_0: entered promiscuous mode [ 482.833726][ T8284] hsr_slave_1: entered promiscuous mode [ 482.863559][ T8284] debugfs: 'hsr0' already exists in 'hsr' [ 482.897619][ T8284] Cannot create hsr debugfs directory [ 483.699176][ T5628] Bluetooth: hci6: command tx timeout [ 484.309737][ T8639] loop5: detected capacity change from 0 to 2048 [ 484.433896][ T8639] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 484.509172][ T8639] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 484.550041][ T8639] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 486.329288][ T5628] Bluetooth: hci6: command tx timeout [ 486.932328][ T3324] bridge_slave_1: left allmulticast mode [ 486.942570][ T3324] bridge_slave_1: left promiscuous mode [ 486.955251][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.006585][ T3324] bridge_slave_0: left allmulticast mode [ 487.025885][ T3324] bridge_slave_0: left promiscuous mode [ 487.038218][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.368684][ T5628] Bluetooth: hci6: command tx timeout [ 489.063233][ T3324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.110834][ T3324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.143179][ T3324] bond0 (unregistering): Released all slaves [ 490.239810][ T3324] hsr_slave_0: left promiscuous mode [ 490.272750][ T3324] hsr_slave_1: left promiscuous mode [ 490.298108][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.384255][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.419447][ T5628] Bluetooth: hci6: command tx timeout [ 493.352958][ T3324] team0 (unregistering): Port device team_slave_1 removed [ 493.400082][ T3324] team0 (unregistering): Port device team_slave_0 removed [ 494.942299][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 494.967100][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 494.980685][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 494.993488][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 495.001524][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.774231][ T8749] loop3: detected capacity change from 0 to 2048 [ 496.808209][ T8749] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 496.895763][ T8749] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 496.968112][ T8749] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 497.014958][ T8458] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.048380][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.070228][ T5634] Bluetooth: hci1: command tx timeout [ 497.081896][ T8458] bridge_slave_0: entered allmulticast mode [ 497.108850][ T8458] bridge_slave_0: entered promiscuous mode [ 497.140761][ T8458] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.169816][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.202557][ T8458] bridge_slave_1: entered allmulticast mode [ 497.259446][ T8458] bridge_slave_1: entered promiscuous mode [ 497.388610][ T3324] bridge_slave_1: left allmulticast mode [ 497.426526][ T3324] bridge_slave_1: left promiscuous mode [ 497.454509][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.510713][ T3324] bridge_slave_0: left allmulticast mode [ 497.548754][ T3324] bridge_slave_0: left promiscuous mode [ 497.601519][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.131170][ T8773] binder: 8771:8773 ioctl 4018620d 0 returned -22 [ 499.157988][ T5634] Bluetooth: hci1: command tx timeout [ 499.407157][ T3324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.612392][ T3324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.652226][ T3324] bond0 (unregistering): Released all slaves [ 501.391038][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.397588][ T5634] Bluetooth: hci1: command tx timeout [ 501.410470][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.502364][ T8458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.534782][ T8458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.922170][ T8790] netlink: 'syz.3.528': attribute type 12 has an invalid length. [ 503.083051][ T8458] team0: Port device team_slave_0 added [ 503.111085][ T8458] team0: Port device team_slave_1 added [ 503.180850][ T3324] hsr_slave_0: left promiscuous mode [ 503.234377][ T3324] hsr_slave_1: left promiscuous mode [ 503.257240][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.304980][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.457671][ T5634] Bluetooth: hci1: command tx timeout [ 503.873772][ T8810] loop3: detected capacity change from 0 to 2048 [ 503.952664][ T8810] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 503.991526][ T8810] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 504.041208][ T8810] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 504.090175][ T3324] team0 (unregistering): Port device team_slave_1 removed [ 504.172512][ T3324] team0 (unregistering): Port device team_slave_0 removed [ 505.103545][ T8822] overlayfs: failed to clone upperpath [ 506.753438][ T8832] loop5: detected capacity change from 0 to 128 [ 506.969660][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.976652][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.003452][ T8458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.346143][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.396098][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.457261][ T8458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.803882][ T8458] hsr_slave_0: entered promiscuous mode [ 507.844928][ T8458] hsr_slave_1: entered promiscuous mode [ 511.867727][ T8610] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.876028][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.886807][ T8610] bridge_slave_0: entered allmulticast mode [ 511.899694][ T8871] loop5: detected capacity change from 0 to 4096 [ 511.918233][ T8610] bridge_slave_0: entered promiscuous mode [ 511.957599][ T8871] EXT4-fs: inline encryption not supported [ 512.002678][ T8871] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e042c018, mo2=0003] [ 512.011292][ T8610] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.063753][ T8871] System zones: 0-5 [ 512.070958][ T8610] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.120481][ T8871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.135976][ T8610] bridge_slave_1: entered allmulticast mode [ 512.186698][ T8610] bridge_slave_1: entered promiscuous mode [ 513.413855][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.691039][ T8610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.426818][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5 [ 514.462380][ T8610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.710100][ T8897] Bluetooth: MGMT ver 1.23 [ 514.726311][ T8897] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 515.975289][ T8610] team0: Port device team_slave_0 added [ 516.014670][ T8610] team0: Port device team_slave_1 added [ 518.058654][ T8934] loop5: detected capacity change from 0 to 164 [ 518.925291][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.983527][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.032214][ T8610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.045874][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.065598][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.751634][ T30] audit: type=1326 audit(1779278223.046:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8932 comm="syz.2.554" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3b79ce59 code=0x7ffc0000 [ 520.017915][ T8943] loop5: detected capacity change from 0 to 512 [ 520.035610][ T8943] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 520.635672][ T8943] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.555: bad orphan inode 131083 [ 520.646091][ T8943] loop5: lost filesystem error report for type 5 error -117 [ 520.656643][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 520.670446][ C0] EXT4-fs (loop5): initial error at time 1779278224: ext4_orphan_get:1423 [ 520.679000][ C0] EXT4-fs (loop5): last error at time 1779278224: ext4_orphan_get:1423 [ 520.925439][ T8943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.492217][ T8610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.503296][ T30] audit: type=1326 audit(1779278223.046:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8932 comm="syz.2.554" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3b79ce59 code=0x7ffc0000 [ 521.529295][ T30] audit: type=1326 audit(1779278223.046:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8932 comm="syz.2.554" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3b79ce59 code=0x7ffc0000 [ 521.554271][ T30] audit: type=1326 audit(1779278223.046:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8932 comm="syz.2.554" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3b79ce59 code=0x7ffc0000 [ 521.579390][ T30] audit: type=1326 audit(1779278223.046:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8932 comm="syz.2.554" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fcf3b79ce59 code=0x7ffc0000 [ 521.604727][ T30] audit: type=1326 audit(1779278223.046:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8932 comm="syz.2.554" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3b79ce59 code=0x7ffc0000 [ 521.634966][ T30] audit: type=1326 audit(1779278223.056:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8932 comm="syz.2.554" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3b79ce59 code=0x7ffc0000 [ 521.652560][ T8718] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.687879][ T8718] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.705035][ T8718] bridge_slave_0: entered allmulticast mode [ 521.740479][ T8718] bridge_slave_0: entered promiscuous mode [ 522.291422][ T30] audit: type=1326 audit(1779278223.056:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8932 comm="syz.2.554" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3b79ce59 code=0x7ffc0000 [ 522.781434][ T30] audit: type=1326 audit(1779278223.056:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8932 comm="syz.2.554" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3b79ce59 code=0x7ffc0000 [ 522.830607][ T30] audit: type=1326 audit(1779278223.056:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8932 comm="syz.2.554" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf3b79ce59 code=0x7ffc0000 [ 523.375891][ T8718] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.452621][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 523.463733][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 523.472296][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 523.481071][ T8718] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.488419][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 523.514304][ T8718] bridge_slave_1: entered allmulticast mode [ 523.528040][ T8718] bridge_slave_1: entered promiscuous mode [ 523.576378][ T8610] hsr_slave_0: entered promiscuous mode [ 523.583179][ T8610] hsr_slave_1: entered promiscuous mode [ 523.715736][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 524.530631][ T8610] debugfs: 'hsr0' already exists in 'hsr' [ 524.559584][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.572256][ T8610] Cannot create hsr debugfs directory [ 524.660448][ T5285] 8021q: adding VLAN 0 to HW filter on device eth6 [ 524.730043][ T8971] loop5: detected capacity change from 0 to 8 [ 524.808181][ T8718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.820981][ T8971] SQUASHFS error: xz decompression failed, data probably corrupt [ 524.840691][ T8971] SQUASHFS error: Failed to read block 0x108: -5 [ 524.850952][ T8718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.861889][ T8971] SQUASHFS error: Unable to read metadata cache entry [106] [ 524.869899][ T8971] SQUASHFS error: Unable to read inode 0x101f [ 524.956156][ T8718] team0: Port device team_slave_0 added [ 524.979393][ T8718] team0: Port device team_slave_1 added [ 525.075197][ T8718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.092226][ T8718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.140119][ T8718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.487203][ T8718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.494230][ T8718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.520441][ T8718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.091395][ T5628] Bluetooth: hci4: command tx timeout [ 526.402881][ T8971] loop5: detected capacity change from 0 to 40427 [ 526.423915][ T8971] F2FS-fs (loop5): invalid crc value [ 527.395821][ T8971] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 527.643464][ T8718] hsr_slave_0: entered promiscuous mode [ 527.650790][ T8718] hsr_slave_1: entered promiscuous mode [ 527.657554][ T8718] debugfs: 'hsr0' already exists in 'hsr' [ 527.663319][ T8718] Cannot create hsr debugfs directory [ 527.675197][ T8971] F2FS-fs (loop5): Start checkpoint disabled! [ 528.236277][ T5634] Bluetooth: hci4: command tx timeout [ 528.437986][ T8971] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 528.695983][ T3324] bridge_slave_1: left allmulticast mode [ 528.712434][ T3324] bridge_slave_1: left promiscuous mode [ 528.736070][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.808249][ T3324] bridge_slave_0: left allmulticast mode [ 528.840222][ T3324] bridge_slave_0: left promiscuous mode [ 529.537980][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.155870][ T3324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.183881][ T3324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.205706][ T3324] bond0 (unregistering): Released all slaves [ 530.259319][ T5634] Bluetooth: hci4: command tx timeout [ 530.567115][ T3324] hsr_slave_0: left promiscuous mode [ 530.585381][ T3324] hsr_slave_1: left promiscuous mode [ 530.602891][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.622892][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.879221][ T9023] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 532.001566][ T3324] team0 (unregistering): Port device team_slave_1 removed [ 532.280021][ T3324] team0 (unregistering): Port device team_slave_0 removed [ 532.347420][ T5634] Bluetooth: hci4: command tx timeout [ 532.632088][ T9048] loop5: detected capacity change from 0 to 512 [ 532.917289][ T9048] EXT4-fs (loop5): Test dummy encryption mode enabled [ 532.925216][ T9048] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 533.660690][ T9048] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.571: bad orphan inode 131083 [ 533.671218][ T9048] loop5: lost filesystem error report for type 5 error -117 [ 533.675923][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 533.690072][ C0] EXT4-fs (loop5): initial error at time 1779278237: ext4_orphan_get:1423 [ 533.698640][ C0] EXT4-fs (loop5): last error at time 1779278237: ext4_orphan_get:1423 [ 534.116456][ T9048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.506319][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.672979][ T9059] kernel profiling enabled (shift: 15) [ 538.021307][ T9080] loop3: detected capacity change from 0 to 512 [ 538.140870][ T9080] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.580: corrupted in-inode xattr: e_value out of bounds [ 538.266784][ T9080] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 538.267892][ T9080] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.580: couldn't read orphan inode 15 (err -117) [ 538.277164][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 538.277188][ C0] EXT4-fs (loop3): initial error at time 1779278242: ext4_iget_extra_inode:5128: inode 15 [ 538.277228][ C0] EXT4-fs (loop3): last error at time 1779278242: ext4_iget_extra_inode:5128: inode 15 [ 538.372764][ T9086] netlink: 28 bytes leftover after parsing attributes in process `syz.5.579'. [ 538.973498][ T8610] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 539.057907][ T9080] loop3: lost filesystem error report for type 5 error -117 [ 539.082822][ T9080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.120370][ T8610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 539.128841][ T8610] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 539.154682][ T8610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 540.381666][ T8610] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 541.516632][ T8610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 541.529140][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.122562][ T3324] bridge_slave_1: left allmulticast mode [ 542.135503][ T3324] bridge_slave_1: left promiscuous mode [ 542.146387][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.161912][ T3324] bridge_slave_0: left allmulticast mode [ 542.175743][ T3324] bridge_slave_0: left promiscuous mode [ 542.186307][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.379792][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 543.396239][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 544.101481][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 544.118611][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 544.127530][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 544.301464][ T3324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.395555][ T3324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.438804][ T3324] bond0 (unregistering): Released all slaves [ 546.930072][ T5628] Bluetooth: hci0: command tx timeout [ 547.231842][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5 [ 547.274787][ T3324] hsr_slave_0: left promiscuous mode [ 547.324973][ T3324] hsr_slave_1: left promiscuous mode [ 547.343686][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.387196][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.843960][ T3324] team0 (unregistering): Port device team_slave_1 removed [ 548.906311][ T3324] team0 (unregistering): Port device team_slave_0 removed [ 548.977336][ T5628] Bluetooth: hci0: command tx timeout [ 549.142688][ T9171] loop5: detected capacity change from 0 to 256 [ 549.258389][ T9171] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 549.267839][ T9171] FAT-fs (loop5): Filesystem has been set read-only [ 549.281351][ T9171] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 549.794521][ T9171] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 549.852830][ T9171] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 549.880141][ T9171] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 549.893324][ T9171] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 549.905071][ T9171] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 549.915104][ T9171] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 549.934831][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 549.934893][ T30] audit: type=1800 audit(1779278253.838:284): pid=9171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.596" name="file1" dev="loop5" ino=1048618 res=0 errno=0 [ 550.632942][ T9179] loop3: detected capacity change from 0 to 8 [ 550.719416][ T9179] SQUASHFS error: xz decompression failed, data probably corrupt [ 550.729555][ T9179] SQUASHFS error: Failed to read block 0x108: -5 [ 550.748950][ T9179] SQUASHFS error: Unable to read metadata cache entry [106] [ 550.769923][ T9179] SQUASHFS error: Unable to read inode 0x101f [ 551.033116][ T9173] lo speed is unknown, defaulting to 1000 [ 551.040534][ T9173] lo speed is unknown, defaulting to 1000 [ 551.047342][ T9173] lo speed is unknown, defaulting to 1000 [ 551.054326][ T9173] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 551.055141][ T5628] Bluetooth: hci0: command tx timeout [ 551.068896][ T9173] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 551.091484][ T9173] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 551.765180][ T9173] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 551.797199][ T9173] lo speed is unknown, defaulting to 1000 [ 551.806393][ T9173] lo speed is unknown, defaulting to 1000 [ 551.814111][ T9173] lo speed is unknown, defaulting to 1000 [ 551.822142][ T9173] lo speed is unknown, defaulting to 1000 [ 551.829893][ T9173] lo speed is unknown, defaulting to 1000 [ 551.837724][ T9173] lo speed is unknown, defaulting to 1000 [ 552.413282][ T9198] loop5: detected capacity change from 0 to 1764 [ 553.373717][ T5628] Bluetooth: hci0: command tx timeout [ 554.739781][ T9212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.602'. [ 554.878501][ T8961] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.891072][ T8961] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.898943][ T8961] bridge_slave_0: entered allmulticast mode [ 554.907497][ T8961] bridge_slave_0: entered promiscuous mode [ 554.919355][ T8961] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.926994][ T8961] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.934290][ T8961] bridge_slave_1: entered allmulticast mode [ 554.943390][ T8961] bridge_slave_1: entered promiscuous mode [ 554.964302][ T9128] lo speed is unknown, defaulting to 1000 [ 555.033654][ T8961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.060957][ T8961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.223861][ T8961] team0: Port device team_slave_0 added [ 555.625223][ T9223] loop5: detected capacity change from 0 to 40427 [ 556.591683][ T9223] F2FS-fs (loop5): invalid crc value [ 556.885704][ T9226] No such timeout policy "syz0" [ 557.172131][ T9223] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 557.186351][ T9223] F2FS-fs (loop5): Start checkpoint disabled! [ 557.209173][ T9223] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 557.239590][ T9223] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 557.279252][ T30] audit: type=1800 audit(1779278261.168:285): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.606" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 557.658247][ T9236] syz.5.606: attempt to access beyond end of device [ 557.658247][ T9236] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 557.682844][ T9236] syz.5.606: attempt to access beyond end of device [ 557.682844][ T9236] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 557.705011][ T9236] syz.5.606: attempt to access beyond end of device [ 557.705011][ T9236] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 557.725468][ T9236] syz.5.606: attempt to access beyond end of device [ 557.725468][ T9236] loop5: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 557.791486][ T9236] syz.5.606: attempt to access beyond end of device [ 557.791486][ T9236] loop5: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 557.813790][ T9236] syz.5.606: attempt to access beyond end of device [ 557.813790][ T9236] loop5: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 557.832442][ T9236] syz.5.606: attempt to access beyond end of device [ 557.832442][ T9236] loop5: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 557.851245][ T9236] syz.5.606: attempt to access beyond end of device [ 557.851245][ T9236] loop5: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 557.869352][ T9236] syz.5.606: attempt to access beyond end of device [ 557.869352][ T9236] loop5: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 557.886741][ T9236] syz.5.606: attempt to access beyond end of device [ 557.886741][ T9236] loop5: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 558.245517][ T8961] team0: Port device team_slave_1 added [ 558.328772][ T7365] CPU: 0 UID: 0 PID: 7365 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.328814][ T7365] Tainted: [L]=SOFTLOCKUP [ 558.328823][ T7365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 558.328839][ T7365] Workqueue: writeback wb_workfn (flush-7:5) [ 558.328888][ T7365] Call Trace: [ 558.328898][ T7365] [ 558.328908][ T7365] dump_stack_lvl+0xe8/0x150 [ 558.328942][ T7365] f2fs_stop_checkpoint+0x3c7/0x590 [ 558.328980][ T7365] f2fs_write_end_io+0x1274/0x1740 [ 558.329044][ T7365] __submit_merged_bio+0x256/0x6a0 [ 558.329083][ T7365] __submit_merged_write_cond+0x3c9/0x4e0 [ 558.329125][ T7365] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 558.329174][ T7365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.329220][ T7365] f2fs_write_data_pages+0x287e/0x34f0 [ 558.329253][ T7365] ? f2fs_build_free_nids+0xdc/0x1810 [ 558.329337][ T7365] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 558.329394][ T7365] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 558.329498][ T7365] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 558.329563][ T7365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.329594][ T7365] ? __lock_acquire+0x6b5/0x2cf0 [ 558.329646][ T7365] ? f2fs_update_inode+0x13d9/0x2620 [ 558.329693][ T7365] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 558.329737][ T7365] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 558.329775][ T7365] do_writepages+0x32e/0x550 [ 558.329815][ T7365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.329846][ T7365] ? reacquire_held_locks+0x104/0x190 [ 558.329880][ T7365] ? writeback_sb_inodes+0x463/0x19d0 [ 558.329921][ T7365] __writeback_single_inode+0x133/0x10e0 [ 558.329957][ T7365] ? do_raw_spin_unlock+0xf5/0x210 [ 558.330004][ T7365] writeback_sb_inodes+0x979/0x19d0 [ 558.330034][ T7365] ? __lock_acquire+0x6b5/0x2cf0 [ 558.330108][ T7365] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 558.330137][ T7365] ? do_raw_spin_lock+0x12b/0x2f0 [ 558.330231][ T7365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.330259][ T7365] ? rcu_is_watching+0x15/0xb0 [ 558.330289][ T7365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.330328][ T7365] wb_writeback+0x445/0xb00 [ 558.330362][ T7365] ? queue_io+0x1f1/0x470 [ 558.330401][ T7365] ? __pfx_wb_writeback+0x10/0x10 [ 558.330426][ T7365] ? do_raw_spin_lock+0x12b/0x2f0 [ 558.330492][ T7365] wb_workfn+0x3f8/0xf10 [ 558.330530][ T7365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.330558][ T7365] ? look_up_lock_class+0x57/0x110 [ 558.330622][ T7365] ? __pfx_wb_workfn+0x10/0x10 [ 558.330665][ T7365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.330693][ T7365] ? do_raw_spin_lock+0x12b/0x2f0 [ 558.330727][ T7365] ? lock_acquire+0x106/0x350 [ 558.330761][ T7365] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 558.330802][ T7365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.330836][ T7365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.330870][ T7365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.330899][ T7365] ? process_scheduled_works+0xa70/0x1860 [ 558.330924][ T7365] ? process_scheduled_works+0xa70/0x1860 [ 558.330951][ T7365] process_scheduled_works+0xb5d/0x1860 [ 558.330982][ T7365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.331050][ T7365] ? __pfx_process_scheduled_works+0x10/0x10 [ 558.331084][ T7365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.331110][ T7365] ? assign_work+0x3d5/0x5e0 [ 558.331148][ T7365] worker_thread+0xa53/0xfc0 [ 558.331185][ T7365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.331236][ T7365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.331280][ T7365] kthread+0x389/0x470 [ 558.331314][ T7365] ? __pfx_worker_thread+0x10/0x10 [ 558.331337][ T7365] ? __pfx_kthread+0x10/0x10 [ 558.331373][ T7365] ret_from_fork+0x514/0xb70 [ 558.331404][ T7365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.331447][ T7365] ? __pfx_ret_from_fork+0x10/0x10 [ 558.331487][ T7365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.331519][ T7365] ? __switch_to+0xc79/0x1410 [ 558.331568][ T7365] ? __pfx_kthread+0x10/0x10 [ 558.331609][ T7365] ret_from_fork_asm+0x1a/0x30 [ 558.331675][ T7365] [ 558.728477][ T7365] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 558.806785][ T5634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 558.853288][ T5634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 558.863811][ T5634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 558.872865][ T5634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 558.886262][ T5634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 559.075188][ T8961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.082268][ T8961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.109540][ T8961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.122928][ T8961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.130448][ T8961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.157633][ T8961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.064801][ T5634] Bluetooth: hci6: command tx timeout [ 562.146512][ T8961] hsr_slave_0: entered promiscuous mode [ 562.167050][ T8961] hsr_slave_1: entered promiscuous mode [ 562.291554][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.306857][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.573834][ T9278] loop5: detected capacity change from 0 to 2048 [ 562.673397][ T9281] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 563.064948][ T9281] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 563.096314][ T9281] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 563.099455][ T9285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.113321][ T9281] Remounting filesystem read-only [ 563.137712][ T5634] Bluetooth: hci6: command tx timeout [ 563.213283][ T5626] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 564.147632][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'. [ 564.649732][ T9306] loop3: detected capacity change from 0 to 2048 [ 565.218077][ T5634] Bluetooth: hci6: command tx timeout [ 565.246441][ T9306] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 565.260187][ T9306] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 565.290740][ T9306] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 565.438619][ T9241] lo speed is unknown, defaulting to 1000 [ 565.697597][ T9313] overlayfs: failed to clone upperpath [ 567.264395][ T9128] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.273938][ T9128] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.282901][ T9128] bridge_slave_0: entered allmulticast mode [ 567.292538][ T9128] bridge_slave_0: entered promiscuous mode [ 567.324353][ T5634] Bluetooth: hci6: command tx timeout [ 567.338825][ T9128] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.347507][ T9128] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.355812][ T9128] bridge_slave_1: entered allmulticast mode [ 567.369695][ T9128] bridge_slave_1: entered promiscuous mode [ 568.512412][ T9128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.602781][ T3324] bridge_slave_1: left allmulticast mode [ 568.633997][ T3324] bridge_slave_1: left promiscuous mode [ 568.647751][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.296403][ T9333] overlayfs: failed to clone lowerpath [ 569.302435][ T3324] bridge_slave_0: left allmulticast mode [ 569.418510][ T3324] bridge_slave_0: left promiscuous mode [ 569.440563][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.030944][ T9341] loop5: detected capacity change from 0 to 32768 [ 570.038925][ T9341] btrfs: Deprecated parameter 'usebackuproot' [ 570.045109][ T9341] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 570.210210][ T9341] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.628 (9341) [ 570.247616][ T9341] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 570.257940][ T9341] BTRFS info (device loop5): using crc32c checksum algorithm [ 570.738904][ T9360] loop3: detected capacity change from 0 to 2048 [ 570.802689][ T9360] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 570.819392][ T9360] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 570.865745][ T9360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 571.136514][ T6023] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 571.332854][ T9341] BTRFS error (device loop5): failed to load root extent [ 571.340600][ T9341] BTRFS warning (device loop5): try to load backup roots slot 1 [ 571.390658][ T7365] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 571.459060][ T9341] BTRFS warning (device loop5): couldn't read tree root [ 571.467065][ T9341] BTRFS warning (device loop5): try to load backup roots slot 2 [ 571.477276][ T6023] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 571.512843][ T9341] BTRFS warning (device loop5): couldn't read tree root [ 571.523956][ T9341] BTRFS warning (device loop5): try to load backup roots slot 3 [ 571.560523][ T9341] BTRFS info (device loop5): rebuilding free space tree [ 571.582072][ T9341] BTRFS info (device loop5): checking UUID tree [ 571.591855][ T9341] BTRFS info (device loop5): enabling ssd optimizations [ 571.599541][ T9341] BTRFS info (device loop5): turning on async discard [ 571.606474][ T9341] BTRFS info (device loop5): enabling free space tree [ 571.611574][ T9367] overlayfs: failed to clone upperpath [ 571.613236][ T9341] BTRFS info (device loop5): force clearing of disk cache [ 571.629463][ T9341] BTRFS info (device loop5): enabling auto defrag [ 571.635966][ T9341] BTRFS info (device loop5): trying to use backup root at mount time [ 571.644103][ T9341] BTRFS info (device loop5): use zstd compression, level 3 [ 571.676771][ T3324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.805628][ T3324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.853597][ T3324] bond0 (unregistering): Released all slaves [ 571.951088][ T9128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.949065][ T3324] hsr_slave_0: left promiscuous mode [ 572.970847][ T3324] hsr_slave_1: left promiscuous mode [ 572.978564][ T5626] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 572.990024][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.004684][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.849181][ T9397] overlayfs: failed to clone upperpath [ 576.016821][ T3324] team0 (unregistering): Port device team_slave_1 removed [ 576.129459][ T3324] team0 (unregistering): Port device team_slave_0 removed [ 579.270836][ T9128] team0: Port device team_slave_0 added [ 579.563166][ T9128] team0: Port device team_slave_1 added [ 579.705861][ T9427] overlayfs: failed to clone upperpath [ 580.040711][ T9128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.056170][ T9128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.083847][ T9128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.097571][ T9128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.104964][ T9128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.132024][ T9128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.222586][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.644'. [ 580.968662][ T8961] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 580.996285][ T8961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 581.007345][ T9327] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 581.030937][ T8961] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 581.094131][ T8961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 581.126543][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5 [ 581.192686][ T9327] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 581.227471][ T9327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.250774][ T9327] usb 4-1: Product: syz [ 581.257469][ T9327] usb 4-1: Manufacturer: syz [ 581.262105][ T9327] usb 4-1: SerialNumber: syz [ 581.337816][ T9128] hsr_slave_0: entered promiscuous mode [ 581.348242][ T9128] hsr_slave_1: entered promiscuous mode [ 581.355424][ T9128] debugfs: 'hsr0' already exists in 'hsr' [ 581.361277][ T9128] Cannot create hsr debugfs directory [ 581.424383][ T3324] bridge_slave_1: left allmulticast mode [ 581.430249][ T3324] bridge_slave_1: left promiscuous mode [ 581.441572][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.452388][ T3324] bridge_slave_0: left allmulticast mode [ 581.458263][ T3324] bridge_slave_0: left promiscuous mode [ 581.467627][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.970077][ T3324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.003556][ T3324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.018380][ T3324] bond0 (unregistering): Released all slaves [ 582.026237][ T9327] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 582.049112][ T9327] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 582.144666][ T9327] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 582.235676][ T9327] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 582.273017][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 582.289057][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 582.305708][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 582.322293][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 582.331268][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 582.600946][ T3324] hsr_slave_0: left promiscuous mode [ 582.629426][ T3324] hsr_slave_1: left promiscuous mode [ 582.649100][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.686943][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.121157][ T9327] usb 4-1: USB disconnect, device number 3 [ 583.291410][ T9451] loop5: detected capacity change from 0 to 40427 [ 583.334990][ T9451] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 583.369403][ T9451] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 583.432679][ T9451] F2FS-fs (loop5): invalid crc value [ 584.423125][ T5634] Bluetooth: hci1: command tx timeout [ 584.788561][ T3324] team0 (unregistering): Port device team_slave_1 removed [ 584.881771][ T9483] loop3: detected capacity change from 0 to 1764 [ 585.344058][ T3324] team0 (unregistering): Port device team_slave_0 removed [ 585.994212][ T9495] loop3: detected capacity change from 0 to 32768 [ 586.647643][ T5634] Bluetooth: hci1: command tx timeout [ 586.689163][ T9451] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 588.737312][ T5634] Bluetooth: hci1: command tx timeout [ 588.980927][ T5285] 8021q: adding VLAN 0 to HW filter on device eth6 [ 589.349246][ T9514] overlayfs: failed to resolve './file1': -2 [ 589.596947][ T9520] futex_wake_op: syz.2.659 tries to shift op by -1; fix this program [ 589.887796][ T9241] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.928375][ T9241] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.950604][ T9241] bridge_slave_0: entered allmulticast mode [ 589.978864][ T9241] bridge_slave_0: entered promiscuous mode [ 590.007900][ T9241] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.041905][ T9241] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.063546][ T9241] bridge_slave_1: entered allmulticast mode [ 590.080619][ T9241] bridge_slave_1: entered promiscuous mode [ 590.253258][ T1224] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 590.289937][ T9536] loop5: detected capacity change from 0 to 4096 [ 590.317909][ T9536] EXT4-fs: inline encryption not supported [ 590.370341][ T9241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.393807][ T1224] usb 4-1: device descriptor read/64, error -71 [ 590.400733][ T9536] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e042c018, mo2=0003] [ 590.414225][ T9536] System zones: 0-5 [ 590.441824][ T9536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.457526][ T9241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.818001][ T5634] Bluetooth: hci1: command tx timeout [ 590.826485][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.953174][ T1224] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 590.993604][ T9452] lo speed is unknown, defaulting to 1000 [ 591.104983][ T1224] usb 4-1: device descriptor read/64, error -71 [ 591.238342][ T1224] usb usb4-port1: attempt power cycle [ 591.402257][ T9241] team0: Port device team_slave_0 added [ 591.555958][ T9563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.164641][ T1224] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 592.210704][ T9241] team0: Port device team_slave_1 added [ 592.269153][ T1224] usb 4-1: device descriptor read/8, error -71 [ 592.625711][ T9566] loop5: detected capacity change from 0 to 4096 [ 592.911918][ T9570] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 592.973217][ T1224] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 593.062361][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.665'. [ 593.430180][ T1224] usb 4-1: device descriptor read/8, error -71 [ 593.542936][ T9568] tc_dump_action: action bad kind [ 593.543141][ T1224] usb usb4-port1: unable to enumerate USB device [ 593.598672][ T9574] loop3: detected capacity change from 0 to 512 [ 593.628684][ T9574] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 593.748072][ T9574] EXT4-fs (loop3): 1 truncate cleaned up [ 593.802050][ T9574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.536006][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.896858][ T9592] loop5: detected capacity change from 0 to 32768 [ 595.906248][ T9592] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.671 (9592) [ 595.945312][ T9592] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 595.955593][ T9592] BTRFS info (device loop5): using sha256 checksum algorithm [ 596.818273][ T9592] BTRFS info (device loop5): enabling ssd optimizations [ 596.825347][ T9592] BTRFS info (device loop5): turning on async discard [ 596.832115][ T9592] BTRFS info (device loop5): enabling free space tree [ 597.067597][ T9241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.090106][ T9241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.128879][ T9241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.348940][ T9620] overlayfs: missing 'workdir' [ 597.476683][ T30] audit: type=1800 audit(1779278301.361:286): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.671" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 598.074585][ T9241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.130181][ T9241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.217404][ T9241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.388648][ T5626] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 599.916827][ T9241] hsr_slave_0: entered promiscuous mode [ 599.925490][ T9241] hsr_slave_1: entered promiscuous mode [ 599.935404][ T9241] debugfs: 'hsr0' already exists in 'hsr' [ 599.941318][ T9241] Cannot create hsr debugfs directory [ 601.099959][ T9452] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.130520][ T9452] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.167018][ T9452] bridge_slave_0: entered allmulticast mode [ 601.219435][ T9452] bridge_slave_0: entered promiscuous mode [ 601.458618][ T9452] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.960825][ T9657] loop5: detected capacity change from 0 to 64 [ 602.367779][ T9452] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.414496][ T9452] bridge_slave_1: entered allmulticast mode [ 602.560250][ T9452] bridge_slave_1: entered promiscuous mode [ 603.031524][ T9452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.045126][ T9452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.153150][ T9452] team0: Port device team_slave_0 added [ 603.231847][ T9452] team0: Port device team_slave_1 added [ 603.288834][ T3324] bridge_slave_1: left allmulticast mode [ 603.302070][ T3324] bridge_slave_1: left promiscuous mode [ 603.322688][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.354869][ T3324] bridge_slave_0: left allmulticast mode [ 603.372764][ T3324] bridge_slave_0: left promiscuous mode [ 603.391789][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.322836][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 605.340269][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 605.349185][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 605.362665][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 605.374652][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 606.539810][ T3324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.590777][ T9698] loop5: detected capacity change from 0 to 128 [ 606.629501][ T9698] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 606.649680][ T3324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.696891][ T3324] bond0 (unregistering): Released all slaves [ 606.701215][ T9698] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 607.461291][ T5628] Bluetooth: hci4: command tx timeout [ 607.949301][ T9452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.972151][ T9452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.038837][ T9452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.052127][ T9452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.059202][ T9452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.086588][ T9452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.116032][ T30] audit: type=1800 audit(1779278312.011:287): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.685" name="file1" dev="loop5" ino=104 res=0 errno=0 [ 608.818787][ T9721] loop5: detected capacity change from 0 to 32768 [ 608.876025][ T9721] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 609.159419][ T3324] hsr_slave_0: left promiscuous mode [ 609.190142][ T3324] hsr_slave_1: left promiscuous mode [ 609.302499][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.330007][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.498628][ T9731] loop3: detected capacity change from 0 to 64 [ 609.532750][ T5628] Bluetooth: hci4: command tx timeout [ 610.720565][ T5626] ocfs2: Unmounting device (7,5) on (node local) [ 611.016066][ T3324] team0 (unregistering): Port device team_slave_1 removed [ 611.065085][ T3324] team0 (unregistering): Port device team_slave_0 removed [ 611.621616][ T5628] Bluetooth: hci4: command tx timeout [ 612.390775][ T9452] hsr_slave_0: entered promiscuous mode [ 612.448763][ T9452] hsr_slave_1: entered promiscuous mode [ 612.712600][ T9241] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 612.728279][ T9241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.754697][ T9241] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 612.896972][ T9764] sd 0:0:1:0: device reset [ 613.642315][ T9241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 613.691662][ T5628] Bluetooth: hci4: command tx timeout [ 613.787850][ T9769] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma? [ 614.356060][ T9241] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 615.109607][ T9241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 615.185003][ T9241] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 615.690871][ T9776] comedi comedi3: 8255: I/O base address not correctly aligned [ 616.102865][ T9241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 616.420016][ T9685] lo speed is unknown, defaulting to 1000 [ 617.047882][ T9796] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 617.767235][ T30] audit: type=1326 audit(1779278321.672:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.2.701" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf3b79ce59 code=0x0 [ 617.968303][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 617.982321][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 617.997438][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 618.012170][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 618.028782][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 620.220467][ T5634] Bluetooth: hci0: command tx timeout [ 620.765647][ T9844] loop5: detected capacity change from 0 to 2048 [ 620.839575][ T9844] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 620.856840][ T9844] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 620.907401][ T9844] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 622.129723][ T9857] loop3: detected capacity change from 0 to 512 [ 622.151484][ T9857] EXT4-fs (loop3): Test dummy encryption mode enabled [ 622.158398][ T9857] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 622.253919][ T5634] Bluetooth: hci0: command tx timeout [ 622.312053][ T9857] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.712: bad orphan inode 131083 [ 622.322531][ T9857] loop3: lost filesystem error report for type 5 error -117 [ 622.331084][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 622.344924][ C1] EXT4-fs (loop3): initial error at time 1779278326: ext4_orphan_get:1423 [ 622.353634][ C1] EXT4-fs (loop3): last error at time 1779278326: ext4_orphan_get:1423 [ 622.403499][ T9857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.136634][ T9868] overlayfs: failed to resolve './bus': -2 [ 623.357247][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.966538][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.973333][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.441173][ T5634] Bluetooth: hci0: command tx timeout [ 626.680340][ T9894] loop5: detected capacity change from 0 to 64 [ 626.940994][ T5634] Bluetooth: hci0: command tx timeout [ 627.673617][ T9902] loop3: detected capacity change from 0 to 4096 [ 627.713222][ T9902] EXT4-fs (loop3): Test dummy encryption mode enabled [ 627.733540][ T9805] lo speed is unknown, defaulting to 1000 [ 627.737822][ T9452] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 627.764362][ T9902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.789527][ T9452] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 627.810294][ T9452] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 627.826908][ T9452] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 628.134221][ T9452] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 628.467770][ T9452] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 628.953075][ T5775] IPVS: starting estimator thread 0... [ 629.070968][ T9924] IPVS: using max 24 ests per chain, 57600 per kthread [ 629.258041][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.882848][ T9452] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 630.012057][ T9452] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 631.827429][ T9948] overlayfs: failed to resolve './bus': -2 [ 633.366349][ T9959] loop5: detected capacity change from 0 to 4096 [ 633.398761][ T9959] EXT4-fs: inline encryption not supported [ 633.418450][ T3324] bridge_slave_1: left allmulticast mode [ 633.444929][ T9959] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e042c018, mo2=0003] [ 633.445809][ T3324] bridge_slave_1: left promiscuous mode [ 633.459603][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.467572][ T9959] System zones: 0-5 [ 633.484554][ T3324] bridge_slave_0: left allmulticast mode [ 633.490544][ T3324] bridge_slave_0: left promiscuous mode [ 633.493960][ T9959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.496994][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.823622][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.957144][ T3324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.002596][ T3324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.025353][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 635.044418][ T3324] bond0 (unregistering): Released all slaves [ 635.143931][ T9951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 635.526512][ T3324] hsr_slave_0: left promiscuous mode [ 635.538709][ T3324] hsr_slave_1: left promiscuous mode [ 635.546948][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.556536][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.594771][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'. [ 635.766067][ T3324] team0 (unregistering): Port device team_slave_1 removed [ 635.785793][ T3324] team0 (unregistering): Port device team_slave_0 removed [ 636.030412][ T9685] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.039387][ T9685] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.050041][ T9685] bridge_slave_0: entered allmulticast mode [ 636.066230][ T9685] bridge_slave_0: entered promiscuous mode [ 636.092109][ T9980] batman_adv: batadv0: Adding interface: dummy0 [ 636.098547][ T9980] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.152349][ T9980] batman_adv: batadv0: Interface activated: dummy0 [ 636.261351][ T9981] batadv0: mtu less than device minimum [ 636.285965][ T9981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 636.299530][ T9981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 636.311575][ T9981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 636.323595][ T9981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 636.335582][ T9981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 636.347588][ T9981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 636.359592][ T9981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 636.371634][ T9981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 636.383636][ T9981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 636.749349][ T9985] bond0: entered promiscuous mode [ 636.755485][ T9985] bond_slave_0: entered promiscuous mode [ 636.762058][ T9985] bond_slave_1: entered promiscuous mode [ 636.791765][ T9985] bridge1: port 1(bond0) entered blocking state [ 636.798570][ T9985] bridge1: port 1(bond0) entered disabled state [ 636.805252][ T9985] bond0: entered allmulticast mode [ 636.822121][ T9985] bond_slave_0: entered allmulticast mode [ 636.828091][ T9985] bond_slave_1: entered allmulticast mode [ 636.839916][ T9685] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.848021][ T9685] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.872110][ T9685] bridge_slave_1: entered allmulticast mode [ 636.897451][ T9685] bridge_slave_1: entered promiscuous mode [ 637.640367][ T9996] Invalid ELF header magic: != ELF [ 638.900459][ T9685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.111986][ T9685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.348064][ T9452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.441040][ T9327] lo speed is unknown, defaulting to 1000 [ 640.613188][T10010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.740'. [ 640.629246][ T9685] team0: Port device team_slave_0 added [ 640.852201][ T9685] team0: Port device team_slave_1 added [ 640.869305][ T9452] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.846377][ T9685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.869041][ T9685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.948988][ T9685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.305559][ T9685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.331380][ T9685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.416770][ T9685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.841449][ T5634] Bluetooth: hci3: unexpected event for opcode 0x002d [ 643.322974][T10030] loop5: detected capacity change from 0 to 512 [ 643.331284][T10030] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 643.355821][T10030] EXT4-fs error (device loop5): ext4_init_orphan_info:618: comm syz.5.738: orphan file block 0: bad magic [ 643.367420][T10030] loop5: lost filesystem error report for type 5 error -117 [ 643.368923][T10030] EXT4-fs (loop5): mount failed [ 643.376352][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 643.376378][ C0] EXT4-fs (loop5): initial error at time 1779278347: ext4_init_orphan_info:618 [ 643.376407][ C0] EXT4-fs (loop5): last error at time 1779278347: ext4_init_orphan_info:618 [ 643.393295][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 643.435487][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 643.447030][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 643.468457][ T5628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 643.477929][ T5628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 644.670528][T10036] loop5: detected capacity change from 0 to 32768 [ 644.692326][T10036] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 644.798918][T10036] XFS (loop5): Metadata corruption detected at xfs_agf_verify+0x1af/0x8f0, xfs_agf block 0x1 [ 644.809837][T10036] XFS (loop5): Unmount and run xfs_repair [ 644.815619][T10036] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 644.823067][T10036] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 20 00 XAGF.......... . [ 644.832045][T10036] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 01 ................ [ 644.840998][T10036] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 644.849910][T10036] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d b8 00 00 00 00 ................ [ 644.858764][T10036] 00000040: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 644.867696][T10036] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01 ................ [ 644.876707][T10036] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 644.886417][T10036] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 644.895610][T10036] XFS (loop5): metadata I/O error in "xfs_read_agf+0x289/0x5c0" at daddr 0x1 len 1 error 117 [ 644.905924][T10036] loop5: lost filesystem error report for type 5 error -117 [ 644.905949][T10036] XFS (loop5): Error -117 reserving per-AG metadata reserve pool. [ 644.921688][T10036] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1f0/0x240 (fs/xfs/xfs_fsops.c:559). Shutting down filesystem. [ 644.937190][T10036] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 644.945568][T10036] loop5: lost filesystem error report for type 5 error -108 [ 644.945601][T10036] XFS (loop5): Ending clean mount [ 644.958378][T10036] XFS (loop5): Error -5 reserving per-AG metadata reserve pool. [ 645.531115][ T5628] Bluetooth: hci6: command tx timeout [ 646.763135][ T9685] hsr_slave_0: entered promiscuous mode [ 646.816050][ T9685] hsr_slave_1: entered promiscuous mode [ 646.845654][ T9685] debugfs: 'hsr0' already exists in 'hsr' [ 646.979598][ T9685] Cannot create hsr debugfs directory [ 647.905396][ T5628] Bluetooth: hci6: command tx timeout [ 648.404223][T10101] loop3: detected capacity change from 0 to 512 [ 648.513961][T10101] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 649.049022][T10109] loop5: detected capacity change from 0 to 2048 [ 650.173401][ T5628] Bluetooth: hci6: command tx timeout [ 650.995709][T10109] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 651.009369][T10109] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 651.159076][T10109] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 652.709329][ T5628] Bluetooth: hci6: command tx timeout [ 653.875074][ T9805] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.901248][ T9805] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.912367][ T9805] bridge_slave_0: entered allmulticast mode [ 653.921257][ T9805] bridge_slave_0: entered promiscuous mode [ 654.416793][ T9805] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.428167][ T9805] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.236435][ T9805] bridge_slave_1: entered allmulticast mode [ 655.280565][ T9805] bridge_slave_1: entered promiscuous mode [ 655.344844][T10147] nftables ruleset with unbound chain [ 655.482024][T10149] usb usb8: usbfs: process 10149 (syz.5.760) did not claim interface 0 before use [ 655.513160][ T9805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.323666][ T9805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.818063][T10031] lo speed is unknown, defaulting to 1000 [ 658.082433][T10156] loop3: detected capacity change from 0 to 32768 [ 658.111962][T10156] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 658.142954][ T9805] team0: Port device team_slave_0 added [ 658.167641][T10156] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 658.190242][T10156] XFS (loop3): Starting recovery (logdev: internal) [ 658.244753][T10156] XFS (loop3): Ending recovery (logdev: internal) [ 658.301076][ T30] audit: type=1800 audit(1779278362.214:289): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.762" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 658.455005][ T30] audit: type=1800 audit(1779278362.244:290): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.762" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 659.239577][ T36] bridge_slave_1: left allmulticast mode [ 659.245506][ T36] bridge_slave_1: left promiscuous mode [ 659.260151][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.306531][ T36] bridge_slave_0: left allmulticast mode [ 659.345358][ T36] bridge_slave_0: left promiscuous mode [ 659.355649][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.416009][T10173] loop5: detected capacity change from 0 to 2048 [ 659.434041][T10173] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 659.444839][T10173] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 659.496054][T10173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 660.334026][T10178] loop5: detected capacity change from 0 to 2048 [ 660.386368][T10178] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 660.412688][T10178] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 660.488391][T10178] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 661.086279][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.114462][ T5628] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 661.142106][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.189946][ T36] bond0 (unregistering): Released all slaves [ 661.933778][ T9805] team0: Port device team_slave_1 added [ 662.154375][ T5630] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 662.277532][ T9805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.959824][ T9805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.093874][ T9805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.203024][ T9805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.226570][ T9805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.271171][ T9805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.310132][ T36] hsr_slave_0: left promiscuous mode [ 664.316450][ T36] hsr_slave_1: left promiscuous mode [ 664.359828][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.449815][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.950169][ T5628] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 665.294084][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 665.494244][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 665.820912][ T36] team0 (unregistering): Port device team_slave_1 removed [ 665.966544][ T36] team0 (unregistering): Port device team_slave_0 removed [ 665.994279][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 666.011457][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 666.020702][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 666.037870][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 666.046438][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 667.413313][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 667.424267][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 667.458271][ T10] usb 4-1: can't read configurations, error -71 [ 668.127105][T10223] loop3: detected capacity change from 0 to 512 [ 668.207849][ T5634] Bluetooth: hci1: command tx timeout [ 669.356397][T10223] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 669.458511][T10223] EXT4-fs (loop3): 1 truncate cleaned up [ 669.593767][T10223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.671272][T10229] netlink: 68 bytes leftover after parsing attributes in process `syz.5.779'. [ 669.744100][T10230] xt_hashlimit: size too large, truncated to 1048576 [ 670.582620][ T5634] Bluetooth: hci1: command tx timeout [ 670.827500][ T9805] hsr_slave_0: entered promiscuous mode [ 670.834503][ T9805] hsr_slave_1: entered promiscuous mode [ 670.845556][ T9805] debugfs: 'hsr0' already exists in 'hsr' [ 670.859105][ T9805] Cannot create hsr debugfs directory [ 670.876685][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.026132][T10241] loop3: detected capacity change from 0 to 764 [ 671.099316][T10241] rock: directory entry would overflow storage [ 671.123202][T10241] rock: sig=0x5850, size=36, remaining=22 [ 671.373450][T10244] loop5: detected capacity change from 0 to 2048 [ 671.383338][T10244] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 671.396043][T10244] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 671.413315][T10244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 671.468223][ T9327] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 671.652389][ T9327] usb 4-1: Using ep0 maxpacket: 32 [ 671.668663][T10247] loop5: detected capacity change from 0 to 2048 [ 671.680491][ T9327] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 671.713036][T10247] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 671.723898][T10247] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 671.737737][T10247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 671.803578][ T9327] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 671.875154][ T9327] usb 4-1: string descriptor 0 read error: -22 [ 671.896196][ T9327] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 671.960527][ T9327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.030040][T10251] loop5: detected capacity change from 0 to 2048 [ 672.048841][T10251] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 672.062301][T10251] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 672.075853][T10251] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 672.203421][T10241] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 672.274766][ T9327] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 672.330842][ T9327] usb 4-1: MIDIStreaming interface descriptor not found [ 672.533355][T10258] trusted_key: encrypted_key: key user:syz not found [ 672.650521][ T5634] Bluetooth: hci1: command tx timeout [ 672.771670][T10260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.780'. [ 673.248668][ T9327] usb 4-1: USB disconnect, device number 10 [ 674.798101][ T5634] Bluetooth: hci1: command tx timeout [ 675.951159][ T30] audit: type=1326 audit(1779278379.725:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.3.788" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bd19ce59 code=0x7ffc0000 [ 676.331908][ T30] audit: type=1326 audit(1779278379.725:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.3.788" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bd19ce59 code=0x7ffc0000 [ 676.368112][ T30] audit: type=1326 audit(1779278379.735:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.3.788" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f33bd19ce59 code=0x7ffc0000 [ 676.414309][ T30] audit: type=1326 audit(1779278379.735:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.3.788" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bd19ce59 code=0x7ffc0000 [ 676.549176][ T30] audit: type=1326 audit(1779278379.735:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.3.788" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bd19ce59 code=0x7ffc0000 [ 676.577302][ T30] audit: type=1326 audit(1779278379.745:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.3.788" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f33bd19ce59 code=0x7ffc0000 [ 676.723465][ T30] audit: type=1326 audit(1779278379.745:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.3.788" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bd19ce59 code=0x7ffc0000 [ 676.762418][ T30] audit: type=1326 audit(1779278379.745:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.3.788" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bd19ce59 code=0x7ffc0000 [ 676.842299][ T30] audit: type=1326 audit(1779278379.755:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.3.788" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f33bd19ce59 code=0x7ffc0000 [ 676.896865][ T30] audit: type=1326 audit(1779278379.755:300): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.3.788" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bd19ce59 code=0x7ffc0000 [ 677.042314][T10208] lo speed is unknown, defaulting to 1000 [ 679.353919][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 679.380372][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 679.391238][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 679.407215][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 679.416885][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 679.637007][T10308] loop3: detected capacity change from 0 to 2048 [ 679.652183][T10308] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 679.663040][T10308] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 679.681009][T10308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 680.459248][T10315] loop3: detected capacity change from 0 to 256 [ 681.213089][T10031] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.246448][T10031] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.294096][T10031] bridge_slave_0: entered allmulticast mode [ 681.335068][T10031] bridge_slave_0: entered promiscuous mode [ 681.406484][T10031] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.429830][T10031] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.459539][T10031] bridge_slave_1: entered allmulticast mode [ 681.482156][T10031] bridge_slave_1: entered promiscuous mode [ 681.528417][ T5634] Bluetooth: hci4: command tx timeout [ 681.840646][T10328] loop5: detected capacity change from 0 to 32768 [ 681.924636][T10328] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 682.566278][T10328] XFS (loop5): Ending clean mount [ 682.598056][T10328] XFS (loop5): Quotacheck needed: Please wait. [ 682.736523][T10328] XFS (loop5): Quotacheck: Done. [ 683.585220][ T5626] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 683.618531][ T5634] Bluetooth: hci4: command tx timeout [ 683.711126][T10355] fuse: Bad value for 'fd' [ 685.104745][T10031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.142430][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.159262][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.476739][T10031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.643658][T10372] loop3: detected capacity change from 0 to 2048 [ 685.654511][T10372] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 685.665235][T10372] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 685.681111][T10372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.697617][ T5634] Bluetooth: hci4: command tx timeout [ 685.844500][T10031] team0: Port device team_slave_0 added [ 685.887491][T10031] team0: Port device team_slave_1 added [ 687.816305][ T5634] Bluetooth: hci4: command tx timeout [ 689.359284][T10389] overlayfs: missing 'lowerdir' [ 689.559020][T10031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.566245][T10031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.596228][T10031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.649565][T10031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.667417][T10031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.696331][T10031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.755290][T10413] loop3: detected capacity change from 0 to 4096 [ 690.802403][T10415] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 690.888772][T10298] lo speed is unknown, defaulting to 1000 [ 690.917127][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 691.043432][ T36] bridge_slave_1: left allmulticast mode [ 691.064670][ T36] bridge_slave_1: left promiscuous mode [ 691.089275][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.101435][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.123679][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 691.140707][ T10] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 691.152484][ T36] bridge_slave_0: left allmulticast mode [ 691.165305][ T36] bridge_slave_0: left promiscuous mode [ 691.171259][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.178838][ T10] usb 6-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 691.189074][ T10] usb 6-1: Product: syz [ 691.199320][ T10] usb 6-1: SerialNumber: syz [ 691.210840][ T10] usb 6-1: config 0 descriptor?? [ 691.354377][T10426] loop3: detected capacity change from 0 to 2048 [ 691.374295][T10426] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 691.385570][T10426] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 691.399289][T10426] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 691.480018][ T10] usb 6-1: USB disconnect, device number 4 [ 691.856185][T10433] syz.3.815 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 691.889967][T10433] ubi31: attaching mtd0 [ 692.448124][T10433] ubi31: scanning is finished [ 692.916505][T10433] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 693.274340][T10444] overlayfs: missing 'lowerdir' [ 693.509544][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.101689][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.455471][ T36] bond0 (unregistering): Released all slaves [ 695.121448][T10457] netlink: 182 bytes leftover after parsing attributes in process `syz.5.821'. [ 695.487784][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 697.064660][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 697.141066][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.165374][ T24] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 11 [ 697.174830][ T24] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 697.184089][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.220518][ T24] usb 4-1: can't set config #1, error -71 [ 697.236833][ T36] hsr_slave_0: left promiscuous mode [ 697.275013][ T24] usb 4-1: USB disconnect, device number 11 [ 697.369651][ T36] hsr_slave_1: left promiscuous mode [ 697.401570][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.424124][T10473] netlink: 20 bytes leftover after parsing attributes in process `syz.5.823'. [ 697.460928][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.051421][ T36] team0 (unregistering): Port device team_slave_1 removed [ 698.085144][ T36] team0 (unregistering): Port device team_slave_0 removed [ 698.315906][T10031] hsr_slave_0: entered promiscuous mode [ 698.322799][T10031] hsr_slave_1: entered promiscuous mode [ 698.584389][T10490] loop5: detected capacity change from 0 to 256 [ 698.594215][T10487] loop3: detected capacity change from 0 to 4096 [ 698.620187][T10487] EXT4-fs: inline encryption not supported [ 698.660537][T10487] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e042c018, mo2=0003] [ 698.687683][T10487] System zones: 0-5 [ 698.697678][T10490] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x0a771f60, utbl_chksum : 0xe619d30d) [ 698.766348][T10487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.575619][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.904233][T10208] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.913062][T10208] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.920470][T10208] bridge_slave_0: entered allmulticast mode [ 699.929423][T10208] bridge_slave_0: entered promiscuous mode [ 699.938447][T10208] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.945894][T10208] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.953416][T10208] bridge_slave_1: entered allmulticast mode [ 699.963986][T10208] bridge_slave_1: entered promiscuous mode [ 700.655088][T10522] overlayfs: missing 'lowerdir' [ 701.359668][T10298] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.368507][T10298] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.375787][T10298] bridge_slave_0: entered allmulticast mode [ 701.384183][T10298] bridge_slave_0: entered promiscuous mode [ 701.410509][T10208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.472124][ T433] bridge_slave_1: left allmulticast mode [ 701.484300][ T433] bridge_slave_1: left promiscuous mode [ 701.492051][ T433] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.807099][ T433] bridge_slave_0: left allmulticast mode [ 701.814176][ T433] bridge_slave_0: left promiscuous mode [ 701.821301][ T433] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.222624][ T433] bridge_slave_1: left allmulticast mode [ 702.241767][ T433] bridge_slave_1: left promiscuous mode [ 702.278281][ T433] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.512149][ T433] bridge_slave_0: left allmulticast mode [ 702.525873][ T433] bridge_slave_0: left promiscuous mode [ 702.555516][ T433] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.661956][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.833'. [ 703.580502][ T433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.593546][ T433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.607260][ T433] bond0 (unregistering): Released all slaves [ 703.745571][ T433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.758880][ T433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.769164][ T433] bond0 (unregistering): Released all slaves [ 703.782089][T10298] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.789579][T10298] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.797047][T10298] bridge_slave_1: entered allmulticast mode [ 703.804786][T10298] bridge_slave_1: entered promiscuous mode [ 703.814960][T10208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.041285][T10568] loop3: detected capacity change from 0 to 1764 [ 705.895389][T10208] team0: Port device team_slave_0 added [ 705.935108][T10208] team0: Port device team_slave_1 added [ 706.174745][T10578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 706.190301][T10578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 706.214461][T10578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 706.239949][ T433] hsr_slave_0: left promiscuous mode [ 706.246049][T10578] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 706.370701][T10578] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 706.560750][ T433] hsr_slave_1: left promiscuous mode [ 706.670797][ T433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.823833][ T433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.897007][ T433] hsr_slave_0: left promiscuous mode [ 706.937896][ T433] hsr_slave_1: left promiscuous mode [ 706.959683][ T433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.013947][ T433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.352664][T10591] overlayfs: missing 'lowerdir' [ 707.423897][ T433] team0 (unregistering): Port device team_slave_1 removed [ 707.932732][ T433] team0 (unregistering): Port device team_slave_0 removed [ 708.198314][T10594] loop3: detected capacity change from 0 to 4096 [ 708.210135][T10594] EXT4-fs: inline encryption not supported [ 708.263759][T10594] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e042c018, mo2=0003] [ 708.292822][T10594] System zones: 0-5 [ 708.312073][T10594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.634886][ T5634] Bluetooth: hci0: command tx timeout [ 708.968856][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.024588][ T433] team0 (unregistering): Port device team_slave_1 removed [ 709.102426][ T433] team0 (unregistering): Port device team_slave_0 removed [ 709.353523][T10298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.220611][T10298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.313630][T10619] loop3: detected capacity change from 0 to 128 [ 710.406702][T10619] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 710.414988][T10208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.430109][T10208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.456141][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 710.466828][T10208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.538240][T10619] ext4 filesystem being mounted at /226/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 710.549912][T10298] team0: Port device team_slave_0 added [ 710.652087][ T5634] Bluetooth: hci0: command tx timeout [ 710.686155][T10208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.711291][T10208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.740786][T10208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.758980][T10618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 710.784956][T10298] team0: Port device team_slave_1 added [ 711.036068][T10624] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 711.649764][T10298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.684989][T10298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.740613][T10298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.051717][ T5630] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 712.786927][ T5634] Bluetooth: hci0: command tx timeout [ 713.118581][T10208] hsr_slave_0: entered promiscuous mode [ 713.143147][T10208] hsr_slave_1: entered promiscuous mode [ 713.152848][T10208] debugfs: 'hsr0' already exists in 'hsr' [ 713.180139][T10208] Cannot create hsr debugfs directory [ 713.198732][T10298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.205959][T10298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.232103][T10298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.207155][T10298] hsr_slave_0: entered promiscuous mode [ 714.241065][T10298] hsr_slave_1: entered promiscuous mode [ 714.278751][T10298] debugfs: 'hsr0' already exists in 'hsr' [ 714.320238][T10298] Cannot create hsr debugfs directory [ 714.572433][T10676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.857'. [ 714.630144][T10576] lo speed is unknown, defaulting to 1000 [ 714.805840][ T5634] Bluetooth: hci0: command tx timeout [ 717.782044][T10692] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 717.829493][T10694] loop5: detected capacity change from 0 to 2048 [ 717.842115][T10694] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 717.854246][T10694] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 717.875945][T10694] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 719.109935][T10700] loop3: detected capacity change from 0 to 4096 [ 719.126655][T10700] EXT4-fs: inline encryption not supported [ 719.172424][T10700] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e042c018, mo2=0003] [ 719.204775][T10700] System zones: 0-5 [ 719.232545][T10700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.287371][ T433] bridge_slave_1: left allmulticast mode [ 719.321757][ T433] bridge_slave_1: left promiscuous mode [ 719.346121][ T433] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.369274][ T433] bridge_slave_0: left allmulticast mode [ 719.391368][ T433] bridge_slave_0: left promiscuous mode [ 719.413604][ T433] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.852565][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.863060][ T433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.923912][ T433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.942152][T10721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.867'. [ 720.969657][ T433] bond0 (unregistering): Released all slaves [ 721.739249][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 721.739299][ T30] audit: type=1804 audit(1779278425.578:311): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.868" name="/newroot/232/file1" dev="fuse" ino=1 res=1 errno=0 [ 722.048670][ T30] audit: type=1800 audit(1779278425.578:312): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.868" name="/" dev="fuse" ino=1 res=0 errno=0 [ 722.069378][ T30] audit: type=1800 audit(1779278425.588:313): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.868" name="/" dev="fuse" ino=1 res=0 errno=0 [ 722.334087][T10739] loop5: detected capacity change from 0 to 256 [ 722.366383][T10739] exfat: Deprecated parameter 'utf8' [ 722.427948][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5 [ 722.448377][T10739] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 723.213820][ T433] hsr_slave_0: left promiscuous mode [ 724.232647][ T433] hsr_slave_1: left promiscuous mode [ 724.304380][ T433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.520143][T10759] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 724.538451][ T433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.232157][ T433] team0 (unregistering): Port device team_slave_1 removed [ 725.250361][ T433] team0 (unregistering): Port device team_slave_0 removed [ 726.241818][T10576] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.260207][T10576] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.268702][T10576] bridge_slave_0: entered allmulticast mode [ 726.278345][T10576] bridge_slave_0: entered promiscuous mode [ 726.298529][T10576] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.306013][T10576] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.315653][T10576] bridge_slave_1: entered allmulticast mode [ 726.336963][T10576] bridge_slave_1: entered promiscuous mode [ 727.563059][T10800] loop5: detected capacity change from 0 to 128 [ 727.851367][T10800] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 727.874386][T10800] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 729.437698][T10576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.446143][T10809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.880'. [ 729.528214][T10578] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 729.539309][T10578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 729.549792][T10578] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 729.564580][T10578] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 729.577251][T10578] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 729.590752][T10576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.661671][ T5626] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 729.774302][T10576] team0: Port device team_slave_0 added [ 729.819529][T10576] team0: Port device team_slave_1 added [ 729.936898][ T5285] 8021q: adding VLAN 0 to HW filter on device eth6 [ 730.894174][T10298] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 731.415564][T10298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 731.473749][T10298] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 731.545466][T10298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 731.693152][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 731.715057][T10578] Bluetooth: hci1: command tx timeout [ 731.787888][T10830] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 731.801336][T10298] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 731.951635][T10298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 731.983976][T10576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.006930][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.068341][T10576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.082228][T10576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.093007][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.131395][T10576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.183083][T10298] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 732.213952][T10298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 732.376181][T10576] hsr_slave_0: entered promiscuous mode [ 732.383931][T10576] hsr_slave_1: entered promiscuous mode [ 732.421217][T10852] kAFS: unable to lookup cell '' [ 733.769453][T10578] Bluetooth: hci1: command tx timeout [ 734.614970][T10876] Invalid source name [ 735.837979][T10810] lo speed is unknown, defaulting to 1000 [ 735.845152][T10578] Bluetooth: hci1: command tx timeout [ 736.697120][T10893] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 737.255913][ T1316] bridge_slave_1: left allmulticast mode [ 737.288183][ T1316] bridge_slave_1: left promiscuous mode [ 737.411150][ T1316] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.799804][ T1316] bridge_slave_0: left allmulticast mode [ 737.896422][ T1316] bridge_slave_0: left promiscuous mode [ 737.902337][ T1316] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.924743][T10578] Bluetooth: hci1: command tx timeout [ 738.296894][ T1316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.311800][ T1316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.323636][ T1316] bond0 (unregistering): Released all slaves [ 738.539011][ T1316] hsr_slave_0: left promiscuous mode [ 738.547949][ T1316] hsr_slave_1: left promiscuous mode [ 738.554008][ T1316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.562517][ T1316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.731685][ T1316] team0 (unregistering): Port device team_slave_1 removed [ 738.782214][ T1316] team0 (unregistering): Port device team_slave_0 removed [ 740.947383][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 741.072315][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 741.088155][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 741.111847][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 741.129020][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 742.844288][T10981] ubi31: attaching mtd0 [ 742.865397][T10981] ubi31: scanning is finished [ 743.537184][T10937] Bluetooth: hci4: command tx timeout [ 743.557559][T10810] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.574316][T10810] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.594405][T10810] bridge_slave_0: entered allmulticast mode [ 743.608351][T10981] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 743.761887][T10810] bridge_slave_0: entered promiscuous mode [ 743.787393][T10810] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.804214][T10810] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.814561][T10810] bridge_slave_1: entered allmulticast mode [ 743.848681][T10810] bridge_slave_1: entered promiscuous mode [ 743.879588][T10994] loop3: detected capacity change from 0 to 64 [ 744.160646][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.909'. [ 744.193465][T11001] virtio-fs: tag not found [ 745.605459][T10937] Bluetooth: hci4: command tx timeout [ 745.782574][T11007] ------------[ cut here ]------------ [ 745.789261][T11007] !buffer_uptodate(bh) [ 745.789278][T11007] WARNING: fs/buffer.c:1087 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.3.908/11007 [ 745.803132][T11007] Modules linked in: [ 745.807468][T11007] CPU: 0 UID: 0 PID: 11007 Comm: syz.3.908 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.817334][T10810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.818457][T11007] Tainted: [L]=SOFTLOCKUP [ 745.831747][T11007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 745.843232][T11007] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 745.848040][T10810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.850217][T11007] Code: 4c 89 f7 e8 09 5c da ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 64 63 fb ff e8 ff 1d 6f ff eb 8c e8 f8 1d 6f ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 ea 1d 6f ff 90 0f 0b 90 e9 cf fd ff ff [ 745.877847][T11007] RSP: 0018:ffffc9000481e3e8 EFLAGS: 00010293 [ 745.884079][T11007] RAX: ffffffff8256a698 RBX: ffff8880372bb0e8 RCX: ffff88802e651ec0 [ 745.894257][T11007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 745.902267][T11007] RBP: ffff888028dbe001 R08: ffff8880372bb0ef R09: 1ffff11006e5761d [ 745.910352][T11007] R10: dffffc0000000000 R11: ffffed1006e5761e R12: ffff888049395a00 [ 745.918394][T11007] R13: ffff888050e90828 R14: ffff8880372bb0e8 R15: 0000000000000012 [ 745.926444][T11007] FS: 00007f33bb3f66c0(0000) GS:ffff888125289000(0000) knlGS:0000000000000000 [ 745.935472][T11007] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 745.942874][T11007] CR2: 00007f06e58a3000 CR3: 0000000094d6e000 CR4: 0000000000350ef0 [ 745.951836][T11007] Call Trace: [ 745.955155][T11007] [ 745.958095][T11007] bfs_get_block+0x5da/0xae0 [ 745.962818][T11007] __block_write_begin_int+0x6c6/0x1910 [ 745.968484][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 745.974226][T11007] ? __pfx_bfs_get_block+0x10/0x10 [ 745.979426][T11007] ? __pfx___block_write_begin_int+0x10/0x10 [ 745.985692][T11007] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 745.991879][T11007] ? __pfx_bfs_get_block+0x10/0x10 [ 745.997065][T11007] block_write_begin+0x8d/0x120 [ 746.001932][T11007] ? bfs_write_begin+0x1e/0xd0 [ 746.006792][T11007] bfs_write_begin+0x35/0xd0 [ 746.011402][T11007] generic_perform_write+0x2e2/0x8f0 [ 746.016872][T11007] ? __pfx_generic_perform_write+0x10/0x10 [ 746.022712][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.028438][T11007] ? file_update_time_flags+0x219/0x4a0 [ 746.034045][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.039740][T11007] ? __generic_file_write_iter+0xf9/0x230 [ 746.046489][T11007] ? generic_file_write_iter+0x136/0x680 [ 746.052159][T11007] generic_file_write_iter+0x14a/0x680 [ 746.060027][T11007] ? __pfx_generic_file_write_iter+0x10/0x10 [ 746.066137][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.071800][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.077511][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.083167][T11007] ? is_bpf_text_address+0x26/0x2b0 [ 746.088479][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.094164][T11007] ? is_bpf_text_address+0x292/0x2b0 [ 746.099743][T11007] ? is_bpf_text_address+0x26/0x2b0 [ 746.105013][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.110665][T11007] ? kernel_text_address+0xa5/0xe0 [ 746.115892][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.116897][T10810] team0: Port device team_slave_0 added [ 746.121536][T11007] ? __kernel_text_address+0xd/0x30 [ 746.121578][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.137998][T11007] ? unwind_get_return_address+0x4d/0x90 [ 746.144247][T11007] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 746.151312][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.157594][T11007] ? arch_stack_walk+0xfb/0x150 [ 746.162518][T11007] __kernel_write_iter+0x41e/0x880 [ 746.167787][T11007] ? __pfx___kernel_write_iter+0x10/0x10 [ 746.168318][T10810] team0: Port device team_slave_1 added [ 746.173452][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.184736][T11007] ? __asan_memset+0x22/0x50 [ 746.189363][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.195063][T11007] ? iov_iter_kvec+0xb8/0x180 [ 746.199786][T11007] __kernel_write+0x106/0x170 [ 746.204544][T11007] ? __pfx___kernel_write+0x10/0x10 [ 746.209961][T11007] dump_emit+0x8e9/0xab0 [ 746.214272][T11007] ? __pfx_dump_emit+0x10/0x10 [ 746.219054][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.224838][T11007] ? __kasan_kmalloc+0x93/0xb0 [ 746.229707][T11007] ? __kmalloc_cache_noprof+0x31c/0x660 [ 746.235373][T11007] elf_core_dump+0x2e5d/0x3ad0 [ 746.240177][T11007] ? __pfx_elf_core_dump+0x10/0x10 [ 746.245428][T11007] ? __kasan_kmalloc+0x93/0xb0 [ 746.252362][T11007] ? __kvmalloc_node_noprof+0x528/0x8a0 [ 746.258613][T11007] ? coredump_write+0x387/0x1910 [ 746.263570][T11007] ? vfs_coredump+0x3807/0x4530 [ 746.268540][T11007] ? get_signal+0x1107/0x1330 [ 746.273227][T11007] ? arch_do_signal_or_restart+0xbc/0x840 [ 746.279061][T11007] ? irqentry_exit+0x289/0x760 [ 746.284159][T11007] ? asm_exc_page_fault+0x26/0x30 [ 746.289234][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.294944][T11007] ? mas_ascend+0x304/0x890 [ 746.299500][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.305222][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.310891][T11007] coredump_write+0x1216/0x1910 [ 746.315857][T11007] ? __pfx_coredump_write+0x10/0x10 [ 746.321067][T11007] ? do_raw_spin_lock+0x12b/0x2f0 [ 746.327708][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.333373][T11007] ? put_files_struct+0x256/0x350 [ 746.338486][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.344190][T11007] ? do_raw_spin_unlock+0xf5/0x210 [ 746.349360][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.355883][T11007] ? unshare_files+0xfc/0x140 [ 746.360579][T11007] vfs_coredump+0x3807/0x4530 [ 746.366043][T11007] ? __pfx_vfs_coredump+0x10/0x10 [ 746.371109][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.376826][T11007] ? __lock_acquire+0x6b5/0x2cf0 [ 746.381786][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.387493][T11007] ? __lock_acquire+0x6b5/0x2cf0 [ 746.392458][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.398159][T11007] ? __lock_acquire+0x6b5/0x2cf0 [ 746.403107][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.408959][T11007] ? __lock_acquire+0x6b5/0x2cf0 [ 746.414012][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.419695][T11007] ? __lock_acquire+0x6b5/0x2cf0 [ 746.425047][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.430705][T11007] ? lock_acquire+0x106/0x350 [ 746.435478][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.441181][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.446995][T11007] ? lock_acquire+0x106/0x350 [ 746.451692][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.458126][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.464336][T11007] ? is_bpf_text_address+0x26/0x2b0 [ 746.469638][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.475324][T11007] ? is_bpf_text_address+0x292/0x2b0 [ 746.480618][T11007] ? is_bpf_text_address+0x26/0x2b0 [ 746.485885][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.491537][T11007] ? kernel_text_address+0xa5/0xe0 [ 746.496698][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.502359][T11007] ? __kernel_text_address+0xd/0x30 [ 746.507729][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.513499][T11007] ? unwind_get_return_address+0x4d/0x90 [ 746.519203][T11007] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 746.525399][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.531027][T11007] ? arch_stack_walk+0xfb/0x150 [ 746.536031][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.541698][T11007] ? stack_trace_save+0xa9/0x100 [ 746.546869][T11007] ? __pfx_stack_trace_save+0x10/0x10 [ 746.552254][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.558694][T11007] ? stack_depot_save_flags+0x33/0x810 [ 746.566891][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.572588][T11007] ? kasan_save_track+0x4f/0x80 [ 746.577528][T11007] ? kasan_save_track+0x3e/0x80 [ 746.582522][T11007] ? kasan_save_free_info+0x46/0x50 [ 746.587784][T11007] ? __kasan_slab_free+0x5c/0x80 [ 746.592728][T11007] ? kmem_cache_free+0x182/0x650 [ 746.597837][T11007] ? get_signal+0xa4a/0x1330 [ 746.602476][T11007] ? arch_do_signal_or_restart+0xbc/0x840 [ 746.608278][T11007] ? irqentry_exit+0x289/0x760 [ 746.613058][T11007] ? asm_exc_page_fault+0x26/0x30 [ 746.618186][T11007] ? _raw_spin_unlock_irq+0x23/0x50 [ 746.623398][T11007] get_signal+0x1107/0x1330 [ 746.628021][T11007] arch_do_signal_or_restart+0xbc/0x840 [ 746.634098][T11007] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 746.640359][T11007] irqentry_exit+0x289/0x760 [ 746.645085][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.650758][T11007] ? trace_irq_disable+0x3b/0x140 [ 746.656399][T11007] asm_exc_page_fault+0x26/0x30 [ 746.657215][ T5285] 8021q: adding VLAN 0 to HW filter on device eth8 [ 746.662211][T11007] RIP: 0033:0x7f33bd19ce61 [ 746.673417][T11007] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 746.693303][T10810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.693675][T11007] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 746.706745][T11007] RAX: 0000000000000000 RBX: 00007f33bd416090 RCX: 00007f33bd19ce59 [ 746.715028][T11007] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 746.723002][T11007] RBP: 00007f33bd232d6f R08: 0000000000000000 R09: 0000000000000000 [ 746.731206][T11007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 746.739285][T11007] R13: 00007f33bd416128 R14: 00007f33bd416090 R15: 00007fff82b0cc38 [ 746.747336][T11007] [ 746.750355][T11007] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 746.757635][T11007] CPU: 0 UID: 0 PID: 11007 Comm: syz.3.908 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.768515][T11007] Tainted: [L]=SOFTLOCKUP [ 746.773103][T11007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 746.783153][T11007] Call Trace: [ 746.786436][T11007] [ 746.789360][T11007] vpanic+0x56c/0xa60 [ 746.793364][T11007] ? __pfx__printk+0x10/0x10 [ 746.797980][T11007] ? __pfx_vpanic+0x10/0x10 [ 746.802498][T11007] ? is_bpf_text_address+0x292/0x2b0 [ 746.807794][T11007] ? is_bpf_text_address+0x26/0x2b0 [ 746.813007][T11007] panic+0xc5/0xd0 [ 746.816819][T11007] ? __pfx_panic+0x10/0x10 [ 746.821256][T11007] __warn+0x315/0x4c0 [ 746.825242][T11007] ? mark_buffer_dirty+0x299/0x410 [ 746.830486][T11007] ? mark_buffer_dirty+0x299/0x410 [ 746.835614][T11007] __report_bug+0x29a/0x540 [ 746.840137][T11007] ? mark_buffer_dirty+0x299/0x410 [ 746.845265][T11007] ? __pfx___report_bug+0x10/0x10 [ 746.850305][T11007] ? lockdep_hardirqs_on+0x7a/0x110 [ 746.855521][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.861160][T11007] ? irqentry_exit+0x218/0x760 [ 746.865940][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.871589][T11007] ? trace_irq_disable+0x3b/0x140 [ 746.876642][T11007] ? mark_buffer_dirty+0x29b/0x410 [ 746.881861][T11007] ? mark_buffer_dirty+0x299/0x410 [ 746.887035][T11007] report_bug+0x16a/0x220 [ 746.891394][T11007] ? mark_buffer_dirty+0x299/0x410 [ 746.896525][T11007] ? mark_buffer_dirty+0x29b/0x410 [ 746.901684][T11007] handle_bug+0x9c/0x200 [ 746.905942][T11007] exc_invalid_op+0x1a/0x50 [ 746.910455][T11007] asm_exc_invalid_op+0x1a/0x20 [ 746.915321][T11007] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 746.921069][T11007] Code: 4c 89 f7 e8 09 5c da ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 64 63 fb ff e8 ff 1d 6f ff eb 8c e8 f8 1d 6f ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 ea 1d 6f ff 90 0f 0b 90 e9 cf fd ff ff [ 746.940768][T11007] RSP: 0018:ffffc9000481e3e8 EFLAGS: 00010293 [ 746.946846][T11007] RAX: ffffffff8256a698 RBX: ffff8880372bb0e8 RCX: ffff88802e651ec0 [ 746.954817][T11007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 746.962789][T11007] RBP: ffff888028dbe001 R08: ffff8880372bb0ef R09: 1ffff11006e5761d [ 746.970756][T11007] R10: dffffc0000000000 R11: ffffed1006e5761e R12: ffff888049395a00 [ 746.978725][T11007] R13: ffff888050e90828 R14: ffff8880372bb0e8 R15: 0000000000000012 [ 746.986705][T11007] ? mark_buffer_dirty+0x298/0x410 [ 746.991841][T11007] ? mark_buffer_dirty+0x298/0x410 [ 746.996966][T11007] bfs_get_block+0x5da/0xae0 [ 747.001658][T11007] __block_write_begin_int+0x6c6/0x1910 [ 747.007203][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.013297][T11007] ? __pfx_bfs_get_block+0x10/0x10 [ 747.018411][T11007] ? __pfx___block_write_begin_int+0x10/0x10 [ 747.024399][T11007] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 747.030478][T11007] ? __pfx_bfs_get_block+0x10/0x10 [ 747.035590][T11007] block_write_begin+0x8d/0x120 [ 747.040443][T11007] ? bfs_write_begin+0x1e/0xd0 [ 747.045205][T11007] bfs_write_begin+0x35/0xd0 [ 747.049824][T11007] generic_perform_write+0x2e2/0x8f0 [ 747.055135][T11007] ? __pfx_generic_perform_write+0x10/0x10 [ 747.060949][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.066583][T11007] ? file_update_time_flags+0x219/0x4a0 [ 747.072138][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.077772][T11007] ? __generic_file_write_iter+0xf9/0x230 [ 747.083510][T11007] ? generic_file_write_iter+0x136/0x680 [ 747.089162][T11007] generic_file_write_iter+0x14a/0x680 [ 747.094645][T11007] ? __pfx_generic_file_write_iter+0x10/0x10 [ 747.100721][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.106401][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.112047][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.117687][T11007] ? is_bpf_text_address+0x26/0x2b0 [ 747.122891][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.128522][T11007] ? is_bpf_text_address+0x292/0x2b0 [ 747.133805][T11007] ? is_bpf_text_address+0x26/0x2b0 [ 747.139010][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.144647][T11007] ? kernel_text_address+0xa5/0xe0 [ 747.149768][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.155394][T11007] ? __kernel_text_address+0xd/0x30 [ 747.160599][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.166229][T11007] ? unwind_get_return_address+0x4d/0x90 [ 747.171862][T11007] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 747.178069][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.183699][T11007] ? arch_stack_walk+0xfb/0x150 [ 747.188556][T11007] __kernel_write_iter+0x41e/0x880 [ 747.193678][T11007] ? __pfx___kernel_write_iter+0x10/0x10 [ 747.199321][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.204957][T11007] ? __asan_memset+0x22/0x50 [ 747.209547][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.215266][T11007] ? iov_iter_kvec+0xb8/0x180 [ 747.219953][T11007] __kernel_write+0x106/0x170 [ 747.224727][T11007] ? __pfx___kernel_write+0x10/0x10 [ 747.229949][T11007] dump_emit+0x8e9/0xab0 [ 747.234201][T11007] ? __pfx_dump_emit+0x10/0x10 [ 747.238972][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.244599][T11007] ? __kasan_kmalloc+0x93/0xb0 [ 747.249546][T11007] ? __kmalloc_cache_noprof+0x31c/0x660 [ 747.255107][T11007] elf_core_dump+0x2e5d/0x3ad0 [ 747.259888][T11007] ? __pfx_elf_core_dump+0x10/0x10 [ 747.264999][T11007] ? __kasan_kmalloc+0x93/0xb0 [ 747.269803][T11007] ? __kvmalloc_node_noprof+0x528/0x8a0 [ 747.275351][T11007] ? coredump_write+0x387/0x1910 [ 747.280299][T11007] ? vfs_coredump+0x3807/0x4530 [ 747.285153][T11007] ? get_signal+0x1107/0x1330 [ 747.289823][T11007] ? arch_do_signal_or_restart+0xbc/0x840 [ 747.295584][T11007] ? irqentry_exit+0x289/0x760 [ 747.300353][T11007] ? asm_exc_page_fault+0x26/0x30 [ 747.305378][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.311005][T11007] ? mas_ascend+0x304/0x890 [ 747.315543][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.321272][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.326998][T11007] coredump_write+0x1216/0x1910 [ 747.331866][T11007] ? __pfx_coredump_write+0x10/0x10 [ 747.337056][T11007] ? do_raw_spin_lock+0x12b/0x2f0 [ 747.342124][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.347785][T11007] ? put_files_struct+0x256/0x350 [ 747.352818][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.358548][T11007] ? do_raw_spin_unlock+0xf5/0x210 [ 747.363681][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.369320][T11007] ? unshare_files+0xfc/0x140 [ 747.374448][T11007] vfs_coredump+0x3807/0x4530 [ 747.379173][T11007] ? __pfx_vfs_coredump+0x10/0x10 [ 747.384205][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.389844][T11007] ? __lock_acquire+0x6b5/0x2cf0 [ 747.394790][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.400512][T11007] ? __lock_acquire+0x6b5/0x2cf0 [ 747.405458][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.411112][T11007] ? __lock_acquire+0x6b5/0x2cf0 [ 747.416051][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.421682][T11007] ? __lock_acquire+0x6b5/0x2cf0 [ 747.426618][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.432252][T11007] ? __lock_acquire+0x6b5/0x2cf0 [ 747.437200][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.442837][T11007] ? lock_acquire+0x106/0x350 [ 747.447527][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.453169][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.458820][T11007] ? lock_acquire+0x106/0x350 [ 747.463516][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.469157][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.474805][T11007] ? is_bpf_text_address+0x26/0x2b0 [ 747.480013][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.485650][T11007] ? is_bpf_text_address+0x292/0x2b0 [ 747.490936][T11007] ? is_bpf_text_address+0x26/0x2b0 [ 747.496136][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.501772][T11007] ? kernel_text_address+0xa5/0xe0 [ 747.506893][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.512546][T11007] ? __kernel_text_address+0xd/0x30 [ 747.517747][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.523465][T11007] ? unwind_get_return_address+0x4d/0x90 [ 747.529104][T11007] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 747.535264][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.540894][T11007] ? arch_stack_walk+0xfb/0x150 [ 747.545758][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.551386][T11007] ? stack_trace_save+0xa9/0x100 [ 747.556418][T11007] ? __pfx_stack_trace_save+0x10/0x10 [ 747.561888][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.567523][T11007] ? stack_depot_save_flags+0x33/0x810 [ 747.572997][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.578712][T11007] ? kasan_save_track+0x4f/0x80 [ 747.583574][T11007] ? kasan_save_track+0x3e/0x80 [ 747.588430][T11007] ? kasan_save_free_info+0x46/0x50 [ 747.593697][T11007] ? __kasan_slab_free+0x5c/0x80 [ 747.598764][T11007] ? kmem_cache_free+0x182/0x650 [ 747.603718][T11007] ? get_signal+0xa4a/0x1330 [ 747.608314][T11007] ? arch_do_signal_or_restart+0xbc/0x840 [ 747.614046][T11007] ? irqentry_exit+0x289/0x760 [ 747.618820][T11007] ? asm_exc_page_fault+0x26/0x30 [ 747.623903][T11007] ? _raw_spin_unlock_irq+0x23/0x50 [ 747.629111][T11007] get_signal+0x1107/0x1330 [ 747.633632][T11007] arch_do_signal_or_restart+0xbc/0x840 [ 747.639299][T11007] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 747.645994][T11007] irqentry_exit+0x289/0x760 [ 747.650625][T11007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.656266][T11007] ? trace_irq_disable+0x3b/0x140 [ 747.661315][T11007] asm_exc_page_fault+0x26/0x30 [ 747.666171][T11007] RIP: 0033:0x7f33bd19ce61 [ 747.670582][T11007] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 747.690192][T11007] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 747.696279][T11007] RAX: 0000000000000000 RBX: 00007f33bd416090 RCX: 00007f33bd19ce59 [ 747.704249][T11007] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 747.712217][T11007] RBP: 00007f33bd232d6f R08: 0000000000000000 R09: 0000000000000000 [ 747.720272][T11007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 747.728266][T11007] R13: 00007f33bd416128 R14: 00007f33bd416090 R15: 00007fff82b0cc38 [ 747.736258][T11007] [ 747.739661][T11007] Kernel Offset: disabled [ 747.743985][T11007] Rebooting in 86400 seconds..