last executing test programs: 10m3.865462783s ago: executing program 32 (id=270): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x4, 0x20000000, 0x4) 9m43.084003399s ago: executing program 33 (id=520): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000001500)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d6d6163677265656b2c756e695f786c6174653d302c636865636b3d7374726963742c757466383d302c756e695f786c6174653d302c726f6469722c636f6465706167653d3836362c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c696f636861727365743d63703737352c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c756e695f786c6174653d312c616c6c6f775f7574696d653d303030303030303030303030303030303030303130300d137b48180c6dd57a25d9312c00"], 0x1, 0x369, &(0x7f0000000700)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000ac0)=""/4100, 0x1004) 5m28.096995263s ago: executing program 34 (id=2595): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 3m43.428884738s ago: executing program 35 (id=3528): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0x5, 0x3}}, 0x30) r2 = socket$inet(0x2, 0xa, 0x7) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 3m30.269835956s ago: executing program 36 (id=3649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) tgkill(0x0, 0x0, 0x39) 3m20.01406172s ago: executing program 37 (id=3726): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) getuid() 3m15.35118913s ago: executing program 38 (id=3757): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000000)={0x5, 0x47df, 0x9f, 0xf, 0xd, 0x2}) 2m46.086955268s ago: executing program 39 (id=3965): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 2m26.254235053s ago: executing program 40 (id=4096): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2m18.843650666s ago: executing program 6 (id=4121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='mmap_lock_acquire_returned\x00', r1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68) 2m18.532286922s ago: executing program 6 (id=4123): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r2], 0x44}}, 0x0) 2m18.333879471s ago: executing program 6 (id=4127): r0 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) unlinkat(r1, &(0x7f00000002c0)='./bus\x00', 0x200) 2m17.915556699s ago: executing program 6 (id=4130): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x200004c, &(0x7f0000000380)=ANY=[], 0x1, 0x163, &(0x7f0000000f00)="$eJzsz79rGmEcx/H33WnP1ooHtWCH2kKXo2LrD+xWiraVCrUHLe3SpaAnCGcNcXHJ4JAtf4KE/IBM4hAyZjAmGRIUxPwTWYRsGQK5cD+SkIyZn9d2n889z/P9fv040dFAwfO51VxYNNtts/b6p1Ep/dre2f0j+13oTv8JFRgW4FSBYQDmXb4t/bXYj0C9YZnvqi2rBswLoAPFsJennexLiCdOFpPdLIN7Hv0NjJ5D3bbMrHYva1hmDgJ0IeicjUI9iHufvX6zQzjkjir5UycH/eMf46Ny6u3WS4XlcvLVM4nVld5tnjDVx6UXm0/jCr/Ngw2KEnR6J5Cavh/0Z5Nx5btRMSa5bPaDrWTS6fzMuTdvH/ov4P6fHFy/+Ih4QuXStm3vu+/28z0pAozWzo2mrMaAs/8aTHEaxZvXaEb9RgWp06v+izuraDKKjsQFgiAIgiAIgiAIgvAgVwEAAP//KVNi2w==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x22) 2m17.422245568s ago: executing program 6 (id=4134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) 2m16.753795327s ago: executing program 6 (id=4143): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000210001"], 0x1c}], 0x1}, 0x0) 2m16.303395214s ago: executing program 41 (id=4143): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000210001"], 0x1c}], 0x1}, 0x0) 1m45.32205839s ago: executing program 3 (id=4395): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) ioctl$MON_IOCX_GETX(r0, 0x80089203, 0x0) 1m44.638204005s ago: executing program 3 (id=4398): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x3, "abacd211119ca95c63377526d1c0f7e9faac3ca507558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x8, "1654b1a3c0ee4c72dd2db9ef4e1afc8637e12667b4a0228254e7f42593595fc5"}) 1m44.313172405s ago: executing program 3 (id=4402): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x38}, 0xee}, 0x0) 1m44.095630709s ago: executing program 3 (id=4406): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) 1m43.701381769s ago: executing program 3 (id=4412): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 1m42.521112517s ago: executing program 3 (id=4421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1m42.008850962s ago: executing program 42 (id=4421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 57.274720943s ago: executing program 5 (id=4840): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee01}}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x570, &(0x7f0000000c00)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x109) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x9, 0xf0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 56.690701908s ago: executing program 5 (id=4844): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6d2, &(0x7f00000004c0)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) r0 = creat(&(0x7f0000000040)='./file1\x00', 0x2d) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 55.905993661s ago: executing program 5 (id=4851): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x0, 0x7, 0xc, {0xc, 0xe, "1b7a29e85bbb0d3c5dc5"}}, 0x0, 0x0, 0x0}, 0x0) 53.443491088s ago: executing program 5 (id=4880): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x3810082, &(0x7f0000000380)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x401}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@gid_forget}, {@volume={'volume', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@longad}]}, 0x1, 0xc32, &(0x7f0000001a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 52.748693193s ago: executing program 5 (id=4885): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000001000210400"/20, @ANYRES32=r1, @ANYBLOB="00000000000001001800128008000100677265000c00028006000e00ac"], 0x38}}, 0x90) 51.817209475s ago: executing program 5 (id=4888): r0 = syz_open_dev$media(&(0x7f0000000b80), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000b80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000180)=[{}, {0x80000000}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000400)={{}, {r2}}) 51.595369857s ago: executing program 43 (id=4888): r0 = syz_open_dev$media(&(0x7f0000000b80), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000b80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000180)=[{}, {0x80000000}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000400)={{}, {r2}}) 26.40778851s ago: executing program 8 (id=5118): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 26.107966729s ago: executing program 8 (id=5121): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000200)=ANY=[], 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) ioctl$SNAPSHOT_FREE(r0, 0x3305) 24.131093253s ago: executing program 8 (id=5136): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) recvmsg(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) close(r0) 23.769536827s ago: executing program 8 (id=5141): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noblock_validity}, {@dioread_nolock}, {@norecovery}, {@acl}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0xc4, 0x452, &(0x7f0000000900)="$eJzs20tvG1UUAOAz46bvklDKow/AUBARj6RJC3TBBgRSN0hIsCjLkKZVqdugJki0qmhAqCxRfwGwROIXsIINAlYgtrBHSBXqhsICDRp7nBrHDnbs1Gn9fdIk986Mfc/xzLXvzLUDGFrl/E8SsTMifomI0YgoNe9Qrv27cf3S7F/XL80mkWWv/5HkD4s/r1+are+aFP93FJXxNCL9KIn9LdpduHDxzEylMne+qE8unn1ncuHCxWdOn505NXdq7tz00aNHDk89/9z0s33Jc1ce67735w/sPfbm1Vdnj1996/sv83h3Ftsb86gZ67nNcpSXX5Nmj/f87BvLroZysmmAgdCVvK/nh2uk2v9HoxQ3D95ovPLhQIMD1lWWZdmWFWuXRwBLGXAHS2LQEQCDUf+gz69/68stHH4M3LUXaxdAed43iqW2ZVOkxT4jTde3/VSOiONLf3+aL9HyPgQAQH99nY9/nm41/kvjvob97irmhsYi4u6I2B0R90TEnoi4N6K67/0R8UCX7Zeb6ivHPz9tW1NiHcrHfy8Uc1v/Hf/VR38xVipqu6r5jyQnT1fmDhWvyXiMbMnrU6u08c3LP3/Sblvj+C9f8vbrY8Eijt83Nd2gOzGzONNLzo2ufVC9B3h5Zf7J8kxAEhF7I2LfGp5/a0ScfvKLA+22/3/+q+jDPFP2ecQTteO/FE351yWrz09Obo3K3KHJ+lmx0g8/XnmtXfs95d8H+fHf3vL8X85/LGmcr13ovo0rv37c9ppmref/5uSNanlzse69mcXF81MRm5Olleunbz62Xq/vn+c/frB1/98d8c9nxeP2R0R+Ej8YEQ9FxMNF7I9ExKMRcXCV/L976bG3157/+srzP9HV8e++UDrz7Vft2u/s+B+plsaLNZ28/3UaYC+vHQAAANwu0up34JN0YrmcphMTte/w74ntaWV+YfGpk/PvnjtR+678WIyk9Ttdow33Q6eKe8P1+nRT/XD1vnGWZdm2an1idr6yXnPqQGd2tOn/ud9Kg44OWHddzaO1+0UbcFvye00YXvo/DC/9H4aX/g/Dq1X/vxxxYwChALeYz38YXvo/DC/9H4aX/g9DqZff9a9W2H1svZ75TiuUNkYYXRci3RBhrK2QbowwaoUtEdHpzpfjVgU26HcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg3AAD//zLQ7Dk=") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x40080, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 23.008604316s ago: executing program 8 (id=5150): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, 0x0) 22.181081527s ago: executing program 8 (id=5156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x5a, 0x3}}}]}, 0x24}}, 0x0) 21.807170133s ago: executing program 44 (id=5156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x5a, 0x3}}}]}, 0x24}}, 0x0) 6.724915874s ago: executing program 7 (id=5260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18412, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 6.317038286s ago: executing program 7 (id=5264): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000100)={[{@ikeep}, {@nogrpid}, {@filestreams}, {@uqnoenforce}, {@nolargeio}]}, 0x8, 0x9695, &(0x7f0000012cc0)="$eJzs/QnYpnPhuP/fzzB2GUMlpaYiWmTNEtXMYIZCskQ7sqQsJRXapKRQEdGefctWllC2VpK9hRJCJUukxTbM/3hmnmGMk099+/x/PnWe53E8z33f131d1/O+369reR7NcbTZpI0mDgZzDaY3bjBr5107ecqYq9e/46gtFzx2uVPvOeDRKy4+fuRxwsjjxMFgMGrk7aHpy8YOTjt91GD2acsfad655xmafzBYfuTlyH4GK09/mP+KGetNnaVZBzr0yLd9pn9Na4HhHzH85PAD9jpiMBiMmWn7ocFgaI/HfFBpm02YPOkRq4fdhq1Gjzyf+WuO6V/zXzwYzH/mgI+PmdcdehI+0vDP3ONF545e/0n42f9xbTZh8jqz+A+fi7ONLFt5+Byf9Rw0NutxftsSm686MoXTjrfBYPgS96hz5T+izSZMWnfw+Nf5wVGrXbjP1OnXzTkH028Ucw8Gg3lGrq/zPdku9e81YeIK0+7ZM16PsM84lveg4+KEt5780PBNejAYLDQYjF17xr2gqqqq/jOaMHGFNeD+P9cT3f9POWXRM7v/V1VV/ee2zoSJKwzf62e5/8/3RPf/nRe9aM/p/+1//MrTt3royf0QVVVV9S81aR28/495ovv/ymtctm73/6qqqv/cNlxv2v1/vlnu/ws/0f3/TSevttjIejN+b3hwpl0OzfS/Jzww0/LZZlp+/0zLR8+0n5nXn2Om5ffOtHzO4fdg/XGDwdgZ/15wyiOLx44bfm9k+X0zLR//yL/TWXzNmZZPmGn5pJmWTxwZ6/DyyTMtnzzT+ms/wVRXVVX9n2nDFSatMZjp39mPLF5kxvt0/7/grOuWfrLGW1VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVf+ZPXTH2ecOBoOhwWAwajCYMhh5PvPjYOrUqVOHX59y/uWXP2kD/b/R0HnXTp4y5ur17zhqywWPXe7Uew54ZJb+Y/vP/wT17zTsP9fx4waDHTd5sodST0Kd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uoTvOPnfkGBg1GEwZjDzfY8bjWfu/8c0jq6666al3HfzIlouP327k2XnXTp6y3ZMw9iehoeHPOubq9e84assFj13u1HsO+C84e/7zP0H9O03z325oMBg5v8cMn8vrT9hw46UGg8HBd5266UqDh99bZfi91cbONpht2qZLTfu+1uK84z3Wnv44fvjbwg/v45Rp+19n6mGzDc0yiJl6xXk3HvWOze5ZcdbHJR//c4ya8eSI68+4e+rUqVMftXCkuR5n4xn7n/FZZj3PR8a+1PDYl9llh3cv897ddl96ux222HbrbbfecbkVVllxpeWXW2nVly2zzXbbb73s9O+PM2fjpn1f45+Zs/lmnbM7Jsw8Z7N+tsebs3FPPGfT9jhl96GNZ8zZ7P/inK3xxHM2bruRH7T4+NGDzadNzdBgsPiaowe7Dr9Ybs7BYPG1RtZdZHjd1ceOGgz2f+SDDj+b8+FjcGiP4XU2m7TRxEdG9thP+Jjr9KNWXHz8yOOEkceJ04c4bvDIoTh2cNrpo4bn4lHTPO/c8wzNPxgsP/JyZD+DVUfePXTGelNnadaBDj3ybZ/pX9NaYHgnw0/euezZ1wyfi7Ns//+P/p+u/4/xWmXo4YkaGvkaWWe614TJ6zzys6ZNw/DczTaybOVhk1nn7H+zx4x33OyDMU8w3knrTFxhePEs8z9jEzy+7lziwg9OP7bGrzx9q4f+n1FovPM9wXjXmYDjne+Jxnv8hy49ffqu/tfGO8u1bt1p38f/M9e6wRNf62ajHWx9yWKzXute8/hDfNR5PGOO5pxlpce71u16yPJ7DO9//BNf69YdHvvoR13rRg0Gi68x41o3fOGbNHqw//CL5YdfTB49OHb4xQrTXsw9OH/4xUvfvtP2Ww0vWHvGnCw7vN/xY4emuV+48q1LTj1w6tQ1R8YyfuyjxzpyfIyb+X4+Yez0yZyx7Yz9Dq86Y7+3PH36e5NG9jvhX9jvjG1pvHctMP29ySP7nTjLfkc/wX5nbPuY82GpoYcvXI9zvZk0y/Vm5G+cGT/uUV9zTP+a/+LBYP4zyXeWdf/Hayadv3M9wXgnTFxhjeHxzXL+Pnw40vl76eSrh+8V8w8Gg4UGg7Frzxj7v9jQ44139ice70QY7+xPNN4rj9thvf+F8Q5mGu+jjrPNNpx+rKw9cpxNHvvo68YTHb8ztp31OjZ62rvTL/tr/zPXsXGPuY59bLZRs0z2TD3e72xbwfrTny/yyO+51550zIy5Hz3Lfv+n39lm+ixDcB0bM8vf86PWvmEwRHO+x/GrXzZ00KPnfDDLmEcPHv23xYw5n7HtE8355H9mzp/1xHP+z/6evNTzp78/epbxzzznG+z3zH1nzPkcs+z3f5rzyU9873jsnI8fjKY5X/b+6fP2RNfTx5vzGdvOmPPhj7ja2NkHaw3fs0bmfNI/M+eL/O8c5/PA+tOfb/3wonOOOvX1M+Z81jn+n+Z80r865+MePs4Xn/be80YN5phjsOsWu+yy83LTv894ufz073wtuvfa6fP8RPfSxzOase0TnRdr/jNGY/4po6H/yWjR2R/P6JFT68iddn7a/+u1aM1/1WjA16Krj5k+b0/0e9HjzfmMbek+uPBM28/6d+iG6037vXu+We6DMzbB++A5Z62794xdjmz24CzDnHFffWCm5bPNtPz+mZaPnmk/M68/x0zL751p+fBHmGOm9Wewjhv+m3dk+ZRHVh87/MvTuJHl9820fPwj2y6+5kzLJ8y0fNJMyyc+cmgsPnmm5ZNnWn/twb/YjP8mvd2sF/n6Z+u//7rL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf30B1nnztyDIwaDKYMpj8fGnkc7DG0we2vGn4cDAajVz5x6gZP9nif5IbOu3bylDFXr3/HUVsueOxyp95zwH/B2fOf/wnq32ma/3ZDg8HI+T1mu8FgsP6EDTdeajAYbDD1xJVHDR5+b5Hh91YfO2ow2H/oUTuY8+F1hvYYXmezSRtNHAzmGllj3GN+6GPOo0etuPj4kccJI48Tp1+fxg0eOV7HDk47fdRg9mnLH2neuecZmn8wWH7k5ch+BitPf5j/ihnrTZ2lWQc69Mi3faZ/TWuB4R8x/GTXbSc/e3iuZtn+/0wzrtXbjfofV+38d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bv71/w7Wv7bStRd/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7qE7zj535BgYNRhMGUx/PrTHyONg6OTTXjhyiIze7aqjD3uyx/skN3TetZOnjLl6/TuO2nLBY5c79Z4D/gvOnv/8T1D/TtP8txsaDEbO7zHbDQaD9SdsuPFSg8HgsKOv2m3U4OH3Fhl+b/WxowaD/YcetYM5H15naI/hdTabtNHEwWCukTXGPeaHPuY8etSKi48feZww8jhx+vVp3OCR43Xs4LTTRw1mn7b8keade56h+QeD5UdejuxnsPL0h/mvmLHe1FmadaBDj3zbZ/rXtBYY/hHDT/aa79qTh+dqlu3/zzTjWr3dqP9x1c5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yF/fQHWefO3IMjBoMpgymPx818ji0x803fWTj4cfh1wuuvfe1T/Z4n+SGzrt28pQxV69/x1FbLnjscqfec8B/wdnzn/8J6t9p2H+u48cNBjtu8mQPpZ6EOv/d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3EN3nH3uyNNRjywdtUfHBTZ03rWTp4y5ev07jtpywWOXO/WeA57sAf27PY7/x/LHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz9m8b8uf8zif33+mMX/hvwxi//v8scs/jfmj1n8b8ofs/jfnD9m8f99/pjF/w/5Yxb/P+aPWfxvyR+z+P8pf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+f84fs/jfmT9m8b8rf8zi/5f8MYv/3fljFv+/5o9Z/P+WP2bx/3v+mMX/H/ljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8ziPyV/zOL/YP6Yxf+h/DGL/9T8MYn/bIP8MYv/UP6YxX9U/pjFf7b8MYv/7PljFv/R+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/p+SPWfwXyB+z+I/JH7P4L5g/ZvEfmz9m8V8of8ziv3D+mMX/qfljFv+n5Y9Z/J+eP2bxXyR/zOL/jPwxi/+i+WMW/2fmj1n8n5U/ZvFfLH/M4v/s/DGL/3Pyxyz+4/LHLP7PzR+z+D8v/8c0+8ijwf/5+WOW83/x/DGL/xL5Yxb/F+SPWfyXzB+z+C+VP2bxf2H+mMX/RfljFv8X549Z/F+SP2bxXzp/zOL/0vwxi/8y+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOL/svwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+L88f8ziv1r+mMV/9fwxi/8r8scs/q/MH7P4vyp/zOI/Pn/M4j8hf8ziPzF/zOK/Rv6YxX/N/DGL/1r5Yxb/SfljFv/JKv/Z/uk1Lf5rq/z/+Sz+6+SPWfxfnT9m8X9N/pjFf938MYv/evljFv/188cs/q/NH7P4b5A/ZvF/Xf6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/F+fP2bx3zR/zOK/Wf6Yxf8N+WMW/zfmj1n835Q/ZvF/c/6Yxf8t+WMW/7fmj1n835Y/ZvHfPH/M4r9F/pjFf8v8MYv/2/PHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v+O/DGL/3b5Yxb/d+aPWfzflT9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/3fnj1n835M/ZvHfOX/M4v/e/DGL/y75Yxb/9+WPWfzfnz9m8f9A/pjFf9f8MYv/bvljFv/d88cs/h/MH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P475E/ZvH/WP6YxX/P/DGL/8fzxyz+n8gfs/jvlT9m8f9k/pjFf+/8MYv/p/LHLP6fzh+z+O+TP2bx3zd/zOK/X/6Yxf8z+WMW/8/mj1n8P5c/ZvHfP3/M4n9A/pjF//P5Yxb/A/PHLP4H5Y9Z/L+QP2bxPzh/zOJ/SP6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvH/Rv6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/t/MH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9v5Y9Z/L+dP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/7+SPWfzPzB+z+J+VP2bxPzt/zOL/3fwxi//3ZvWf7f/jcf0fzeJ/Tuc/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv/v549Z/H+QP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bxvzB/zOJ/Uf6Yxf+n+WMW/4vzxyz+P8sfs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfyvzh+z+F+TP2bx/3X+mMX/N/ljFv9r88cs/r/NH7P4X5c/ZvG/Pn/M4n9D/pjF/3f5Yxb/G/PHLP435Y9Z/G/OH7P4/z5/zOL/h/wxi/8f88cs/rfkj1n8/5Q/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8/549Z/O/MH7P435U/ZvH/S/6Yxf/u/DGL/1/zxyz+f8sfs/j/PX/M4v+P/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvGfkj9m8X8wf8zi/1D+mMV/av6YxH/2Qf6YxX8of8ziPyp/zOI/W/6YxX/2/DGL/+j8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/9T8scs/gvkj1n8x+SPWfwXzB+z+I/NH7P4L5Q/ZvFfOH/M4v/U/DGL/9Pyxyz+T88fs/gvkj9m8X9G/pjFf9H8MYv/M/PHLP7Pyh+z+C+WP2bxf3b+mMX/OfljFv9x+WMW/+fmj1n8n5c/ZvF/fv6YxX/x/DGL/xL5Yxb/F+SPWfyXzB+z+C+VP2bxf2H+mMX/RfljFv8X549Z/F+SP2bxXzp/zOL/0vwxi/8y+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOL/svwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+L88f8ziv1r+mMV/9fwxi/8r8scs/q/MH7P4vyp/zOI/Pn/M4j8hf8ziPzF/zOK/Rv6YxX/N/DGL/1r5Yxb/SfljFv/J+WMW/7Xzxyz+6+SPWfxfnT9m8X9N/pjFf938MYv/evljFv/188cs/q/NH7P4b5A/ZvF/3eDy/CGL/4ad/5jFf6P8MYv/xvljFv9N8scs/q/PH7P4b5o/ZvHfLH/M4v+G/DGL/xvzxyz+b8ofs/i/OX/M4v+W/DGL/1vzxyz+b8sfs/hvnj9m8d8if8ziv2X+mMX/7fljFv+t8scs/lvnj1n8t8kfs/hvmz9m8X9H/pjFf7v8MYv/O/PHLP7vyh+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/7vzxyz+78kfs/jvnD9m8X9v/pjFf5f8MYv/+/LHLP7vzx+z+H8gf8ziv2v+mMV/t/wxi//u+WMW/w/mj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n898gfs/h/LH/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/iPHuSPWfyH8scs/qPyxyz+s+WPWfxnzx+z+I/OH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/g/JX/M4r9A/pjFf0z+mMV/wfwxi//Y/DGL/0L5Yxb/hfPHLP5PzR+z+D8tf8zi//T8MYv/IvljFv9n5I9Z/BfNH7P4PzN/zOL/rPwxi/9i+WMW/2fnj1n8n5M/ZvEflz9m8X9u/pjF/3n5Yxb/5+ePWfwXzx+z+C+RP2bxf0H+mMV/yfwxi/9S+WMW/xfmj1n8X5Q/ZvF/cf6Yxf8l+WMW/6Xzxyz+L80fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+L8sfs/ivlD9m8V85f8ziv0r+mMV/1fwxi//L88cs/qvlj1n8V88fs/i/In/M4v/K/DGL/6vyxyz+4/PHLP4T8scs/hPzxyz+a+SPWfzXzB+z+K+VP2bxn5Q/ZvGfnD9m8V87f8ziv07+mMX/1fljFv/X5I9Z/NfNH7P4r5c/ZvFfP3/M4v/a/DGL/wb5Yxb/1+WPWfw3zB+z+G+UP2bx3zh/zOK/Sf6Yxf/1+WMW/03zxyz+m+WPWfzfkD9m8X9j/pjF/035Yxb/N+ePWfzfkj9m8X9r/pjF/235Yxb/zfPHLP5b5I9Z/LfMH7P4vz1/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7vyB+z+G+XP2bxf2f+mMX/XfljFv/t88cs/jvkj1n8d8wfs/jvlD9m8X93/pjF/z35Yxb/nfPHLP7vzR+z+O+SP2bxf1/+mMX//fljFv8P5I9Z/HfNH7P475Y/ZvHfPX/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/x75Yxb/j+WPWfz3zB+z+H88f8zi/4n8MYv/XvljFv9P5o9Z/PfOH7P4fyp/zOL/6fwxi/8++WMW/33zxyz+++WPWfw/kz9m8f9s/pjF/3P5Yxb//fPHLP4H5I9Z/D+fP2bxPzB/zOJ/UP6Yxf8L+WMW/4Pzxyz+h+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/b+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4v/N/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvH/Vv6Yxf/b+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bx/07+mMX/zPwxi/9Z+WMW/7Pzxyz+380fs/h/L3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8v58/ZvH/Qf6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6Yxf/C/DGL/0X5Yxb/n+aPWfwvzh+z+P8sf8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bxvzp/zOJ/Tf6Yxf/X+WMW/9/kj1n8r80fs/j/Nn/M4n9d/pjF//r8MYv/DfljFv/f5Y9Z/G/MH7P435Q/ZvG/OX/M4v/7/DGL/x/yxyz+f8wfs/jfkj9m8f9T/pjF/9b8MYv/bfljFv/b88cs/nfkj1n8/5w/ZvG/M3/M4n9X/pjF/y/5Yxb/u/PHLP5/zR+z+P8tf8zi//f8MYv/P/LHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjFf0r+mMX/wfwxi/9D+WMW/6n5YxL/OQb5Yxb/ofwxi/+o/DGL/2z5Yxb/2fPHLP6j88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+T8kfs/gvkD9m8R+TP2bxXzB/zOI/Nn/M4r9Q/pjFf+H8MYv/U/PHLP5Pyx+z+D89f8ziv0j+mMX/GfljFv9F88cs/s/MH7P4Pyt/zOK/WP6Yxf/Z+WMW/+fkj1n8x+WPPdp/MPt/q/9z88cs5//z8scs/s/PH7P4L54/ZvFfIn/M4v+C/DGL/5L5Yxb/pfLHLP4vzB+z+L8of8zi/+L8MYv/S/LHLP5L549Z/F+aP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/F+WP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/l+ePWfxXyx+z+K+eP2bxf0X+mMX/lfljFv9X5Y9Z/Mfnj1n8J+SPWfwn5o9Z/NfIH7P4r5k/ZvFfK3/M4j8pf8ziPzl/zOK/dv6YxX+d/DGL/6vzxyz+r8kfs/ivmz9m8V8vf8ziv37+mMX/tfljFv8N8scs/q/LH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/6/PHLP6b5o9Z/DfLH7P4vyF/zOL/xvwxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/pvnj1n8t8gfs/hvmT9m8X97/pjFf6v8MYv/1vljFv9t8scs/tvmj1n835E/ZvHfLn/M4v/O/DGL/7vyxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/7vwxi/978scs/jvnj1n835s/ZvHfJX/M4v++/DGL//vzxyz+H8gfs/jvmj9m8d8tf8ziv3v+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMX/o/ljFv898scs/h/LH7P475k/ZvH/eP6Yxf8T+WMW/73yxyz+n8wfs/jvnT9m8f9U/pjF/9P5Yxb/ffLHLP775o9Z/PfLH7P4fyZ/zOL/2fwxi//n8scs/vvnj1n8D8gfs/h/Pn/M4n9g/pjF/6D8MYv/F/LHLP4H549Z/A/JH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/m/ljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zi/638MYv/t/PHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4v+d/DGL/5n5Yxb/s/LHLP5n549Z/L+bP2bx/17+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+H8/f8zi/4P8MYv/D/PHLP4/yh+z+P84f8zi/5P8MYv/hfljFv+L8scs/j/NH7P4X5w/ZvH/Wf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4n91/pjF/5r8MYv/r/PHLP6/yR+z+F+bP2bx/23+mMX/uvwxi//1+WMW/xvyxyz+v8sfs/jfmD9m8b8pf8zif3P+mMX/9/ljFv8/5I9Z/P+YP2bxvyV/zOL/p/wxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+P85f8zif2f+mMX/rvwxi/9f8scs/nfnj1n8/5o/ZvH/W/6Yxf/v+WMW/3/kj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+U/DGL/4P5Yxb/h/LHLP5T88ck/nMO8scs/kP5Yxb/UfljFv/Z8scs/rPnj1n8R+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/J+SP2bxXyB/zOI/Jn/M4r9g/pjFf2z+mMV/ofwxi//C+WMW/6fmj1n8n5Y/ZvF/ev6YxX+R/DGL/zPyxyz+i+aPWfyfmT9m8X9W/pjFf7H8MYv/s/PHLP7PyR+z+I/LH7P4Pzd/zOL/vPwxi//z88cs/ovnj1n8l8gfs/i/IH/M4r9k/pjFf6n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/0vljFv+X5o9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+X5Y9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+X5Yxb/1fLHLP6r549Z/F+RP2bxf2X+mMX/VfljFv/x+WMW/wn5Yxb/ifljFv818scs/mvmj1n818ofs/hPyh+z+E/OH7P4r50/ZvFfJ3/M4v/q/DGL/2vyxyz+6+aPWfzXyx+z+K+fP2bxf23+mMV/g/wxi//r8scs/hvmj1n8N8ofs/hvnD9m8d8kf8zi//r8MYv/pvljFv/N8scs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi//m+WMW/y3yxyz+W+aPWfzfnj9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/3fkj1n8t8sfs/i/M3/M4v+u/DGL//b5Yxb/HfLHLP475o9Z/HfKH7P4vzt/zOL/nvwxi//O+WMW//fmj1n8d8kfs/i/L3/M4v/+/DGL/wfyxyz+u+aPWfx3yx+z+O+eP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx/2j+mMV/j/wxi//H8scs/nvmj1n8P54/ZvH/RP6YxX+v/DGL/yfzxyz+e+ePWfw/lT9m8f90/pjFf5/8MYv/vvljFv/98scs/p/JH7P4fzZ/zOL/ufwxi//++WMW/wPyxyz+n88fs/gfmD9m8T8of8zi/4X8MYv/wfljFv9D8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bx/2b+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+H8rf8zi/+38MYv/qfljFv/T8scs/qfnj1n8z8gfs/h/J3/M4n9m/pjF/6z8MYv/2fljFv/v5o9Z/L+XP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif2H+mMX/ovwxi/9P88cs/hfnj1n8f5Y/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/j/PH/M4v+L/DGL/y/zxyz+v8of++/0nzrr0jmvzh/77/Sf3szn/zX5Yxb/X+ePWfx/kz9m8b82f8zi/9v8MYv/dfljFv/r88cs/jfkj1n8f5c/ZvG/MX/M4n9T/pjF/+b8MYv/7/PHLP5/yB+z+P8xf8zif0v+mMX/T/ljFv9b88cs/rflj1n8b88fs/jfkT9m8f9z/pjF/878MYv/XfljFv+/5I9Z/O/OH7P4/zV/zOL/t/wxi//f88cs/v/IH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8p+WMW/wfzxyz+D+WPWfyn5o9J/Oca5I9Z/Ifyxyz+o/LHLP6z5Y9Z/GfPH7P4j84fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+D8lf8ziv0D+mMV/TP6YxX/B/DGL/9j8MYv/QvljFv+F88cs/k/NH7P4Py1/zOL/9Pwxi/8i+WMW/2fkj1n8F80fs/g/M3/M4v+s/DGL/2L5Yxb/Z+ePWfyfkz9m8R+XP2bxf27+mMX/efljFv/n549Z/BfPH7P4L5E/ZvF/Qf6YxX/J/DGL/1L5Yxb/F+aPWfxflD9m8X9x/pjF/yX5Yxb/pfPHLP4vzR+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4vyx+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/8vzxyz+q+WPWfxXzx+z+L8if8zi/8r8MYv/q/LHLP7j88cs/hPyxyz+E/PHLP5r5I9Z/NfMH7P4r5U/ZvGflD9m8Z+cP2bxXzt/zOK/Tv6Yxf/V+WMW/9fkj1n8180fs/ivlz9m8V8/f8zi/9r8MYv/BvljFv/X5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF//X5Yxb/TfPHLP6b5Y9Z/N+QP2bxf2P+mMX/TfljFv83549Z/N+SP2bxf2v+mMX/bfljFv/N88cs/lvkj1n8t8wfs/i/PX/M4r9V/pjFf+v8MYv/NvljFv9t88cs/u/IH7P4b5c/ZvF/Z/6Yxf9d+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bxf3f+mMX/PfljFv+d88cs/u/NH7P475I/ZvF/X/6Yxf/9+WMW/w/kj1n8d80fs/jvlj9m8d89f8zi/8H8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv/HvljFv+P5Y9Z/PfMH7P4fzx/zOL/ifwxi/9e+WMW/0/mj1n8984fs/h/Kn/M4v/p/DGL/z75Yxb/ffPHLP775Y9Z/D+TP2bx/2z+mMX/c/ljFv/988cs/gfkj1n8P58/ZvE/MH/M4n9Q/pjF/wv5Yxb/g/PHLP6H5I9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/6/ljFv9v5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zi/838MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8f9W/pjF/9v5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvH/Tv6Yxf/M/DGL/1n5Yxb/s/PHLP7fzR+z+H8vf8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfy/nz9m8f9B/pjF/4f5Yxb/H+WPWfx/nD9m8f9J/pjF/8L8MYv/RfljFv+f5o9Z/C/OH7P4/yx/zOJ/Sf7Yf53/3I88ndn/0vyx/zr/xzn/L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi//V+WMW/2vyxyz+v84fs/j/Jn/M4n9t/pjF/7f5Yxb/6/LHLP7X549Z/G/IH7P4/y5/zOJ/Y/6Yxf+m/DGL/835Yxb/3+ePWfz/kD9m8f9j/pjF/5b8MYv/n/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4v/n/DGL/535Yxb/u/LHLP5/yR+z+N+dP2bx/2v+mMX/b/ljFv+/549Z/P+RP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP5T8scs/g/mj1n8H8ofs/hPzR+T+E/7fwXJ/7FZ/Ifyxyz+o/LHLP6z5Y9Z/GfPH7P4j84fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+D8lf8ziv0D+mMV/TP6YxX/B/DGL/9j8MYv/QvljFv+F88cs/k/NH7P4Py1/zOL/9Pwxi/8i+WMW/2fkj1n8F80fs/g/M3/M4v+s/DGL/2L5Yxb/Z+ePWfyfkz9m8R+XP2bxf27+mMX/efljFv/n549Z/BfPH7P4L5E/ZvF/Qf6YxX/J/DGL/1L5Yxb/F+aPWfxflD9m8X9x/pjF/yX5Yxb/pfPHLP4vzR+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4vyx+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/8vzxyz+q+WPWfxXzx+z+L8if8zi/8r8MYv/q/LHLP7j88cs/hPyxyz+E/PHLP5r5I9Z/NfMH7P4r5U/ZvGflD9m8Z+cP2bxXzt/zOK/Tv6Yxf/V+WMW/9fkj1n8180fs/ivlz9m8V8/f8zi/9r8MYv/BvljFv/X5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF//X5Yxb/TfPHLP6b5Y9Z/N+QP2bxf2P+mMX/TfljFv83549Z/N+SP2bxf2v+mMX/bfljFv/N88cs/lvkj1n8t8wfs/i/PX/M4r9V/pjFf+v8MYv/NvljFv9t88cs/u/IH7P4b5c/ZvF/Z/6Yxf9d+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bxf3f+mMX/PfljFv+d88cs/u/NH7P475I/ZvF/X/6Yxf/9+WMW/w/kj1n8d80fs/jvlj9m8d89f8zi/8H8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv/HvljFv+P5Y9Z/PfMH7P4fzx/zOL/ifwxi/9e+WMW/0/mj1n8984fs/h/Kn/M4v/p/DGL/z75Yxb/ffPHLP775Y9Z/D+TP2bx/2z+mMX/c/ljFv/988cs/gfkj1n8P58/ZvE/MH/M4n9Q/pjF/wv5Yxb/g/PHLP6H5I9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/6/ljFv9v5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zi/838MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8f9W/pjF/9v5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvH/Tv6Yxf/M/DGL/1n5Yxb/s/PHLP7fzR+z+H8vf8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfy/nz9m8f9B/pjF/4f5Yxb/H+WPWfx/nD9m8f9J/pjF/8L8MYv/RfljFv+f5o9Z/C/OH7P4/yx/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvG/On/M4n9N/pjF/9f5Yxb/3+SPWfyvzR+z+P82f+zR/qOf7OH8+z2O/3X5Y5bz//r8MYv/DfljFv/f5Y9Z/G/MH7P435Q/ZvG/OX/M4v/7/DGL/x/yxyz+f8wfs/jfkj9m8f9T/pjF/9b8MYv/bfljFv/b88cs/nfkj1n8/5w/ZvG/M3/M4n9X/pjF/y/5Yxb/u/PHLP5/zR+z+P8tf8zi//f8MYv/P/LHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjFf0r+mMX/wfwxi/9D+WMW/6n5YxL/eQb5Yxb/ofwxi/+o/DGL/2z5Yxb/2fPHLP6j88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+2H+//1wPv5X/Y/vv95/WPPPlj1n8588fs/g/JX/M4r9A/pjFf0z+mMV/wfwxi//Y/DGL/0L5Yxb/hfPHLP5PzR+z+D8tf8zi//T8MYv/IvljFv9n5I9Z/BfNH7P4PzN/zOL/rPwxi/9i+WMW/2fnj1n8n5M/ZvEflz9m8X9u/pjF/3n5Yxb/5+ePWfwXzx+z+C+RP2bxf0H+mMV/yfwxi/9S+WMW/xfmj1n8X5Q/ZvF/cf6Yxf8l+WMW/6Xzxyz+L80fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+L8sfs/ivlD9m8V85f8ziv0r+mMV/1fwxi//L88cs/qvlj1n8V88fs/i/In/M4v/K/DGL/6vyxyz+4/PHLP4T8scs/hPzxyz+a+SPWfzXzB+z+K+VP2bxn5Q/ZvGfnD9m8V87f8ziv07+mMX/1fljFv/X5I9Z/NfNH7P4r5c/ZvFfP3/M4v/a/DGL/wb5Yxb/1+WPWfw3zB+z+G+UP2bx3zh/zOK/Sf6Yxf/1+WMW/03zxyz+m+WPWfzfkD9m8X9j/pjF/035Yxb/N+ePWfzfkj9m8X9r/pjF/235Yxb/zfPHLP5b5I9Z/LcE/9n/vxzX/9Es/m/v/Mcs/lvlj1n8t84fs/hvkz9m8d82f8zi/478MYv/dvljFv935o9Z/N+VP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/d+ePWfzfkz9m8d85f8zi/978MYv/LvljFv/35Y9Z/N+fP2bx/0D+mMV/1/wxi/9u+WMW/93zxyz+H8wfs/h/KH/M4v/h/DGL/0fyxyz+H80fs/jvkT9m8f9Y/pjFf8/8MYv/x/PHLP6fyB+z+O+VP2bx/2T+mMV/7/wxi/+n8scs/p/OH7P475M/ZvHfN3/M4r9f/pjF/zP5Yxb/z+aPWfw/lz9m8d8/f8zif0D+mMX/8/ljFv8D88cs/gflj1n8v5A/ZvE/OH/M4n9I/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjF/9D8MYv/YfljFv/D5f5rP85yi/8Rcv/Hy+J/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvH/Zv6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4fyt/zOL/7fwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+H8nf8zif2b+mMX/rPwxi//Z+WMW/+/mj1n8v5c/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/t/PH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOJ/Yf6Yxf+i/DGL/0/zxyz+F+ePWfx/lj9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+F+dP2bxvyZ/zOL/6/wxi/9v8scs/tfmj1n8f5s/ZvG/Ln/M4n99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/7yD/DGL/1D+mMV/VP6YxX+2/DGL/+z5Yxb/0fljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/6fkj1n8F8gfs/iPyR+z+C+YP2bxH5s/ZvFfKH/M4r9w/pjF/6n5Yxb/p+WPWfyfnj9m8V8kf8zi/4z8MYv/ovljFv9n5o9Z/J+VP2bxXyx/zOL/7Pwxi/9z8scs/uPyxyz+z80fs/g/L3/M4v/8/DGL/+L5Yxb/JfLHLP4vyB+z+C+ZP2bxXyp/zOL/wvwxi/+L8scs/i/OH7P4vyR/zOK/dP6Yxf+l+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6Yxf9l+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxf3n+mMV/tfwxi//q+WMW/1fkj1n8X5k/ZvF/Vf6YxX98/pjFf0L+mMV/Yv6YxX+N/DGL/5r5Yxb/tfLHLP6T8scs/pPzxyz+a+ePWfzXyR+z+L86f8zi/5r8MYv/uvljFv/18scs/uvnj1n8X5s/ZvHfIH/M4v+6/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4vz5/zOK/af6YxX+z/DGL/xvyxyz+b8wfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4r95/pjFf4v8MYv/lvljFv+3549Z/LfKH7P4b50/ZvHfJn/M4r9t/pjF/x35Yxb/7fLHLP7vzB+z+L8rf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+784fs/i/J3/M4r9z/pjF/735Yxb/XfLHLP7vyx+z+L8/f8zi/4H8MYv/rvljFv/d8scs/rvnj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n8P5o/ZvHfI3/M4v+x/DGL/575Yxb/j+ePWfw/kT9m8d8rf8zi/8n8MYv/3vljFv9P5Y9Z/D+dP2bx3yd/zOK/b/6YxX+//DGL/2fyxyz+n80fs/h/Ln/M4r9//pjF/4D8MYv/5/PHLP4H5o9Z/A/KH7P4fyF/zOJ/cP6Yxf+Q/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8v5k/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/t/KH7P4fzt/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP7fyR+z+J+ZP2bxPyt/zOJ/dv6Yxf+7+WMW/+/lj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4X5g/ZvG/KH/M4v/T/DGL/8X5Yxb/n+WPWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP4/zx+z+P8if8zi/8v8MYv/r/LHLP5X549Z/K/JH7P4/zp/zOL/m/wxi/+1+WMW/9/mj1n8r8sfs/hfnz9m8b8hf8zi/7v8MYv/jfljFv+b8scs/jfnj1n8f58/ZvH/Q/6Yxf+P+WMW/1vyxyz+f8ofs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+f88cs/nfmj1n878ofs/j/JX/M4n93/pjF/6/5Yxb/v+WPWfz/nj9m8f9H/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/hPyR+z+D+YP2bxfyh/zOI/NX9M4j/fIH/M4j+UP2bxH5U/ZvGfLX/M4j97/pjFf3T+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6Yxf8p+WMW/wXyxyz+Y/LHLP4L5o9Z/Mfmj1n8F8ofs/gvnD9m8X9q/pjF/2n5Yxb/p+ePWfwXyR+z+D8jf8ziv2j+mMX/mfljFv9n5Y9Z/BfLH7P4Pzt/zOL/nPwxi/+4/DGL/3Pzxyz+z8sfs/g/P3/M4r94/pjFf4n8MYv/C/LHLP5L5o9Z/JfKH7P4vzB/zOL/ovwxi/+L88cs/i/JH7P4L50/ZvF/af6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvF/Wf6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/F+eP2bxXy1/zOK/ev6Yxf8V+WMW/1fmj1n8X5U/ZvEfnz9m8Z+QP2bxn5g/ZvFfI3/M4r9m/pjFf638MYv/pPwxi//k/DGL/9r5Yxb/dfLHLP6vzh+z+L8mf8ziv27+mMV/vfwxi//6+WMW/9fmj1n8N8gfs/i/Ln/M4r9h/pjFf6P8MYv/xvljFv9N8scs/q/PH7P4b5o/ZvHfLH/M4v+G/DGL/xvzxyz+b8ofs/i/OX/M4v+W/DGL/1vzxyz+b8sfs/hvnj9m8d8if8ziv2X+mMX/7fljFv+t8scs/lvnj1n8t8kfs/hvmz9m8X9H/pjFf7v8MYv/O/PHLP7vyh+z+G+fP2bx3yF/zOK/Y/6YxX+n/LGH/bc5+b/a/935Y5bz/z35Yxb/nfPHLP7vzR+z+O+SP2bxf1/+mMX//fljFv8P5I9Z/HfNH7P475Y/ZvHfPX/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/x75Yxb/j+WPWfz3zB+z+H88f8zi/4n8MYv/XvljFv9P5o9Z/PfOH7P4fyp/zOL/6fwxi/8++WMW/33zxyz+++WPWfw/kz9m8f9s/pjF/3P5Yxb//fPHLP4H5I9Z/D+fP2bxPzB/zOJ/UP6Yxf8L+WMW/4Pzxyz+h+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/b+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4v/N/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvH/Vv6Yxf/b+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bx/07+mMX/zPwxi/9Z+WMW/7Pzxyz+380fs/h/L3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8v58/ZvH/Qf6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6Yxf/C/DGL/0X5Yxb/n+aPWfwvzh+z+P8sf8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bxvzp/zOJ/Tf6Yxf/X+WMW/9/kj1n8r80fs/j/Nn/M4n9d/pjF//r8MYv/DfljFv/f5Y9Z/G/MH7P435Q/ZvG/OX/M4v/7/DGL/x/yxyz+f8wfs/jfkj9m8f9T/pjF/9b8MYv/bfljFv/b88cs/nfkj1n8/5w/ZvG/M3/M4n9X/pjF/y/5Yxb/u/PHLP5/zR+z+P8tf8zi//f8MYv/P/LHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjFf0r+mMX/wfwxi/9D+WMW/6n5YxL/+Qf5Yxb/ofwxi/+o/DGL/2z5Yxb/2fPHLP6j88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+T8kfs/gvkD9m8R+TP2bxXzB/zOI/Nn/M4r9Q/pjFf+H8MYv/U/PHLP5Pyx+z+D89f8ziv0j+mMX/GfljFv9F88cs/s/MH7P4Pyt/zOK/WP6Yxf/Z+WMW/+fkj1n8x+WPWfyfmz9m8X9e/pjF//n5Yxb/xfPHLP5L5I9Z/F+QP2bxXzJ/zOK/VP6Yxf+F+WMW/xflj1n8X5w/ZvF/Sf6YxX/p/DGL/0vzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/8vyxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOL/8vwxi/9q+WMW/9Xzxyz+r8gfs/i/Mn/M4v+q/DGL//j8MYv/hPwxi//E/DGL/xr5Yxb/NfPHLP5r5Y9Z/Cflj1n8J+ePWfzXzh+z+K+TP2bxf3X+mMX/NfljFv9188cs/uvlj1n8188fs/i/Nn/M4r9B/pjF/3X5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvF/ff6YxX/T/DGL/2b5Yxb/N+SPWfzfmD9m8X9T/pjF/835Yxb/t+SPWfzfmj9m8X9b/pjFf/P8MYv/FvljFv8t88cs/m/PH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/O/LHLP7b5Y9Z/N+ZP2bxf1f+mMV/+/wxi/8O+WMW/x3zxyz+O+WPWfzfnT9m8X9P/pjFf+f8MYv/e/PHLP675I9Z/N+XP2bxf3/+mMX/A/ljFv9d88cs/rvlj1n8d88fs/h/MH/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4r9H/pjF/2P5Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjE/ymD/DGL/1D+mMV/VP6YxX+2/DGL/+z5Yxb/0fljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/6fkj1n8F8gfs/iPyR+z+C+YP2bxH5s/ZvFfKH/M4r9w/pjF/6n5Yxb/p+WPWfyfnj9m8V8kf8zi/4z8MYv/ovljFv9n5o9Z/J+VP2bxXyx/zOL/7Pwxi/9z8scs/uPyxyz+z80fs/g/L3/M4v/8/DGL/+L5Yxb/JfLHLP4vyB+z+C+ZP2bxXyp/zOL/wvwxi/+L8scs/i/OH7P4vyR/zOK/dP6Yxf+l+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6Yxf9l+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxf3n+mMV/tfwxi//q+WMW/1fkj1n8X5k/ZvF/Vf6YxX98/pjFf0L+mMV/Yv6YxX+N/DGL/5oi/7n+hXUt/muJ/P+VLP6T8scs/pPzxyz+a+ePWfzXyR+z+L86f8zi/5r8MYv/uvljFv/18scs/uvnj1n8X5s/ZvHfIH/M4v+6/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4vz5/zOK/af6YxX+z/DGL/xvyxyz+b8wfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4r95/pjFf4v8MYv/lvljFv+3549Z/LfKH7P4b50/ZvHfJn/M4r9t/pjF/x35Yxb/7fLHLP7vzB+z+L8rf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+784fs/i/J3/M4r9z/pjF/735Yxb/XfLHLP7vyx+z+L8/f8zi/4H8MYv/rvljFv/d8scs/rvnj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n8P5o/ZvHfI3/M4v+x/DGL/575Yxb/j+ePWfw/kT9m8d8rf8zi/8n8MYv/3vljFv9P5Y9Z/D+dP2bx3yd/zOK/b/6YxX+//DGL/2fyxyz+n80fs/h/Ln/M4r9//pjF/4D8MYv/5/PHLP4H5o9Z/A/KH7P4fyF/zOJ/cP6Yxf+Q/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8v5k/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/t/KH7P4fzt/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP7fyR+z+J+ZP2bxPyt/zOJ/dv6Yxf+7+WMW/+/lj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4X5g/ZvG/KH/M4v/T/DGL/8X5Yxb/n+WPWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP4/zx+z+P8if8zi/8v8MYv/r/LHLP5X549Z/K/JH7P4/zp/zOL/m/wxi/+1+WMW/9/mj1n8r8sfs/hfnz9m8b8hf8zi/7v8MYv/jfljFv+b8scs/jfnj1n8f58/ZvH/Q/6Yxf+P+WMW/1vyxyz+f8ofs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+f88cs/nfmj1n878ofs/j/JX/M4n93/pjF/6/5Yxb/v+WPWfz/nj9m8f9H/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/hPyR+z+D+YP2bxfyh/zOI/NX9M4r/AIH/M4j+UP2bxH5U/ZvGfLX/M4j97/o9qtpFHi//o/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/U/LHLP4L5I9Z/Mfkj1n8F8wfs/iPzR+z+C+UP2bxXzh/zOL/1Pwxi//T8scs/k/PH7P4L5I/ZvF/Rv6YxX/R/DGL/zPzxyz+z8ofs/gvlj9m8X92/pjF/zn5Yxb/cfljFv/n5o9Z/J+XP2bxf37+mMV/8fwxi/8S+WMW/xfkj1n8l8wfs/gvlT9m8X9h/pjF/0X5Yxb/F+ePWfxfkj9m8V86f8zi/9L8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8zi/7L8MYv/SvljFv+V88cs/qvkj1n8V80fs/i/PH/M4r9a/pjFf/X8MYv/K/LHLP6vzB+z+L8qf8ziPz5/zOI/IX/M4j8xf8ziv0b+mMV/zfwxi/9a+WMW/0n5Yxb/yfljFv+188cs/uvkj1n8X50/ZvF/Tf6YxX/d/DGL/3r5Yxb/9fPHLP6vzR+z+G+QP2bxf13+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfxfnz9m8d80f8ziv1n+mMX/DfljFv835o9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/N+WP2bx3zx/zOK/Rf6YxX/L/DGL/9vzxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOL/jvwxi/92+WMW/3fmj1n835U/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv93549Z/N+TP2bx3zl/zOL/3vwxi/8u+WMW//flj1n8358/ZvH/QP6YxX/X/DGL/275Yxb/3fPHLP4fzB+z+H8of8zi/+H8MYv//489emgDxDCgKFpO3U4V27Y5sW3btmdi27Zt27Zt205+QN6X7PPO2d7lHex/1PJ/iP9Ry/8d/Y9a/u/kf9Tyf2f/o5b/u/gftfzf1f+o5f9u/kct/3f3P2r5v4f/Ucv/Pf2PWv7v5X/U8n9v/6OW//v4H7X839f/qOX/fv5HLf/39z9q+X+A/1HL/wP9j1r+H+R/1PL/YP+jlv+H+B+1/D/U/6jl/2H+Ry3/D/c/avl/hP9Ry/8j/Y9a/h/lf9Ty/2j/o5b/x/gftfw/1v+o5f9x/kct/4/3P2r5f4L/Ucv/E/2PWv6f5H/U8v9k/6OW/6f4H7X8P9X/qOX/af5HLf9P9z9q+X+G/1HL/zP9j1r+n+V/1PL/bP+jlv/n+B+1/D/X/6jl/3n+Ry3/z/c/avl/gf9Ry/8L/Y9a/l/kf9Ty/2L/o5b/l/gftfy/1P+o5f9l/kct/y/3P2r5f4X/Ucv/K/2PWv5f5X/U8v9q/6OW/9f4H7X8v9b/qOX/df5HLf+v9z9q+X+D/1HL/xv9j1r+3+R/1PL/Zv+jlv+3+B+1/L/V/6jl/23+Ry3/b/c/avl/h/9Ry/87/Y9a/t/lf9Ty/27/o5b/9/gftfy/1/+o5f99/kct/+/3P2r5/4D/Ucv/B1v/D/j53PL/odb/v6Dl/8P+/8Sgov+P+B+1/H/U/6jl/2P+Ry3/H/c/avn/hP9Ry/8n/Y9a/j/lf9Ty/2n/o5b/z/gftfx/1v+o5f9z/kct/5/3P2r5/4L/Ucv/F/2PWv6/5H/U8v9l/6OW/6/4H7X8f9X/qOX/a/5HLf9f9z9q+f+G/1HL/zf9j1r+v+V/1PL/bf+jlv/v+B+1/H/X/6jl/3v+Ry3/3/c/avn/gf9Ry/8P/Y9a/n/kf9Ty/2P/o5b/n/gftfz/1P+o5f9n/kct/z/3P2r5/4X/Ucv/L/2PWv5/5X/U8v9r/6OW/9/4H7X8/9b/qOX/d/5HLf+/9z9q+f+D/1HJ/4G/8T9q+f9b/6OW/7/zP2r5/3v/o5b/f/A/avn/R/+jlv8D/I9a/v/J/6jl/5/9j1r+/8X/qOX/X/2PWv7/zf+o5f/f/Y9a/v/D/6jl/z/9j1r+/8v/qOX/QP+jlv//9j9q+f8f/6OW///1P2r5/z//o5b///c/avk/lP9Ry/+h/Y9a/g/jf9Tyf1j/o5b/w/kftfwf3v+o5f8I/kct/0f0P2r5P5L/Ucv/kf2PWv6P4n/U8n9U/6OW/6P5H7X8H93/qOX/GP5HLf/H9D9q+T+W/1HL/7H9j1r+j+N/1PJ/XP+jlv/j+R+1/B/f/6jl/wT+Ry3/J/Q/avk/kf9Ry/+J/Y9a/k/if9Tyf1L/o5b/k/kftfyf3P+o5f8U/kct/6f0P2r5P5X/Ucv/qf2PWv5P43/U8n9a/6OW/9P5H7X8n97/qOX/DP5HLf9n9D9q+T+T/1HL/5n9j1r+D/I/avk/i/9Ry/9Z/Y9a/s/mf9Tyf3b/o5b/c/gftfyf0/+o5f9c/kct/+f2P2r5P4//Ucv/ef2PWv7P53/U8n9+/6OW/wv4H7X8X9D/qOX/Qv5HLf8X9j9q+b+I/1HL/0X9j1r+L+Z/1PJ/cf+jlv9L+B+1/F/S/6jl/1L+Ry3/l/Y/avm/jP9Ry/9l/Y9a/i/nf9Tyf3n/o5b/K/gftfxf0f+o5f9K/kct/1f2P2r5v4r/Ucv/Vf2PWv6v5n/U8n91/6OW/2v4H7X8X9P/qOX/Wv5HLf/X9j9q+b+O/1HL/3X9j1r+r+d/1PJ/ff+jlv8b+B+1/N/Q/6jl/0b+Ry3/N/Y/avm/if9Ry/9N/Y9a/m/mf9Tyf3P/o5b/W/gftfzf0v+o5f9W/kct/7f2P2r5v43/Ucv/bf2PWv5v53/U8n97/6OW/zv4H7X8H+x/1PJ/iP/Rr+4/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7Jvt7F1loUfx+9u6xj7809GXHAZmmxyoZAIs91DxgvCJmNbHXTjeQxwdGs3Ntptdh12BdzDi0mE8CDJJEuUKFuGEmZCIzEQrCCiQRc10eADIApRNE6EoFviYs1pT0t77BrPVa9rUT6fFz3nvs9+97Ym3933AgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/14NjQuPjK8Zdmr80IMPHm7pe51zdOXNB37bc+HAa/njZSNcctzQg97e3t45z83eUT48pSiK0s+2s3w8qXJcuv7O+i909h+FBT0vLTk+5eeNRw6sOf2Ruu6j99f2na0tblq3obXlY+OKIlxcW3SWDupqiiIsri3uKx3Ulw6W1BaPlA5m9x2cWny7dHD+2s2tzaUTS6O/Z/C/oqFxZzF+WLHFsD8Nhva/s/5bdw68jnLJgatNKMr9X9H1/bcqPhtwgv4Hrh8WVvZf9W8QOKHq+n9hwcDrKJf8l/v/5KdWvTLSZyfuf+D64eP6h3RGeP4f1mjlc3/F8/+MES45uL+qput4qf9Lb3t2ZvnUhH/n+f/d64eLK/sfN+z5v/Qcv2jg+f+UogiXjPHbAe8pDY27jox2/x+9/wnTKzY1Q/s/o33z/lL/jy/53hPlU7VV9r9olPv/uKUVv1agOg2NX+6tuP9X0X/xkREuOdj/20/8+uFS/4/9/oEzh3xWTf+XVPY/q6Nty6yt27vO29DWtL5lfcumutnz58yrr5t3wdxZfY8E/V/H+F2B94ax3f+LyRWbmqJoGdxf033g6VL/cx98cE751KQq+1886v1/hvs/jOhD44qJE4vOpo6O9rr+rwOH9f1f+3/YCP1X8ff/s84p/7Da8mtNUUwb3N915t0rSv2/c+jZ3eVTE6vsf8mo/S8Y/HmBCGO8/zdXbIb1f/DQS33P/8vuPXhG+VS1f/9fOmr/r7r/w1g0NFb8Dz//YaX+dxWXRXYaGvz3P0gnR/+PvXNDT9w6fEL/kE6O/n/3uaPnxq3DMv1DOjn6n7Dxgefj1uFS/UM6OfpfPnX+irh1uEz/kE6O/te+eu6f49ahUf+QTo7+z/nS7s64dViuf0gnR/8Ptc/ZFrcOK/QP6eTo/6enPfRa3Dpcrn9IJ0f/x47dc2PcOlyhf0gnR//de87+Qdw6XKl/SCdH/5evWxji1uEq/UM6OfqfPu2Pj8etw9X6h3Ry9D/vT38/LW4drtE/pJOj/zs+v2Jf3Dpcq39IJ0f/469/5cW4dVipf0gnR/9Lz962MG4drtM/pJOj/+afNPfGrcMq/UM6Ofqf9fUfbYhbh+v1D+nk6P/w8kf3xK3DDfqHdHL0v6eumBK3DjfqH9LJ0f/Xvnv6obh1+KT+IZ0c/f/mqSfnx63Dav1DOjn6f+4Dt38jbh1u0j+kk6P/e9e8eFbcOjTpH9LJ0f/De5//Ytw6rNE/pJOj/zfeaPu/uHVYq39IJ0f/kyed+nrcOjTrH9LJ0f/CW7/SHrcOLfqHdHL037a7+4dx67BO/5BOjv4/fHzaqrh1WK9/SCdH/yvn7n1/3DrcrH9IJ0f/71t24a64ddigf0gnR/8X9Xz0orh12Kh/SCdH/x3PfParcetwi/4hnRz975352uK4dWjVP6STo/+XVy/9cdw6tOkf0snR/1uPXrcpbh026R/SydH/kz97+1jcOmzWP6STo///v2DRX+PWYYv+IZ0c/S9e8ubauHX4lP4hnRz9b+z+x8tx69Cuf0gnR/8zD1+9LG4dtuof0snR/3fOq9sftw4d+od0cvR/55X76uPWYZv+IZ0c/e8/eNfdcetwq/4hnRz9v/mLGdPj1uHT+od0cvR//5RD18atQ6f+IZ0c/f9yU+0zceuwXf+QTo7+/7Zv6o64dejSP6STo/+nX+/5Q9w63KZ/SCdH/6sn/Gpi3Drcrn9IJ0f/U7u23Be3DnfoH9LJ0f/8e5rOj1uHz+gf0snR/9a/vPDNuHXYoX9IZ+v2rluaWltb2r3xxhtvBt+c7D+ZgNTejf5k/0oAAAAAAAAAAAAAAIATyfHPiU727xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4JztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1kH0bgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAVAAD//6H93N0=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 5.467288189s ago: executing program 1 (id=5270): r0 = socket$netlink(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x83c0550b, 0x0) 4.725361165s ago: executing program 4 (id=5274): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) remap_file_pages(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x2000009, 0x5, 0x104000) 4.290207495s ago: executing program 9 (id=5276): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2004000, &(0x7f0000000180)={[{@barrier}, {@grpid}, {@grpjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0xff}}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000200)='./file2\x00') 4.157290799s ago: executing program 7 (id=5277): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}}, 0x20000000) 3.470981584s ago: executing program 4 (id=5279): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYRES32=0x0], 0xff, 0x5e92, &(0x7f0000018400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) fdatasync(r0) 3.067814873s ago: executing program 2 (id=5281): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/JvgwH0WHA33XkGRlNF1Gk461Dtwe3IsvMgQRB6Lvvvs4/Af8KwY6GDKKPuwlctObLluTNu3StVs+H7jtOffe9Jxv7v2enpubkAAG1kT6IxfxakR8l0SMtW0bjmzjxOp+Kw+uFdMliUbjs3+SSLJ1rf2T7PehrPJKRPzxTcTJ3Pp2a0vLc4VKpbyQ1Sfr85cna0vLpy7OF2bLs+VL0zMzZ96ZmX7/vXf7Fuub5//78dM7H5359vjKD7/dO3IribNxONvWHsdTuN5emYiJ7DkZibNP7DjVh8b2kmS3O8C2DGV5PhLpGDAWQ1nWd9QYe5ZdA3bY12laAwMqkf8woFrzgNa1fZ+ug58b9z9cvQBaH//w6msjMdq8Njq4kjx2ZZRe7473of20jd//vn0rXaJ/r0MAbOr6jYg4PTy8fvxLsvFv+073sM+TbRj/4Nm5k85/3uo0/8mtzX+iw/znUIfc3Y7N8z93rw/NdJXO/z7oOP9du2k1PpTVXmrO+UaSCxcr5XRsezkiTsTI/rS+wf2cL3MrdxvdNrbP/9Ilbb81F8z6cW94/+OPKRXqhacKus39GxGvdZz/JmvHP+lw/NPn43yPbRwr336927bN499ZjV8i3uh4/B/d0Uo2vj852TwfJltnxXr/3jz2Z7f2dzv+9Pgf3Dj+8aT9fm1t6238PPqw3G3bds//fcnnzfK+bN3VQr2+MBWxL/lk/frpR49t1Vv7p/GfOL7x+Nfp/D+QJnaP8d88erN919Gtxb+z0vhLWzr+Wy/c/firn7q139vxf7tZOpGt6WX867WDT/PcAQAAAAAAwF6Ti4jDkeTya+VcLp9ffX/H0TiYq1Rr9ZMXqouXStH8rOx4jORad7rH2t4PMZW9H7ZVn36iPhMRRyLi+6EDzXq+WK2Udjt4AAAAAAAAAAAAAAAAAAAA2CMORYx2+vx/6q+h3e4dsOM2+Mpv4AXXPf+zLf34pidgT/L/HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcG0l/389t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPn0qWx8uBaMa2XriwtzlWvnCqVa3P5+cVivlhduJyfrVZnK+V8sTq/2d+rVKuXp6Zj8epkvVyrT9aWlr+Yry5eethYVR55JlEBAAAAAAAAAAAAAAAAAADA86W2tDxXqFTKCwoK2yoM741uKPS5sNsjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88n8AAAD//75iP7A=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf503, 0x7fff}) 2.478932768s ago: executing program 7 (id=5284): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000020000104"], 0x2c}}, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.969556323s ago: executing program 0 (id=5286): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x48, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x8004) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000003c01088054"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.935650522s ago: executing program 7 (id=5287): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.906175298s ago: executing program 2 (id=5288): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 1.870547163s ago: executing program 9 (id=5289): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000004280)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000002100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}], 0x20}}], 0x1, 0x0) 1.870366787s ago: executing program 1 (id=5290): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.790881523s ago: executing program 4 (id=5291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.651854275s ago: executing program 7 (id=5292): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00281af1b4065523979adf17beb94280849ccc0dc1714eb222f63df0efb137cc864167ebe1152a2afc8a3e741d2278ce13c53ec35f7f6221d79689cd5b34e5357d62ae2d542b5df0c3f394ee"], 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.593019682s ago: executing program 0 (id=5293): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000002c0)=0x103, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001080)="f6fb", 0x8180}], 0x1) 1.591939052s ago: executing program 1 (id=5294): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002380)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 1.457056215s ago: executing program 2 (id=5295): r0 = io_uring_setup(0x46ea, &(0x7f00000007c0)={0x0, 0x7821, 0x800, 0x1, 0x1bb}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.246475452s ago: executing program 9 (id=5296): r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$pptp(0x18, 0x1, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 1.245876012s ago: executing program 1 (id=5297): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280037800b00010069703676066900001800028014000500200100000000000000000000000000000c002b"], 0x54}}, 0x0) 1.111982658s ago: executing program 0 (id=5298): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020", 0x5, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 972.393899ms ago: executing program 2 (id=5299): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 836.816221ms ago: executing program 9 (id=5300): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00060000000040670000a168d0bf46d32300000000648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 823.50654ms ago: executing program 4 (id=5301): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}, {0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7}]}, 0xb0) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 690.797353ms ago: executing program 0 (id=5302): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)={r2}) 640.568805ms ago: executing program 2 (id=5303): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000000)={0x20, r2, 0x0}) 549.374435ms ago: executing program 4 (id=5304): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000700)=""/245, 0xf5}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 496.228888ms ago: executing program 9 (id=5305): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x4, 0x200, 0xfffffffe, 0x2000000000003}) 423.073681ms ago: executing program 1 (id=5306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x34}}, 0x0) 369.260186ms ago: executing program 0 (id=5307): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x21, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, '%+('}}, 0xe6da) 208.430988ms ago: executing program 2 (id=5308): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000f80)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000440)="b28b03320342806fa24bd9f3a20f47e49b709a1699bab35e5f2a89e9f3b9f7adfabe1fafbfe1830eea367c00cf4f8bdc54cde03083a58e38d1ca5042aa52972e321000bb252f679f74b4eca029963176918bc1f811dc90b9b064cad2510db5b455fd2f9cc4002e84b24076dee20ba44492afd6ac996ffa84170ddb8546646e5de0a07d9785", 0x85}, {&(0x7f0000000340)="ca3b2183f163f4f15197422c010381c449ad38b800160362af7925198ddd17c903b5ffa1ac003b27e916a87cd420aee36d697aa99e7dbfa819ed4df6ec554013fe8968031ccaa9043f36e8092b558c415edaa9279c82d9eb2d11a386ecabcedf38f45ef189d3a7d4dc6c1f5c6ad67b", 0x6f}, {&(0x7f0000000240)="a3525b0634d11383e654da06f57a5a106518e530", 0x14}, {&(0x7f0000000500)="2f2e121f4e4c5013ab7c0383d8dcad6ed964b7239591a2e69cbaab4f9da1f722bdbced21075f1a109834e490955b1e0424960437b87f1c71f0f8a30f509d248f4c2c0d92a2a79d7bd142be1dca7b14969131385b1c4df74c87010f22cc71ce4e69455099a4b487963a019194fca457a3ab1c0cc8922136b827d3d5155a57d6fe3c51a870daf6740c5416476f80fa0e590a0f5adf3998d255a06a811887a0f8a4068a2c9c08a3446d217a50078ef586744b38dae426cf3a3f5130c59f82f207c8c3c1b88dab5b9386abca852bfea6a03515695d3dc25487ef05ceeb4027f463f9764257c0d98b7ae557059a28ae28f96e49b6518ae29257", 0xf7}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="cf000000"], 0xa0, 0x4000041}}, {{&(0x7f0000000ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000b40)="5be99ed04abc224647038e6729a2392d329f71e2efd376a9f5d24551dabecab11bbd26d44bf46b124356dc7e1ef799c76f9d0c0ee0fab2dddf23be650371ad976ed7a10fccbc0e0fb09c29c2763d5cb3232ac4ff9c9f12102d505bb167808edb4d34930da56cfd952786451990a721374e8e789732ee955d2406303b2b5f680272734fdd3e0d122e54826226aa422c618ad0038a77b4c7de", 0x98}, {&(0x7f0000000640)="0d86", 0x2}, {&(0x7f0000000c40)="3069df53d33d5e7746092b58f6fa02b27cdd07f2f1971f65d6f1ad149c5c98a71329435c627c40a6a58b6691bb1c1d7b19ba87d996b56881637c006706dfea87c2f5215d2d6bbb652d800c292aa86fc6630bd0ca1310e311739c898a97862223279cdfd6d2a6e55c592928fb0471fc61292455126b6b809475c6cef05bd8065af884d207f508c76d7c3c0f9de3105b00099b81e92f629b2a03cf6ca20613fe3131c0e3bc359c96206379791a92d91785129b9df8816f756603", 0xb9}, {&(0x7f0000000d00)="c1fcb4f99579dc475d66efb883f4ba82b972508203114298fb98527510c2d01b1e1b7f972a7098760330df109ac0c40b54ea5f02af924e2be79ec157e70cb7c72ca143a9fa815a5436bc15e141d8aa0ad34699cdcfb071fb0b6d5fae67af46f8108a4a23319c26681c8d6f47cb8822c43d", 0xfffffe34}, {&(0x7f0000003180)="10ec44a7d0870d6e2a96f3f1dd00ecc61db18d87031abcdd08a0909530005f9bf679bdf3d843251221c0ddf66d6190fbb8d968353c8af78bb1def7f778f417725115aa785d5de23706cf7ac5bed70b83ce8d0d638f39321b45d1ec92d510d37146f43ca3f96ce19238ecc640beccc5c29ee124486d39c236e6d823b024d0abe888be85cb6c73b2f14b853661d68872726eb06ce7b5a3b6bc6991884114fa29e798065ccc1ad410e58ac945954083236c402ae58e8d67ab96ccec41ef13b7e3ee34367f7870b50dbf345825c87c0281ced951a21be8f5ae71f411ce2e04885566d3bf80f6f449cc42329c89128a6121e60163be166709028635adc8d69f31c199b2aa345857b1ea934efcc44d23a6f55e9e60ca83b4e2b562f08cbd9e3309617696203c043bcbf8913f0aae1718e9ba8f04d5cd903037ba6c1b4c19d3f06f140dd8bfcb5acc5cf0cd7d5ff39453119b2a9c95720df49e0487c36c6035e2dc52253e5567a419f8bb96974538f271c098966768526a0eb5d10e124415f0e92d9328ce6fac3759514a36d36f62ba3746f3d3856894587252d00b1a73813ad2d3e99c97c4c2d75236382c823881e3191a55226c6b0d51d5e2428c219a6628a69c832d07c11415f02891af66388f480311e915ae18f2b41507d67138ad72b7a29487936a764a238a5d5cb1930c82902ab982eae0b006de5de3015036ed1e4385dbe425f744fbb9afba7f124905c9e7f21fc8eb0a4a20388937c284541208183783a8a4f1ec8bb122753a9d6ea853e93f76b25cf8f07573c150ad396aea15825eb1b6894075d1d8fd90e5221b6245295e3b9345aafe28e7e73ba3bc569f2330863f3bab17e13d4294020c2e1eb75e3e35cfa36fd7cbdd6bbed5d5c33728db69f3d05c8e10255b2bad34c7f3cff03b835179284c0137a5e8c250dcfc14ca66dbaf4eb945e830e0f2b5558ad6db95393f12de56b829a528511185517dfd6fca57f4ed8c9b17a90e06bdb7747a79e8da24f56b5f220e2c0a814fb35f778789e9b319affa72d334e45f28c7f821f66f0f49401407f643d65effc74119c6421b4d968b54a11af03d7d21b36dc88c197c825fc7a847244fddd389215b514bff8bf5dc9ed60dfd2289c391ee96f6f6dd7adb851bb95182f6930774a7d0e72fae3cd6587295dd861c79e769bc8e93e0d6f3fd9fe48097b8ecfe8c39e200171bcfe439e55b1fd445efdf578099d2cff1b91aed46d77b9dd90be165f1244a64fdbbdb5591489746399013cf1836b66715cee540f353ad606064ddb58c6268a0e33fe9c42bf26586010ccd917244b21e5a5b075ebaec4a7856db5a3dd591b9dd4d433bca1c1b6503940e9049414acc1be9c336613b188c83f3036a141dbc8fc687bf8fd8c35289932e91bb6463d29ae932e7e94420fa0d827fda678c56b1f8d3139577aae11c2ab09ebb06aeb035ff6d9cfec4ff67b1e0770e86fe8e5304f5faea267fa528fb4bd54fe663f3c3b1b20ab7848fd4f8ee88ebbc16143ed898c5072fa44f317d19a24dbcf940b692d104817a3b31cd0012f580be372258444cbedec9cdf437827ac8a58ffde8b83cf36213602099cb2c04230bdf901017e0b75b572404c13324c97f208fc6979387675fe7d2a50fc59508faf43e2a05869169e4f0d1ffe3689ea50a37a0d635b6b31c488abb468412226685ab30ff34b579ade86f75f97f38e5fa27f68f37189cd2d79ee8fb05a17a00ebbed4da5febfb07161f8f52129ea0550c741b93185f95c25183839578fa122a3d7ad5956536a426b3af96fefd4ec4f36eb4526bb0bb5a42ac3bcfaea8ceb7bcc072e2da43e457bf36877d6a0bc91bf3543d7b8eb795054c0a797073d201a49a945a6de47bf0e54277102a91406d42eda7e9fabff1fa74669f90e6fe9eb399729121999192573f7ed4ebcac49689c85855b30f70fbb4440bb1154af7455053fe2bc2edf56cd071d99744ae13ec15756a0211212e6854a10677ae52349edf464ede1b011622ce0b3a584e8e960f7b67382be58110b8116e421ffcc4c6c5fd824c1e3cc2239f636e98b43363599f070000003bcb9b0f56b44e4b7dda2890e6c50f60980101719d0ac11c3c9ba3d75b33c29831f865ee2f0432be7e355d385292f3036cd57f70ceebf72af167c27e3c26048fc47be162f6a8e9d9d209f2065c09b03de60a2ec5ed90ebfc898913ea73ebd321c307f06b8d25a18b517041a16d04337fd8317ff8cbb2c1dcd0012f02aac5f6232788ffa0df53b8dc6043117b858d3dfa2968d4267e51255f73a47c764895b59c42bf55974008757e4187c98895f17938ccc1966f89084901acff7177eb784f490011d3596094238ca1fc32a2c00e64f2eece3743a62c39cb7fddf684d05c60f12bd7fb56d961dc3edac9c9c7dc7cfdc692bbfc7ffd14c4ccc00c589f61fac79484f36aac6e914e1b5cab27376ca9a3a1dfe9c30b8f8f8027c89904257120040f40b29df03bbd8c70236b75c06d17ae4f3541a1f137fe3a0dacb42782073fb4acad47915e8c8a3bf57b16187056d2484703713f4103d83476424662c06889e4848eb56473d692f69e67dc67943cc11ba482df41c310a79a6b4ade8d8e04455f66792a14d50271f9bdee3644050767725e40603f78fcf14d95188f81c1fd602f214c4b2d0555287f1d0339ef003efcfbac9392a38845b7b45a792b75d612c2721fd1731b850caab6e58cc33ea20b34b6333da0e5aeb54decadc032b70dcccab27d7caa1d42ee818bbd6a52955835c8099e60539035d12d3d1c9f6d771c08d04bf50ce20ffaaabf02b939917e3137a6a9db809a68d4af80b37c83b14d2dae1afcd740bf2f12e9ab91964a96a43e7dc0ae9a1fbb1ad51c213e9c2835dab8e06adc751432c3ed0f74c05ead0f23c0363ba30e4c2db1ffa1c856d605d2ca66bbd4ac70d7ea374fa19bda35e7df5023dca425885ce9e8270c088a5b8d97e09952baf679ddd57135c67d7d1adc18c985b8f6ac21e5b5501964c6edda20e5df2ddfda7165659c69f0b6e3fb7b5a06206cbd86ea420bbf36012619307088905f918c906d3c4d0197d7081ee8345345de36b2e3c3a2227c3812a93433b6856b17f67e6c77c8aec22e22a8dfb6c0d43e83dc6c3f6e2ef4c43fd3df3141e054ab5b0bd6764fd226f544096e9eefd38b2975c11eb4d0bd6cf75a5e43abd0d5129925a1bed9a2db7d41a8ccc69e4eebbf2ade86f92df7f25c101c900415838cec23f7817d57897862fb389302c7c5f7d0398b95b8dd316e3010b1c102d440816b05af84bbfecf2701b6da1f91efe3b3822c0937105f768c599bf5c6de22c3a2ceeb04c244e1b4653af9da24e49878aec602574eb101092bba7ec6a833008b29ce039bd1c56da35a697714dda4a0bc68f0385536ff272275d6a4dd6cc9ea593ec2bdc688f6a20b78f770330d931cb7974cef259b53a735f01c8ec4a87fa38a3212e1d3e27c114a3ccc36523b83a2f121ecca711f5ef1cbb828ee3a2a13f574cf5055ff803d9b61bb7a22c994fc5e4e451a43ab9907d222e365ca7e8ac022f868fe01ff878390d3a230887d6708fa915c99513b31d6740ce07b62ef5e1ab34b0e1d7637ab51abab739c7a520a1190d2eddf827b2c4987f5e9ccf23009c13fe365644856946604d33e503f0b5c80048d7912e936e62b64d950c16a8b899f446b6764cf5ab8510c36b64b89aedf7270b90d39732a8282f37cd32154cef6452335a1e3a0ba37b88d761e5d7e6cd61cf45f3839f1c3d20d687bef881b76b5a6fb76c13abb9e110bac98f95f0ef37f08a420411d13e1a32d1b2b6762e0973f151d78452e2c897755492112c58ec48a25fcbd664bdc668bd929332ff21d50b602707d1106cbf750f9cf56305491dff10d0f71cfd570c2bd0627de6d7ab023f0ad2cced7d579d5372a750f6fe4fca187a8a9574caddc38b16b4733f51f689a269c3bb017c7b147ba9d4e3dbba2aa84983dd074204da053a4eac0daa038db4e313b527127993a8e52a399591cdf10fc9ea7b0126f8ed909754836c13f35ab9e4f0750d9a013378bf5c0ce3f56926a375228ee302b91435654e649fe93c76719b3f5f5fca63030f4a8da0c6bdecf59e8d0bd0b1a05db6e367315eafba72f0f3f6eaa5d75ca3de8767ed0dc907da6623b07a58aaef9ee44f2ae708239f29554d5d2a1cb46ef2d22d52585e18165603c047cd88dcb3e47867a3a795f75dc918c37f78bb0258c6ae7ae2bf87c839da607faf557bed96e4a5c02f7771b442dd532fea9db674d338c9cf9b96011a0d5ddaebdb60c65c41bc6fb1528df5f652bfea8a4202a32dc6a2d80bfb4c3b583ff2c71a41ec98e5d9de138d0a5ab680666aaddd4988db29fc4764c2091404c7b54c202704a908a978b6b44d49624c57cbfe65e9bbdc1a01911708d618c061cd8f2c8b313a64a98ad73f14e69616acdaebbb982c8510573fd4da2c9eea7ff92bc9b0d19722b43c7e3dc28ac5d3e2fd0f638d00063aa10a1707f4d31039c77e8284be63b6bc07237d787b374cfa2e2aa2d52e731ecda4c11f113c848fd44bba739847b443447425ad8806258a4571801b5a2ba2f334aa00d2fafdf02be33c7ef7ed35bfd6254ecebe95e7d2eb9bb94746c0cb81dbca1f0ce7f1429e86e0da40f15a33bc8b2064dfca96b466d4026d48b7902b675eed3d485aaf34750736b7200722bb9c333c91ce7992746930c98ddf7e5761d7d28a68f46a06469d989ca7502995bf88acee2a8fe817535390a27b81eb9f605e5f31e775e616d05407bfe0b333561bb88e5446619ecc7eea83fcdd33912f75a62d9afe2fab07524380906afa78851653e1a062179944aedf56ed867da32f5775b4aae7db4ef7c16b7fe00d889ecd549cc9f0b5b2311fe5856a74bd339285ef6858a72114cd8eabf3f6990702201bfbc1e8414c97c3c83561f9de38dba3a00ec95f7293d3f0009b057007e6484df84fca300f156bb120a1e1675d41dc397ade39b6c0cb161b52747f4ad8a9824f1126ef325622b9fc76d591c97de8fdd02abf8109b54d194ebd68d1b93c50856f0da3fbbf2c661a0c3f279c28aeccae7dd03b7f1bbbe7a4273040ff5bf051561948c7d17727f6568b5eac06bd100e6ba2f6e8ef633aa4af6320e112ef26a3959f497a4c29bff833b7928681a685b5d715f340a5fa80f7742831a48ad5d038357393f68ff81a33d3f9891adf5deb46fb60d332e3ad7a8b8c13e0a970e86ae25e32ef4f8e7a6db39153f5ac1eb4d23c65548d333e48961ac7534828cbae2ad68ac2bf0110a2bd40bbebfc93928a0d35d1fdeba4285708988c6cade4d44c69c754a5548195fc13bf1201c29b60e96304e5abcb0855f4e1093c63a603b21b2edbd460e7ee84e5bde4488e9699b17969034c576d8445bce72731cb38fb656615286c8627df02c58deafaa144d2f3273abc6bdf8ab09720692d4904fa3f438f552dc49bb38011945a7a964a1f132c8b05379816d4caa3ab9634de47dded32e797510fc5e6b3740fc81a6f461787c5255c7f5b25baa0c939670842e2fc178dc85da5cd09c19f83d29c5f7106acaad55463bfa68ce56bc90a510eadda3016b37bf53b6081105bdfd1d7fa63a367343a1353fcdded933daeb061d399a82459a3de95857fbb6035b1828f07a993c222bcc87b6e77aa38653ebb90ecfbb33e402422f507be67043f95c8b91031d11b8d4bb1d2e77a83fcda4640d3eefe09d33e1b40e6eba3b30057d246ba934a4c593b6e36c8627e5a4050373c16c2b1c73a9a8b120e837e386c013d8d8ad090ab22e4f02ce57eefc77f1f1284cbbc0ad14cb30e0734696b0ab47bc9f530ca0428136a195ef8fd1f645f2e4846771a5503e5b5fac79d542f3f97dc62711883f9869cfc0184dbc75e0796591a09db9cd3ec995cd2e865dcab613ea5637ff9cd2ff05fcc925a1dbf648ce6f2a1f46303271ad7e8011dae739979f5d5694aeba58", 0x1082}, {&(0x7f0000000d80)="b3368533f7c870", 0x7}, {&(0x7f0000002180)="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", 0x1000}], 0x7, &(0x7f0000000e80)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0, 0x4040000}}], 0x2, 0x0) 71.918766ms ago: executing program 1 (id=5309): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.062057ms ago: executing program 0 (id=5310): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, 0x0) 1.986673ms ago: executing program 9 (id=5311): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x36b1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], &(0x7f0000004a80), 0x1}, 0x20) 0s ago: executing program 4 (id=5312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000300000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000004850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000b00)={r2, 0x2, 0x0}, 0x10) kernel console output (not intermixed with test programs): in delayed_ack socket option. [ 628.991639][T17703] Use struct sctp_sack_info instead [ 629.048391][T17707] sp0: Synchronizing with TNC [ 629.197916][T17709] loop8: detected capacity change from 0 to 32768 [ 629.210793][T17709] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4300 (17709) [ 629.337279][T17709] BTRFS info (device loop8): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 629.390624][T17709] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 629.403297][T17718] overlayfs: lower data-only dirs require metacopy support. [ 629.427949][T17709] BTRFS info (device loop8): using free-space-tree [ 629.522022][T17724] netlink: 136 bytes leftover after parsing attributes in process `syz.7.4305'. [ 630.045778][T17754] loop5: detected capacity change from 0 to 512 [ 630.179691][T17754] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.4314: corrupted in-inode xattr: invalid ea_ino [ 630.224227][T17754] EXT4-fs error (device loop5): ext4_orphan_get:1392: comm syz.5.4314: couldn't read orphan inode 15 (err -117) [ 630.254747][T13049] BTRFS info (device loop8): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 630.287099][T17754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.379229][T17766] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input36 [ 630.543891][T17772] loop7: detected capacity change from 0 to 2048 [ 630.551222][T17772] udf: Unknown parameter 'xœìÝAl×}àÿrÅ¥ÜVLœ(N›´HeÅreI1«pW5Í6€' [ 630.601472][T17275] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.667631][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4322'. [ 630.858396][T17776] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 630.924249][T17776] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 631.100709][ T5838] Bluetooth: hci4: command tx timeout [ 631.651042][ T9] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 631.812555][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.829705][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.856353][ T9] usb 9-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 631.890265][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.922747][ T9] usb 9-1: config 0 descriptor?? [ 632.362676][ T9] belkin 0003:1020:0006.004C: report_id 0 is invalid [ 632.385181][ T9] belkin 0003:1020:0006.004C: item 0 0 1 8 parsing failed [ 632.403254][ T9] belkin 0003:1020:0006.004C: parse failed [ 632.409167][ T9] belkin 0003:1020:0006.004C: probe with driver belkin failed with error -22 [ 632.610108][T15523] usb 9-1: USB disconnect, device number 20 [ 633.046225][T17823] loop3: detected capacity change from 0 to 32768 [ 633.195459][T17852] loop2: detected capacity change from 0 to 2048 [ 633.203154][T17852] EXT4-fs: Ignoring removed mblk_io_submit option [ 633.290775][T17852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.319843][T17823] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 633.376923][T17861] loop5: detected capacity change from 0 to 64 [ 633.558723][T17852] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.4353: bg 0: block 234: padding at end of block bitmap is not set [ 633.588013][T17852] EXT4-fs (loop2): Remounting filesystem read-only [ 633.766584][T17866] loop8: detected capacity change from 0 to 32768 [ 633.777226][T16733] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.020526][T17823] XFS (loop3): Ending clean mount [ 634.034112][T17823] XFS (loop3): Quotacheck needed: Please wait. [ 634.118773][T17823] XFS (loop3): Quotacheck: Done. [ 634.398114][T17886] netlink: 209848 bytes leftover after parsing attributes in process `syz.2.4366'. [ 634.418110][T17885] loop7: detected capacity change from 0 to 128 [ 634.436819][T16127] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 634.446813][T17886] openvswitch: netlink: Message has 3070 unknown bytes. [ 634.473698][T17885] VFS: Found a Xenix FS (block size = 512) on device loop7 [ 634.526924][T17885] sysv_count_free_blocks: cannot read free-list block [ 634.724616][T17892] loop8: detected capacity change from 0 to 1024 [ 634.752566][T17885] sysv_count_free_inodes: unable to read inode table [ 634.782964][T17891] sysv_count_free_blocks: cannot read free-list block [ 634.803774][T17874] loop5: detected capacity change from 0 to 32768 [ 634.826249][T17892] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.831453][T17891] sysv_count_free_inodes: unable to read inode table [ 634.869969][T17892] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.935128][T17874] JBD2: Ignoring recovery information on journal [ 635.200876][ T7271] sysv_free_block: trying to free block not in datazone [ 635.223000][ T7271] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 635.233094][T13049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.400014][T17874] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 635.619769][T17275] ocfs2: Unmounting device (7,5) on (node local) [ 635.811345][T17910] use of bytesused == 0 is deprecated and will be removed in the future, [ 635.870808][T17910] use the actual size instead. [ 636.162747][T17900] loop3: detected capacity change from 0 to 40427 [ 636.248384][T17923] gfs2: path_lookup on :syz3:E:00000000000000002621:}*:--@+@^-'.#:./file0: returned error -2 [ 636.291539][T17900] F2FS-fs (loop3): Image doesn't support compression [ 636.348693][T17900] F2FS-fs (loop3): invalid crc value [ 636.354267][T17900] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 636.522533][T17927] loop5: detected capacity change from 0 to 64 [ 636.542212][T17900] F2FS-fs (loop3): Found nat_bits in checkpoint [ 636.771105][T17900] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 636.864821][ T29] audit: type=1800 audit(1734223969.188:258): pid=17900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4367" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 636.894022][T17900] bio_check_eod: 1 callbacks suppressed [ 636.894050][T17900] syz.3.4367: attempt to access beyond end of device [ 636.894050][T17900] loop3: rw=34817, sector=45096, nr_sectors = 8 limit=40427 [ 637.024252][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4384'. [ 637.084836][T16127] syz-executor: attempt to access beyond end of device [ 637.084836][T16127] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 637.130921][T16127] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 637.881019][T15523] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 638.059971][T15523] usb 3-1: Using ep0 maxpacket: 16 [ 638.073176][T15523] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 638.081529][T15523] usb 3-1: config 0 has no interface number 0 [ 638.087663][T15523] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.135664][T15523] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.165974][T15523] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 638.198136][T15523] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.238710][T15523] usb 3-1: config 0 descriptor?? [ 638.672031][T17951] loop5: detected capacity change from 0 to 40427 [ 638.681468][T17951] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff [ 638.692914][T17951] F2FS-fs (loop5): Image doesn't support compression [ 638.700113][T17951] F2FS-fs (loop5): heap/no_heap options were deprecated [ 638.707575][T17951] F2FS-fs (loop5): Image doesn't support compression [ 638.721937][T17951] F2FS-fs (loop5): invalid crc value [ 638.742378][T17951] F2FS-fs (loop5): Found nat_bits in checkpoint [ 638.866930][T17973] sp0: Synchronizing with TNC [ 638.873819][T17951] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 638.917401][T15523] uclogic 0003:28BD:0071.004D: pen parameters not found [ 638.924799][T15523] uclogic 0003:28BD:0071.004D: interface is invalid, ignoring [ 638.949934][T15523] usb 3-1: USB disconnect, device number 25 [ 638.984513][T17951] syz.5.4391: attempt to access beyond end of device [ 638.984513][T17951] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 639.086038][T17959] loop7: detected capacity change from 0 to 32768 [ 639.114126][T17959] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4394 (17959) [ 639.216961][T17275] syz-executor: attempt to access beyond end of device [ 639.216961][T17275] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 639.231624][T17275] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 639.236713][T17959] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 639.278382][T17959] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 639.287728][T17959] BTRFS info (device loop7): using free-space-tree [ 639.668100][T18005] loop3: detected capacity change from 0 to 1024 [ 639.757382][T18005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.809074][T18005] EXT4-fs error (device loop3): ext4_xattr_ibody_get:653: inode #2: comm syz.3.4406: corrupted in-inode xattr: bad e_name length [ 639.871098][T18005] EXT4-fs (loop3): Remounting filesystem read-only [ 639.899061][ T7271] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 640.612850][T18031] loop9: detected capacity change from 0 to 4096 [ 640.646758][T18031] NILFS (loop9): invalid segment: Checksum error in segment payload [ 640.656089][T18031] NILFS (loop9): trying rollback from an earlier position [ 640.905119][T16127] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.921815][T18031] NILFS (loop9): recovery complete [ 640.950652][T18033] loop2: detected capacity change from 0 to 32768 [ 640.978754][ T3560] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 640.979127][T18033] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4418 (18033) [ 641.000020][ T3560] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 641.022524][T18038] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 641.045368][T18033] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 641.055963][T18033] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 641.064573][T18033] BTRFS info (device loop2): using free-space-tree [ 641.095787][T12396] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.225039][T18033] BTRFS info (device loop2): rebuilding free space tree [ 641.422568][T12396] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.498155][T16733] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 641.562580][T12396] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.721492][T12396] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.182275][T12396] bridge_slave_1: left allmulticast mode [ 642.219662][T12396] bridge_slave_1: left promiscuous mode [ 642.225425][T12396] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.340536][T12396] bridge_slave_0: left allmulticast mode [ 642.356861][T18072] loop9: detected capacity change from 0 to 1024 [ 642.368345][T12396] bridge_slave_0: left promiscuous mode [ 642.399989][T12396] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.403058][T18074] loop7: detected capacity change from 0 to 512 [ 642.441107][T18072] EXT4-fs: Ignoring removed orlov option [ 642.446809][T18072] EXT4-fs: Ignoring removed nomblk_io_submit option [ 642.487432][T18074] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #17: comm syz.7.4431: iget: bogus i_mode (0) [ 642.515183][T18074] EXT4-fs error (device loop7): ext4_orphan_get:1392: comm syz.7.4431: couldn't read orphan inode 17 (err -117) [ 642.551937][T18074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.560323][T18072] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.681545][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 642.700203][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 642.730881][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 642.790004][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 642.798937][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 642.806436][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 642.875242][T18074] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz.7.4431: bg 0: block 7: invalid block bitmap [ 643.145585][T17133] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.156131][ T7271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.371210][T18094] loop7: detected capacity change from 0 to 64 [ 644.195711][T12396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.217480][T12396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.243381][T12396] bond0 (unregistering): Released all slaves [ 644.542918][T18120] gfs2: path_lookup on :syz3:E:00000000000000002621:}*:--@+@^-'.#:./file0: returned error -2 [ 644.711368][T18127] loop2: detected capacity change from 0 to 512 [ 644.761469][T18127] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 644.797375][T18127] EXT4-fs (loop2): orphan cleanup on readonly fs [ 644.815141][T18127] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.4450: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 644.849729][T18127] EXT4-fs error (device loop2): ext4_quota_enable:7114: comm syz.2.4450: Bad quota inode: 3, type: 0 [ 644.878073][T18127] EXT4-fs warning (device loop2): ext4_enable_quotas:7152: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 644.936803][T18127] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 644.986840][T18127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 645.019885][ T5838] Bluetooth: hci1: command tx timeout [ 645.345151][T16733] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.530259][T18144] loop8: detected capacity change from 0 to 2048 [ 645.560351][T18144] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 645.677011][T18152] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 646.120192][T18083] chnl_net:caif_netlink_parms(): no params data found [ 646.499648][T12396] hsr_slave_0: left promiscuous mode [ 646.654041][T12396] hsr_slave_1: left promiscuous mode [ 646.667648][T12396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.704714][T12396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.733349][T12396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.768953][T12396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.858789][T12396] veth1_macvtap: left promiscuous mode [ 646.867916][T12396] veth0_macvtap: left promiscuous mode [ 646.885879][T12396] veth1_vlan: left promiscuous mode [ 646.897089][T12396] veth0_vlan: left promiscuous mode [ 647.059877][T15029] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 647.100567][ T5838] Bluetooth: hci1: command 0x041b tx timeout [ 647.234050][T15029] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.255658][T15029] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 647.279683][T15029] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 647.307751][T15029] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.339121][T15029] usb 10-1: config 0 descriptor?? [ 647.782994][T18180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.792914][T18180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.809183][T15029] plantronics 0003:047F:FFFF.004E: No inputs registered, leaving [ 647.824864][T15029] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 647.894503][T12396] team0 (unregistering): Port device team_slave_1 removed [ 647.940582][T12396] team0 (unregistering): Port device team_slave_0 removed [ 648.049139][T15029] usb 10-1: USB disconnect, device number 3 [ 648.686760][T18083] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.703360][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4478'. [ 648.723324][T18083] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.732745][T18083] bridge_slave_0: entered allmulticast mode [ 648.755139][T18083] bridge_slave_0: entered promiscuous mode [ 648.938172][T18198] bridge_slAve_0: renamed from lo (while UP) [ 648.994047][T18083] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.022042][T18083] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.049058][T18083] bridge_slave_1: entered allmulticast mode [ 649.072678][T18083] bridge_slave_1: entered promiscuous mode [ 649.179843][ T5842] Bluetooth: hci1: command 0x041b tx timeout [ 649.326940][T18083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.383860][T18083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.459941][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 649.532908][T18214] loop7: detected capacity change from 0 to 128 [ 649.597789][T18214] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 649.636839][T18214] ext4 filesystem being mounted at /620/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 649.820356][T18083] team0: Port device team_slave_0 added [ 649.872760][T18083] team0: Port device team_slave_1 added [ 650.135590][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 650.143730][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 650.153257][ T9] usb 9-1: config 0 has no interface number 0 [ 650.189781][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.207507][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.217371][ T9] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 650.226514][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.236793][ T9] usb 9-1: config 0 descriptor?? [ 650.274752][T18083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.282906][T18083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.310966][ T7271] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 650.390352][T18083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.453600][T18083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.463644][T18083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.503177][T18083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.569537][T18230] netlink: 284 bytes leftover after parsing attributes in process `syz.7.4491'. [ 650.629853][T18216] loop2: detected capacity change from 0 to 32768 [ 650.687703][T18216] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4485 (18216) [ 650.742982][T18216] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 650.768679][T18216] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 650.791110][T18216] BTRFS info (device loop2): using free-space-tree [ 650.827698][T18083] hsr_slave_0: entered promiscuous mode [ 650.856303][T18083] hsr_slave_1: entered promiscuous mode [ 650.886381][T18083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.894953][T18083] Cannot create hsr debugfs directory [ 650.906410][ T9] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.004F/input/input37 [ 650.990837][T18247] can0: slcan on pty38. [ 651.073898][ T9] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.004F/input/input38 [ 651.152283][T16733] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 651.160927][ T9] uclogic 0003:28BD:0071.004F: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.8-1/input1 [ 651.192700][ T9] usb 9-1: USB disconnect, device number 21 [ 651.266242][ T5842] Bluetooth: hci1: command 0x041b tx timeout [ 651.288514][T18244] can0 (unregistered): slcan off pty38. [ 651.958053][T18275] loop7: detected capacity change from 0 to 4096 [ 651.976132][T18275] nilfs2: Unknown parameter '0xffffffffffffffffÿÿÿÿ0xffffffffffffffffÿ' [ 652.258003][T18285] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4507'. [ 652.523427][T18083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 652.562510][T18083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 652.654530][T18083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 652.672707][T18083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 652.797281][T18083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.820957][T18083] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.867283][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.874502][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.938043][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.945260][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.380104][ T5842] Bluetooth: hci1: command 0x041b tx timeout [ 654.002185][T18083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.038456][T18326] loop8: detected capacity change from 0 to 512 [ 654.067016][T18326] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 654.121088][T18326] EXT4-fs (loop8): invalid journal inode [ 654.126824][T18326] EXT4-fs (loop8): can't get journal size [ 654.180316][T18326] EXT4-fs (loop8): 1 truncate cleaned up [ 654.218752][T18326] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.370160][T18298] loop7: detected capacity change from 0 to 32768 [ 654.516903][T13049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.549368][T18298] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 654.589474][T18349] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 654.750648][T18083] veth0_vlan: entered promiscuous mode [ 654.785576][T18083] veth1_vlan: entered promiscuous mode [ 654.952357][T18298] XFS (loop7): Ending clean mount [ 654.960779][T18083] veth0_macvtap: entered promiscuous mode [ 654.971201][T18083] veth1_macvtap: entered promiscuous mode [ 654.987093][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.997650][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.007637][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.018371][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.028819][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.039336][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.049243][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.059837][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.070168][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.081093][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.091213][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.101899][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.113752][T18083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.135269][T18298] XFS (loop7): Quotacheck needed: Please wait. [ 655.194136][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.214697][T18365] loop9: detected capacity change from 0 to 512 [ 655.226244][T18298] XFS (loop7): Quotacheck: Done. [ 655.226867][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.249676][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.261294][T18365] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 655.299827][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.324689][T18365] EXT4-fs (loop9): 1 truncate cleaned up [ 655.329040][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.341579][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.351992][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.362676][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.372793][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.383592][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.394260][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.405650][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.418786][T18083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.429071][T18083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.438118][T18083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.447197][T18083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.456240][T18083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.512776][T18365] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.637473][ T7271] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 655.663952][T18365] EXT4-fs error (device loop9): ext4_xattr_inode_iget:440: comm syz.9.4536: inode #1073372648: comm syz.9.4536: iget: illegal inode # [ 655.810020][T18365] EXT4-fs error (device loop9): ext4_xattr_inode_iget:443: comm syz.9.4536: error while reading EA inode 1073372648 err=-117 [ 655.886129][T18365] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2977: inode #15: comm syz.9.4536: corrupted xattr block 33: invalid header [ 655.944940][T18365] EXT4-fs warning (device loop9): ext4_evict_inode:276: xattr delete (err -117) [ 656.039558][T12382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.104949][T12382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.234345][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.244324][T17133] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.263776][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.383606][T18383] loop7: detected capacity change from 0 to 1024 [ 656.436434][T18385] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4544'. [ 656.500453][T18385] bond0: option ad_select: unable to set because the bond device is up [ 656.509556][ T29] audit: type=1800 audit(1734223988.818:259): pid=18383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4538" name="bus" dev="loop7" ino=0 res=0 errno=0 [ 656.600927][ T29] audit: type=1800 audit(1734223988.858:260): pid=18383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4538" name="bus" dev="loop7" ino=0 res=0 errno=0 [ 656.612016][T18392] Falling back ldisc for ttyS3. [ 657.384893][T18405] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.931838][T18417] loop4: detected capacity change from 0 to 32768 [ 658.121422][T18417] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 658.395203][T18083] ocfs2: Unmounting device (7,4) on (node local) [ 658.486330][T18446] loop5: detected capacity change from 0 to 512 [ 658.533440][T18446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.582039][T18446] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.743231][ T29] audit: type=1800 audit(1734223991.058:261): pid=18446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4566" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 658.763771][ C1] vkms_vblank_simulate: vblank timer overrun [ 658.929768][ T5896] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 659.093100][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 659.113419][T17275] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.134373][ T5896] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 659.151171][ T5896] usb 5-1: config 0 has no interface number 0 [ 659.153303][T18456] loop9: detected capacity change from 0 to 32768 [ 659.167838][T18456] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4570 (18456) [ 659.174878][ T5896] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 659.194442][T18456] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 659.206925][T18456] BTRFS info (device loop9): using sha256 (sha256-ni) checksum algorithm [ 659.229765][T18456] BTRFS info (device loop9): using free-space-tree [ 659.237780][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.280507][ T5896] usb 5-1: Product: syz [ 659.305180][ T5896] usb 5-1: Manufacturer: syz [ 659.306235][T18456] BTRFS info (device loop9): rebuilding free space tree [ 659.319808][ T5896] usb 5-1: SerialNumber: syz [ 659.330992][ T5896] usb 5-1: config 0 descriptor?? [ 659.339041][ T5896] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 659.563570][ T5896] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 659.801060][T18450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.812523][T18450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.860042][ T5896] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 659.957044][T17133] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 660.163303][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 660.172391][ T5896] usb 5-1: USB disconnect, device number 25 [ 660.185191][ T5896] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 660.249154][ T5896] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 660.280082][ T5896] quatech2 5-1:0.51: device disconnected [ 660.633955][T18504] loop2: detected capacity change from 0 to 128 [ 660.973319][T18513] loop2: detected capacity change from 0 to 64 [ 661.490766][T18526] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4597'. [ 662.077030][T18536] loop4: detected capacity change from 0 to 128 [ 662.108532][T18508] loop9: detected capacity change from 0 to 32768 [ 662.267308][T18502] loop5: detected capacity change from 0 to 40427 [ 662.279932][T18502] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 662.290961][T18502] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 662.315361][T18502] F2FS-fs (loop5): invalid crc value [ 662.325152][T18502] F2FS-fs (loop5): Mismatch valid blocks 0 vs. 12 [ 662.365736][T18508] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 662.382813][T18508] bcachefs (loop9): initializing new filesystem [ 662.416468][T18508] bcachefs (loop9): going read-write [ 662.456821][T18508] bcachefs (loop9): marking superblocks [ 662.486779][T18502] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 662.509206][T18508] bcachefs (loop9): initializing freespace [ 662.522335][T18508] bcachefs (loop9): done initializing freespace [ 662.596281][T18508] bcachefs (loop9): reading snapshots table [ 662.606261][T18554] loop2: detected capacity change from 0 to 64 [ 662.626895][T18508] bcachefs (loop9): reading snapshots done [ 662.721963][T18508] bcachefs (loop9): done starting filesystem [ 662.860637][ T29] audit: type=1800 audit(1734223995.158:262): pid=18554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4605" name="file1" dev="loop2" ino=22 res=0 errno=0 [ 662.881191][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.951701][ T29] audit: type=1800 audit(1734223995.278:263): pid=18508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4588" name="bus" dev="loop9" ino=4098 res=0 errno=0 [ 663.036894][T18528] loop8: detected capacity change from 0 to 32768 [ 663.049972][T18528] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4598 (18528) [ 663.112127][T18528] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 663.169022][T18528] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 663.196728][T18565] loop2: detected capacity change from 0 to 2048 [ 663.227066][T18528] BTRFS info (device loop8): using free-space-tree [ 663.253971][T18565] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 663.566821][T17133] bcachefs (loop9): shutting down [ 663.574774][T17133] bcachefs (loop9): going read-only [ 663.584117][T17133] bcachefs (loop9): finished waiting for writes to stop [ 663.640200][T13049] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 663.697262][T17133] bcachefs (loop9): flushing journal and stopping allocators, journal seq 3 [ 663.922969][T18592] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 663.951014][T18592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.149552][T17133] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 8 [ 664.302983][T17133] bcachefs (loop9): shutdown complete, journal seq 9 [ 664.354284][T17133] bcachefs (loop9): marking filesystem clean [ 664.508151][T17133] bcachefs (loop9): shutdown complete [ 665.156847][T18621] netlink: 18 bytes leftover after parsing attributes in process `syz.4.4628'. [ 665.499155][T18631] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4632'. [ 666.419040][T18658] loop4: detected capacity change from 0 to 128 [ 666.475533][T18658] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 666.592562][T18658] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 666.763039][T18654] loop8: detected capacity change from 0 to 32768 [ 666.925613][T18654] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 666.992201][T18083] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 667.119718][ T29] audit: type=1800 audit(1734223999.428:264): pid=18654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4642" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 667.317405][T13049] ocfs2: Unmounting device (7,8) on (node local) [ 667.370467][T15523] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 667.539733][T15523] usb 5-1: Using ep0 maxpacket: 8 [ 667.547433][T15523] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 667.573233][T15523] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 667.611379][T15523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.641894][T15523] usb 5-1: config 0 descriptor?? [ 667.860942][T15523] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 667.880968][T18683] loop2: detected capacity change from 0 to 128 [ 667.933038][T18678] loop9: detected capacity change from 0 to 32768 [ 667.949740][T18683] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 667.965712][T18678] XFS (loop9): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 668.046672][T18683] syz.2.4652: attempt to access beyond end of device [ 668.046672][T18683] loop2: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 668.048698][T18696] team_slave_0: entered promiscuous mode [ 668.066016][T18696] team_slave_1: entered promiscuous mode [ 668.083917][T18694] loop8: detected capacity change from 0 to 2048 [ 668.091539][T18678] XFS (loop9): Ending clean mount [ 668.092815][T18694] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=18576, location=18576 [ 668.109910][T18683] syz.2.4652: attempt to access beyond end of device [ 668.109910][T18683] loop2: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 668.125551][T18696] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 668.169906][T18694] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 668.329230][T17133] XFS (loop9): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 668.501377][T18701] loop7: detected capacity change from 0 to 512 [ 668.523836][T18701] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 668.613602][T18701] EXT4-fs (loop7): 1 truncate cleaned up [ 668.623282][T18701] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.789159][T18701] EXT4-fs error (device loop7): ext4_xattr_inode_iget:440: comm syz.7.4657: inode #1073372648: comm syz.7.4657: iget: illegal inode # [ 668.840675][T18701] EXT4-fs error (device loop7): ext4_xattr_inode_iget:443: comm syz.7.4657: error while reading EA inode 1073372648 err=-117 [ 668.887876][T18701] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2977: inode #15: comm syz.7.4657: corrupted xattr block 33: invalid header [ 668.926937][T18701] EXT4-fs warning (device loop7): ext4_evict_inode:276: xattr delete (err -117) [ 668.940160][T18712] loop9: detected capacity change from 0 to 1024 [ 669.020777][T18712] hfsplus: bad catalog entry type [ 669.147977][ T7271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.158226][T12367] hfsplus: b-tree write err: -5, ino 4 [ 669.925529][T18716] loop2: detected capacity change from 0 to 32768 [ 669.979896][T15029] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 670.003890][T18716] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 670.042455][T18751] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4675'. [ 670.082438][T18751] bridge: RTM_NEWNEIGH with invalid state 0x21 [ 670.139731][T15029] usb 9-1: Using ep0 maxpacket: 32 [ 670.151344][T15029] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 670.165910][T15029] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 670.176968][T18716] XFS (loop2): Ending clean mount [ 670.197993][T18716] XFS (loop2): Quotacheck needed: Please wait. [ 670.204688][ T5896] usb 5-1: USB disconnect, device number 26 [ 670.211037][T15029] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 670.241605][T15029] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 670.254665][T15029] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 670.265066][T15029] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 670.283175][T15029] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 670.328666][T15029] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.348791][T18716] XFS (loop2): Quotacheck: Done. [ 670.356373][T15029] usb 9-1: config 0 descriptor?? [ 670.493291][T18756] loop4: detected capacity change from 0 to 512 [ 670.594159][T18758] loop7: detected capacity change from 0 to 1024 [ 670.600903][T15029] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 670.634035][T18756] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 670.654045][ T29] audit: type=1800 audit(1734224002.978:265): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4679" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 670.724252][T16733] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 670.748077][T18756] EXT4-fs (loop4): 1 truncate cleaned up [ 670.773210][T18756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.810809][T15029] usb 9-1: USB disconnect, device number 22 [ 670.817761][T12396] hfsplus: b-tree write err: -5, ino 4 [ 670.831608][T15029] usblp0: removed [ 670.949206][T18756] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: comm syz.4.4678: inode #1073372648: comm syz.4.4678: iget: illegal inode # [ 671.066169][T18756] EXT4-fs error (device loop4): ext4_xattr_inode_iget:443: comm syz.4.4678: error while reading EA inode 1073372648 err=-117 [ 671.082646][T18756] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.4678: corrupted xattr block 33: invalid header [ 671.101355][T18756] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 671.233710][T18083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.619490][T18777] loop2: detected capacity change from 0 to 512 [ 671.684536][T18783] random: crng reseeded on system resumption [ 671.693686][T18777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.810590][T18777] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 671.869751][ T5895] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 672.022182][ T5895] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 672.031040][ T5895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.058062][ T5895] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 672.075798][ T5895] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 672.101058][ T5895] usb 9-1: Manufacturer: syz [ 672.113334][T16733] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.161093][T18792] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 672.278122][T18774] loop7: detected capacity change from 0 to 32768 [ 672.306030][ T5895] usb 9-1: config 0 descriptor?? [ 672.322876][T18774] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4687 (18774) [ 672.479674][ T5895] rc_core: IR keymap rc-hauppauge not found [ 672.485651][ T5895] Registered IR keymap rc-empty [ 672.500871][ T5895] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 672.520892][ T5895] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input41 [ 672.571298][T18774] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 672.595189][T18774] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 672.607704][T18774] BTRFS info (device loop7): using free-space-tree [ 672.622705][T18798] loop4: detected capacity change from 0 to 1024 [ 672.875832][T18799] rc rc0: two consecutive events of type space [ 673.077294][T15029] usb 9-1: USB disconnect, device number 23 [ 673.201854][T18774] BTRFS info (device loop7 state M): force compression, level 0 [ 673.367002][ T7271] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 673.519820][ T5895] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 673.533832][ T29] audit: type=1326 audit(1734224005.858:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.9.4707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b33985d19 code=0x0 [ 673.722602][ T5895] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 673.759908][ T5895] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.782372][T18842] loop5: detected capacity change from 0 to 1024 [ 673.797251][ T5895] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 673.820543][T18842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 673.828332][T18846] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4709'. [ 673.847543][ T5895] usb 3-1: config 0 interface 0 has no altsetting 0 [ 673.861727][ T5895] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 673.881790][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.901006][T18842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 673.931359][ T5895] usb 3-1: config 0 descriptor?? [ 674.094061][T17275] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.351225][ T5895] cherry 0003:046A:0027.0050: unexpected long global item [ 674.359045][ T5895] cherry 0003:046A:0027.0050: probe with driver cherry failed with error -22 [ 674.609138][ T5895] usb 3-1: USB disconnect, device number 26 [ 675.029746][T15523] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 675.211349][T15523] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 675.229708][T15523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.269286][T15523] usb 5-1: config 0 descriptor?? [ 675.294841][T15523] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 675.497991][T15523] gspca_sn9c2028: read1 error -32 [ 675.514281][T15523] gspca_sn9c2028: read1 error -32 [ 675.556597][T18892] loop2: detected capacity change from 0 to 64 [ 675.565250][T18889] loop8: detected capacity change from 0 to 256 [ 675.668205][T18866] loop9: detected capacity change from 0 to 32768 [ 675.724977][T15523] usb 5-1: USB disconnect, device number 27 [ 675.793453][T18866] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 675.937015][T18901] loop2: detected capacity change from 0 to 128 [ 676.006717][T17133] ocfs2: Unmounting device (7,9) on (node local) [ 676.509849][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4741'. [ 676.669153][T18917] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 676.887029][T18926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4745'. [ 677.504575][T18940] loop5: detected capacity change from 0 to 4096 [ 677.536118][T18940] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 677.617734][T18950] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 677.679542][ T29] audit: type=1800 audit(1734224009.998:267): pid=18940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4751" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 677.746088][T18952] loop7: detected capacity change from 0 to 2048 [ 677.827133][T18952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 677.947015][T15523] IPVS: starting estimator thread 0... [ 678.032046][T18957] loop4: detected capacity change from 0 to 4096 [ 678.069743][T18957] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 678.079790][T18961] IPVS: using max 16 ests per chain, 38400 per kthread [ 678.134645][T18957] ntfs3(loop4): Failed to load $Extend (-22). [ 678.150461][T18957] ntfs3(loop4): Failed to initialize $Extend. [ 678.230856][ T29] audit: type=1800 audit(1734224010.548:268): pid=18957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4759" name="file2" dev="loop4" ino=31 res=0 errno=0 [ 678.261124][T18957] ntfs3(loop4): ino=1f, "file2" direct i/o + compressed not supported [ 678.413907][T18973] loop7: detected capacity change from 0 to 256 [ 678.536387][T18973] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 678.578817][T18973] exFAT-fs (loop7): valid_size(150994954) is greater than size(10) [ 678.619545][ T29] audit: type=1800 audit(1734224010.938:269): pid=18973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4768" name="file1" dev="loop7" ino=1049195 res=0 errno=0 [ 678.722827][ T29] audit: type=1800 audit(1734224010.968:270): pid=18973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4768" name="file1" dev="loop7" ino=1049195 res=0 errno=0 [ 679.069224][T18993] loop8: detected capacity change from 0 to 2048 [ 679.083070][T18993] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.362554][T19007] loop9: detected capacity change from 0 to 512 [ 679.381850][T19007] EXT4-fs: Ignoring removed mblk_io_submit option [ 679.404987][T19007] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 679.432907][T19007] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 679.445125][T19007] System zones: 1-12 [ 679.452084][T19007] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.4778: corrupted in-inode xattr: e_value size too large [ 679.502992][T19007] EXT4-fs error (device loop9): ext4_orphan_get:1392: comm syz.9.4778: couldn't read orphan inode 15 (err -117) [ 679.553003][T19007] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.801461][T17133] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.865097][T18989] loop2: detected capacity change from 0 to 32768 [ 680.066376][T18989] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 680.129896][T18989] bcachefs (loop2): initializing new filesystem [ 680.161486][T18989] bcachefs (loop2): going read-write [ 680.199987][T18989] bcachefs (loop2): marking superblocks [ 680.345643][T18989] bcachefs (loop2): initializing freespace [ 680.373409][T18989] bcachefs (loop2): done initializing freespace [ 680.392203][T18989] bcachefs (loop2): reading snapshots table [ 680.420138][T18989] bcachefs (loop2): reading snapshots done [ 680.516907][T19044] loop4: detected capacity change from 0 to 2048 [ 680.559756][T18989] bcachefs (loop2): done starting filesystem [ 680.609161][T19044] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 680.657783][ T29] audit: type=1800 audit(1734224012.978:271): pid=18989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4772" name="bus" dev="loop2" ino=4098 res=0 errno=0 [ 681.021644][T16733] bcachefs (loop2): shutting down [ 681.026814][T16733] bcachefs (loop2): going read-only [ 681.032914][T16733] bcachefs (loop2): finished waiting for writes to stop [ 681.151812][T16733] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 681.190836][T19062] loop8: detected capacity change from 0 to 736 [ 681.307715][T16733] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 14 [ 681.331169][T16733] bcachefs (loop2): shutdown complete, journal seq 15 [ 681.339453][T16733] bcachefs (loop2): marking filesystem clean [ 681.373211][T19066] loop7: detected capacity change from 0 to 128 [ 681.384866][T19066] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 681.397827][T19058] loop5: detected capacity change from 0 to 8192 [ 681.402899][T16733] bcachefs (loop2): shutdown complete [ 681.410001][T19066] ext4 filesystem being mounted at /677/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 681.673305][ T7271] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 681.848782][T19077] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 681.947998][T19077] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 682.146489][T19081] loop8: detected capacity change from 0 to 128 [ 682.189361][T19081] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 682.279497][T19081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 683.330581][ T29] audit: type=1326 audit(1734224015.638:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19100 comm="syz.4.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c5585d19 code=0x7ffc0000 [ 683.400598][ T29] audit: type=1326 audit(1734224015.648:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19100 comm="syz.4.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c5585d19 code=0x7ffc0000 [ 683.422965][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.487126][ T29] audit: type=1326 audit(1734224015.648:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19100 comm="syz.4.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f72c5585d19 code=0x7ffc0000 [ 683.575509][ T29] audit: type=1326 audit(1734224015.648:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19100 comm="syz.4.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c5585d19 code=0x7ffc0000 [ 683.679924][ T29] audit: type=1326 audit(1734224015.648:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19100 comm="syz.4.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c5585d19 code=0x7ffc0000 [ 683.758095][ T29] audit: type=1326 audit(1734224015.678:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19100 comm="syz.4.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72c5585d19 code=0x7ffc0000 [ 683.825501][ T29] audit: type=1326 audit(1734224015.678:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19100 comm="syz.4.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c5585d19 code=0x7ffc0000 [ 683.929577][ T29] audit: type=1326 audit(1734224015.678:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19100 comm="syz.4.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c5585d19 code=0x7ffc0000 [ 683.982557][T19111] loop9: detected capacity change from 0 to 2048 [ 683.988426][ T29] audit: type=1326 audit(1734224015.678:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19100 comm="syz.4.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f72c5585d19 code=0x7ffc0000 [ 683.993162][T19090] loop7: detected capacity change from 0 to 40427 [ 684.026729][ T29] audit: type=1326 audit(1734224015.678:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19100 comm="syz.4.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c5585d19 code=0x7ffc0000 [ 684.030242][T19111] EXT4-fs: Ignoring removed mblk_io_submit option [ 684.095927][T19090] F2FS-fs (loop7): invalid crc value [ 684.125295][T19090] F2FS-fs (loop7): Found nat_bits in checkpoint [ 684.147495][T19111] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 684.269688][T19111] EXT4-fs error (device loop9): ext4_validate_block_bitmap:440: comm syz.9.4823: bg 0: block 234: padding at end of block bitmap is not set [ 684.308331][T19111] EXT4-fs (loop9): Remounting filesystem read-only [ 684.378314][T19090] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 684.457794][T17133] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.708902][ T7271] syz-executor: attempt to access beyond end of device [ 684.708902][ T7271] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 684.723075][ T7271] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 684.723908][T19132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4829'. [ 684.809886][T19132] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4829'. [ 684.818928][T19132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4829'. [ 685.350339][T19141] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 685.368905][T19142] loop9: detected capacity change from 0 to 512 [ 685.475112][T19142] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.4834: corrupted in-inode xattr: invalid ea_ino [ 685.570313][T19142] EXT4-fs error (device loop9): ext4_orphan_get:1392: comm syz.9.4834: couldn't read orphan inode 15 (err -117) [ 685.605330][T19142] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.720987][T19134] loop4: detected capacity change from 0 to 32768 [ 685.731571][T19142] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 685.796170][T19134] JBD2: Ignoring recovery information on journal [ 685.949824][T15029] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 685.964377][T19134] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 685.989716][T17133] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.067299][T18083] ocfs2: Unmounting device (7,4) on (node local) [ 686.113048][T15029] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 686.146541][T15029] usb 3-1: config 0 has no interface number 0 [ 686.176087][T15029] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 686.189850][T15029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.239207][T15029] usb 3-1: Product: syz [ 686.252611][T15029] usb 3-1: Manufacturer: syz [ 686.267642][T15029] usb 3-1: SerialNumber: syz [ 686.287116][T15029] usb 3-1: config 0 descriptor?? [ 686.530375][T19164] loop5: detected capacity change from 0 to 1024 [ 686.538243][T19164] EXT4-fs: Ignoring removed orlov option [ 686.543240][T15029] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 686.561283][T15029] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 686.579445][T15029] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 686.587353][T15029] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 686.589746][T19164] EXT4-fs: Ignoring removed nomblk_io_submit option [ 686.609915][T15029] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 686.719896][T19164] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 686.759108][T19164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 686.881244][T19172] loop4: detected capacity change from 0 to 1024 [ 686.948526][T15523] usb 3-1: USB disconnect, device number 27 [ 686.980127][T15523] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 687.029103][T15523] keyspan 3-1:0.133: device disconnected [ 687.050557][T19172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.082480][T17275] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.367344][T19182] loop5: detected capacity change from 0 to 1024 [ 687.383734][T18083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.491204][T19182] hfsplus: xattr searching failed [ 687.554137][T19184] loop7: detected capacity change from 0 to 2048 [ 687.556461][T19182] hfsplus: b-tree write err: -5, ino 3 [ 687.631384][T19190] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 687.729503][T19192] netlink: 'syz.2.4850': attribute type 8 has an invalid length. [ 687.749868][T19192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4850'. [ 688.143050][T19178] loop8: detected capacity change from 0 to 40427 [ 688.149815][ T5473] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 688.173536][T19178] F2FS-fs (loop8): invalid crc value [ 688.182373][T19178] F2FS-fs (loop8): Found nat_bits in checkpoint [ 688.287949][T19178] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 688.300895][ T5473] usb 6-1: Using ep0 maxpacket: 32 [ 688.313068][ T5473] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 688.344176][ T5473] usb 6-1: config 0 has no interface number 0 [ 688.369967][ T5473] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 688.408069][ T5473] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 688.425440][ T5473] usb 6-1: config 0 interface 126 has no altsetting 0 [ 688.455549][ T5473] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 688.469835][ T5473] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.500057][ T5473] usb 6-1: Product: syz [ 688.504854][T13049] syz-executor: attempt to access beyond end of device [ 688.504854][T13049] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 688.529271][ T5473] usb 6-1: Manufacturer: syz [ 688.534834][ T5473] usb 6-1: SerialNumber: syz [ 688.541306][T13049] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 688.549399][ T5473] usb 6-1: config 0 descriptor?? [ 688.572873][T19194] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 688.589974][T19194] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 688.910637][T19218] @: renamed from vlan0 (while UP) [ 688.996803][T19222] netlink: 'syz.7.4865': attribute type 11 has an invalid length. [ 689.137934][T19225] loop8: detected capacity change from 0 to 1024 [ 689.159149][ T5473] ir_usb 6-1:0.126: IR Dongle converter detected [ 689.285687][T19225] hfsplus: request for non-existent node 16777216 in B*Tree [ 689.296430][T19225] hfsplus: request for non-existent node 16777216 in B*Tree [ 689.307216][T19225] hfsplus: request for non-existent node 16777216 in B*Tree [ 689.314786][T19225] hfsplus: request for non-existent node 16777216 in B*Tree [ 689.360508][ T5473] usb 6-1: IRDA class descriptor not found, device not bound [ 689.497242][T12398] hfsplus: request for non-existent node 16777216 in B*Tree [ 689.537875][T12398] hfsplus: request for non-existent node 16777216 in B*Tree [ 689.574358][T15523] usb 6-1: USB disconnect, device number 28 [ 690.387326][ T1291] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 690.396811][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.470380][T19258] loop5: detected capacity change from 0 to 2048 [ 690.537348][T19258] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 690.583738][T19258] overlayfs: upper fs needs to support d_type. [ 690.639783][T19258] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 690.670959][T19262] random: crng reseeded on system resumption [ 690.677714][T19258] overlayfs: failed to set xattr on upper [ 690.686589][T19258] overlayfs: ...falling back to redirect_dir=nofollow. [ 690.714323][T19258] overlayfs: ...falling back to index=off. [ 690.731793][T19258] overlayfs: ...falling back to uuid=null. [ 690.948236][T17275] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 690.982900][T17275] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 691.206110][T19269] netlink: 'syz.8.4886': attribute type 4 has an invalid length. [ 691.336894][T19244] loop7: detected capacity change from 0 to 32768 [ 691.550794][T19260] loop9: detected capacity change from 0 to 32768 [ 691.557627][T19244] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 691.566668][T19260] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4881 (19260) [ 691.744945][T19260] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 691.849882][T19260] BTRFS info (device loop9): using sha256 (sha256-ni) checksum algorithm [ 691.858513][T19260] BTRFS info (device loop9): using free-space-tree [ 692.064283][T19244] XFS (loop7): Ending clean mount [ 692.101362][T19244] XFS (loop7): Quotacheck needed: Please wait. [ 692.368791][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 692.389956][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 692.408309][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 692.417174][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 692.424904][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 692.428374][T19244] XFS (loop7): Quotacheck: Done. [ 692.433073][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 692.463295][T19260] BTRFS info (device loop9): rebuilding free space tree [ 692.712003][T19291] chnl_net:caif_netlink_parms(): no params data found [ 692.835517][ T7271] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 693.318185][T17133] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 693.381849][T19291] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.388980][T19291] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.403483][T19320] loop2: detected capacity change from 0 to 2048 [ 693.462057][T19291] bridge_slave_0: entered allmulticast mode [ 693.483896][T19291] bridge_slave_0: entered promiscuous mode [ 693.513036][T19291] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.529732][T19291] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.540389][T19320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.553685][T19291] bridge_slave_1: entered allmulticast mode [ 693.566097][T19291] bridge_slave_1: entered promiscuous mode [ 693.981475][T19291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.017174][T16733] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.018897][T19291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.060695][T19342] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4896'. [ 694.434312][T19291] team0: Port device team_slave_0 added [ 694.445126][T19345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4904'. [ 694.457969][T19291] team0: Port device team_slave_1 added [ 694.541809][ T5838] Bluetooth: hci4: command tx timeout [ 694.731367][T19291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.759309][T19291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.854727][T19291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.898132][T19291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.924887][T19291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.017457][T19291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.357016][T19291] hsr_slave_0: entered promiscuous mode [ 695.385983][T19291] hsr_slave_1: entered promiscuous mode [ 695.404960][T19291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.432456][T19291] Cannot create hsr debugfs directory [ 695.942106][T19352] loop8: detected capacity change from 0 to 32768 [ 696.046112][T19352] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 696.181007][ T5842] Bluetooth: hci6: sending frame failed (-49) [ 696.190798][ T5838] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 696.371785][T19379] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 696.633891][ T5838] Bluetooth: hci4: command tx timeout [ 696.709990][T13049] ocfs2: Unmounting device (7,8) on (node local) [ 697.185316][T19291] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 697.230828][T19291] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 697.252541][T19291] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 697.275423][T19291] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 697.509777][T19408] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 697.552733][T19291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.611146][T19398] loop9: detected capacity change from 0 to 32768 [ 697.697202][T19291] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.721118][T12398] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.728297][T12398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.818654][T19291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 697.829173][T19291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 697.849000][T12396] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.856238][T12396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.927462][T19398] XFS (loop9): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 698.020850][T19429] loop7: detected capacity change from 0 to 2048 [ 698.062775][T19398] XFS (loop9): Ending clean mount [ 698.105294][T19429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.168171][T19429] ext4 filesystem being mounted at /700/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 698.178999][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 698.179023][ T29] audit: type=1800 audit(1868441758.476:283): pid=19398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4925" name="file1" dev="loop9" ino=1062 res=0 errno=0 [ 698.389731][ T29] audit: type=1800 audit(1868441758.676:284): pid=19429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4933" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 698.465632][T17133] XFS (loop9): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 698.481064][ T7271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.493997][T19443] siw: device registration error -23 [ 698.517650][T19291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.656362][T19291] veth0_vlan: entered promiscuous mode [ 698.700248][ T5896] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 698.725723][T19291] veth1_vlan: entered promiscuous mode [ 698.759754][ T5838] Bluetooth: hci4: command tx timeout [ 698.861721][ T5896] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 698.871922][ T5896] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 698.892296][ T5896] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 698.906022][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.925176][ T5896] usb 9-1: Product: syz [ 698.929383][ T5896] usb 9-1: Manufacturer: syz [ 698.934095][ T5896] usb 9-1: SerialNumber: syz [ 698.954816][T19291] veth0_macvtap: entered promiscuous mode [ 698.971141][ T5896] usb 9-1: config 0 descriptor?? [ 698.976949][T19444] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 698.985373][T19444] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 699.062518][ T5838] Bluetooth: hci0: unexpected event for opcode 0x100c [ 699.096389][T19291] veth1_macvtap: entered promiscuous mode [ 699.208009][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.227686][T19444] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 699.255494][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.265507][T19444] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 699.330569][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.373963][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.402937][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.438725][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.467902][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.509474][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.546627][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.593190][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.617722][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.648422][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.668704][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.682262][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.729509][T19291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.767351][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.813262][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.848869][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.886647][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.897944][ T5896] dm9601 9-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 699.940233][ T5896] usb 9-1: USB disconnect, device number 24 [ 699.960747][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.972039][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.982035][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.992691][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.003517][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.014034][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.026175][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.037427][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.047353][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.057896][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.070324][T19291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.182783][T19291] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.192879][T19291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.202057][T19291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.211756][T19291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.438859][T12398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.472368][T12398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.582576][T18551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.611142][T18551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.632089][T19485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 700.640176][T19485] IPv6: NLM_F_CREATE should be set when creating new route [ 700.647421][T19485] IPv6: NLM_F_CREATE should be set when creating new route [ 700.781131][ T5838] Bluetooth: hci4: command tx timeout [ 700.852447][T19498] loop7: detected capacity change from 0 to 64 [ 700.867633][T19490] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 700.896800][T19490] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 700.901426][T19498] Process accounting resumed [ 700.923063][T19490] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 700.947205][T19490] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 700.971285][T19490] geneve2: entered promiscuous mode [ 700.993304][T19490] geneve2: entered allmulticast mode [ 701.029687][T19500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.056296][T19500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.111829][T19500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.119734][T15029] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 701.140827][T19500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.240461][T19504] netlink: 'syz.2.4966': attribute type 12 has an invalid length. [ 701.277098][T15029] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.277423][T19504] netlink: 'syz.2.4966': attribute type 29 has an invalid length. [ 701.316362][T15029] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 701.319177][T19504] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4966'. [ 701.336419][T19504] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4966'. [ 701.350932][T15029] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 701.364411][T15029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 701.384595][T19508] loop4: detected capacity change from 0 to 2048 [ 701.398842][T19508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 701.404931][T15029] usb 1-1: SerialNumber: syz [ 701.670652][T15029] usb 1-1: 0:2 : does not exist [ 701.700118][T15029] usb 1-1: USB disconnect, device number 7 [ 702.268490][T19530] loop2: detected capacity change from 0 to 512 [ 702.349945][T19530] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 702.504337][T19530] EXT4-fs (loop2): 1 truncate cleaned up [ 702.517904][T19530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.539304][T19530] fscrypt (loop2, inode 18): Direct key flag not allowed with different contents and filenames modes [ 702.642343][T16733] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.074635][T19518] loop8: detected capacity change from 0 to 32768 [ 703.176851][T19549] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4983'. [ 703.188710][T19549] ip6gretap0: entered promiscuous mode [ 703.196408][T19549] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4983'. [ 703.328587][T19518] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 703.390097][T19518] bcachefs (loop8): initializing new filesystem [ 703.412485][T19518] bcachefs (loop8): going read-write [ 703.420891][T19518] bcachefs (loop8): marking superblocks [ 703.437266][T19518] bcachefs (loop8): initializing freespace [ 703.446294][T19518] bcachefs (loop8): done initializing freespace [ 703.455509][T19518] bcachefs (loop8): reading snapshots table [ 703.461707][T19518] bcachefs (loop8): reading snapshots done [ 703.492086][T19533] loop4: detected capacity change from 0 to 32768 [ 703.508856][T19527] loop9: detected capacity change from 0 to 32768 [ 703.548055][T19518] bcachefs (loop8): done starting filesystem [ 703.589704][T19533] JBD2: Ignoring recovery information on journal [ 703.599833][T19527] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 703.639527][ T29] audit: type=1800 audit(1868441763.956:285): pid=19518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4971" name="bus" dev="loop8" ino=1073741825 res=0 errno=0 [ 703.703763][T19527] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 703.716483][T19533] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 703.789761][ T831] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 703.933673][T17133] ocfs2: Unmounting device (7,9) on (node local) [ 703.970524][ T831] usb 3-1: Using ep0 maxpacket: 8 [ 703.977424][ T831] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 703.989800][ T831] usb 3-1: config 0 has no interface number 0 [ 703.998842][T18083] ocfs2: Unmounting device (7,4) on (node local) [ 704.000035][T13049] bcachefs (loop8): shutting down [ 704.032991][T13049] bcachefs (loop8): going read-only [ 704.038227][T13049] bcachefs (loop8): finished waiting for writes to stop [ 704.082420][ T831] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92 [ 704.092630][ T831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.130168][T13049] bcachefs (loop8): flushing journal and stopping allocators, journal seq 17 [ 704.139103][ T831] usb 3-1: Product: syz [ 704.149242][ T831] usb 3-1: Manufacturer: syz [ 704.198790][ T831] usb 3-1: SerialNumber: syz [ 704.238512][ T831] usb 3-1: config 0 descriptor?? [ 704.279279][ T831] usb 3-1: selecting invalid altsetting 2 [ 704.295410][ T831] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 704.381011][T13049] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 20 [ 704.514518][T15029] usb 3-1: USB disconnect, device number 28 [ 704.551028][T13049] bcachefs (loop8): shutdown complete, journal seq 21 [ 704.559441][T13049] bcachefs (loop8): marking filesystem clean [ 704.695012][T13049] bcachefs (loop8): shutdown complete [ 704.943090][T19580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4995'. [ 705.347549][T19593] loop2: detected capacity change from 0 to 256 [ 705.397918][T19593] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 705.441399][T19593] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 705.497509][T19593] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 705.914412][T19596] loop4: detected capacity change from 0 to 32768 [ 705.965641][T19596] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 706.045877][T19596] XFS (loop4): Ending clean mount [ 706.069461][T19596] XFS (loop4): Quotacheck needed: Please wait. [ 706.178946][T19596] XFS (loop4): Quotacheck: Done. [ 706.253752][T18083] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 706.645283][T19612] sch_fq: defrate 0 ignored. [ 706.673768][T19610] loop4: detected capacity change from 0 to 2048 [ 706.723928][T19610] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 706.734007][T19610] UDF-fs: Scanning with blocksize 512 failed [ 706.800969][T19610] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 707.326878][ T831] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 707.405526][T19628] loop4: detected capacity change from 0 to 2048 [ 707.438999][T19628] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 707.529229][ T831] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 707.577146][ T831] usb 9-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 707.605973][T18083] UDF-fs: warning (device loop4): udf_evict_inode: Inode 1367 (mode 100000) has inode size 4 different from extent length 512. Filesystem need not be standards compliant. [ 707.648872][ T831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.668671][ T831] usb 9-1: config 0 descriptor?? [ 707.676143][ T831] usb 9-1: bad CDC descriptors [ 707.725738][T19637] input: syz0 as /devices/virtual/input/input42 [ 707.903275][ T831] usb 9-1: USB disconnect, device number 25 [ 707.988314][T19645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5019'. [ 708.351537][T19657] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5026'. [ 708.961039][T19674] loop2: detected capacity change from 0 to 4096 [ 709.043111][T19678] loop4: detected capacity change from 0 to 2048 [ 709.103563][T19678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.192777][T19683] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 709.313730][ T29] audit: type=1800 audit(1868441769.586:286): pid=19674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5033" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 709.378303][T18083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.903739][ T5838] Bluetooth: hci4: command tx timeout [ 710.252680][T19706] loop7: detected capacity change from 0 to 128 [ 710.295033][T19706] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 710.333944][T19706] ext4 filesystem being mounted at /721/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 710.557927][ T7271] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 711.070532][ C1] sd 0:0:1:0: [sda] tag#5891 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 711.081070][ C1] sd 0:0:1:0: [sda] tag#5891 CDB: Write(6) 0a 00 00 00 01 00 00 00 44 00 00 00 [ 711.250505][ T831] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 711.377984][T19733] loop4: detected capacity change from 0 to 128 [ 711.399757][T15029] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 711.417819][ T831] usb 3-1: Using ep0 maxpacket: 8 [ 711.431439][ T831] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.453667][ T831] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 711.480507][ T831] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.57 [ 711.521573][ T831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 711.532122][T19733] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 711.561778][ T831] usb 3-1: SerialNumber: syz [ 711.573495][T15029] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 711.598064][T19733] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 711.610656][T19734] xt_CT: No such helper "pptp" [ 711.631710][ T831] cdc_ether 3-1:1.0: skipping garbage [ 711.637138][ T831] usb 3-1: bad CDC descriptors [ 711.642354][T15029] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.717795][T15029] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 711.747644][T15029] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 711.769685][T15029] usb 9-1: Product: syz [ 711.780564][T15029] usb 9-1: Manufacturer: syz [ 711.812711][T15029] hub 9-1:4.0: USB hub found [ 711.849441][ T831] usb 3-1: USB disconnect, device number 29 [ 711.872665][T18083] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 712.071868][T15029] hub 9-1:4.0: 2 ports detected [ 712.499019][T15029] hub 9-1:4.0: set hub depth failed [ 712.508450][T15029] usb 9-1: USB disconnect, device number 26 [ 713.191605][T19775] loop7: detected capacity change from 0 to 256 [ 713.206061][T19775] exfat: Deprecated parameter 'utf8' [ 713.277603][T19775] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 713.338851][T19779] loop4: detected capacity change from 0 to 256 [ 713.691934][T19779] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 714.011994][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 714.079715][T15029] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 714.174238][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 714.187345][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58801, setting to 1024 [ 714.228145][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 714.236035][T15029] usb 9-1: Using ep0 maxpacket: 16 [ 714.254307][T19810] loop7: detected capacity change from 0 to 256 [ 714.269575][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 714.271294][T15029] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.305673][T19810] FAT-fs (loop7): bogus number of FAT sectors [ 714.322351][T15029] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 714.323711][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.342771][T19810] FAT-fs (loop7): Can't find a valid FAT filesystem [ 714.374592][T15029] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 714.386564][ T9] usb 10-1: config 0 descriptor?? [ 714.412958][T19797] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 714.419672][T15029] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 714.472257][T15029] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 714.509761][T15029] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 714.517816][T15029] usb 9-1: SerialNumber: syz [ 714.563401][T19791] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 714.580614][T19791] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 714.633739][T15029] hub 9-1:1.0: bad descriptor, ignoring hub [ 714.651961][T15029] hub 9-1:1.0: probe with driver hub failed with error -5 [ 714.806819][T19817] loop4: detected capacity change from 0 to 2048 [ 714.853881][ T9] plantronics 0003:047F:FFFF.0051: item 0 2 0 11 parsing failed [ 714.879150][ T9] plantronics 0003:047F:FFFF.0051: parse failed [ 714.898296][ T9] plantronics 0003:047F:FFFF.0051: probe with driver plantronics failed with error -22 [ 714.911599][T19791] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 714.918996][T19791] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 714.953332][T19817] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 715.062563][ T9] usb 10-1: USB disconnect, device number 4 [ 715.341348][T18083] UDF-fs: warning (device loop4): udf_evict_inode: Inode 1367 (mode 100000) has inode size 25769818111 different from extent length 25769818112. Filesystem need not be standards compliant. [ 715.394804][T15029] cdc_ether 9-1:1.0 eth5: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 715.440641][ T29] audit: type=1326 audit(1868441775.766:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19823 comm="syz.7.5097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6101785d19 code=0x0 [ 715.587166][T19828] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5099'. [ 715.794884][ T9] usb 9-1: USB disconnect, device number 27 [ 715.804309][ T9] cdc_ether 9-1:1.0 eth5: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 715.822429][T19833] loop9: detected capacity change from 0 to 1024 [ 715.830398][T19833] EXT4-fs: Ignoring removed nomblk_io_submit option [ 715.839099][T19833] EXT4-fs (loop9): Test dummy encryption mode enabled [ 715.873053][T19833] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.933877][T19837] loop2: detected capacity change from 0 to 1024 [ 715.945920][T19837] EXT4-fs (loop2): Test dummy encryption mode enabled [ 715.959759][T19837] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 716.041306][T19837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.231166][T19833] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 716.331889][ T5473] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 716.490985][T17133] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.491556][ T5473] usb 5-1: Using ep0 maxpacket: 32 [ 716.516283][ T5473] usb 5-1: config 0 has no interfaces? [ 716.542753][ T5473] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 716.596864][ T5473] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.622408][ T5473] usb 5-1: Product: syz [ 716.626620][ T5473] usb 5-1: Manufacturer: syz [ 716.643698][T16733] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.649899][ T5473] usb 5-1: SerialNumber: syz [ 716.691197][ T5473] usb 5-1: config 0 descriptor?? [ 716.821089][T19861] netlink: 92 bytes leftover after parsing attributes in process `syz.9.5109'. [ 716.898196][T19868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5110'. [ 717.113716][ T831] usb 5-1: USB disconnect, device number 28 [ 717.317990][T19879] loop2: detected capacity change from 0 to 512 [ 717.336393][T19879] EXT4-fs (loop2): orphan cleanup on readonly fs [ 717.350157][T19879] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 717.361042][T19879] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 717.373247][T19879] EXT4-fs error (device loop2): ext4_acquire_dquot:6936: comm syz.2.5116: Failed to acquire dquot type 1 [ 717.393861][T19879] EXT4-fs (loop2): 1 truncate cleaned up [ 717.434947][T19879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 717.521244][T19879] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 717.572814][T19879] EXT4-fs warning (device loop2): read_mmp_block:114: Error -117 while reading MMP block 8 [ 717.702072][T19887] random: crng reseeded on system resumption [ 717.793334][T16733] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.449010][T19920] loop7: detected capacity change from 0 to 512 [ 719.682901][T19920] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.762033][T19920] ext4 filesystem being mounted at /737/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.829835][T15029] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 719.915797][ T7271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.033952][T15029] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 720.037467][T19939] loop8: detected capacity change from 0 to 512 [ 720.066616][T15029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.066900][T19939] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 720.100106][T19939] EXT4-fs error (device loop8): ext4_free_branches:1020: inode #13: comm syz.8.5141: invalid indirect mapped block 2683928664 (level 1) [ 720.129900][T15029] usb 3-1: Product: syz [ 720.134111][T15029] usb 3-1: Manufacturer: syz [ 720.138744][T15029] usb 3-1: SerialNumber: syz [ 720.183078][T19939] EXT4-fs (loop8): 1 truncate cleaned up [ 720.194461][T15029] usb 3-1: config 0 descriptor?? [ 720.238198][T19939] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.436425][T19939] EXT4-fs: user quota file already specified [ 720.513951][T19954] loop4: detected capacity change from 0 to 128 [ 720.612669][T19954] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 720.648319][T13049] EXT4-fs error (device loop8): htree_dirblock_to_tree:1109: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 720.655400][T19954] FAT-fs (loop4): Filesystem has been set read-only [ 720.668364][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.718194][T13049] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:482: comm syz-executor: Invalid block bitmap block 3 in block_group 0 [ 720.770909][T13049] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 720.797744][T19959] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 720.833846][T13049] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 720.891197][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 720.930497][T13049] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 721.078146][ T9] usb 10-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 721.090328][T15029] usb 3-1: f81604_write: reg: 105 data: 65 failed: -EPROTO [ 721.097599][T15029] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 721.099189][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.119964][T15029] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 721.143061][T15029] usb 3-1: USB disconnect, device number 30 [ 721.172642][ T9] usb 10-1: config 0 descriptor?? [ 721.355942][T13049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.534127][T12395] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.604135][ T9] ryos 0003:1E7D:3138.0052: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.9-1/input0 [ 721.828128][ T9] usb 10-1: USB disconnect, device number 5 [ 721.954023][T12395] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.091623][T19974] loop2: detected capacity change from 0 to 256 [ 722.152856][T19976] loop7: detected capacity change from 0 to 512 [ 722.163229][T19976] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 722.170038][T19974] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 722.173577][T19976] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 not in group (block 5)! [ 722.204468][T19976] EXT4-fs (loop7): group descriptors corrupted! [ 722.219195][T16040] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 722.234620][T16040] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 722.243281][T16040] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 722.259552][T16040] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 722.272158][T16040] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 722.282015][T16040] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 722.290919][T12395] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.311734][T19974] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 722.356425][T12395] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.827040][T12395] bridge_slave_1: left allmulticast mode [ 722.851308][T12395] bridge_slave_1: left promiscuous mode [ 722.872733][T12395] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.908756][T12395] bridge_slave_0: left allmulticast mode [ 722.918124][T12395] bridge_slave_0: left promiscuous mode [ 722.934748][T12395] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.093150][T19970] loop4: detected capacity change from 0 to 32768 [ 723.179845][T16040] Bluetooth: hci2: command 0x0406 tx timeout [ 723.363054][T19970] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 723.403090][T19993] Process accounting resumed [ 723.574573][T19979] loop7: detected capacity change from 0 to 32768 [ 723.591279][T19979] XFS: attr2 mount option is deprecated. [ 723.617483][T19979] XFS: ikeep mount option is deprecated. [ 723.637766][T19979] XFS: noikeep mount option is deprecated. [ 723.679699][T19970] XFS (loop4): Ending clean mount [ 723.731847][T19970] XFS (loop4): Quotacheck needed: Please wait. [ 723.821793][T19979] XFS (loop7): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 723.895766][T19970] XFS (loop4): Quotacheck: Done. [ 723.928040][T19979] XFS (loop7): Ending clean mount [ 723.964905][T19979] XFS (loop7): Quotacheck needed: Please wait. [ 724.043377][T20013] loop2: detected capacity change from 0 to 64 [ 724.058448][T19979] XFS (loop7): Quotacheck: Done. [ 724.059898][T20013] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 724.125810][T20013] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 724.162076][T20013] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 724.302500][T18083] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 724.325609][ T7271] XFS (loop7): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 724.379893][ T5838] Bluetooth: hci3: command tx timeout [ 724.610694][ T29] audit: type=1326 audit(1868441784.936:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20014 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6012185d19 code=0x7ffc0000 [ 724.694770][ T29] audit: type=1326 audit(1868441784.966:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20014 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6012185d19 code=0x7ffc0000 [ 724.831290][ T29] audit: type=1326 audit(1868441784.976:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20014 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6012185d19 code=0x7ffc0000 [ 724.923100][ T29] audit: type=1326 audit(1868441784.976:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20014 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6012185d19 code=0x7ffc0000 [ 725.029748][ T29] audit: type=1326 audit(1868441784.976:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20014 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6012185d19 code=0x7ffc0000 [ 725.055904][T20024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5169'. [ 725.079576][ T29] audit: type=1326 audit(1868441784.986:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20014 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6012185d19 code=0x7ffc0000 [ 725.117823][T20027] loop2: detected capacity change from 0 to 2048 [ 725.131342][ T29] audit: type=1326 audit(1868441784.986:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20014 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6012185d19 code=0x7ffc0000 [ 725.173248][ T29] audit: type=1326 audit(1868441784.986:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20014 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6012185d19 code=0x7ffc0000 [ 725.189497][T20028] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 725.208578][ T29] audit: type=1326 audit(1868441785.006:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20014 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f6012185d19 code=0x7ffc0000 [ 725.208756][ T29] audit: type=1326 audit(1868441785.006:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20014 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 725.774847][T12395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.842612][T12395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.881247][T12395] bond0 (unregistering): Released all slaves [ 726.465523][ T5838] Bluetooth: hci3: command tx timeout [ 726.792235][T20062] Invalid logical block size (3) [ 726.909593][T20055] netlink: 'syz.9.5186': attribute type 25 has an invalid length. [ 726.917715][T20055] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5186'. [ 727.162911][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 727.233815][T20073] sctp: [Deprecated]: syz.0.5195 (pid 20073) Use of int in max_burst socket option. [ 727.233815][T20073] Use struct sctp_assoc_value instead [ 727.343234][ T9] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 727.354073][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.378956][ T9] usb 3-1: config 0 descriptor?? [ 727.804662][T19975] chnl_net:caif_netlink_parms(): no params data found [ 728.044630][T12395] hsr_slave_0: left promiscuous mode [ 728.172044][T12395] hsr_slave_1: left promiscuous mode [ 728.227416][T12395] veth1_macvtap: left promiscuous mode [ 728.235844][T12395] veth0_macvtap: left promiscuous mode [ 728.244054][T12395] veth1_vlan: left promiscuous mode [ 728.254907][T12395] veth0_vlan: left promiscuous mode [ 728.396370][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 728.409387][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 728.555933][ T5838] Bluetooth: hci3: command tx timeout [ 729.436357][T20108] loop4: detected capacity change from 0 to 2048 [ 729.476674][T20108] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 729.512407][T20111] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 729.845588][T12395] team0 (unregistering): Port device team_slave_1 removed [ 729.913970][T12395] team0 (unregistering): Port device team_slave_0 removed [ 730.536866][ T9] asix 3-1:0.0 eth9: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, aa:2d:11:a3:63:fd [ 730.631465][ T5838] Bluetooth: hci3: command tx timeout [ 730.708181][ T9] usb 3-1: USB disconnect, device number 31 [ 730.769551][ T9] asix 3-1:0.0 eth9: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 730.852952][T20124] loop4: detected capacity change from 0 to 2048 [ 730.925363][T20126] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 730.986953][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 730.986980][ T29] audit: type=1800 audit(1868441791.296:301): pid=20124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5216" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 731.022086][T20128] loop9: detected capacity change from 0 to 1024 [ 731.029256][T20128] EXT4-fs: Ignoring removed bh option [ 731.036235][T19975] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.045413][T19975] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.058915][T19975] bridge_slave_0: entered allmulticast mode [ 731.068657][T19975] bridge_slave_0: entered promiscuous mode [ 731.078876][T19975] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.092637][T19975] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.103989][T20128] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.119045][T20128] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.169709][T20128] EXT4-fs error (device loop9): ext4_validate_block_bitmap:440: comm syz.9.5218: bg 0: block 273: padding at end of block bitmap is not set [ 731.199906][T19975] bridge_slave_1: entered allmulticast mode [ 731.207631][T19975] bridge_slave_1: entered promiscuous mode [ 731.313307][T20133] loop7: detected capacity change from 0 to 4096 [ 731.373618][T20133] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 731.433659][T20133] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 731.446927][T20133] ntfs3(loop7): Failed to initialize $Extend/$ObjId. [ 731.527033][T17133] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.616097][T19975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.683212][T19975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.800294][T20144] loop9: detected capacity change from 0 to 4096 [ 731.927461][T20142] loop4: detected capacity change from 0 to 4096 [ 731.994760][T19975] team0: Port device team_slave_0 added [ 732.000461][T20142] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 732.006401][T19975] team0: Port device team_slave_1 added [ 732.068679][T20144] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.084040][T20142] ntfs3(loop4): It is recommened to use chkdsk. [ 732.253273][T20142] ntfs3(loop4): failed to convert "076c" to cp862 [ 732.285864][T19975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.294968][T19975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.320911][ C0] vkms_vblank_simulate: vblank timer overrun [ 732.365661][T17133] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.391304][T19975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.423106][T19975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.446881][T19975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.527442][T19975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.707302][T20157] loop9: detected capacity change from 0 to 512 [ 732.757292][T20157] EXT4-fs (loop9): blocks per group (95) and clusters per group (32768) inconsistent [ 732.775070][T19975] hsr_slave_0: entered promiscuous mode [ 732.852531][T19975] hsr_slave_1: entered promiscuous mode [ 732.901305][T19975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 732.912025][T19975] Cannot create hsr debugfs directory [ 733.018586][T20161] smc: net device bond0 applied user defined pnetid SYZ0 [ 733.053431][T20161] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 733.089058][T20163] smc: net device bond0 erased user defined pnetid SYZ0 [ 733.111598][T20163] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 733.641030][T20178] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.693967][T20177] loop2: detected capacity change from 0 to 4096 [ 733.731043][T20177] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 734.245536][T19975] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 734.267643][T19975] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 734.291969][T19975] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 734.315256][T19975] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 734.619135][T19975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.697295][T19975] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.753451][T18537] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.760633][T18537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.845022][T18537] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.852329][T18537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.362605][T20181] loop4: detected capacity change from 0 to 40427 [ 735.371325][T19975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.409250][T19975] veth0_vlan: entered promiscuous mode [ 735.420965][T20202] netlink: 'syz.9.5247': attribute type 4 has an invalid length. [ 735.447146][T19975] veth1_vlan: entered promiscuous mode [ 735.454702][T20181] F2FS-fs (loop4): invalid crc value [ 735.494901][T20181] F2FS-fs (loop4): Found nat_bits in checkpoint [ 735.545584][T19975] veth0_macvtap: entered promiscuous mode [ 735.564837][T19975] veth1_macvtap: entered promiscuous mode [ 735.634565][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.656207][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.666935][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.678269][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.692046][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.702603][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.713324][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.723984][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.733893][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.745353][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.755333][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.766571][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.778476][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.788985][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.802874][T19975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.813290][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.825339][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.836218][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.846957][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.856884][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.868693][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.879714][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.891186][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.901089][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.911630][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.922236][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.932798][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.942677][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.953943][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.964978][T19975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.976295][T19975] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.986739][T19975] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.995850][T19975] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.004715][T19975] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.017173][T20181] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 736.061767][T20181] F2FS-fs (loop4): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 736.251224][T18083] syz-executor: attempt to access beyond end of device [ 736.251224][T18083] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 736.329414][T18083] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 736.340440][T18537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.348293][T18537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.493391][T18551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.512984][T18551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.357660][T20212] loop2: detected capacity change from 0 to 40427 [ 737.443925][T20212] F2FS-fs (loop2): Found nat_bits in checkpoint [ 737.614257][T20251] tipc: Started in network mode [ 737.639562][T20251] tipc: Node identity b88, cluster identity 5 [ 737.645784][T20251] tipc: Node number set to 2952 [ 737.680960][T20212] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 737.700500][T20251] tipc: Cannot configure node identity twice [ 737.832207][T20212] syz.2.5250: attempt to access beyond end of device [ 737.832207][T20212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 738.186515][T16733] syz-executor: attempt to access beyond end of device [ 738.186515][T16733] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 738.260662][T16733] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 738.267609][T16733] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 738.436449][T20249] loop7: detected capacity change from 0 to 32768 [ 738.444564][T20249] XFS: ikeep mount option is deprecated. [ 738.558763][T20249] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 738.836136][T20279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5272'. [ 738.880916][T20240] loop9: detected capacity change from 0 to 32768 [ 738.915609][T20249] XFS (loop7): Ending clean mount [ 738.932156][T20249] XFS (loop7): Quotacheck needed: Please wait. [ 739.143094][ T29] audit: type=1800 audit(1868441799.446:302): pid=20240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5262" name="file1" dev="loop9" ino=4 res=0 errno=0 [ 739.179544][ T5473] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 739.199648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 739.276745][T20249] XFS (loop7): Quotacheck: Done. [ 739.622685][ T7271] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 740.651963][ T5473] usb 2-1: config 0 has no interfaces? [ 740.657517][ T5473] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 740.689482][ T5473] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.713189][ T5473] usb 2-1: config 0 descriptor?? [ 740.945847][T20301] loop2: detected capacity change from 0 to 1024 [ 740.954866][ T870] usb 2-1: USB disconnect, device number 3 [ 741.021663][T20301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 741.048909][T20306] loop9: detected capacity change from 0 to 512 [ 741.062390][T20306] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 741.111342][T20305] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 741.113378][T20306] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.184401][T20301] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 741.193694][T20306] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 741.226689][T20301] EXT4-fs (loop2): This should not happen!! Data will be lost [ 741.226689][T20301] [ 741.268989][T20301] EXT4-fs (loop2): Total free blocks count 0 [ 741.331297][T20311] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 8 with error 28 [ 741.353082][T20301] EXT4-fs (loop2): Free/Dirty block details [ 741.359234][T20301] EXT4-fs (loop2): free_blocks=68451041280 [ 741.388273][T20311] EXT4-fs (loop2): This should not happen!! Data will be lost [ 741.388273][T20311] [ 741.391494][T20301] EXT4-fs (loop2): dirty_blocks=80 [ 741.441977][T20301] EXT4-fs (loop2): Block reservation details [ 741.444605][T20306] EXT4-fs warning (device loop9): __ext4_unlink:3291: inode #16: comm syz.9.5276: Deleting file 'file2' with no links [ 741.460370][T20315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5285'. [ 741.708040][T20293] loop4: detected capacity change from 0 to 32768 [ 741.804340][T17133] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.833195][T20318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5286'. [ 742.751231][T20342] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5298'. [ 742.789864][T20343] netlink: 'syz.1.5297': attribute type 1 has an invalid length. [ 742.797638][T20343] netlink: 'syz.1.5297': attribute type 2 has an invalid length. [ 742.900474][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5297'. [ 742.995178][T20349] netlink: 'syz.9.5300': attribute type 4 has an invalid length. [ 743.265924][T20353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 743.293261][T20355] serio: Serial port ptm0 [ 743.366868][T20332] loop7: detected capacity change from 0 to 32768 [ 743.373990][T20359] loop9: detected capacity change from 0 to 512 [ 743.472844][T20359] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.491488][T20332] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 743.558009][T20359] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 743.653607][ T29] audit: type=1800 audit(1868441803.916:303): pid=20359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5305" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 743.754991][ T29] audit: type=1800 audit(1868441803.926:304): pid=20359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5305" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 743.779355][T17133] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.830454][ T47] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 743.883065][T20332] [ 743.885434][T20332] ====================================================== [ 743.892467][T20332] WARNING: possible circular locking dependency detected [ 743.899503][T20332] 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 Not tainted [ 743.906633][T20332] ------------------------------------------------------ [ 743.913671][T20332] syz.7.5292/20332 is trying to acquire lock: [ 743.919767][T20332] ffff888056e2eba8 (&oi->ip_io_mutex){+.+.}-{4:4}, at: __ocfs2_journal_access+0x3f1/0x8b0 [ 743.929768][T20332] [ 743.929768][T20332] but task is already holding lock: [ 743.937141][T20332] ffff88803160e958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 743.946359][T20332] [ 743.946359][T20332] which lock already depends on the new lock. [ 743.946359][T20332] [ 743.956771][T20332] [ 743.956771][T20332] the existing dependency chain (in reverse order) is: [ 743.965793][T20332] [ 743.965793][T20332] -> #6 (jbd2_handle){++++}-{0:0}: [ 743.973141][T20332] start_this_handle+0xf92/0x1430 [ 743.978737][T20332] jbd2__journal_start+0x394/0x6a0 [ 743.984416][T20332] __ext4_journal_start_sb+0x19f/0x660 [ 743.990439][T20332] ext4_dirty_inode+0xa1/0x130 [ 743.995766][T20332] __mark_inode_dirty+0x1ef/0xe50 [ 744.001342][T20332] generic_update_time+0xcf/0xf0 [ 744.006830][T20332] touch_atime+0x4ee/0x5d0 [ 744.011803][T20332] ext4_file_mmap+0x4fc/0x6b0 [ 744.017029][T20332] __mmap_region+0x1789/0x2670 [ 744.022347][T20332] mmap_region+0x270/0x320 [ 744.027336][T20332] do_mmap+0xc00/0xfc0 [ 744.031978][T20332] vm_mmap_pgoff+0x1ba/0x360 [ 744.037116][T20332] ksys_mmap_pgoff+0x32c/0x5c0 [ 744.042449][T20332] __x64_sys_mmap+0x125/0x190 [ 744.047681][T20332] do_syscall_64+0xcd/0x250 [ 744.052748][T20332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.059209][T20332] [ 744.059209][T20332] -> #5 (&mm->mmap_lock){++++}-{4:4}: [ 744.066820][T20332] __might_fault+0x11b/0x190 [ 744.071969][T20332] _copy_from_user+0x29/0xd0 [ 744.077279][T20332] __blk_trace_setup+0xa8/0x180 [ 744.082694][T20332] blk_trace_ioctl+0x163/0x290 [ 744.088029][T20332] blkdev_ioctl+0x109/0x6d0 [ 744.093107][T20332] __x64_sys_ioctl+0x193/0x200 [ 744.098429][T20332] do_syscall_64+0xcd/0x250 [ 744.103494][T20332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.109956][T20332] [ 744.109956][T20332] -> #4 (&q->debugfs_mutex){+.+.}-{4:4}: [ 744.117824][T20332] __mutex_lock+0x19b/0xa60 [ 744.122890][T20332] blk_mq_init_sched+0x42b/0x640 [ 744.128400][T20332] elevator_init_mq+0x2cd/0x420 [ 744.133797][T20332] add_disk_fwnode+0x113/0x1300 [ 744.139197][T20332] sd_probe+0xa86/0x1000 [ 744.144010][T20332] really_probe+0x241/0xa90 [ 744.149071][T20332] __driver_probe_device+0x1de/0x440 [ 744.154915][T20332] driver_probe_device+0x4c/0x1b0 [ 744.160506][T20332] __device_attach_driver+0x1df/0x310 [ 744.166462][T20332] bus_for_each_drv+0x15a/0x1e0 [ 744.171864][T20332] __device_attach_async_helper+0x1d3/0x290 [ 744.178316][T20332] async_run_entry_fn+0x9f/0x530 [ 744.183814][T20332] process_one_work+0x9c8/0x1ba0 [ 744.189301][T20332] worker_thread+0x6c8/0xf00 [ 744.194443][T20332] kthread+0x2c4/0x3a0 [ 744.199073][T20332] ret_from_fork+0x48/0x80 [ 744.204042][T20332] ret_from_fork_asm+0x1a/0x30 [ 744.209373][T20332] [ 744.209373][T20332] -> #3 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 744.218300][T20332] blk_queue_enter+0x50f/0x640 [ 744.223638][T20332] blk_mq_alloc_request+0x59b/0x950 [ 744.229405][T20332] scsi_execute_cmd+0x1eb/0xf40 [ 744.234906][T20332] read_capacity_16+0x213/0xe10 [ 744.240335][T20332] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 744.246716][T20332] sd_probe+0x904/0x1000 [ 744.251528][T20332] really_probe+0x241/0xa90 [ 744.256590][T20332] __driver_probe_device+0x1de/0x440 [ 744.262436][T20332] driver_probe_device+0x4c/0x1b0 [ 744.268021][T20332] __device_attach_driver+0x1df/0x310 [ 744.273958][T20332] bus_for_each_drv+0x15a/0x1e0 [ 744.279359][T20332] __device_attach_async_helper+0x1d3/0x290 [ 744.285809][T20332] async_run_entry_fn+0x9f/0x530 [ 744.291308][T20332] process_one_work+0x9c8/0x1ba0 [ 744.296796][T20332] worker_thread+0x6c8/0xf00 [ 744.301942][T20332] kthread+0x2c4/0x3a0 [ 744.306748][T20332] ret_from_fork+0x48/0x80 [ 744.311713][T20332] ret_from_fork_asm+0x1a/0x30 [ 744.317044][T20332] [ 744.317044][T20332] -> #2 (&q->limits_lock){+.+.}-{4:4}: [ 744.324741][T20332] __mutex_lock+0x19b/0xa60 [ 744.329808][T20332] loop_reconfigure_limits+0x407/0x8c0 [ 744.335834][T20332] lo_ioctl+0x901/0x18b0 [ 744.340644][T20332] blkdev_ioctl+0x279/0x6d0 [ 744.345717][T20332] __x64_sys_ioctl+0x193/0x200 [ 744.351038][T20332] do_syscall_64+0xcd/0x250 [ 744.356103][T20332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.362564][T20332] [ 744.362564][T20332] -> #1 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 744.371242][T20332] blk_mq_submit_bio+0x1fb6/0x24c0 [ 744.376907][T20332] __submit_bio+0x384/0x540 [ 744.381961][T20332] submit_bio_noacct_nocheck+0x698/0xd70 [ 744.388142][T20332] submit_bio_noacct+0x93a/0x1e20 [ 744.393715][T20332] ocfs2_read_blocks+0x59c/0x1530 [ 744.399307][T20332] ocfs2_read_inode_block+0xc6/0x170 [ 744.405163][T20332] ocfs2_get_clusters+0x22b/0xc40 [ 744.410738][T20332] ocfs2_extent_map_get_blocks+0x1ac/0x640 [ 744.417101][T20332] ocfs2_read_virt_blocks+0x284/0x9c0 [ 744.423030][T20332] ocfs2_read_dir_block+0xb6/0x520 [ 744.428691][T20332] ocfs2_find_entry+0xc3a/0x17b0 [ 744.434182][T20332] ocfs2_lookup_ino_from_name+0xd5/0x1e0 [ 744.440373][T20332] ocfs2_get_system_file_inode+0x443/0x940 [ 744.446733][T20332] ocfs2_initialize_super.isra.0+0x1f3a/0x32e0 [ 744.453442][T20332] ocfs2_fill_super+0xb10/0x41d0 [ 744.458938][T20332] mount_bdev+0x1e6/0x2d0 [ 744.463833][T20332] legacy_get_tree+0x10c/0x220 [ 744.469166][T20332] vfs_get_tree+0x92/0x380 [ 744.474155][T20332] path_mount+0x14e6/0x1f20 [ 744.479203][T20332] __x64_sys_mount+0x294/0x320 [ 744.484512][T20332] do_syscall_64+0xcd/0x250 [ 744.489581][T20332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.496046][T20332] [ 744.496046][T20332] -> #0 (&oi->ip_io_mutex){+.+.}-{4:4}: [ 744.503828][T20332] __lock_acquire+0x249e/0x3c40 [ 744.509233][T20332] lock_acquire.part.0+0x11b/0x380 [ 744.514896][T20332] __mutex_lock+0x19b/0xa60 [ 744.519966][T20332] __ocfs2_journal_access+0x3f1/0x8b0 [ 744.525889][T20332] __ocfs2_add_entry+0xe8a/0x1b20 [ 744.531474][T20332] ocfs2_rename+0x2a2d/0x4370 [ 744.536709][T20332] vfs_rename+0xf8b/0x21f0 [ 744.541684][T20332] do_renameat2+0xc5f/0xdd0 [ 744.546735][T20332] __x64_sys_rename+0x7d/0xa0 [ 744.551962][T20332] do_syscall_64+0xcd/0x250 [ 744.557029][T20332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.563485][T20332] [ 744.563485][T20332] other info that might help us debug this: [ 744.563485][T20332] [ 744.573726][T20332] Chain exists of: [ 744.573726][T20332] &oi->ip_io_mutex --> &mm->mmap_lock --> jbd2_handle [ 744.573726][T20332] [ 744.586479][T20332] Possible unsafe locking scenario: [ 744.586479][T20332] [ 744.593941][T20332] CPU0 CPU1 [ 744.599312][T20332] ---- ---- [ 744.604683][T20332] rlock(jbd2_handle); [ 744.609039][T20332] lock(&mm->mmap_lock); [ 744.615917][T20332] lock(jbd2_handle); [ 744.622538][T20332] lock(&oi->ip_io_mutex); [ 744.627068][T20332] [ 744.627068][T20332] *** DEADLOCK *** [ 744.627068][T20332] [ 744.635217][T20332] 5 locks held by syz.7.5292/20332: [ 744.640430][T20332] #0: ffff88806cfe4420 (sb_writers#20){.+.+}-{0:0}, at: do_renameat2+0x3d6/0xdd0 [ 744.649748][T20332] #1: ffff888056e2ed80 (&type->i_mutex_dir_key#13/1){+.+.}-{4:4}, at: do_renameat2+0xae4/0xdd0 [ 744.660379][T20332] #2: ffff88806cfe4610 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_rename+0x1a8f/0x4370 [ 744.669887][T20332] #3: ffff88806b7bc4e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ae/0x970 [ 744.680695][T20332] #4: ffff88803160e958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 744.690386][T20332] [ 744.690386][T20332] stack backtrace: [ 744.696285][T20332] CPU: 0 UID: 0 PID: 20332 Comm: syz.7.5292 Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 744.707078][T20332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 744.717414][T20332] Call Trace: [ 744.720707][T20332] [ 744.723737][T20332] dump_stack_lvl+0x116/0x1f0 [ 744.728460][T20332] print_circular_bug+0x419/0x5d0 [ 744.733524][T20332] check_noncircular+0x31a/0x400 [ 744.738496][T20332] ? __pfx_check_noncircular+0x10/0x10 [ 744.744030][T20332] ? lockdep_lock+0xc6/0x200 [ 744.748715][T20332] ? __pfx_lockdep_lock+0x10/0x10 [ 744.753828][T20332] __lock_acquire+0x249e/0x3c40 [ 744.758737][T20332] ? __pfx___lock_acquire+0x10/0x10 [ 744.763980][T20332] ? lockdep_lock+0xc6/0x200 [ 744.768627][T20332] lock_acquire.part.0+0x11b/0x380 [ 744.773779][T20332] ? __ocfs2_journal_access+0x3f1/0x8b0 [ 744.779362][T20332] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 744.785039][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.790730][T20332] ? rcu_is_watching+0x12/0xc0 [ 744.795544][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.801234][T20332] ? trace_lock_acquire+0x14e/0x1f0 [ 744.806487][T20332] ? __ocfs2_journal_access+0x3f1/0x8b0 [ 744.812063][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.817749][T20332] ? lock_acquire+0x2f/0xb0 [ 744.822288][T20332] ? __ocfs2_journal_access+0x3f1/0x8b0 [ 744.827883][T20332] __mutex_lock+0x19b/0xa60 [ 744.832432][T20332] ? __ocfs2_journal_access+0x3f1/0x8b0 [ 744.838010][T20332] ? __ocfs2_journal_access+0x3f1/0x8b0 [ 744.843588][T20332] ? lock_acquire.part.0+0x11b/0x380 [ 744.848913][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.854601][T20332] ? __pfx___mutex_lock+0x10/0x10 [ 744.859674][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.865370][T20332] ? __ocfs2_journal_access+0x3e9/0x8b0 [ 744.871038][T20332] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 744.876456][T20332] ? lock_acquire+0x2f/0xb0 [ 744.880997][T20332] ? __ocfs2_journal_access+0x397/0x8b0 [ 744.886575][T20332] ? __ocfs2_journal_access+0x3f1/0x8b0 [ 744.892151][T20332] __ocfs2_journal_access+0x3f1/0x8b0 [ 744.897557][T20332] ? __pfx___ocfs2_journal_access+0x10/0x10 [ 744.903593][T20332] ? __pfx_start_this_handle+0x10/0x10 [ 744.909105][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.914794][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.920484][T20332] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 744.926342][T20332] __ocfs2_add_entry+0xe8a/0x1b20 [ 744.931412][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.937099][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.942788][T20332] ? __pfx___ocfs2_add_entry+0x10/0x10 [ 744.948288][T20332] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 744.953778][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.959477][T20332] ocfs2_rename+0x2a2d/0x4370 [ 744.964219][T20332] ? __pfx_ocfs2_rename+0x10/0x10 [ 744.969301][T20332] ? __pfx___lock_acquire+0x10/0x10 [ 744.974534][T20332] ? find_held_lock+0x2d/0x110 [ 744.979353][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.985174][T20332] ? __pfx___lock_acquire+0x10/0x10 [ 744.990425][T20332] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 744.995856][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 745.001547][T20332] ? find_held_lock+0x2d/0x110 [ 745.006365][T20332] ? __pfx_lock_release+0x10/0x10 [ 745.011423][T20332] ? do_raw_spin_lock+0x12d/0x2c0 [ 745.016490][T20332] ? spin_bug+0x1b0/0x1d0 [ 745.020865][T20332] ? lock_acquire+0x2f/0xb0 [ 745.025405][T20332] ? lockref_get+0x15/0x50 [ 745.029875][T20332] ? __pfx_ocfs2_rename+0x10/0x10 [ 745.034953][T20332] vfs_rename+0xf8b/0x21f0 [ 745.039408][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 745.045094][T20332] ? apparmor_path_rename+0x27e/0x960 [ 745.050509][T20332] ? __pfx_vfs_rename+0x10/0x10 [ 745.055417][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 745.061104][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 745.066796][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 745.072486][T20332] do_renameat2+0xc5f/0xdd0 [ 745.077025][T20332] ? __pfx_do_renameat2+0x10/0x10 [ 745.082080][T20332] ? lock_acquire+0x2f/0xb0 [ 745.086621][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 745.092310][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 745.097997][T20332] ? __phys_addr_symbol+0x30/0x80 [ 745.103066][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 745.108760][T20332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 745.114442][T20332] ? getname_flags.part.0+0x1c5/0x550 [ 745.119866][T20332] __x64_sys_rename+0x7d/0xa0 [ 745.124575][T20332] do_syscall_64+0xcd/0x250 [ 745.129124][T20332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.135064][T20332] RIP: 0033:0x7f6101785d19 [ 745.139500][T20332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.159224][T20332] RSP: 002b:00007f60ff5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 745.167668][T20332] RAX: ffffffffffffffda RBX: 00007f6101975fa0 RCX: 00007f6101785d19 [ 745.175664][T20332] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 00000000200003c0 [ 745.183660][T20332] RBP: 00007f6101801a20 R08: 0000000000000000 R09: 0000000000000000 [ 745.191656][T20332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.199652][T20332] R13: 0000000000000000 R14: 00007f6101975fa0 R15: 00007ffda12a13e8 [ 745.207659][T20332] [ 745.210812][ C0] vkms_vblank_simulate: vblank timer overrun [ 745.546118][T20381] loop4: detected capacity change from 0 to 32768 [ 745.557097][ T47] usb 2-1: config 0 has no interfaces? [ 745.563085][ T47] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 745.572694][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.583151][ T7271] ocfs2: Unmounting device (7,7) on (node local) [ 745.590369][ T47] usb 2-1: config 0 descriptor?? [ 745.714870][T20381] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 745.848714][T20381] XFS (loop4): Ending clean mount [ 745.863323][T20381] XFS (loop4): Quotacheck needed: Please wait. [ 745.869752][ T47] usb 2-1: USB disconnect, device number 4 [ 745.882556][T20381] XFS (loop4): Quotacheck: Done. [ 745.952052][T18083] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 751.825540][ T1291] aoe: packet could not be sent on bond0. consider increasing tx_queue_len