last executing test programs: 7.827703232s ago: executing program 3 (id=222): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xbe, 0xa, 0xe5, 0x20, 0xc45, 0x1010, 0x4187, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xea, 0x0, 0x0, 0x8b, 0x3e, 0x9e}}]}}]}}, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x14) close(r0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x33a4eaa5, 0x2, 0x3, 0xd, 0xc298, 0x2e55}, &(0x7f0000000040)=0x20) 5.682894852s ago: executing program 0 (id=228): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc040645c, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r4 = socket$inet(0x2, 0x4, 0x8000) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000500)=0x6, 0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)=ANY=[], 0x118}], 0x1}, 0x4040) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000300)={0xc, 0x8, 0x143, {0x0}}, 0x10) recvmmsg(r5, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}], 0x1}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/81, 0x51}, {&(0x7f0000001100)=""/104, 0x68}, {&(0x7f0000006780)=""/4114, 0x1012}, {&(0x7f0000004740)=""/4072, 0xfe8}], 0x4}, 0x3}], 0x3, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x60202, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400000006"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffc, 0x0, r10}, 0x50) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x38}}, 0x0) 5.631181536s ago: executing program 2 (id=229): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x97a6, &(0x7f0000012f40)="$eJzs/QeYJHWheH/PAsuSs4ooioqKkShBRAkCIkGiggKCZMlBCUoSkaAoCCgCknPOIDnnnHPOOefwPsvuKq4H5P7ee/947znneXZnurq6pvr76aqamerpXnKexeYcGBhjYFhTDIzcTbfPudDGO8552d477XnyFGNNMPnwycNvMOnwi5MOGv5xlIGBgVGGL2f4tLEfPuHEUQZGe3v6Pxp7zLEGjTswMN3wi7MP/zjTsA8TPzJivrdGauQVHfT3i4O2H/bv7cYf+iWGfrL0jeefNTAwMME7bj/0JtP8yx2VtuQc887zD6u/uw21Gjz883f+G33Yv4nvGxiY+O4Bfny8c95BH8BdGvo1J9jx/jHW/QC+9v+6lpxj3vlG8h+6LY46fNpMQ7fxkbdBYyM/zm9cZdbdhw/h24+3gYGhu7h/2lb+V7TkHPMsMPDu+/mBB8ca77S33t5vjv30wMDYzwwMjP3swMDYzw0MjP38wMDYL3zQLvX/X3PMOf2cQ7f3EZeHs494LE9Aj4u9V39+r4GBgSHD5hn7zWHHi3GmGHFMqKqqqv/s5phz+rng+D/Gex3/t9p6jps7/ldVVf3vbb455px+6HF8pOP/OO91/P/u9devMex3/7PPNOxWb36wd6Kqqqr+S80zHx7/J3iv4//4O1y7X8f/qqqq/70tuuDbx/9xRjr+T/Jex/815r/9kuHzjfi+4Y13LPLt548Nn/7aO6aP+o7pr75j+uB3LOed84/+jukvv2P6GAMDYz88fPrr/5g89tNDb/Ovyxn7xX88H2fS0d4x/aV3TB/9HdNfHr5OQ6cPecf0N94x/xj/mD7O0P+mGP51X3mPoa6qqvqPadHp55lr4B3Psx8+ecQT+/F5oUcfvfUdH9T6VlVVVVVVVdV/vTefOPXMf/zN9ycG3vG3q3//G9bhvxcYdMzZV1/9ga3of0aD/vX3IVt80Ov0/29Dncc4bIqBgbWW+KBXpT6A/tf8rXr9j5S/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yt7l/P/f//7/4G7v7jD8Flnmez2exb7xy0nHVht+Gc33T7nQqt9AOv+AfR/9fz/wGqDBgaG+04w1HKhORZdfKqBgYHF7rl9shkH/n7dzEOvm3WiUd/+Y86Bgane/n/wpO+y5OHvsvD2mztM8vdlHPP28ud7a99RB420Eu9otrPuPXDVJV+aYeSPn3/3+/H395dY6sV9pxzxtyyjjDTTGO9y4xHLH3FfRnYevu5TDV33qTdYc52p1994k6+stubyq6y0ykprTTfdtDNMP+MM031tlqlXXm2NlaYZ9v+7jNmwt64Y9f2M2Tgjj9kTc7xzzEa+bxOedCCO2b++q8c/LeLtJZ4z24OXjhiz0d7nmI34eqO+95hNsdrwLzTpwOCB5d4emkEDA5OONnhgo6EXph0yMDDp4OHzTjp03m9MNMrAwI7/uKODhr/Y6LB5Bm0xdJ7/sPctmWX4iGw6Yr6RX2d95BX9d+9bcvw4u9w+0vuW/E/1/3T8/xevmQf9faBGvAHC8HmGeX3A7zPxL+s7xWhvH+TebX3f43Vx3o4eX2uu+sgS/12vi0PrO857rO97vI7fu67vVNM+tcewRf23re9I+7oFhl35fvZ1A++9rxuVbr/SFZOPvK+b/91X8Z+24xFjNGSkmd5tX7fj/OdsPnT5A++9r1tgteEvHvCPfd0oAwOTjjpiXzd0xzf64IEdh16YbuiFIYMHDhl6Yfq3L4w5cPbQC19dYe01Vhz09ssMDF/uNEOXO/tEg4ZtQDccuOqQXd56a7Th6/Li2P+8rsMfH1O883g+x0TDB3P4bUcsd+isI5b78jbDrht9+HJf+i8sd8RtaX0nPWPYdUOGL/flkZY7+D2WO+K2/7I9TDXon56oCvubD/R9jWj7HeM91vc9XocbH29vu0+57IP/Da/DPejd1ne0917fd3vfkHdd30cvfWyf/67XDafH2d17D3usjDH8cfbGf+HxO+K2I+/Hhr0QyLDd/hjvZz82xb/sx7YcdZSRBvsdvdv3uSvC/MO3iL8vbcUDXlptxNgPHmm5/+773Hfcl0GwH5tgpJ/nBm2+z8AgGvOH13huwzd3fu8xHzzwzz9bjBjzEbd9rzEf8n7G/OPvPeYjf5/8bmM+1WeGXT94pPV/55gvstvsN4wY89FHWu6/G/Mh733s+NcxHxgYTGO+42TDxu299qfvNuYjbjtizId+nVknGm1g7oGBgSmHj/no72fMJ/3veZyPBfMP+3ylv096esaFvzxizEce43835qP/F8d8s7v//jif8u3rPj3KwOijD2y0/AYbrDftsP9HXJxu2P+8L3p6xWHj/F7H0nczGnHb99ouRns/RhO8L6NB/85ostHezegfm9aoBy76zP/rvmi0/6rR2bwvOmXeYeP2Xt8XvduYj7gtHQcnecftR/459D1ePwvv09vjM/+2I37e+094/awRP+/+r3z9rBG/k1xt5J18vd/6/b+7/N3l7y5/d/mLe5fz/1OMOP//1jj7f3j4D52Dr5j55tk/6PX9gPs/ff5/uO8/nf+f/eaZrxj6o9Xw697z/Oywef4jz8/ONOzDxI+MmG/k84Mjr+i/Oz+7964bXPH/0fnZ/6dGbKvv4+fi9v/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/ce9y/n+aEc8DeGDxhb43/ETo4E2nPXLTD3p9P+D+T5//H+77T+f/Nz1y2k1HGfj7de95/n/YPI7z//cuuPky/8nn/0dsq53/r39T/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7l3O/88+4nkAh88292dHPB/guu323eODXt8PuP+r5/97/39v7f/d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4oaf/x8Y6W0SF+5xgcH5///dvYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8f9+/pjF/wf5Yxb/JfPHLP5L5Y9Z/H+YP2bx/1H+mMV/6fwxi/8y+WMW/2Xzxyz+P84fs/gvlz9m8V8+f8zi/5P8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/p/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfx/lj9m8f95/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8f5E/ZvH/Zf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4/yp/zOK/Vf6Yxf/X+WMW/63zxyz+v8kfs/hvkz9m8d82f8ziv13+mMV/+/wxi/9v88cs/r/LH7P475A/ZvH/ff6Yxf8P+WMW/x3zxyz+O+WPWfz/mD9m8d85f8ziv0v+mMV/1/wxi/+f8scs/n/OH7P475Y/ZvH/S/6YxX/3/DGL/x75Yxb/PfPHLP5/zR+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf9v+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMR/0ED+mMV/UP6YxX+U/DGL/6j5Yxb/0fLHLP6D88cs/qPnj1n8h+SPWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/h/LHLP4fzh+z+H8kf8ziP2n+mMX/o/ljFv/J8scs/h/LH7P4fzx/zOI/ef6Yxf8T+WMW/0/mj1n8p8gfs/h/Kn/M4v/p/DGL/2fyxyz+U+aPWfw/mz9m8f9c/pjF//P5Yxb/qfLHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H8tf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+X88fs/jPmj9m8f9G/pjFf7b8MYv/N/PHLP7fyh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/7fzxyz+c+ePWfznyR+z+M+bP2bx/07+mMV/vvwxi/9388cs/vPnj1n8F8gfs/gvmD9m8V8of8zi/738MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi//38MYv/D/LHLP5L5o9Z/JfKH7P4/zB/zOL/o/wxi//S+WMW/2Xyxyz+y+aPWfx/nD9m8V8uf8ziv3z+mMX/J/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/9P88cs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P8sf8zi//P8MYv/hvljFv+N8scs/hvnj1n8N8kfs/j/In/M4v/L/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvH/Vf6YxX+r/DGL/6/zxyz+W+ePWfx/kz9m8d8mf8ziv23+mMV/u/wxi//2+WMW/9/mj1n8f5c/ZvHfIX/M4v/7/DGL/x/yxyz+O+aPWfx3yh+z+P8xf8ziv3P+mMV/l/wxi/+u+WMW/z/lj1n8/5w/ZvHfLX/M4v+X/DGL/+75Yxb/PfLHLP575o9Z/P+aP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/9/yxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+72zLEZ9Y/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/bIT/kIGBgf/L/vfmj1m2//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/TOL/9qf5/2sW/0H5Yxb/UfLHLP6j5o9Z/EfLH7P4D84fs/iPnj9m8R+SP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/h/KH7P4fzh/zOL/kfwxi/+k+WMW/4/mj1n8J8sfs/h/LH/M4v/x/DGL/+T5Yxb/T+SPWfw/mT9m8Z8if8zi/6n8MYv/p/PHLP6fyR+z+E+ZP2bx/2z+mMX/c/ljFv/P549Z/KfKH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi//U+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOL/tfwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/t/MH7P4fyt/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP7fzh+z+M+dP2bxnyd/zOI/b/6Yxf87+WMW//nyxyz+380fs/jPnz9m8V8gf8ziv2D+mMV/ofwxi//38scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi//388cs/j/IH7P4L5k/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bx/3H+mMV/ufwxi//y+WMW/5/kj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+P80fs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOL/s/wxi//P88cs/hvmj1n8N8ofs/hvnD9m8d8kf8zi/4v8MYv/L/PHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjF/1f5Yxb/rfLHLP6/zh+z+G+dP2bx/03+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx/mz9m8f9d/pjFf4f8MYv/7/PHLP5/yB+z+O+YP2bx3yl/zOL/x/wxi//O+WMW/13yxyz+u+aPWfz/lD9m8f9z/pjFf7f8MYv/X/LHLP67549Z/PfIH7P475k/ZvH/a/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP5/yx+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyT+ow7kj1n8B+WPWfxHyR+z+I+aP2bxHy1/zOI/OH/M4j96/pjFf0j+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4fyh/zOL/4fwxi/9H8scs/pPmj1n8P5o/ZvGfLH/M4v+x/DGL/8fzxyz+k+ePWfw/kT9m8f9k/pjFf4r8MYv/p/LHLP6fzh+z+H8mf8ziP2X+mMX/s/ljFv/P5Y9Z/D+fP2bxnyp/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi//X8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi//X8MYv/rPljFv9v5I9Z/GfLH7P4fzN/zOL/rfwxi//s+WMW/znyxyz+c+aPWfznyh+z+H87f8ziP3f+mMV/nvwxi/+8+WMW/+/kj1n858sfs/h/N3/M4j9//pjFf4H8MYv/gvljFv+F8scs/t/LH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/t/PH7P4/yB/zOK/ZP6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMX/x/ljFv/l8scs/svnj1n8f5I/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/j/NH/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi//P8scs/j/PH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/L/LHLP6/zB+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/X+WPWfy3yh+z+P86f8ziv3X+mMX/N/ljFv9t8scs/tvmj1n8t8sfs/hvnz9m8f9t/pjF/3f5Yxb/HfLHLP6/zx+z+P8hf8ziv2P+mMV/p/wxi/8f88cs/jvnj1n8d8kfs/jvmj9m8f9T/pjF/8/5Yxb/3fLHLP5/yR+z+O+eP2bx3yN/zOK/Z/6Yxf+v+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/TOX/1vjvd06L/+Eq//efxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/gfNCR/yuJ/ats/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHJP6jDeSPWfwH5Y9Z/EfJH7P4j5o/ZvEfLX/M4j84f8ziP3r+mMV/SP6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/h/KH/M4v/h/DGL/0fyxyz+k+aPWfw/mj9m8Z8sf8zi/7H8MYv/x/PHLP6T549Z/D+RP2bx/2T+mMV/ivwxi/+n8scs/p/OH7P4fyZ/zOI/Zf6Yxf+z+WMW/8/lj1n8P58/ZvGfKn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/9fyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/9fwxi/+s+WMW/2/kj1n8Z8sfs/h/M3/M4v+t/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fzt/zOI/d/6YxX+e/DGL/7z5Yxb/7+SPWfznyx+z+H83f8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+38sfs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+388fs/j/IH/M4r9k/pjFf6n8MYv/D/PHLP4/yh+z+C+dP2bxXyZ/zOK/bP6Yxf/H+WMW/+Xyxyz+y+ePWfx/kj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P80f8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/8/yxyz+P88fs/hvmD9m8d8of8ziv3H+mMV/k/wxi/8v8scs/r/MH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv9f5Y9Z/LfKH7P4/zp/zOK/df6Yxf83+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/23+mMX/d/ljFv8d8scs/r/PH7P4/yF/zOK/Y/6YxX+n/DGL/x/zxyz+O+ePWfx3yR+z+O+aP2bx/1P+mMX/z/ljFv/d8scs/n/JH7P4754/ZvHfI3/M4r9n/pjF/6/5Yxb/vfLHLP57549Z/PfJH7P47yv1H/Jvrrf47yf1/3dZ/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/v+WPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxf/zf+L++2v/0iv1nZvF/ou0fs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K39M4j94IH/M4j8of8ziP0r+mMV/1Pwxi/9o+WMW/8H5Yxb/0fPHLP5D8scs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6Yxf9D+WMW/w/nj1n8P5I/ZvGfNH/M4v/R/DGL/2T5Yxb/j+WPWfw/nj9m8Z88f8zi/4n8MYv/J/PHLP5T5I9Z/D+VP2bx/3T+mMX/M/ljFv8p88cs/p/NH7P4fy5/zOL/+fwxi/9U+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8v5Y/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv+v549Z/GfNH7P4fyN/zOI/W/6Yxf+b+WMW/2/lj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMX/2/ljFv+588cs/vPkj1n8580fs/h/J3/M4j9f/pjF/7v5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvH/Xv6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvH/fv6Yxf8H+WMW/yXzxyz+S+WPWfx/mD9m8f9R/pjFf+n8MYv/MvljFv9l88cs/j/OH7P4L5c/ZvFfPn/M4v+T/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/6f5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8f5Y/ZvH/ef6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/H+RP2bx/2X+mMV/0/wxi/9m+WMW/83zxyz+W+SPWfy3zB+z+P8qf8ziv1X+mMX/1/ljFv+t88cs/r/JH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/b/PHLP6/yx+z+O+QP2bx/33+mMX/D/ljFv8d88cs/jvlj1n8/5g/ZvHfOX/M4r9L/pjFf9f8MYv/n/LHLP5/zh+z+O+WP2bx/0v+mMV/9/wxi/8e+WMW/z3zxyz+f80fs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/b/ljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjEf/SB/DGL/6D8MYv/KPljFv9R88cs/qPlj1n8B+ePWfxHzx+z+A/JH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/w/lj1n8P5w/ZvH/SP6YxX/S/DGL/0fzxyz+k+WPWfw/lj9m8f94/pjFf/L8MYv/J/LHLP6fzB+z+E+RP2bx/1T+mMX/0/ljFv/P5I9Z/KfMH7P4fzZ/zOL/ufwxi//n88cs/lPlj1n8v5A/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/Wv6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/2/mj1n8v5U/ZvGfPX/M4j9H/pjFf878MYv/XPljFv9v549Z/OfOH7P4z5M/ZvGfN3/M4v+d/DGL/3z5Yxb/7+aPWfznzx+z+C+QP2bxXzB/zOK/UP6Yxf97+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf/7+WMW/x/kj1n8l8wfs/gvlT9m8f9h/pjF/0f5Yxb/pfPHLP7L5I9Z/JfNH7P4/zh/zOK/XP6YxX/5/DGL/0/yxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/n+aPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/Wf6Yxf/n+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx/0X+mMX/l/ljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8zi/6v8MYv/VvljFv9f549Z/LfOH7P4/yZ/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP6/zR+z+P8uf8ziv0P+mMX/9/ljFv8/5I9Z/HfMH7P475Q/ZvH/Y/6YxX/n/DGL/y75Yxb/XfPHLP5/yh+z+P85f8ziv1v+mMX/L/ljFv/d88cs/nvkj1n898wfs/j/NX/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv+/5Y9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5YxL/IQP5Yxb/QfljFv9R8scs/qPmj1n8R8sfs/gPzh+z+I+eP2bxH5I/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+H8ofs/h/OH/M4v+R/DGL/6T5Yxb/j+aPWfwnyx+z+H8sf8zi//H8MYv/5PljFv9P5I9Z/D+ZP2bxnyJ/zOL/qfwxi/+n88cs/p/JH7P4T5k/ZvH/bP6Yxf9z+WMW/8/nj1n8p8ofs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+1/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fz1/zOI/a/6Yxf8b+WMW/9nyxyz+38wfs/h/K3/M4j97/pjFf478MYv/nPljFv+58scs/t/OH7P4z50/ZvGfJ3/M4j9v/pjF/zv5Yxb/+fLHLP7fzR+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL//fyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL//fzxyz+P8gfs/gvmT9m8V8qf8zi/8P8MYv/j/LHLP5L549Z/JfJH7P4L5s/ZvH/cf6YxX+5/DGL//L5Yxb/n+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v+z/DGL/8/zxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/i/wxi/8v88cs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/V/ljFv+t8scs/r/OH7P4b50/ZvH/Tf6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/H+bP2bx/13+mMV/h/wxi//v88cs/n/IH7P475g/ZvHfKX/M4v/H/DGL/875Yxb/XfLHLP675o9Z/P+UP2bx/3P+mMV/t/wxi/9f8scs/rvnj1n898gfs/jvmT9m8f9r/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+Y9o9HdesPgfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvH/W/6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5PmPxHff+zWvyfNPn/F7L4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxH2Mgf8ziPyh/zOI/Sv6YxX/U/DGL/2j5Yxb/wfljFv/R88cs/kPyxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4TyT2f2vzd7/O4j+x2P+9svhPkj9m8f9Q/pjF/8P5Yxb/j+SPWfwnzR+z+H80f8ziP1n+mMX/Y/ljFv+P549Z/CfPH7P4fyJ/zOL/yfwxi/8U+WMW/0/lj1n8P50/ZvH/TP6YxX/K/DGL/2fzxyz+n8sfs/h/Pn/M4j9V/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/r+WPWfxnzB+z+M+UP2bxnzl/zOI/S/6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8f9m/pjF/1v5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvH/dv6YxX/u/DGL/zz5Yxb/efPHLP7fyR+z+M+XP2bx/27+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfy/lz9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfy/nz9m8f9B/pjFf8n8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/4/zxyz+y+WPWfyXzx+z+P8kf8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bx/2n+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/n+WPWfx/nj9m8d8wf8ziv1H+mMV/4/wxi/8m+WMW/1/kj1n8f5k/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/r/KH7P4b5U/ZvH/df6YxX/r/DGL/2/yxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOL/2/wxi//v8scs/jvkj1n8f58/ZvH/Q/6YxX/H/DGL/075Yxb/P+aPWfx3zh+z+O+SP2bx3zV/zOL/p/wxi/+f88cs/rvlj1n8/5I/ZvHfPX/M4r9H/pjFf8/8MYv/X/PHLP575Y9Z/PfOH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvH/W/6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxH3Mgf8ziPyh/zOI/Sv6YxX/U/DGL/2j5Yxb/wfljFv/R88cs/kPyxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjF/0P5Yxb/D+ePWfw/kj9m8Z80f8zi/9H8MYv/ZPljFv+P5Y9Z/D+eP2bxnzx/zOL/ifwxi/8n88cs/lPkj1n8P5U/ZvH/dP6Yxf8z+WMW/ynzxyz+n80fs/h/Ln/M4v/5/DGL/1T5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfy/lj9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/nj1n8Z80fs/h/I3/M4j9b/pjF/5v5Yxb/b+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6Yxf/b+WMW/7nzxyz+8+SPWfznzR+z+H8nf8ziP1/+mMX/u/ljFv/588cs/gvkj1n8F8wfs/gvlD9m8f9e/pjFf+H8MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8f9+/pjF/wf5Yxb/JfPHLP5L5Y9Z/H+YP2bx/1H+mMV/6fwxi/8y+WMW/2Xzxyz+P84fs/gvlz9m8V8+f8zi/5P8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/p/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfx/lj9m8f95/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8f5E/ZvH/Zf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4/yp/zOK/Vf6Yxf/X+WMW/63zxyz+v8kfs/hvkz9m8d82f8ziv13+mMV/+/wxi/9v88cs/r/LH7P475A/ZvH/ff6Yxf8P+WMW/x3zxyz+O+WPWfz/mD9m8d85f8ziv0v+mMV/1/wxi/+f8scs/n/OH7P475Y/ZvH/S/6YxX/3/DGL/x75Yxb/PfPHLP5/zR+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/ynv6j/k/v17/oVn8/9b2j1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljEv+xBvLHLP6D8scs/qPkj1n8R80fs/iPlj9m8R+cP2bxHz1/zOI/JH/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfw/lD9m8f9w/pjF/yP5Yxb/SfPHLP4fzR+z+E+WP2bx/1j+mMX/4/ljFv/J88cs/p/IH7P4fzJ/zOI/Rf6Yxf9T+WMW/0/nj1n8P5M/ZvGfMn/M4v/Z/DGL/+fyxyz+n88fs/hPlT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/2v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/zfyxyz+s+WPWfy/mT9m8f9W/pjFf/b8MYv/HPljFv8588cs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/d/LHLP7z5Y9Z/L+bP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/7+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/7+ePWfx/kD9m8V8yf8ziv1T+mMX/h/ljFv8f5Y9Z/JfOH7P4L5M/ZvFfNn/M4v/j/DGL/3L5Yxb/5fPHLP4/yR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+aP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/2f5Yxb/n+ePWfw3zB+z+G8k8x/yPuez+G8s83+/Wfw3yR+z+P8if8zi/8v8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f9V/pjFf6v8MYv/r/PHLP5b549Z/H+TP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/3+aPWfx/lz9m8d8hf8zi//v8MYv/H/LHLP475o9Z/HfKH7P4/zF/zOK/c/6YxX+X/DGL/675Yxb/P+WPWfz/nD9m8d8tf8zi/5f8MYv/7vljFv898scs/nvmj1n8/5o/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/3/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGJ/9gD+WMW/0H5Yxb/UfLHLP6j5o9Z/EfLH7P4D84fs/iPnj9m8R+SP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/h/KH7P4fzh/zOL/kfwxi/+k+WMW/4/mj1n8J8sfs/h/LH/M4v/x/DGL/+T5Yxb/T+SPWfw/mT9m8Z8if8zi/6n8MYv/p/PHLP6fyR+z+E+ZP2bx/2z+mMX/c/ljFv/P549Z/KfKH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/Vav/kPe+2uI/tdX/32TxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fyx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/9fzxyz+s+aPWfy/kT9m8Z8tf8zi/838MYv/t/LHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v/t/DGL/9z5Yxb/efLHLP7z5o9Z/L+TP2bxny9/zOL/3fwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+H8vf8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H8/f8zi/4P8MYv/kvljFv+l8scs/j/MH7P4/yh/zOK/dP6YxX+Z/DGL/7L5Yxb/H+ePWfyXyx+z+C+fP2bx/0n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/0/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4/yx+z+P88f8ziv2H+mMV/o/wxi//G+WMW/03yxyz+v8gfs/j/Mn/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8f5U/ZvHfKn/M4v/r/DGL/9b5Yxb/3+SPWfy3yR+z+G+bP2bx3y5/zOK/ff6Yxf+3+WMW/9/lj1n8d8gfs/j/Pn/M4v+H/DGL/475Yxb/nfLHLP5/zB+z+O+cP2bx3yV/zOK/a/6Yxf9P+WMW/z/nj1n8d8sfs/j/JX/M4r97/pjFf4/8MYv/nvljFv+/5o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4v+3/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/TOI/zkD+mMV/UP6YxX+U/DGL/6j5Yxb/0fLHLP6D88cs/qPnj1n8h+SPWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/h/LHLP4fflf/N996663/b1btPzGL/0fa/jGL/6T5Yxb/j+aPWfwnyx+z+H8sf8zi//H8MYv/5PljFv9P5I9Z/D+ZP2bxnyJ/zOL/qfwxi/+n88cs/p/JH7P4T5k/ZvH/bP6Yxf9z+WMW/8/nj1n8p8ofs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+1/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fz1/zOI/a/6Yxf8b+WMW/9nyxyz+38wfs/h/K3/M4j97/pjFf478MYv/nPljFv+58scs/t/OH7P4z50/ZvGfJ3/M4j9v/pjF/zv5Yxb/+fLHLP7fzR+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL//fyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL//fzxyz+P8gfs/gvmT9m8V8qf8zi/8P8MYv/j/LHLP5L549Z/JfJH7P4L5s/ZvH/cf6YxX+5/DGL//L5Yxb/n+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v+z/DGL/8/zxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/i/wxi/8v88cs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/V/ljFv+t8scs/r/OH7P4b50/ZvH/Tf6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/H+bP2bx/13+mMV/h/wxi//v88cs/n/IH7P475g/ZvHfKX/M4v/H/DGL/875Yxb/XfLHLP675o9Z/P+UP2bx/3P+mMV/t/wxi/9f8scs/rvnj1n898gfs/jvmT9m8f9r/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/n/LH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/Ic2aOQxsPg/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf0ziP+5A/pjFf1D+mMV/lPwxi/+o+WMW/9Hyxyz+g/PHLP6j549Z/Ifkj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/4fyxyz+H84fs/h/JH/M4j9p/pjF/6P5Yxb/yfLHLP4fyx+z+H88f8ziP3n+mMX/E/ljFv9P5o9Z/KfIH7P4fyp/zOL/6fwxi/9n8scs/lPmj1n8P5s/ZvH/XP6Yxf/z+WMW/6nyxyz+X8gfs/h/MX/M4v+l/DGL/5f/jf9o/9Pr9R+axf8rbf+Yxf+r+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf9r+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/3r+mMV/1vwxi/838scs/rPlj1n8v5k/ZvH/Vv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3fyxyz+8+WPWfy/mz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/+/lj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/+/nj1n8f5A/ZvFfMn/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOL/4/wxi/9y+WMW/+Xzxyz+P8kfs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/mj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf9n+WMW/5/nj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/F/ljFv9f5o9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/r/LHLP5b5Y9Z/H+dP2bx3zp/zOL/m/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P82f8zi/7v8MYv/DvljFv/f549Z/P+QP2bx3zF/zOK/U/6Yxf+P+WMW/53zxyz+u+SPWfx3zR+z+P8pf8zi/+f8MYv/bvljFv+/5I9Z/HfPH7P475E/ZvHfM3/M4v/X/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/P+WP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPSfzHG8gfs/gPyh+z+I+SP2bxHzV/zOI/Wv6YxX9w/pjFf/T8MYv/kPwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvH/UP6Yxf/D+WMW/4/kj1n8J80fs/h/NH/M4j9Z/pjF/2P5Yxb/j+ePWfwnzx+z+H8if8zi/8n8MYv/FPljFv9P5Y9Z/D+dP2bx/0z+mMV/yvwxi/9n88cs/p/LH7P4fz5/zOI/Vf6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/6/lj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/6/lj/+Q/sMX/Wf9Z88cs2/838scs/rPlj1n8v5k/ZvH/Vv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3fyxyz+8+WPWfy/mz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/+/lj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/+/nj1n8f5A/ZvFfMn/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOL/4/wxi/9y+WMW/+Xzxyz+P8kfs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/mj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf9n+WMW/5/nj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/F/ljFv9f5o9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/r/LHLP5b5Y9Z/H+dP2bx3zp/zOL/m/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P82f8zi/7v8MYv/DvljFv/f549Z/P+QP2bx3zF/zOK/U/6Yxf+P+WMW/53zxyz+u+SPWfx3zR+z+P8pf8zi/+f8MYv/bvljFv+/5I9Z/HfPH7P475E/ZvHfM3/M4v/X/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/P+WP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPSfzHH8gfs/gPyh+z+I+SP2bxHzV/zOI/Wv6YxX9w/pjFf/T8MYv/kPwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/P9/7NHTEiiGAQXA2/a2jZOZ2LZt27Zt27Zt27Zt27ZtvGfOF+Ts/sIO6z9q+R/Of9TyP7z/qOV/BP9Ry/+I/qOW/5H8Ry3/I/uPWv5H8R+1/I/qP2r5H81/1PI/uv+o5X8M/1HL/5j+o5b/sfxHLf9j+49a/sfxH7X8j+s/avkfz3/U8j++/6jlfwL/Ucv/hP6jlv+J/Ect/xP7j1r+J/EftfxP6j9q+Z/Mf9TyP7n/qOV/Cv9Ry/+U/qOW/6n8Ry3/U/uPWv6n8R+1/E/rP2r5n85/1PI/vf+o5X8G/1HL/4z+o5b/mfxHLf8z+49a/mfxH7X8z+o/avmfzX/U8j+7/6jlfw7/Ucv/nP6jlv+5/Ect/3P7j1r+5/EftfzP6z9q+Z/Pf9TyP7//qOV/Af9Ry/+C/qOW/4X8Ry3/C/uPWv4X8R+1/C/qP2r5X8x/1PK/uP+o5X8J/1HL/5L+o5b/pfxHLf9L+49a/pfxH7X8L+s/avlfzn/U8r+8/6jlfwX/Ucv/iv6jlv+V/Ect/yv7j1r+V/Eftfyv6j9q+V/Nf9Tyv7r/qOV/Df9Ry/+a/qOW/7X8Ry3/a/uPWv7X8R+1/K/rP2r5X89/1PK/vv+o5X8D/1HL/4b+o5b/jfxHLf8b+49a/jfxH7X8b+o/avnfzH/U8r+5/6jlfwv/Ucv/lv6jlv+t/Ect/1v7j1r+t/Eftfxv6z9q+d/Of9Tyv73/qOV/B/9Ry/+O/qOW/538Ry3/O/uPWv538R+1/O/qP2r5381/1PK/u/+o5X8P/1HL/57+o5b/vfxHLf97+49a/vfxH7X87+s/avnfz3/U8r+//6jl/wD/Ucv/gf6jlv+D/Ect/wf7j1r+D/Eftfwf6j9q+T/Mf9Tyf7j/qOX/CP9Ry/+R/qOW/6P8Ry3/R/uPWv6P8R+1/B/rP2r5P85/1PJ/vP+o5f8E/1HL/4n+o5b/k/xHLf8n+49a/k/xH7X8n+o/avk/zX/U8n+6/6jl/wz/Ucv/mf6jlv+z/Ect/2f7j1r+z/Eftfyf6z9q+T/Pf9Tyf77/qOX/Av9Ry/+F/qOW/4v8Ry3/F/uPWv4v8R+1/F/qP2r5v8x/1PJ/uf+o5f8K/1HL/5X+o5b/q/xHLf9X+49a/q/xH7X8X+s/avm/zn/U8n+9/6jl/wb/Ucv/jf6jlv+b/Ect/zf7j1r+b/Eftfzf6j9q+b/Nf9Tyf7v/qOX/Dv9Ry/+d/qOW/7v8Ry3/d/uPWv7v8R+1/N/rP2r5v89/1PJ/v/+o5f8B/1HL/4P+o5b/h/xHLf8P+49a/h/xH7X8P+o/avl/zH/U8v+4/6jl/wn/Ucv/k/6jlv+n/Ect/0/7j1r+n/Eftfw/6z9q+X/Of9Ty/7z/qOX/Bf9Ry/+L/qOW/5f8Ry3/L/uPWv5f8R+1/L/qP2r5f81/1PL/uv+o5f8N/1HL/5v+o5b/t/xHLf9v+49a/t/xH7X8v+s/avl/z3/U8v++/6jl/wP/Ucv/h/6jlv+P/Ect/x/7j1r+P/Eftfx/6v/vBg4o+v/Mf9Ty/7n/qOX/C/9Ry/+X/qOW/6/8Ry3/X/uPWv6/8R+1/H/rP2r5/85/1PL/vf+o5f8H/1HL/4/+o5b/n/xHLf8/+49a/n/xH7X8/+o/avn/zX/U8v+7/6jl/w//Ucv/n/6jkv9hBviPWv7/5T9q+f+3/6jl/z/+o5b/gf6jlv//+o9a/v/nP2r5/7//qOV/EP9Ry/+g/qOW/8H8Ry3/g/uPWv6H8B+1/A/pP2r5H8p/1PI/tP/oH/cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7N1tbF5l4cfx07Xd05/9uzmH15DBYNNNXNnalclg86E+FkzVsRgwgWxhZVQKcw/BDdRqUGIwhslIEFG3qZtAYsx4MUxAWElU4lQ0TkRDHIK6iKlhIiMal5q77V3ae22zXvW69mKfz4v2Pqf8Trcl351TtmYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLR52y03rO3oaNvkhRdeeDHw4lT/zgSk9lr0p/pHAgAAAAAAAAAAAAAAjCTHtxOd6p8jAAAAAACcblpa39VdXTXkVPXggzk/b+t93/Tqldfvef7xleX3/R++fJhLThh80NPT0/NSc9fM/sNJRVGUPtv0/uPJlePS9Tu7Lt/edxSK3z7b3Lpte/PBnV/5+sNzp06fU9t7trZYc117R9uSCUURqmuLraWDhqqiCBNri+2lg8bSwaTa4v7SwdLegynFgdLBhddu6FhXOnHCp4bTTkvrZ4vqIcUWQ343GNx/Z9emXeX3o1yyfLWaor//uuYf7q34WNkI/ZevH6oq+x/zTxAY0dj6v31h+f0olzzh/v9oe92q4T42cv/l64cJ+od0hnn+H9Jo7/P+nv0zRnj+nzvMJQf2P/3Lyq5S/zf98oX6/lM1J/P8X/p8fUehurL/CUOe/0vP8TXl5/9JRRFqx/nLAaeVltbPdY92/6/sfmj/NWdVbKoG93901Z7qUv+H73rg/f2nak+q/4Hrh5pR7v9Vnzkw9McKjE1L6+6eivv/GPovFgxzyYH+5+8+dlWp/zN2Htk36GNj6b+2sv/FW278xOLN226pb79x7fq29W03NTY2NC1d1tR40fLFvY8EfW/H+asCp4fx3f+LqRWbqqJoG9gv+vCyl0r9Hzz3H3/rPzV5jP1PHPX+/5z7Pwzr/AnFxInF1rVbtmxq6HtbPmzse9v3nw3T/4lf/4/Y/7zy/wcsf91d+oJ8YP+bd371I6X+75206oH+UxPH2P+k0frvfO3zAhHGef9fV7EZ0n/7q99ZV+r/T68cP9R/aqxf/08etf9d7v8wHi2tFX/h53+s1P/qfx0e7s8JTkKY4s//IJ0c/W+d9otvxq3DVP1DOjn6X7q5LfIv24b/0z+kk6P/X+2oOhK3DmfoH9LJ0f/Xuh/cGLcO0/QP6eTof//sR56KW4f/1z+kk6P/4+unXxW3DnX6h3Ry9H/Zl/aujluH6fqHdHL0X/XKtCfi1mGG/iGdHP3XV539qbh1eJ3+IZ0c/V/X+fCLceswU/+QTo7+P7/z15HfpxNer39IJ0f/T/1x6464dZilf0gnR/8vzGqvj1uHM/UP6eTo//4bnngkbh3eoH9IJ0f/T3/rg8fi1iHoH9LJ0f83nj2yJm4dZusf0snR/76Fx/4Qtw5n6R/SydH/vz969Qfi1uGN+od0cvQf9i//btw6nK1/SCdH/1c8eVdD3DrM0T+kk6P/zhW33Rm3DufoH9LJ0X9T88LZcetwrv4hnRz9z/jz3++OW4e5+od0cvT/sfveW/nvfp+kcJ7+IZ0c/d+8YfWjcetwvv4hnRz9r5zRc0HcOszTP6STo//DR+/7Udw6zNc/pJOj/7vvXHJF3Dq8Sf+QTo7+f3Dred1x6/Bm/UM6Ofp/ufaOW+PWYYH+IZ0c/X/5ZzXL4tZhof4hnRz9//ih7++KW4e36B/SydH/i+977Jy4dbhA/5BOjv53Xzzri3Hr8Fb9Qzo5+n/3MxvXx63DIv1DOjn6n7z390fj1qFe/5BOjv7nrzr4obh1uFD/kE6O/jcsWvO7uHVYrH9IJ0f/zxx4+lDcOizRP6STo/8dj326OW4dGvQP6eTo//HLOv4Ttw6N+od0cvT/z6affDxuHZbqH9LJ0f+Zh779hbh1aNI/pJOj/6sfnDwzbh0u0j+kk6P/jdfM/l7cOizTP6STo/9L5j50adw6vE3/kE6O/t/z1xU3x63DxfqHdHL0X3fPPc/FrcNy/UM6Ofqfd+3t18StwyX6h3Ry9H/9nPon49bhUv1DOjn6v+N4y4K4dVihf0gnR/9dtz2/L24dVuof0snRf/cnX66LW4e36x/SydH/3ilX3hu3Du/QPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCADAAAAIMzfOo/2AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FMAAAD//xWB0bY=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x0, 0x0, 0x100000}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0xfff, 0x7}, 0xc) 4.287948083s ago: executing program 1 (id=230): openat$random(0xffffffffffffff9c, 0x0, 0x100000, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800930000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.189931359s ago: executing program 3 (id=231): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x10000}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x3, 0xffff0001, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x700, 0xff, 0x1ff}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0x4, 0x8, 0xa801, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0xfffffffc, 0x4}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}], 0x4) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1b, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000054000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) 3.983332046s ago: executing program 2 (id=232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0xf00, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.982873988s ago: executing program 0 (id=233): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x7, @raw_data="c6ee92a8516e22f70e724b83bd14251c0506b060ef04ffd23932958f39b62ac4d84f2a991865e7c726122a04898a2419ddd442e3f6b59f0f50fff556914935f23f469eedb4fb8e23615f68d428f28d4ff04068b3f2eb0f5bed4773c64a44d41f9a3945f7b17fdd7397251f2bfc1bce53fd725e6619f506077355e651402c0f39fe6f1ce82f4963ff07936016e69374a490c93bbee2650c11a2697b19be3d3aba2d90997a096ec14236bf6117bf737362f2990c8e097e6a0b520b43a9ad73644615aefb485b6371cf"}) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0xd4d17000) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file0\x00', 0x1004000, &(0x7f0000000cc0)=ANY=[], 0x1, 0x5e4, &(0x7f0000000640)="$eJzs3U9rHOcdB/DvrNYrrQuOktiJ2wYqUvqHitqS1m2TgqlaTNEhlIBfgajlWHitBEkpSg7FLn4hKUFvoJdccvDB5/YlCHosFHoqohRcZnZmJduSLDmWtK4/H/vZeUbPPL/5zW9nZ7UjgQK8sham036QIgvTH2yU61ubvf7WZu9O008ynqRV/U+77P49GbufTGXQ8u0kRR2u2G8/V7/6sp2v710frLXqVm0/dtC8w7lbt8zXSc6/wHgPv3G8YniEZdBrTfBR8OjZ/nWMux87xtgcRmewKPZ5LiaTs0km6utAc+K2TjDDYzEyL0AAAAA4Rq9tZzsbOXfaeQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDLpP77/0XdWk1/KkXz9/879ddS919qD047AQAAAAAAAAB4Ab63ne1s5Fyz/qiofub/brVyvnr8Vj7NWpaymkvZyGLWs57VzCaZ3BWos7G4vr46e4iZc3vOnDuZ4wUAAAAAAACA/1N/ysLOz/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAUFMnYYFG1801/Mq12kokknXK7u8nfmv7L7MFpJwAAAAAn4LXtbGcj55r1R0X1mf+t6nP/RD7NStaznPX0s5Qb1b2Awaf+1tZmr7+12btTtqfj/vqfR0qjipjBvYe993yx2qKbm7fb9Zzf5+P0cyOtambpYpPP3nndK3MqflU7ZGY36mWRFN+t74aMhsmqImdyM8tVjWbq3MpqvH5wJY747Dy5p9m0hnd+zu+7p//ea3pHrfnZZl5STIx0zed2nX1vHVzz5AdX/71yq79y+9bNtenROaTn9GQlersq8fYrVYmZqhIXhusL+W2uZzpT+TCrWc4fspj1LGUq16reYn0+l4+TB1dq/rG1D5+VSad+XgZX0aPl9G4191yW87t8nBtZys8zlyt5L7P5RfXvyq5n+MIhrrSto73qv//juvNGUnQHy5EwPuw1dd19zS3r/fpjX9mp0hv7VWlw8Xye96P2d3ZyKdrDnEbBk5WY3VWJNw8+X/78qHxc66/cXr21+Mkh9/ejelm+S4w/813iJOvUqc/ewXcqj58d5dibe47NVmPnh2Otp8YuDMee9Urt1Ef8dKS5auztPcd61djFXWPd4dil4fdbAIy8sz852+n+o/vX7hfd+91b3Q8mfjP+3vg7nZx5eOaX7ZmxH7beKf6SL/LHnc//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA81v77PPbi/3+0qqOjo7OsHPaVyZOwuX1O59cXvvs858u31n8aOmjpZXezM/m3u/Nzr1/5fLN5f7SzODxtNPkmOy86E87EwAAAAAAAAAAAI7iJH6d9LSPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJfHwnTaD1JkdubSTLm+tdnrl63p72zZStIul/9Jxu4nUxm0TO4KV+y3n6tffdnO1/eu78RqNduPHTTvcO7WLfN1kvMvMN7DbxyvGB5hGfRaExxO2/8CAAD//wfgHM4=") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 3.654156947s ago: executing program 3 (id=234): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000000), 0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)={0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000300)={0x0}) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x8000, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xdb1, &(0x7f0000000e00)="$eJzs3UtvXNUdAPBzx568aRwSajdNY5eU4j5ik2CV7mqkdIEqoUp8ApQGGmroI3QBClLCoruqkRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1WiRrbPGc/8M6M7fo7H8/tJZ87ce86955x53LlzH+ckYGQ1Vh8XFqaqlN6+/dal+9Pj/12ZM93KMbP6OJ6nFlNKzdZyKU2E9S0eXIs/++T65fb4/zmu0sVUpao1Pz17r7Xs0ZTSjTST7qSJ9NzHk7de+uCZpfdO3jx56Y3ZuzvTegAAGC33f/Duz//6+Pevn/jf784uprzz/uv1/fbFnO9Y3u9frNamc9T6H1C1xVXbdHEg5BvPoRHyjXXJ115OM+Qb71H+gbDeZo98B2vKH2ub163dMMzW/8dXjbmO6UZjbm7tP/mKD8cOVHOvXF164dqAKgpsu0+n8yE+QRBGLiwfH/QWCGBNPG/4gBvxyMLWtNY23l/5955udF8etsFuf/6VP1zlv3vTFofts18/TaVd5Xt0LE/H8wjjYbmNfv/L+uL5iGaf9ex1HmFYzi/0qufYLtdjs3rVP34u9quv5Li8DmdDevv3J76nw/IeA93d7/v4/0PrC+2B45aCIGw9LA9y4wPsafG6ueWspMfr+mL6wZr0QzXph2vSj9SkH61Jh1H2+1d/k25V6//z43/6jR4PK8fZyr+FL2ywPvF45EbLj9f9btRWy4/XE8OeNvufM5/+8s7fOq7/b7tft1z/fy7/lk7kDUQ5XhiPq7eu/Q83Bjd65Hs4VOehLvlXn5/qzFedWl9PatvOPFCPqc7ljvfKd6Yz30TIdyTvixwK9Y37J0fCcmX/o2xXy+s1Htrb7Mi1vh0r9SjvzIkcHwrtOdGrXeFA9oGQr5nDydCuU6Fdj4TlvhjaVU11tisePy/1mQzz43mSki+8bQ/8LsX3It6X8WiO38zxOzl+P8cfdSl3FJXPY6/r/8vncyo1qxeuLl15Ik+X79vdsebBlfkXdrnewNb1e//PVOq8/+dYa36z0b5dOL4+v2rfLkyE+Rd7zH8yT5ffsx+PHV6dP3f5p0s/2u7Gw4i79trrP3l+aenKLzzxxBNPWk8GvWUCdtr8qy//bP7aa6+fv/ry8y9eefHKKxee+O53nnzqqYX51b36+fZ9e2B/Wf/RH3RNAAAAAAAAAAAAgL5Vh7vPznFd/7blfvJyf3q8P57hUN638mko/RiU+z979etS7t88sQt1ZPvtxu1Eg24j0N2/jP8nCCMblpf14g/sDb3622z1J7fD4/+Vfg9LfOz8P06shJLt3tOd28vYfyFsxV4ff075+2v8v9b4V31v/8KIWRObK/cP9w//va3YdLrf8mP7Sz+wpcPSPgde+2Muv7TmsdRf+cu/DeXHjkr79KdQ/pE+y3+g/Wc2V/6fc/nlZZs912/5azWuGp31iMeNSz+A8bhx8ZfQ/tK334bbv8mB2m7n8mGUDcs4kxs1LON/9lLWW7aDefPcOk9X+t+O4x1stP6l3+/yO/BIWH9V8/tm/M/hVjf+Z/n8zRv/E/adD53/E4SRDcvLywMd+mRUx13ZKwb9+g96H3LQ5Q/69a8Tx/+M/5fi+J8xPY7/GdPj+J8xPY6vFdPj+J/x9Yzjf8b0ybDeOD7oVE36l2rST9ekf7km/UxNevz/FtNnatLP1qRP16Q/XJP+aE36uZr0r9WkP1aT/nhN+mxN+n731RyPavthlMVxI33/YXSU8z+9vv+natKB4RXHdY7f76/XpAPDq1zn4fsNI6jq3mNHPN5ejuO+meN3cvx+jj/asQqyG76R42/m+Fs5/naOz+d4LsfzOTY25HD71T9Pn71VrV/ndzyk93s9abwfIPYTc6HP+sTzcxu9nnWyz3J2qvxN3g4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDQaq48LC1NVSm/ffuvSv09974crc6ZbOWZWH8fz1GJKqZlSqvL0eFjfjYNr8WefXL/cLa7SxdXHMp2evdda9ujK8mkm3UkT6bmPJ2+99MEzS++dvHny0huzd3em9QAAADAaPg8AAP//MSjmGQ==") ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f00000003c0)={&(0x7f0000000380)=[r2, r3, r4, r5, 0x0, r6, r8, 0x0, r9, r10], 0xa}) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000340)=0x13) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x0, r0}) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000000)=0x3, 0x4) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000008, 0x31, 0xffffffffffffffff, 0xfffff000) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000002fc0)=@ethtool_stats}) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r13, 0x5423, &(0x7f00000000c0)=0x15) 3.581458065s ago: executing program 1 (id=235): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xf, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4001000210000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94) 3.275991073s ago: executing program 4 (id=236): syz_open_dev$dri(0x0, 0x1ff, 0x400) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="23009700010007", 0x7) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18) socket(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x410200) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000040)) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x1, 0x99, 0x6, @broadcast}, 0x14) 3.266738923s ago: executing program 0 (id=237): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x642f53bc7dfd3c21, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040)) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x9, 0x2, 0x5, 0x9}, {0x1, 0x7, 0x1, 0xa}, {0xfff, 0x5, 0x6, 0x1b354130}, {0x0, 0x17, 0x3, 0x7}, {0xac6e, 0x37, 0xff, 0x2}, {0x8, 0xe, 0x2}, {0x6, 0x5, 0x2, 0x8}, {0x1, 0x1, 0x40, 0x1}]}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xc26a}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={r1, 0xd0, "f9c6b79e4c1b8cc07bd7046d4d12763521ae2e448f291d5bbe57c10dad0d952ffc5637dfb7c9c977b4df0ec12a4a29291fa3f50a89b78d5bddf4552411473b8372268c6c29f39b5c2ed2f8a25d38682567256020c71e94014fe920f74f5eb6fc29b23432eeec7368f15e751a405b5f44bb7776fb2927bb7886c275831276f545544bd11c9496b8d49da59ecfc65d366acefa6be516e2bd1d7316e09478dfc84faef39e2031aab545eda246e91165637043e0e9d667347bed2870498137c49eb91dbf7d138f1b2da3eb19215f6b733907"}, &(0x7f0000000280)=0xd8) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000002c0)={0x1, 0x0, [{0x9, 0x0, 0x0, 0x0, @irqchip={0x8, 0x2}}]}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000300)={0x1fe, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f0000000340)) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x24}}, 0x8c) r2 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x1000, 0x6, {{0x13, 0x4, 0x2, 0x8, 0x4c, 0x65, 0x0, 0x3, 0x29, 0x0, @empty, @multicast2, {[@rr={0x7, 0x17, 0x78, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @private=0xa010102]}, @ssrr={0x89, 0x1b, 0x5a, [@loopback, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x36}, @empty, @multicast1]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x40, 0x80, 0x2, 0xf80, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x67, 0x0, 0x80, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x14, 0xd1, 0x0, 0x4, [0x80, 0x9, 0x0, 0x4c]}, @lsrr={0x83, 0xf, 0x60, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @ssrr={0x89, 0xb, 0xb6, [@local, @multicast2]}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000006c0)={@dev, 0x0}, &(0x7f0000000700)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000740)={@private0, 0x0}, &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000880)={'erspan0\x00', 0x0, 0x1, 0x20, 0xc, 0x4c7, {{0x44, 0x4, 0x3, 0x1a, 0x110, 0x67, 0x0, 0x2c, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x94, 0x2}, @end, @cipso={0x86, 0x10, 0x2, [{0x7, 0x6, 'dd\x00\"'}, {0x7, 0x4, "c71a"}]}, @timestamp_addr={0x44, 0x2c, 0xf1, 0x1, 0x0, [{@private=0xa010101, 0x8}, {@multicast1}, {@multicast1, 0x7a7e0ada}, {@broadcast, 0x1}, {@local, 0x5}]}, @cipso={0x86, 0x6e, 0x3, [{0x1, 0xb, "955b28c25a5ad35fea"}, {0x0, 0xb, "1e0f285b1d498852d2"}, {0x6, 0xd, "96bb94f5bdcb3552640e20"}, {0x7, 0xe, "36ff06d4255b7c35d06a1fd9"}, {0x2, 0x11, "eceb3421caae01e0d7f0b8dcbd0d48"}, {0x5, 0xf, "f4896d96e96c54805aaba6c657"}, {0x1, 0x12, "37cabb2ce46ff2d3ca6b545d63662b23"}, {0x2, 0x5, '5\fL'}]}, @end, @timestamp_prespec={0x44, 0x14, 0x42, 0x3, 0x3, [{@private=0xa010100, 0x3}, {@broadcast, 0x8}]}, @timestamp={0x44, 0x20, 0x68, 0x0, 0x1, [0x1, 0x400, 0xffffff6e, 0x8, 0x6, 0x100, 0x7]}, @lsrr={0x83, 0x17, 0x8f, [@rand_addr=0x64010102, @multicast1, @multicast2, @rand_addr=0x64010101, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x5, 0x7, 0x35, @local, @dev={0xfe, 0x80, '\x00', 0x33}, 0x20, 0x20, 0xff800000, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000b40)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000c40)={'syztnl1\x00', &(0x7f0000000b80)={'ip_vti0\x00', 0x0, 0x10, 0x8000, 0x6, 0x80000001, {{0x28, 0x4, 0x3, 0x6, 0xa0, 0x67, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0x18, 0xed, 0x0, 0x8, [0xdd, 0x60, 0xffff8001, 0x1, 0x8]}, @timestamp={0x44, 0x18, 0x7, 0x0, 0x2, [0x6, 0xb, 0x2, 0xc, 0x8]}, @rr={0x7, 0x27, 0x2c, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @rand_addr=0x64010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @timestamp_addr={0x44, 0x34, 0x1c, 0x1, 0x4, [{@rand_addr=0x64010102, 0x8}, {@multicast2, 0x33}, {@multicast1, 0x100}, {@empty, 0x8}, {@remote, 0x1}, {@empty, 0x7}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000c80)={0x4b4, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x4040001}, 0x80) r16 = socket(0x16, 0x80000, 0x9) setsockopt$sock_int(r16, 0x1, 0x2d, &(0x7f00000011c0)=0x3ff, 0x4) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001200)={0x7, @sdr={0xa0363159, 0x3}}) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000001300)=0x40e4408) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000001440)={&(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001380)=""/189, 0xbd}) getsockopt$netrom_NETROM_T1(r16, 0x103, 0x1, &(0x7f0000001480), &(0x7f00000014c0)=0x4) 3.158926718s ago: executing program 1 (id=238): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$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") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) 2.787548613s ago: executing program 4 (id=239): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', '\x00'}) (async) statx(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x40, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) mkdir(&(0x7f00000002c0)='./file0\x00', 0x84) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x100, 0x100, 0x1, 0x4000}}) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r5, 0xe8506000) (async) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x27, 0x2, 0x1dd880, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) (async) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0x2, 0x0, 0x800, 0x0, 0x0, 0x0, 0xbca4, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) lchown(&(0x7f0000000300)='./file0\x00', r0, r6) (async) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x53, 0xc7, 0x71, 0x10, 0xc45, 0x608c, 0x4359, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x68, 0x1, 0x0, 0x97, 0xed, 0x87}}]}}]}}, 0x0) (async) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x40, 0x7b, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x1, 0xa, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x4, 0x1}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x8, 0x8, 0x34, 0x10, 0x19}, 0x40, &(0x7f0000000080)={0x5, 0xf, 0x40, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "4ed9277585007e49e96b374e8c1b03b1"}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x6, 0xf, 0x8, [0xf, 0x3f00, 0xbb396431e3509140, 0x3f]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x3, 0xc2, 0x0, 0x6, 0x40}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x300f}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3801}}, {0x95, &(0x7f00000001c0)=@string={0x95, 0x3, "4c91a78450c1d88bed664f65cf6358083e33c888b417c024ae527d0f5a7113c174e81edd9a4b0f95bf9e9c04ac2ee2d4b7029eb7a40b7380cc68e7cbd62e712884dfed39ef22dcdb697259c935ca88fc6e18ed017ccca3410ece1afa54708151bc6bc8f1708af069b329c2cc55a21b7e3f3cdc31df29195204e71fb797a59bec3c79ca74c1e8c4346c307d027759eb540475d8"}}]}) 2.217251148s ago: executing program 1 (id=240): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x16, &(0x7f0000000000)={@local, @broadcast, @void, {@llc={0x4, {@snap={0xaa, 0x0, "af", "bd00"}}}}}, 0x0) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1002, 0x80000000}}) ioctl$VT_ACTIVATE(r0, 0x4b63, 0x10000000000004) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000040)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) sched_getaffinity(r2, 0xfffffdc9, &(0x7f0000000200)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0xfc, 0x3, 0x6, 0x82, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x1, 0x80, 0x1, 0x7}}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000040)=0x1a, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080), 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', r8, 0x7, 0x40, 0x312bbc38, 0x80000001, {{0x7, 0x4, 0x0, 0x9, 0x1c, 0x66, 0x0, 0x4, 0x2f, 0x0, @multicast1, @broadcast, {[@end, @ra={0x94, 0x4, 0x1}]}}}}}) socket$unix(0x1, 0x1, 0x0) 2.144415283s ago: executing program 0 (id=241): mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x400000, 0x0) 2.141974817s ago: executing program 4 (id=242): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}, @generic={0x4, 0x2}]}}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tun(r0, &(0x7f00000000c0)={@void, @val={0x2, 0x3, 0x1, 0x0, 0xfff0, 0x81}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast, @loopback}}, 0x26) 2.141671497s ago: executing program 3 (id=243): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x21) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000212c0)={0x0, 0xb, 0x8}, 0xc) 1.895018108s ago: executing program 2 (id=244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r1, &(0x7f0000000180)="1b3851ad896525e7d2fd6f7083a52f16ec2da397f3a22357e50e620503571f1721e43b9d011cb8ebec8bb54a840ad05897d7ebc8737ee3", &(0x7f0000000200)=""/31}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000004feffff720af0fff8ffffff71a4f0ff000000002d140000000000001d400500000000004704000001ed000072030200000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x24, 0x2, 0x3, 0x301, 0x0, 0x1000000, {0x0, 0x0, 0x1}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_FLAGS={0x8}]}, 0x24}}, 0x0) shutdown(r0, 0x1) 1.782011087s ago: executing program 0 (id=245): syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) r5 = syz_io_uring_setup(0x110, &(0x7f0000000300)={0x0, 0x277f, 0x0, 0x5, 0x3d4}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) 1.708319118s ago: executing program 1 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='mm_page_free\x00', r0}, 0x18) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xe0, 0x11, 0x509, 0x0, 0x2, "", [@typed={0x8, 0x8f, 0x0, 0x0, @u32=0xff}, @nested={0xc5, 0x63, 0x0, 0x1, [@generic="bd27240c9e3815840d212b2524156341d37897f0adae21c8e37f9e33d5155388c8d0377320607308a466671ec1d4d3cb4559ef1ae99c5fc514ec13e3bd8f411ce95ce6ad08ab56de7383cffe53155379f75b74cfba8db3e272f51432491410b739c6e7302f93cfafea9378899f783c98bdb6ef7f81f5e8c9ada89326b940e5af83012073064b96c081b5dc50a81f1f8bad1599bbd31082e57398f2809069fa87737ee7c7a787e5a89b9025cc53be25c587a61f89668a18af1f74a2b10ec5e48d7e"]}]}, 0xe0}], 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10092, &(0x7f0000000080)={[{@nodioread_nolock}]}, 0xff, 0x249, &(0x7f0000000880)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="b8f92416074d3848"}}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xb9, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 1.702598193s ago: executing program 3 (id=247): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000fd00000001"], 0x30, 0x40400d1}}], 0x1, 0x814) 1.680038663s ago: executing program 4 (id=248): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000280)="e8bd8a4c56281b37ba42cfa5", 0xc) 1.336763723s ago: executing program 4 (id=249): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8848, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500000000000800124000000001050004000000000011000300686173683a6970"], 0x60}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$eJzs3T9sG2UbAPDnznHTP/m+9JO+T/pAHSpAKlJVJ+kfKEztiqhUqQMSC0SOG1Vx4ipOoIkike4VogMC1KVsMDCCGBgQCyMrC4gZqaIRSE0HMHJ8TtPULk6I4xL/ftLZ73t39vO+d35e+053cgB962j9IY14KiIuJhHDG5YNRLbwaGO91ZWl4v2VpWIStdqlX5JIIuLeylKxuX6SPR+KiOWI+H9EfJOPOJ6uv+W+ZqG6sDg1Xi6XZrP6yNz01ZHqwuKJK9Pjk6XJ0sypF186c/b0mbGTYxube7+2sZbfWl9v/Hjz3RvfvXL75qefHVkuvj+exLkYypZt7MdOamyTfJzbNP90N4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6Du9I8oItqgxE1oE8l8h/6VPN3QP34tznt5u+PO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDcbyp60fD0iRgcGHv38J9nnb/tGd6KBdNXX5xs76tH9n66PP9Fi/Blqnjv9m5rj32o2/q22iJ9rM/5d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm23bLaxxHHonX8puTx54dHLl8pl0Ybjy1jfHXsyMvt+x9xsE38xjnb/WtfMxv7vy9rU9ph/7/49vNnlh8T//lnH7//W23/AxHxXofx/3Pvk1fbLbtzPblb/xWw1f2fRD5udxj/hXNHf8iKzhoCAAAAAAAAAMAOSteuZUvSwno5TQuFxj28/42DablSnTt+uTI/M9G45u1w5NPmlVbDjXpSr49l1+M26yc31U/lsoC5A2v1QrFSnuhx3wEAAAAAAAAAAAAAAAAAAOBJcWjT/f+/5dbu/9/8d9XAXtX+L7+BvU7+Q/96OP+TnrUD2H2+/6Fv1eQ/9C/5D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChPtXurywV6/WJgYX5qcpbJyZK1anC9HyxUKzMXi1MViqT5VKhWJn+q/dLKpWrozEzf21krlSdG6kuLL4xXZmfaf6naCnf9R4BAAAAAAAAAAAAAAAAAADAP8/Q2pSkhYh8o56mhULEvyLicBLJ5Svl0mhE/Dsivs/lB+v1sV43GgAAAAAAAAAAAAAAAAAAAPaY6sLi1Hi5XJrtXmEgC9XFEJ0XBrayckQs72wz6u+45Vflsw3Y4023Nwq5J+Nz+OQXejgoAQAAAAAAAAAAAAAAAABAn3pw02+nr/ijuw0CAAAAAAAAAAAAAAAAAACAvpT+nEREfTo2/NzQ5qX7ktXc2nNEvH3r0gfXxufmZsfq8++uz5/7MJt/shftBzrVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQXVicGi+XS7PbLAx2sE6v+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHX8GAAD//xLkz18=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$isdn(0x22, 0x2, 0x22) setsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) io_setup(0x3, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x880, &(0x7f0000000040)={[{@dax}, {@nombcache}]}, 0x1, 0x5a7, &(0x7f0000000640)="$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") 1.268331162s ago: executing program 1 (id=250): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$getflags(r1, 0x401) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000e60804"], 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff, 0x1, [0x6]}, 0xa) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xd2}, &(0x7f0000000180)=0x8) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2000001, &(0x7f0000000140)='/dev/sg#\x00') 1.243010752s ago: executing program 2 (id=251): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuset.effective_mems\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000080)={0x1, 0x1}) r3 = getpid() migrate_pages(r3, 0x1ff, 0x0, &(0x7f0000000200)=0xd) (async, rerun: 64) fcntl$lock(r2, 0x6, &(0x7f0000000180)={0x0, 0x3, 0xffffffffffffffff, 0x1, r3}) (async, rerun: 64) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x2, 0x7, 0x3}) (async, rerun: 64) fcntl$lock(r1, 0x6, &(0x7f0000000100)={0x0, 0x2, 0x1, 0x4}) (async, rerun: 64) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = fsmount(r0, 0x0, 0x1) (rerun: 32) fchdir(r4) (async) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) (async, rerun: 64) getdents(r5, &(0x7f0000000600)=""/54, 0x36) (rerun: 64) 1.143443706s ago: executing program 3 (id=252): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0x96) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x0) r5 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)=ANY=[@ANYRES8=r2, @ANYRESHEX=r2, @ANYBLOB="0d030020000000000000130000004c0009"], 0x60}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31JruwsF72sBQaCLSnHpoYWTGpZStYcoiNaRNKoZdCW3prLzn356X02h+HXtr/oySkrROa0kNxGf2wZVtyrMSWkubzgYne07zRe995ozcvmrEUwBNrPP0nE3EsIl5PIkbrzycR0V9NZSOma+Xura/l0yWJjY1nvkuqZe6ur+WjaZvUkXrmjxHx+SsRJzK76y2vrM7PFIuFpXp+orJweaK8snry0sLMXGGusHh6cmrq1Jl/nDn9UOENN2d++Hr16K03/v/XD6Z/evkPH772RRLTcbS+rjmOgzIe4/V90p/uwm3+d9CV9czHL+6jUNMRkD3MxtChtGP66r1yLEajb6/+Ge5mywCAw/JSRGy009d2DQDwWEtq5///9LodAEC3ND4HuLu+lm8svf1Eortu/zcihobqudr1zVo6W79mN1S9DjpyN9l2ZSSJiLEDqH88It755Pn30iUO6TokQCvXrkfEhbHx3eN/suuehU79rfXTc82Z8R0rjX/QPZ+m859/tpr/ZTbnP9Fi/jPY4r37IO7//s/cPIBq2krnf/9uurftXlP8dWN99dxvqnO+/uTipWIhHdt+GxHHo38wzU/uUcfxOz/fabeuef73/ZsvvJvWnz5ulcjczA5u32Z2pjLzMDE3u3094k/ZVvGn4/9gtf+TNvPfc/X0wH3qeOpfr77dbl0afxpvY9kd/+HauBHxl5b9n2yWSfa8P3GiejhMNA6KFj6ajpF29Y9nt/o/XdL6G/8X6Ia0/0f2jn8sab5fs7zvl968W+yrG6OftSvUfPy3jr/18T+QPFtNN469qzOVytJkxEDy9O7nT21t28g3yqfxH/9z6/d/Y/xrcfw/l77+hX3uiOytb99/8PgPVxr/bEf933Eihu7N97Wrf3/9P7Vtm/2Mf/tt4IPuNwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSyW2mM5lcrvYb3r+PkUyxVK6cuFhaXpyN6m9lj0V/pvFVl6NN34c6Wf8+/Eb+1I783yPidxHx1uBwNZ/Ll4qzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqOtPn9/9Q3gzsK9/WihQDAoRhyYgeAJ02Szfa6CQBAtw11VHr40NoBAHRPZ+d/AODXwPkfAJ489zn/7/wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjUubNn02Xjx/W1fJqfvbKyPF+6cnK2UJ7PLSznc/nS0uXcXKk0Vyzk8qWFti90rfZQLJUuT8Xi8tWJSqFcmSivrJ5fKC0vVs5fWpiZK5wv9HctMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv/LK6vxMsVhYkuhJYv7LWj88Ku2R6CwR12r996i05+ASMbA1Sgz3ZnACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAz8EgAA//99gB7t") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) syz_io_uring_setup(0x22, &(0x7f00000000c0)={0x0, 0x289a, 0x10000, 0x8001, 0x31f}, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000140)={0x0, 0x0, 0x6}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000018, &(0x7f00000006c0), 0x1, 0x516, &(0x7f0000000dc0)="$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") r7 = socket$l2tp6(0xa, 0x2, 0x73) fgetxattr(r7, &(0x7f0000002080)=@known='security.apparmor\x00', &(0x7f00000020c0)=""/45, 0x2d) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r8, 0x0, 0xe, 0x0, &(0x7f00000002c0)) r9 = openat$cgroup_ro(r4, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) lseek(r9, 0x3, 0x3) 784.499757ms ago: executing program 2 (id=253): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x20000000}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2005, 0x4, &(0x7f0000006680)) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'macvtap0\x00', 0x200}) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x4, 0x2}, {0x7ff}}}}, 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0xa70a2, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x36]}}]}) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') 760.46784ms ago: executing program 0 (id=254): syz_usb_connect$cdc_ncm(0x6, 0x6e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x371d, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x200026, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x18000, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x69}]}}}]}, 0x3c}}, 0x4) syz_usb_connect(0x0, 0xbe, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000093bb6a40670812987bad018203010902ac0001000020000904"], 0x0) syz_usb_connect$uac1(0x2, 0x7a, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x4, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0x4}, [@extension_unit={0x9, 0x24, 0x8, 0x2, 0x9, 0x1, "add5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0xe, 0xf7, {0x7, 0x25, 0x1, 0x80, 0xc6, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xa, 0x22, 0x3, {0x7, 0x25, 0x1, 0x1, 0x5, 0x5}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xfe, 0x1, 0x0, 0x8, 0x9}, 0x3b, &(0x7f0000000440)={0x5, 0xf, 0x3b, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x5, 0x8, 0x2, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x3, 0x3, 0x9, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x1, 0x7}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x7c, 0xf, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x7c, 0xa}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44a}}, {0x95, &(0x7f0000000280)=@string={0x95, 0x3, "ed04eeb8dc1dd7eb2e269ae38dfef05bacf231223fc3e39ff046ab4b781a5d89d9a8ff5c504a809016dfc828774f2ea468f131c9a49a31b5874eeb0ddbc83565bc20f04a76d10b88b13cb4099e93d0a19096ea1bfbc7473e449fd15dd89a951ebe9e04060ff12f5d22a12e4f04935c21e9d7fe4c4a8ad68e01890c226171b990db563441d041794d567aaf5e6c7d493b27e97c"}}, {0x61, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x415}}]}) 118.159389ms ago: executing program 4 (id=255): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000900)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289ae13ea191f66e388c5cf4a000000", @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT, @ANYRES64], 0x1, 0x4a2, &(0x7f0000000a40)="$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") mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='proc\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r1, &(0x7f0000000000)=""/24, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1) getdents64(r2, 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000080)) 0s ago: executing program 2 (id=256): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x9c3, 0x0, 0x7, 0xfffffffffffffffe}, &(0x7f0000000380)=0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x86dd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 194.735048][ T5797] cgroup: Unknown subsys name 'net' [ 194.867096][ T5797] cgroup: Unknown subsys name 'cpuset' [ 194.882666][ T5797] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 201.139662][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 206.572753][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.608462][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.626791][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.634537][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.644945][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.656207][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.664263][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.676487][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.679978][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.698372][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.707048][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.716609][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.731264][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.748606][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.767805][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.813206][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.837522][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.890183][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.904030][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.918023][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.026876][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.038438][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.086935][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.189714][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.201454][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.740954][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 208.605679][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.613475][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.621660][ T5817] bridge_slave_0: entered allmulticast mode [ 208.631536][ T5817] bridge_slave_0: entered promiscuous mode [ 208.660316][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 208.773360][ T5821] Bluetooth: hci0: command tx timeout [ 208.781740][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.789360][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.796993][ T5817] bridge_slave_1: entered allmulticast mode [ 208.805451][ T5817] bridge_slave_1: entered promiscuous mode [ 208.864997][ T5821] Bluetooth: hci1: command tx timeout [ 208.865426][ T49] Bluetooth: hci2: command tx timeout [ 209.037129][ T49] Bluetooth: hci3: command tx timeout [ 209.107281][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 209.140635][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.172666][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.331098][ T49] Bluetooth: hci4: command tx timeout [ 209.359935][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 209.453773][ T5817] team0: Port device team_slave_0 added [ 209.494570][ T5817] team0: Port device team_slave_1 added [ 209.503718][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 209.979582][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.986900][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.014415][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.037722][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.045228][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.053977][ T5813] bridge_slave_0: entered allmulticast mode [ 210.063634][ T5813] bridge_slave_0: entered promiscuous mode [ 210.130781][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.138652][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.146513][ T5813] bridge_slave_1: entered allmulticast mode [ 210.156400][ T5813] bridge_slave_1: entered promiscuous mode [ 210.181171][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.188533][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.214988][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.539398][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.560329][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.568017][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.575640][ T5820] bridge_slave_0: entered allmulticast mode [ 210.585260][ T5820] bridge_slave_0: entered promiscuous mode [ 210.707830][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.719474][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.728787][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.736490][ T5820] bridge_slave_1: entered allmulticast mode [ 210.745771][ T5820] bridge_slave_1: entered promiscuous mode [ 210.851097][ T49] Bluetooth: hci0: command tx timeout [ 210.926118][ T49] Bluetooth: hci1: command tx timeout [ 210.931785][ T5821] Bluetooth: hci2: command tx timeout [ 210.956692][ T5817] hsr_slave_0: entered promiscuous mode [ 210.965571][ T5817] hsr_slave_1: entered promiscuous mode [ 211.086062][ T5821] Bluetooth: hci3: command tx timeout [ 211.087542][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.180412][ T5813] team0: Port device team_slave_0 added [ 211.188247][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.198510][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.206359][ T5823] bridge_slave_0: entered allmulticast mode [ 211.215630][ T5823] bridge_slave_0: entered promiscuous mode [ 211.271929][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.330755][ T5813] team0: Port device team_slave_1 added [ 211.339687][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.347467][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.355059][ T5823] bridge_slave_1: entered allmulticast mode [ 211.364611][ T5823] bridge_slave_1: entered promiscuous mode [ 211.374119][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.382670][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.390467][ T5829] bridge_slave_0: entered allmulticast mode [ 211.399939][ T5829] bridge_slave_0: entered promiscuous mode [ 211.407016][ T5821] Bluetooth: hci4: command tx timeout [ 211.623922][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.631731][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.639427][ T5829] bridge_slave_1: entered allmulticast mode [ 211.649251][ T5829] bridge_slave_1: entered promiscuous mode [ 211.704228][ T5820] team0: Port device team_slave_0 added [ 211.732361][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.739613][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.766060][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.870700][ T5820] team0: Port device team_slave_1 added [ 211.986827][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.993964][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.020284][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.034468][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.042568][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.068998][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.092597][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.182669][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.190481][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.216914][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.238291][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.351300][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.410083][ T5823] team0: Port device team_slave_0 added [ 212.465565][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.558554][ T5823] team0: Port device team_slave_1 added [ 212.662057][ T5813] hsr_slave_0: entered promiscuous mode [ 212.672236][ T5813] hsr_slave_1: entered promiscuous mode [ 212.680684][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 212.686695][ T5813] Cannot create hsr debugfs directory [ 212.879725][ T5820] hsr_slave_0: entered promiscuous mode [ 212.889986][ T5820] hsr_slave_1: entered promiscuous mode [ 212.899503][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 212.905480][ T5820] Cannot create hsr debugfs directory [ 212.927501][ T5821] Bluetooth: hci0: command tx timeout [ 212.944836][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.952168][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.978560][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.997635][ T5829] team0: Port device team_slave_0 added [ 213.007265][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.014371][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.040653][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.047965][ T5821] Bluetooth: hci2: command tx timeout [ 213.060302][ T5821] Bluetooth: hci1: command tx timeout [ 213.142172][ T5829] team0: Port device team_slave_1 added [ 213.176690][ T49] Bluetooth: hci3: command tx timeout [ 213.281009][ T5823] hsr_slave_0: entered promiscuous mode [ 213.292346][ T5823] hsr_slave_1: entered promiscuous mode [ 213.301129][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 213.307142][ T5823] Cannot create hsr debugfs directory [ 213.486284][ T49] Bluetooth: hci4: command tx timeout [ 213.528021][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.535177][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.561683][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.692423][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.699839][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.726336][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.129254][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.168128][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.255357][ T5829] hsr_slave_0: entered promiscuous mode [ 214.265296][ T5829] hsr_slave_1: entered promiscuous mode [ 214.274194][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 214.280288][ T5829] Cannot create hsr debugfs directory [ 214.340006][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.361470][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.006350][ T49] Bluetooth: hci0: command tx timeout [ 215.086334][ T49] Bluetooth: hci1: command tx timeout [ 215.091961][ T49] Bluetooth: hci2: command tx timeout [ 215.137154][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.183450][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.224683][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.246409][ T49] Bluetooth: hci3: command tx timeout [ 215.257412][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.494814][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.522329][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.550597][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.571403][ T49] Bluetooth: hci4: command tx timeout [ 215.595551][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.812036][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.922590][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.991817][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.021649][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.064974][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.091457][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.113560][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.217521][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.282801][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.342281][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.456036][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.463584][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.582895][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.590495][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.788983][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.136690][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.159082][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.291579][ T1815] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.299209][ T1815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.385638][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.412287][ T1815] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.420011][ T1815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.555069][ T1815] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.562825][ T1815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.578930][ T1815] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.586515][ T1815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.764766][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.051279][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.121768][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.229380][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.237004][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.359461][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.367076][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.470538][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.637034][ T5823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.648514][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.694926][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.702568][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.881657][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.889297][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.172680][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.793694][ T5817] veth0_vlan: entered promiscuous mode [ 219.970273][ T5817] veth1_vlan: entered promiscuous mode [ 220.332567][ T5817] veth0_macvtap: entered promiscuous mode [ 220.357976][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.416906][ T5817] veth1_macvtap: entered promiscuous mode [ 220.460061][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.640503][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.752393][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.970764][ T1851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.034467][ T1851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.113538][ T1851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.181905][ T5820] veth0_vlan: entered promiscuous mode [ 221.191020][ T5813] veth0_vlan: entered promiscuous mode [ 221.210365][ T1132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.250835][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.309154][ T5813] veth1_vlan: entered promiscuous mode [ 221.352220][ T5820] veth1_vlan: entered promiscuous mode [ 221.640316][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.723976][ T5813] veth0_macvtap: entered promiscuous mode [ 221.821406][ T5813] veth1_macvtap: entered promiscuous mode [ 221.921109][ T5820] veth0_macvtap: entered promiscuous mode [ 222.004028][ T5820] veth1_macvtap: entered promiscuous mode [ 222.151455][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.304911][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.312798][ T5829] veth0_vlan: entered promiscuous mode [ 222.348614][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.439644][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.471285][ T1132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.486987][ T5829] veth1_vlan: entered promiscuous mode [ 222.533700][ T1132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.596768][ T1132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.606880][ T1132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.680381][ T1132] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.762347][ T1132] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.792059][ T1132] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.848031][ T1132] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.928432][ T5829] veth0_macvtap: entered promiscuous mode [ 222.999678][ T5829] veth1_macvtap: entered promiscuous mode [ 223.227309][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.280172][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.398866][ T4352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.441371][ T3824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.504126][ T3824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.580570][ T3824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.492324][ T5823] veth0_vlan: entered promiscuous mode [ 224.619694][ T5823] veth1_vlan: entered promiscuous mode [ 224.920560][ T5823] veth0_macvtap: entered promiscuous mode [ 225.030599][ T5823] veth1_macvtap: entered promiscuous mode [ 225.197638][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.332098][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.456433][ T3824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.465577][ T3824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.571630][ T3824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.638335][ T3824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.733752][ T3824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.742887][ T3824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.926217][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.934270][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.389476][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 229.944497][ T4887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.952771][ T4887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.976469][ T30] audit: type=1326 audit(1756903068.303:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20138ebe9 code=0x7ffc0000 [ 230.000753][ T30] audit: type=1326 audit(1756903068.303:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20138ebe9 code=0x7ffc0000 [ 230.098345][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.107561][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.232557][ T30] audit: type=1326 audit(1756903068.443:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa20138ebe9 code=0x7ffc0000 [ 230.256304][ T30] audit: type=1326 audit(1756903068.463:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20138ebe9 code=0x7ffc0000 [ 230.280576][ T30] audit: type=1326 audit(1756903068.483:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa20138ebe9 code=0x7ffc0000 [ 230.303983][ T30] audit: type=1326 audit(1756903068.483:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20138ebe9 code=0x7ffc0000 [ 230.327126][ T30] audit: type=1326 audit(1756903068.533:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20138ebe9 code=0x7ffc0000 [ 230.349590][ T30] audit: type=1326 audit(1756903068.533:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa20138ebe9 code=0x7ffc0000 [ 230.373444][ T30] audit: type=1326 audit(1756903068.533:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20138ebe9 code=0x7ffc0000 [ 230.398044][ T30] audit: type=1326 audit(1756903068.533:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20138ebe9 code=0x7ffc0000 [ 230.455505][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.464011][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.664894][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.673114][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.744495][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.752784][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.127541][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.135573][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.425248][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.433862][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.580386][ T1815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.588659][ T1815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.102675][ T6007] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 232.420124][ T6010] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6'. [ 232.622839][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.701606][ T6014] Zero length message leads to an empty skb [ 232.711377][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.714460][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7'. [ 232.752101][ T6010] bond0 (unregistering): Released all slaves [ 233.287102][ T6019] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8'. [ 233.447683][ T6019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.477123][ T6021] loop0: detected capacity change from 0 to 256 [ 233.522258][ T6019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.613074][ T6019] bond0 (unregistering): Released all slaves [ 233.904919][ T6023] loop1: detected capacity change from 0 to 2048 [ 233.960138][ T6023] udf: Unexpected value for 'shortad' [ 234.363804][ T6023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 234.517126][ T6029] loop0: detected capacity change from 0 to 1024 [ 234.556878][ T6032] FAULT_INJECTION: forcing a failure. [ 234.556878][ T6032] name failslab, interval 1, probability 0, space 0, times 1 [ 234.570121][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: syz.4.13 Not tainted syzkaller #0 PREEMPT(none) [ 234.570268][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.570373][ T6032] Call Trace: [ 234.570442][ T6032] [ 234.570496][ T6032] __dump_stack+0x26/0x30 [ 234.570700][ T6032] dump_stack_lvl+0x1df/0x270 [ 234.570895][ T6032] dump_stack+0x1e/0x25 [ 234.571062][ T6032] should_fail_ex+0x7dc/0x8a0 [ 234.571306][ T6032] should_failslab+0x15b/0x200 [ 234.571491][ T6032] __kmalloc_noprof+0x182/0x1310 [ 234.571669][ T6032] ? kernfs_fop_write_iter+0x29d/0x9e0 [ 234.571853][ T6032] ? filter_irq_stacks+0x49/0x190 [ 234.571997][ T6032] ? kmsan_get_metadata+0xfb/0x160 [ 234.572175][ T6032] kernfs_fop_write_iter+0x29d/0x9e0 [ 234.572405][ T6032] vfs_write+0xbdf/0x15d0 [ 234.572600][ T6032] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 234.572798][ T6032] __x64_sys_write+0x1fb/0x4d0 [ 234.572995][ T6032] x64_sys_call+0x3014/0x3e20 [ 234.573169][ T6032] do_syscall_64+0xd9/0x210 [ 234.573340][ T6032] ? irqentry_exit+0x16/0x60 [ 234.573497][ T6032] ? clear_bhb_loop+0x40/0x90 [ 234.573642][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.573783][ T6032] RIP: 0033:0x7fe34378ebe9 [ 234.573894][ T6032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.574007][ T6032] RSP: 002b:00007fe34455c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.574143][ T6032] RAX: ffffffffffffffda RBX: 00007fe3439c5fa0 RCX: 00007fe34378ebe9 [ 234.574235][ T6032] RDX: 000000000000001f RSI: 0000200000000980 RDI: 0000000000000005 [ 234.574319][ T6032] RBP: 00007fe34455c090 R08: 0000000000000000 R09: 0000000000000000 [ 234.574410][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.574508][ T6032] R13: 00007fe3439c6038 R14: 00007fe3439c5fa0 R15: 00007ffc61ad0738 [ 234.574638][ T6032] [ 234.766006][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.776177][ T6023] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 234.788701][ T6023] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 234.833755][ T6023] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 234.846146][ T6023] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.852559][ T6023] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 234.973962][ T6029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.041790][ T6023] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 235.051797][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.059192][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.080621][ T6023] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.090218][ T6023] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 235.171571][ T6023] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 235.188647][ T6029] EXT4-fs error (device loop0): ext4_get_first_dir_block:3552: inode #11: comm syz.0.12: directory missing '..' [ 235.228372][ T6023] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.234916][ T6023] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 235.260085][ T6023] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 235.270851][ T6023] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 235.277597][ T6023] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 235.309037][ T6023] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 235.337752][ T6047] fuse: Bad value for 'fd' [ 235.365148][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16'. [ 235.374713][ T6046] netlink: 48 bytes leftover after parsing attributes in process `syz.4.16'. [ 235.592054][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.985626][ T6058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20'. [ 236.518355][ T49] Bluetooth: hci4: unexpected event for opcode 0x762f [ 236.529888][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 236.946797][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 237.206340][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 237.276603][ T49] Bluetooth: hci3: command 0x0c1a tx timeout [ 237.418783][ T6074] loop4: detected capacity change from 0 to 32768 [ 237.647417][ T6074] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 237.647591][ T6074] allowing incompatible features above 0.0: (unknown version) [ 237.647684][ T6074] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 237.673801][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.707365][ T6074] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 237.715911][ T6074] bcachefs (loop4): initializing new filesystem [ 237.737204][ T6074] bcachefs (loop4): going read-write [ 237.820586][ T6074] bcachefs (loop4): marking superblocks [ 237.880375][ T6074] bcachefs (loop4): initializing freespace [ 237.909915][ T6074] bcachefs (loop4): done initializing freespace [ 237.930532][ T6074] bcachefs (loop4): reading snapshots table [ 237.937106][ T6074] bcachefs (loop4): reading snapshots done [ 238.039540][ T6074] bcachefs (loop4): done starting filesystem [ 238.111708][ T6095] loop1: detected capacity change from 0 to 512 [ 238.128245][ T6095] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 238.142504][ T6095] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 238.151897][ T6095] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 238.268103][ T6074] syz.4.25 (6074) used greatest stack depth: 1200 bytes left [ 238.340900][ T5823] bcachefs (loop4): shutting down [ 238.347623][ T5823] bcachefs (loop4): going read-only [ 238.354147][ T5823] bcachefs (loop4): finished waiting for writes to stop [ 238.370456][ T6095] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 238.376374][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 238.391213][ T5823] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 238.405969][ T6095] System zones: 0-2, 18-18, 34-35 [ 238.414510][ T6095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 238.424573][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 238.483955][ T6101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.30'. [ 238.566852][ T9] usb 4-1: device descriptor read/64, error -71 [ 238.624059][ T5822] Bluetooth: hci0: command 0x0c1a tx timeout [ 238.635028][ T5823] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 238.656099][ T5823] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 238.753987][ T5823] bcachefs (loop4): marking filesystem clean [ 238.836113][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 238.874447][ T5823] bcachefs (loop4): shutdown complete [ 239.007028][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 239.026334][ T9] usb 4-1: device descriptor read/64, error -71 [ 239.050426][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.138234][ T9] usb usb4-port1: attempt power cycle [ 239.239400][ T6104] @: renamed from vlan0 (while UP) [ 239.247673][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 239.326156][ T49] Bluetooth: hci3: command 0x0c1a tx timeout [ 239.386362][ T6106] loop0: detected capacity change from 0 to 1024 [ 239.438606][ T6110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.35'. [ 239.438985][ T6106] hfsplus: invalid btree flag [ 239.469732][ T6106] hfsplus: failed to load extents file [ 239.528483][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 239.572784][ T9] usb 4-1: device descriptor read/8, error -71 [ 239.716690][ T6104] loop2: detected capacity change from 0 to 4096 [ 239.731270][ T6104] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 239.778983][ T6104] ntfs3(loop2): Failed to load $Volume (-22). [ 239.836380][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 239.889561][ T9] usb 4-1: device descriptor read/8, error -71 [ 240.013347][ T9] usb usb4-port1: unable to enumerate USB device [ 240.080931][ T6116] loop1: detected capacity change from 0 to 128 [ 240.104423][ T6116] zonefs: Unexpected value for 'explicit-open' [ 240.267763][ T5869] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 240.492529][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 240.506869][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.524719][ T5869] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 240.536200][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.578495][ T5869] usb 1-1: config 0 descriptor?? [ 240.687376][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 241.036990][ T5869] dragonrise 0003:0079:0006.0001: item fetching failed at offset 4/5 [ 241.070827][ T5869] dragonrise 0003:0079:0006.0001: parse failed [ 241.077677][ T5869] dragonrise 0003:0079:0006.0001: probe with driver dragonrise failed with error -22 [ 241.092235][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 241.326454][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 241.352509][ T6114] loop0: detected capacity change from 0 to 512 [ 241.408423][ T49] Bluetooth: hci3: command 0x0c1a tx timeout [ 241.444503][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 241.493713][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 241.512409][ T6114] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.37: invalid indirect mapped block 1024 (level 0) [ 241.612803][ T6114] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.37: bg 0: block 35: padding at end of block bitmap is not set [ 241.667471][ T6114] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 241.694713][ T6114] EXT4-fs (loop0): 1 truncate cleaned up [ 241.705005][ T6114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.825441][ T6114] netlink: 124 bytes leftover after parsing attributes in process `syz.0.37'. [ 241.879968][ T24] usb 1-1: USB disconnect, device number 2 [ 242.535470][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.788830][ T6140] ceph: No mds server is up or the cluster is laggy [ 242.797982][ T9] libceph: connect (1)[c::]:6789 error -101 [ 242.804446][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 243.132619][ T9] libceph: connect (1)[c::]:6789 error -101 [ 243.139265][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 243.637907][ T6147] loop0: detected capacity change from 0 to 32768 [ 243.654013][ T6147] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.47 (6147) [ 243.696041][ T6147] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 243.706756][ T6147] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 243.803430][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 243.986781][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 243.997241][ T6147] BTRFS info (device loop0): enabling ssd optimizations [ 244.009437][ T6147] BTRFS info (device loop0): enabling free space tree [ 244.040398][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.097284][ T9] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 244.112035][ T9] usb 4-1: New USB device strings: Mfr=0, Product=241, SerialNumber=0 [ 244.122464][ T9] usb 4-1: Product: syz [ 244.266841][ T5817] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 244.342199][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'. [ 244.351550][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 244.360673][ T6172] netlink: 'syz.4.51': attribute type 18 has an invalid length. [ 244.971407][ T6170] loop1: detected capacity change from 0 to 32768 [ 244.982912][ T6170] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 15e9b780-35c5-4e32-bcb7-3376e0e1753a [ 244.993760][ T6170] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.50 (6170) [ 245.012692][ T9] usb 4-1: config 0 descriptor?? [ 245.059390][ T6170] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 245.070474][ T6170] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 245.524268][ T6170] BTRFS info (device loop1): enabling ssd optimizations [ 245.532200][ T6170] BTRFS info (device loop1): enabling free space tree [ 245.712376][ T6140] netlink: 20 bytes leftover after parsing attributes in process `syz.3.46'. [ 245.790409][ T5813] BTRFS info (device loop1): last unmount of filesystem 15e9b780-35c5-4e32-bcb7-3376e0e1753a [ 245.867052][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 245.873840][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 245.933995][ T9] usb 4-1: USB disconnect, device number 6 [ 246.405704][ T6196] fuse: Bad value for 'fd' [ 246.626365][ T6198] FAULT_INJECTION: forcing a failure. [ 246.626365][ T6198] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 246.640183][ T6198] CPU: 1 UID: 0 PID: 6198 Comm: syz.4.57 Not tainted syzkaller #0 PREEMPT(none) [ 246.640330][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.640416][ T6198] Call Trace: [ 246.640471][ T6198] [ 246.640522][ T6198] __dump_stack+0x26/0x30 [ 246.640778][ T6198] dump_stack_lvl+0x1df/0x270 [ 246.640963][ T6198] dump_stack+0x1e/0x25 [ 246.641127][ T6198] should_fail_ex+0x7dc/0x8a0 [ 246.641348][ T6198] should_fail+0x2a/0x40 [ 246.641528][ T6198] should_fail_usercopy+0x2e/0x40 [ 246.641693][ T6198] copy_fpstate_to_sigframe+0xdb1/0x13d0 [ 246.641914][ T6198] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 246.642100][ T6198] ? kmsan_get_metadata+0xfb/0x160 [ 246.642263][ T6198] ? copy_fpstate_to_sigframe+0x141/0x13d0 [ 246.642478][ T6198] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 246.642658][ T6198] get_sigframe+0xc6a/0x1020 [ 246.642892][ T6198] x64_setup_rt_frame+0x1a0/0x2590 [ 246.643100][ T6198] ? kmsan_get_metadata+0xfb/0x160 [ 246.643262][ T6198] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 246.643413][ T6198] ? kmsan_get_metadata+0xfb/0x160 [ 246.643599][ T6198] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 246.643788][ T6198] arch_do_signal_or_restart+0x63c/0xbf0 [ 246.644047][ T6198] exit_to_user_mode_loop+0xec/0x330 [ 246.644222][ T6198] do_syscall_64+0x1e3/0x210 [ 246.644408][ T6198] ? irqentry_exit+0x16/0x60 [ 246.644569][ T6198] ? clear_bhb_loop+0x40/0x90 [ 246.644733][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.644888][ T6198] RIP: 0033:0x7fe34378ebe9 [ 246.644999][ T6198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.645118][ T6198] RSP: 002b:00007fe34455c038 EFLAGS: 00000246 ORIG_RAX: 000000000000007d [ 246.645254][ T6198] RAX: fffffffffffffff2 RBX: 00007fe3439c5fa0 RCX: 00007fe34378ebe9 [ 246.645354][ T6198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.645438][ T6198] RBP: 00007fe34455c090 R08: 0000000000000000 R09: 0000000000000000 [ 246.645527][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.645610][ T6198] R13: 00007fe3439c6038 R14: 00007fe3439c5fa0 R15: 00007ffc61ad0738 [ 246.645754][ T6198] [ 246.962027][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 246.983639][ T9] IPVS: starting estimator thread 0... [ 247.077310][ T6202] IPVS: using max 192 ests per chain, 9600 per kthread [ 247.127667][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 247.149719][ T24] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 247.158275][ T24] usb 3-1: config 0 has no interface number 0 [ 247.164597][ T24] usb 3-1: config 0 interface 12 has no altsetting 0 [ 247.203016][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 247.213003][ T24] usb 3-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 247.221541][ T24] usb 3-1: Product: syz [ 247.226066][ T24] usb 3-1: Manufacturer: syz [ 247.230847][ T24] usb 3-1: SerialNumber: syz [ 247.331357][ T24] usb 3-1: config 0 descriptor?? [ 247.628373][ T6217] netlink: 9 bytes leftover after parsing attributes in process `syz.0.59'. [ 247.638312][ T6217] net veth1_virt_wifi 70: renamed from virt_wifi0 [ 247.710813][ T6215] loop4: detected capacity change from 0 to 512 [ 247.738377][ T6218] libceph: resolve '00' (ret=-3): failed [ 247.744208][ T6217] net veth1_virt_wifi 70: entered allmulticast mode [ 247.754491][ T6217] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 247.757173][ T6215] EXT4-fs: Ignoring removed orlov option [ 247.869969][ T6215] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 247.928921][ T6215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 247.965043][ T6215] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.60: corrupted in-inode xattr: e_value size too large [ 248.027068][ T6215] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.60: couldn't read orphan inode 15 (err -117) [ 248.060066][ T6215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.078924][ T24] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71 [ 248.087987][ T24] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 248.100488][ T24] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 248.112495][ T24] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 248.133763][ T24] usb 3-1: USB disconnect, device number 2 [ 248.591594][ T6215] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.60: corrupted in-inode xattr: e_value size too large [ 248.697676][ T6215] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.60: corrupted in-inode xattr: e_value size too large [ 249.077925][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.276182][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 249.403356][ T6233] loop4: detected capacity change from 0 to 1024 [ 249.456191][ T6233] hfsplus: Bad value for 'gid' [ 249.456413][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 249.486984][ T24] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 249.495727][ T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 249.504970][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 249.514304][ T24] usb 1-1: config 1 has no interface number 0 [ 249.520705][ T24] usb 1-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 249.536107][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 249.547441][ T24] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 249.560812][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 249.570262][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.718693][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 249.820248][ T32] libceph: connect (1)[c::]:6789 error -101 [ 249.827100][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 249.860956][ T6236] ceph: No mds server is up or the cluster is laggy [ 249.901695][ T6229] netlink: 'syz.0.65': attribute type 1 has an invalid length. [ 249.910911][ T6229] netlink: 'syz.0.65': attribute type 1 has an invalid length. [ 250.082571][ T6237] loop2: detected capacity change from 0 to 256 [ 250.198062][ T6237] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 250.304331][ T6237] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 250.314968][ T6237] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 250.323184][ T6237] UDF-fs: Scanning with blocksize 512 failed [ 250.356214][ T6244] binder: 6243:6244 ioctl 541c 200000000040 returned -22 [ 250.499207][ T6237] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 250.516522][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 250.748188][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 250.810181][ T6237] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.846723][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.072180][ T9] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 251.081716][ T9] usb 4-1: New USB device strings: Mfr=0, Product=241, SerialNumber=0 [ 251.090326][ T9] usb 4-1: Product: syz [ 251.341669][ T6229] loop0: detected capacity change from 0 to 32768 [ 251.404446][ T9] usb 4-1: config 0 descriptor?? [ 251.455688][ T6229] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 251.880850][ T6229] XFS (loop0): Ending clean mount [ 251.910105][ T6229] XFS (loop0): Quotacheck needed: Please wait. [ 252.057743][ T6229] XFS (loop0): Quotacheck: Done. [ 252.150865][ T24] snd_usb_pod 1-1:1.1: set_interface failed [ 252.157731][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 252.173338][ T24] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 252.231005][ T5817] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 252.269610][ T24] usb 1-1: USB disconnect, device number 3 [ 252.276634][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 252.283218][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 252.372105][ T9] usb 4-1: USB disconnect, device number 7 [ 253.667757][ T6275] fuse: Bad value for 'fd' [ 253.797350][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 253.885487][ T6271] loop4: detected capacity change from 0 to 32768 [ 254.027284][ T5869] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 254.049084][ T6271] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 254.049206][ T6271] allowing incompatible features above 0.0: (unknown version) [ 254.049295][ T6271] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 254.087338][ T6271] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 254.097984][ T6271] bcachefs (loop4): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: bad nr_required in entry journal: 4/1 [0], shutting down [ 254.098114][ T6271] error not marked as autofix and not in fsck [ 254.098192][ T6271] run fsck, and forward to devs so error can be marked for self-healing [ 254.098273][ T6271] emergency read only at seq 0 [ 254.114198][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.121252][ T6271] bcachefs (loop4): error in recovery: fsck_errors_not_fixed [ 254.124017][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 254.132470][ T6271] bcachefs (loop4): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 254.132561][ T6271] bcachefs (loop4): shutting down [ 254.143045][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.211489][ T6271] bcachefs (loop4): shutdown complete [ 254.259307][ T9] usb 2-1: config 0 descriptor?? [ 254.354988][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 254.362876][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 254.385002][ T5869] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 254.394129][ T5869] usb 4-1: config 0 has no interface number 0 [ 254.400655][ T5869] usb 4-1: config 0 interface 12 has no altsetting 0 [ 254.425239][ T5869] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 254.434947][ T5869] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 254.448653][ T5869] usb 4-1: Product: syz [ 254.453017][ T5869] usb 4-1: Manufacturer: syz [ 254.459735][ T5869] usb 4-1: SerialNumber: syz [ 254.474310][ T5869] usb 4-1: config 0 descriptor?? [ 254.684255][ T6283] loop2: detected capacity change from 0 to 4096 [ 254.772574][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 254.806912][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 254.833611][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 254.858872][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 254.864692][ T6274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.877009][ T6274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.950224][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 254.977589][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 255.067811][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 255.192942][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 255.224839][ T5869] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71 [ 255.233903][ T5869] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 255.241544][ T5869] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 255.249764][ T5869] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 255.304352][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 255.325016][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 255.435208][ T6271] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 255.453017][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 255.453167][ T30] audit: type=1800 audit(1756903093.833:59): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.77" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 255.505175][ T5869] usb 4-1: USB disconnect, device number 8 [ 255.538710][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 255.606896][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 255.851322][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 255.906549][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 256.013427][ T9] pwc: Registered as video103. [ 256.021323][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 256.149368][ T9] usb 2-1: USB disconnect, device number 2 [ 256.913206][ T6299] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 257.347695][ T6310] FAULT_INJECTION: forcing a failure. [ 257.347695][ T6310] name failslab, interval 1, probability 0, space 0, times 0 [ 257.360927][ T6310] CPU: 0 UID: 0 PID: 6310 Comm: syz.1.85 Not tainted syzkaller #0 PREEMPT(none) [ 257.361079][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.361162][ T6310] Call Trace: [ 257.361215][ T6310] [ 257.361272][ T6310] __dump_stack+0x26/0x30 [ 257.361450][ T6310] dump_stack_lvl+0x1df/0x270 [ 257.361639][ T6310] dump_stack+0x1e/0x25 [ 257.361804][ T6310] should_fail_ex+0x7dc/0x8a0 [ 257.362025][ T6310] should_failslab+0x15b/0x200 [ 257.362228][ T6310] __kmalloc_noprof+0x182/0x1310 [ 257.362411][ T6310] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 257.362594][ T6310] ? tomoyo_path_number_perm+0xf1/0x7d0 [ 257.362742][ T6310] ? filter_irq_stacks+0x49/0x190 [ 257.362879][ T6310] ? kmsan_get_metadata+0xfb/0x160 [ 257.363069][ T6310] tomoyo_realpath_from_path+0xeb/0x9f0 [ 257.363258][ T6310] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 257.363445][ T6310] ? __srcu_read_lock+0x5e/0xd0 [ 257.363628][ T6310] tomoyo_path_number_perm+0x1d0/0x7d0 [ 257.363782][ T6310] ? stack_depot_save_flags+0x35/0x7b0 [ 257.364003][ T6310] ? kmsan_get_metadata+0xfb/0x160 [ 257.364171][ T6310] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 257.364387][ T6310] tomoyo_file_ioctl+0x3d/0x50 [ 257.364571][ T6310] security_file_ioctl+0x141/0x590 [ 257.364782][ T6310] __se_sys_ioctl+0xbb/0x400 [ 257.364964][ T6310] __x64_sys_ioctl+0x97/0xe0 [ 257.365135][ T6310] x64_sys_call+0x1cbc/0x3e20 [ 257.365329][ T6310] do_syscall_64+0xd9/0x210 [ 257.365521][ T6310] ? irqentry_exit+0x16/0x60 [ 257.365685][ T6310] ? clear_bhb_loop+0x40/0x90 [ 257.365850][ T6310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.365999][ T6310] RIP: 0033:0x7f9e68f8ebe9 [ 257.366114][ T6310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.366232][ T6310] RSP: 002b:00007f9e69eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.366368][ T6310] RAX: ffffffffffffffda RBX: 00007f9e691c5fa0 RCX: 00007f9e68f8ebe9 [ 257.366471][ T6310] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 257.366560][ T6310] RBP: 00007f9e69eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 257.366651][ T6310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.366753][ T6310] R13: 00007f9e691c6038 R14: 00007f9e691c5fa0 R15: 00007ffef7ca4a18 [ 257.366894][ T6310] [ 257.611216][ T6310] ERROR: Out of memory at tomoyo_realpath_from_path. [ 257.628879][ T6310] program syz.1.85 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.064324][ T6308] loop0: detected capacity change from 0 to 32768 [ 258.073315][ T6308] jfs: Unknown parameter 'f~ى"Q۾( [ 258.073315][ T6308] m9ўgtO [ 258.073315][ T6308] g4x.c/H}O"6J4V)36L+*.@1n_l oJbZֈZ}o}4DbM"!4Q1w£ M4[lکvaYrw Ǫ6|EOW_C(s' [ 258.332803][ T6315] ceph: No mds server is up or the cluster is laggy [ 258.348770][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 258.355190][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 258.526714][ T5869] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 258.736807][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 258.781349][ T5869] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 258.790462][ T5869] usb 4-1: config 2 has no interface number 0 [ 258.796974][ T5869] usb 4-1: config 2 interface 31 has no altsetting 0 [ 258.882383][ T5869] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 258.892266][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.900715][ T5869] usb 4-1: Product: syz [ 258.905063][ T5869] usb 4-1: Manufacturer: syz [ 258.910101][ T5869] usb 4-1: SerialNumber: syz [ 259.017076][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 259.197131][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 259.263887][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.303157][ T9] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 259.313009][ T9] usb 3-1: New USB device strings: Mfr=0, Product=241, SerialNumber=0 [ 259.321834][ T9] usb 3-1: Product: syz [ 259.391267][ T9] usb 3-1: config 0 descriptor?? [ 259.470122][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.479876][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.526610][ T6324] loop0: detected capacity change from 0 to 4096 [ 259.554317][ T6329] loop1: detected capacity change from 0 to 2048 [ 259.578767][ T6329] EXT4-fs: Ignoring removed mblk_io_submit option [ 259.605189][ T5869] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 259.654667][ T5869] usb 4-1: USB disconnect, device number 9 [ 259.733109][ T6329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.118443][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 260.125239][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 260.199522][ T30] audit: type=1800 audit(1756903098.583:60): pid=6324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.90" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 260.256665][ T9] usb 3-1: USB disconnect, device number 3 [ 260.381018][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.474314][ T6337] loop4: detected capacity change from 0 to 2048 [ 260.514870][ T6337] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.639242][ T6337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.832798][ T6345] FAULT_INJECTION: forcing a failure. [ 260.832798][ T6345] name failslab, interval 1, probability 0, space 0, times 0 [ 260.847969][ T6345] CPU: 1 UID: 0 PID: 6345 Comm: syz.4.93 Not tainted syzkaller #0 PREEMPT(none) [ 260.848111][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.848193][ T6345] Call Trace: [ 260.848245][ T6345] [ 260.848295][ T6345] __dump_stack+0x26/0x30 [ 260.848484][ T6345] dump_stack_lvl+0x1df/0x270 [ 260.848668][ T6345] dump_stack+0x1e/0x25 [ 260.848839][ T6345] should_fail_ex+0x7dc/0x8a0 [ 260.849065][ T6345] should_failslab+0x15b/0x200 [ 260.849239][ T6345] __kvmalloc_node_noprof+0x24c/0x1530 [ 260.849439][ T6345] ? stack_depot_save_flags+0x35/0x7b0 [ 260.849618][ T6345] ? traverse+0x10c/0xa90 [ 260.849773][ T6345] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 260.849930][ T6345] ? kmsan_get_metadata+0xfb/0x160 [ 260.850107][ T6345] traverse+0x10c/0xa90 [ 260.850252][ T6345] ? kmsan_get_metadata+0xfb/0x160 [ 260.850413][ T6345] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 260.850588][ T6345] seq_read_iter+0x2f2/0x2200 [ 260.850737][ T6345] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 260.850902][ T6345] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 260.851072][ T6345] ? kmsan_get_metadata+0xfb/0x160 [ 260.851250][ T6345] seq_read+0x592/0x670 [ 260.851420][ T6345] ? __pfx_seq_read+0x10/0x10 [ 260.851556][ T6345] vfs_read+0x27c/0xf90 [ 260.851718][ T6345] ? __fget_files+0x3b9/0x4a0 [ 260.851915][ T6345] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 260.852090][ T6345] __x64_sys_pread64+0x2ab/0x3b0 [ 260.852287][ T6345] x64_sys_call+0x3370/0x3e20 [ 260.852468][ T6345] do_syscall_64+0xd9/0x210 [ 260.852668][ T6345] ? irqentry_exit+0x16/0x60 [ 260.852848][ T6345] ? clear_bhb_loop+0x40/0x90 [ 260.852997][ T6345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.853166][ T6345] RIP: 0033:0x7fe34378ebe9 [ 260.853275][ T6345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.853396][ T6345] RSP: 002b:00007fe34453b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 260.853528][ T6345] RAX: ffffffffffffffda RBX: 00007fe3439c6090 RCX: 00007fe34378ebe9 [ 260.853630][ T6345] RDX: 00000000000000fd RSI: 0000200000000100 RDI: 0000000000000004 [ 260.853719][ T6345] RBP: 00007fe34453b090 R08: 0000000000000000 R09: 0000000000000000 [ 260.853807][ T6345] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 260.853896][ T6345] R13: 00007fe3439c6128 R14: 00007fe3439c6090 R15: 00007ffc61ad0738 [ 260.854041][ T6345] [ 261.427835][ T6350] loop0: detected capacity change from 0 to 512 [ 261.437232][ T6350] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.472463][ T6350] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 261.489221][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.617568][ T6350] EXT4-fs (loop0): 1 truncate cleaned up [ 261.625572][ T6350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.096412][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 262.376210][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 262.385627][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.396864][ T9] usb 5-1: Product: syz [ 262.401243][ T9] usb 5-1: Manufacturer: syz [ 262.406454][ T9] usb 5-1: SerialNumber: syz [ 262.497078][ T6369] syzkaller0: entered promiscuous mode [ 262.502784][ T6369] syzkaller0: entered allmulticast mode [ 262.531229][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 262.567531][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 262.833576][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.880712][ T5869] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 262.973058][ T32] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 263.196078][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 263.257053][ T32] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.268511][ T32] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.278861][ T32] usb 3-1: config 0 interface 0 has no altsetting 0 [ 263.285878][ T32] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 263.295143][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.495172][ T32] usb 3-1: config 0 descriptor?? [ 263.737371][ T9] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 264.012547][ T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 264.022554][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.107035][ T9] usb 4-1: config 0 descriptor?? [ 264.158275][ T32] usbhid 3-1:0.0: can't add hid device: -71 [ 264.165263][ T32] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 264.246508][ T32] usb 3-1: USB disconnect, device number 4 [ 264.546364][ T6381] loop3: detected capacity change from 0 to 1024 [ 264.592699][ T6381] ======================================================= [ 264.592699][ T6381] WARNING: The mand mount option has been deprecated and [ 264.592699][ T6381] and is ignored by this kernel. Remove the mand [ 264.592699][ T6381] option from the mount to silence this warning. [ 264.592699][ T6381] ======================================================= [ 264.767102][ T5869] usb 5-1: Service connection timeout for: 256 [ 264.773512][ T5869] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 264.854829][ T6381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 264.867989][ T6381] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.061468][ T5869] ath9k_htc: Failed to initialize the device [ 265.078791][ T5869] usb 5-1: ath9k_htc: USB layer deinitialized [ 265.205574][ T6388] ceph: No mds server is up or the cluster is laggy [ 265.216465][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 265.223045][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 265.353704][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 265.365370][ T9] asix 4-1:0.0: probe with driver asix failed with error -32 [ 265.432785][ T6398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.442823][ T6398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.630648][ T6364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.640711][ T6364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.683632][ T5902] usb 5-1: USB disconnect, device number 2 [ 265.746628][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 265.906508][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 266.044371][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.062186][ T9] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 266.071875][ T9] usb 2-1: New USB device strings: Mfr=0, Product=241, SerialNumber=0 [ 266.080595][ T9] usb 2-1: Product: syz [ 266.104154][ T9] usb 2-1: config 0 descriptor?? [ 266.559178][ T6409] loop0: detected capacity change from 0 to 512 [ 266.615046][ T6409] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 266.687256][ T6409] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 266.706842][ T6412] warning: `syz.2.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 266.714959][ T6409] EXT4-fs (loop0): 1 truncate cleaned up [ 266.727289][ T6409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.783404][ T6412] loop2: detected capacity change from 0 to 128 [ 266.837832][ T6415] macvlan1: entered promiscuous mode [ 266.852298][ T6415] ipvlan0: entered promiscuous mode [ 266.862844][ T6415] ipvlan0: left promiscuous mode [ 266.898639][ T6415] macvlan1: left promiscuous mode [ 266.916703][ T6412] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.933560][ T6412] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.958880][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 266.972931][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 267.054516][ T9] usb 2-1: USB disconnect, device number 3 [ 267.088602][ T5820] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 267.256364][ T5902] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 267.429630][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 267.462738][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.473267][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.487061][ T5902] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 267.496647][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.604975][ T5902] usb 1-1: config 0 descriptor?? [ 267.637723][ T5902] pxrc 1-1:0.0: Could not find endpoint [ 267.646298][ T5902] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 267.980048][ T6431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.989797][ T6431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.099483][ T6431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.113'. [ 268.117715][ T6421] loop2: detected capacity change from 0 to 32768 [ 268.183060][ T6421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.116 (6421) [ 268.226731][ T6421] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 268.237566][ T6421] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 268.239558][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.113'. [ 268.255119][ T32] usb 4-1: USB disconnect, device number 10 [ 268.313859][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 268.539598][ T6421] BTRFS info (device loop2): enabling ssd optimizations [ 268.547031][ T6421] BTRFS info (device loop2): enabling free space tree [ 268.569157][ T32] usb 1-1: USB disconnect, device number 4 [ 268.698963][ T5820] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 268.729860][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.829515][ T6452] mmap: syz.4.123 (6452) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 268.856480][ T6450] netlink: 14 bytes leftover after parsing attributes in process `syz.1.122'. [ 269.018863][ T6450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.183080][ T6450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.302544][ T6450] bond0 (unregistering): Released all slaves [ 269.389444][ T6460] loop3: detected capacity change from 0 to 256 [ 269.739693][ T6462] loop4: detected capacity change from 0 to 2048 [ 269.908765][ T6462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.037774][ T6462] EXT4-fs (loop4): shut down requested (1) [ 270.052000][ T6471] binder: BINDER_SET_CONTEXT_MGR already set [ 270.061867][ T6471] binder: 6469:6471 ioctl 4018620d 200000000180 returned -16 [ 270.180036][ T32] libceph: connect (1)[c::]:6789 error -101 [ 270.186616][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 270.233403][ T6470] ceph: No mds server is up or the cluster is laggy [ 270.305132][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.697200][ T5902] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 270.788321][ T32] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 270.907069][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 270.944664][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.977256][ T5902] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 270.987060][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=241, SerialNumber=0 [ 270.995465][ T5902] usb 4-1: Product: syz [ 271.047516][ T32] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 271.057046][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.065271][ T32] usb 3-1: Product: syz [ 271.069919][ T32] usb 3-1: Manufacturer: syz [ 271.074709][ T32] usb 3-1: SerialNumber: syz [ 271.083839][ T5902] usb 4-1: config 0 descriptor?? [ 271.168780][ T32] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 271.356156][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 271.889052][ T5902] usbhid 4-1:0.0: can't add hid device: -71 [ 271.898260][ T5902] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 272.005243][ T5902] usb 4-1: USB disconnect, device number 11 [ 272.153000][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 272.646919][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 272.842630][ T6501] netlink: 14 bytes leftover after parsing attributes in process `syz.0.140'. [ 272.945590][ T9] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 272.955990][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.964231][ T9] usb 2-1: Product: syz [ 272.968996][ T9] usb 2-1: Manufacturer: syz [ 272.973792][ T9] usb 2-1: SerialNumber: syz [ 273.168748][ T9] usb 2-1: config 0 descriptor?? [ 273.172084][ T24] usb 3-1: Service connection timeout for: 256 [ 273.181114][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 273.427021][ T24] ath9k_htc: Failed to initialize the device [ 273.440706][ T24] usb 3-1: ath9k_htc: USB layer deinitialized [ 273.509284][ T6493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.519508][ T6493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.998500][ T6503] loop4: detected capacity change from 0 to 32768 [ 274.016834][ T32] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 274.029379][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 274.036819][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.047897][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.278427][ T6503] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 274.278626][ T6503] allowing incompatible features above 0.0: (unknown version) [ 274.278779][ T6503] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 274.323077][ T6503] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 274.331760][ T6503] bcachefs (loop4): initializing new filesystem [ 274.343952][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 274.358114][ T32] usb 4-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 274.367786][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.376532][ T6503] bcachefs (loop4): going read-write [ 274.396244][ T9] gspca_sunplus: reg_r err -71 [ 274.401590][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 274.437117][ T9] usb 2-1: USB disconnect, device number 4 [ 274.507097][ T6519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.519865][ T6519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.532386][ T6503] bcachefs (loop4): marking superblocks [ 274.599941][ T6503] bcachefs (loop4): initializing freespace [ 274.636764][ T6503] bcachefs (loop4): done initializing freespace [ 274.656515][ T6503] bcachefs (loop4): reading snapshots table [ 274.662084][ T32] usb 4-1: config 0 descriptor?? [ 274.662893][ T6503] bcachefs (loop4): reading snapshots done [ 274.805687][ T6503] bcachefs (loop4): loop4: Superblock write was silently dropped! (seq 0 expected 42) [ 274.833360][ T6503] bcachefs (loop4): done starting filesystem [ 275.160538][ T30] audit: type=1800 audit(1756903113.533:61): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.141" name="file1" dev="loop4" ino=4099 res=0 errno=0 [ 275.186491][ T6503] program syz.4.141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.197329][ T32] waltop 0003:172F:0502.0002: unknown main item tag 0x0 [ 275.205203][ T32] waltop 0003:172F:0502.0002: item fetching failed at offset 4/5 [ 275.290626][ T32] waltop 0003:172F:0502.0002: probe with driver waltop failed with error -22 [ 275.363185][ T6506] netlink: 'syz.3.142': attribute type 13 has an invalid length. [ 275.835683][ T6506] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.846232][ T6506] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.952169][ T5823] bcachefs (loop4): shutting down [ 275.957634][ T5823] bcachefs (loop4): going read-only [ 275.963187][ T5823] bcachefs (loop4): finished waiting for writes to stop [ 276.228982][ T6506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.267753][ T6506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.340758][ T5823] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 276.541460][ T5871] usb 3-1: USB disconnect, device number 5 [ 276.842574][ T5823] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4 [ 276.926738][ T5823] bcachefs (loop4): clean shutdown complete, journal seq 5 [ 276.997939][ T5823] bcachefs (loop4): marking filesystem clean [ 277.191694][ T5823] bcachefs (loop4): shutdown complete [ 277.396126][ T1815] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.428281][ T1815] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.466107][ T1815] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.475310][ T1815] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.502080][ T6544] program syz.1.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.647001][ T9] usb 4-1: USB disconnect, device number 12 [ 278.339818][ T6554] netlink: 14 bytes leftover after parsing attributes in process `syz.2.153'. [ 278.449693][ T6554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.539027][ T6554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.581366][ T6554] bond0 (unregistering): Released all slaves [ 279.188867][ T6557] loop1: detected capacity change from 0 to 32768 [ 279.202858][ T6557] bcachefs (/dev/loop1): error reading default superblock: Bad minimum version 1.280: (unknown version), greater than version field 1.7: mi_btree_bitmap [ 279.220650][ T6557] bcachefs (/dev/loop1): error validating superblock: Bad sb offset (got 288230376151715840, read from 4096) [ 279.238449][ T6557] bcachefs: bch2_fs_get_tree() error: invalid_sb_offset [ 279.810352][ T5865] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 279.882196][ T6557] loop1: detected capacity change from 0 to 4096 [ 279.906932][ T6557] ntfs3(loop1): ino=0, mi_enum_attr [ 280.010028][ T6557] ntfs3(loop1): ino=0, mi_enum_attr [ 280.015500][ T6557] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 280.053244][ T6557] ntfs3(loop1): This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 280.053244][ T6557] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff. [ 280.053244][ T6557] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 280.079738][ T6557] ntfs3(loop1): Failed to load $BadClus (-95). [ 280.090527][ T5865] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 280.100116][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.108509][ T5865] usb 3-1: Product: syz [ 280.112860][ T5865] usb 3-1: Manufacturer: syz [ 280.117770][ T5865] usb 3-1: SerialNumber: syz [ 280.369476][ T5865] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 280.559066][ T32] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 282.768648][ T32] usb 3-1: Service connection timeout for: 256 [ 282.776294][ T32] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 283.093952][ T32] ath9k_htc: Failed to initialize the device [ 283.108347][ T32] usb 3-1: ath9k_htc: USB layer deinitialized [ 283.172269][ T6562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.181949][ T6562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.443728][ T5865] usb 3-1: USB disconnect, device number 6 [ 284.541741][ T6582] loop0: detected capacity change from 0 to 32768 [ 284.555449][ T6582] ocfs2: Bad value for 'atime_quantum' [ 285.514846][ T6597] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 286.180227][ T6594] loop3: detected capacity change from 0 to 32768 [ 286.208494][ T6594] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.166 (6594) [ 286.233850][ T6594] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 286.244566][ T6594] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 287.073665][ T6616] loop4: detected capacity change from 0 to 32768 [ 287.084713][ T6616] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 08104a0c-ffdc-4cee-b64e-1885b0d7b401 [ 287.095297][ T6616] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.171 (6616) [ 287.139209][ T6616] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.149842][ T6616] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 287.196705][ T6594] BTRFS info (device loop3): rebuilding free space tree [ 287.268699][ T6594] BTRFS info (device loop3): disabling free space tree [ 287.277116][ T6594] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 287.287303][ T6594] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 287.342786][ T6594] BTRFS info (device loop3): setting nodatasum [ 287.349400][ T6594] BTRFS info (device loop3): allowing degraded mounts [ 287.356503][ T6594] BTRFS info (device loop3): setting nodatacow [ 287.362852][ T6594] BTRFS info (device loop3): enabling ssd optimizations [ 287.370158][ T6594] BTRFS info (device loop3): force clearing of disk cache [ 287.450549][ T6641] sp0: Synchronizing with TNC [ 287.535251][ T6616] BTRFS info (device loop4): enabling ssd optimizations [ 287.542727][ T6616] BTRFS info (device loop4): enabling free space tree [ 287.562061][ T5829] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.604731][ T6633] loop0: detected capacity change from 0 to 512 [ 287.667430][ T5823] BTRFS info (device loop4): last unmount of filesystem 08104a0c-ffdc-4cee-b64e-1885b0d7b401 [ 287.687516][ T6633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.700677][ T6633] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.081482][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.253874][ T6657] loop0: detected capacity change from 0 to 32768 [ 289.268398][ T6657] BTRFS warning: excessive commit interval 2147483647, use with care [ 289.278922][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 289.289297][ T6657] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.179 (6657) [ 289.309349][ T6657] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 289.320994][ T6657] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 289.329963][ T6657] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 289.485625][ T6657] BTRFS info (device loop0): rebuilding free space tree [ 289.516928][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 289.543232][ T9] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 289.552853][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.561207][ T9] usb 3-1: Product: syz [ 289.569712][ T9] usb 3-1: Manufacturer: syz [ 289.574511][ T9] usb 3-1: SerialNumber: syz [ 289.583352][ T6657] BTRFS info (device loop0): disabling free space tree [ 289.590749][ T6657] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 289.601259][ T6657] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 289.624900][ T9] usb 3-1: config 0 descriptor?? [ 289.641610][ T6657] BTRFS info (device loop0): enabling ssd optimizations [ 289.649113][ T6657] BTRFS info (device loop0): turning off barriers [ 289.656160][ T6657] BTRFS info (device loop0): turning on flush-on-commit [ 289.663409][ T6657] BTRFS info (device loop0): turning on sync discard [ 289.674965][ T6657] BTRFS info (device loop0): enabling disk space caching [ 289.682470][ T6657] BTRFS info (device loop0): force clearing of disk cache [ 289.690055][ T6657] BTRFS info (device loop0): doing ref verification [ 289.697182][ T6657] BTRFS info (device loop0): use zlib compression, level 3 [ 289.704784][ T6657] BTRFS info (device loop0): max_inline set to 0 [ 289.768466][ T6677] loop4: detected capacity change from 0 to 2048 [ 289.813040][ T30] audit: type=1800 audit(1756903128.193:62): pid=6657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.179" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 289.830622][ T6659] netlink: 132 bytes leftover after parsing attributes in process `syz.1.180'. [ 289.951338][ T6677] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 290.124346][ T6654] loop2: detected capacity change from 0 to 1024 [ 290.178544][ T5817] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 290.188855][ T6654] EXT4-fs: Ignoring removed nobh option [ 290.277118][ T6654] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8856c118, mo2=0102] [ 290.310193][ T6654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.470218][ T6654] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.177: Allocating blocks 401-513 which overlap fs metadata [ 290.666482][ T6651] EXT4-fs (loop2): pa ffff88812459f700: logic 1, phys. 129, len 24 [ 290.674831][ T6651] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 7 [ 290.812671][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 290.873900][ T9] gspca_sunplus: reg_w_riv err -71 [ 290.879688][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 290.935762][ T9] usb 3-1: USB disconnect, device number 7 [ 291.580146][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.276704][ T6707] mmap: syz.3.190 (6707): VmData 175878144 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 292.546575][ T6710] process 'syz.0.192' launched './file0' with NULL argv: empty string added [ 292.787142][ T6703] loop4: detected capacity change from 0 to 32768 [ 292.823262][ T6703] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 292.874923][ T6703] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 293.161887][ T5823] ocfs2: Unmounting device (7,4) on (node local) [ 294.301752][ T6733] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.200'. [ 294.668825][ T6740] loop4: detected capacity change from 0 to 2048 [ 294.706367][ T6740] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 294.774985][ T6740] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 294.929470][ T6745] batman_adv: batadv0: Adding interface: gretap1 [ 294.936569][ T6745] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.963135][ T6745] batman_adv: batadv0: Interface activated: gretap1 [ 294.997561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 295.057868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 295.168432][ T6746] netlink: 60 bytes leftover after parsing attributes in process `syz.1.203'. [ 295.381520][ T6750] loop2: detected capacity change from 0 to 512 [ 295.499453][ T6751] loop0: detected capacity change from 0 to 256 [ 295.604482][ T6740] loop4: detected capacity change from 0 to 4096 [ 295.648916][ T6740] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 295.716294][ T6740] ntfs3(loop4): ino=0, mi_enum_attr [ 295.721927][ T6740] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 295.731730][ T6751] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 295.745548][ T6751] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 295.794231][ T6755] Bluetooth: MGMT ver 1.23 [ 295.838660][ T6740] ntfs3(loop4): failed to replay log file. Can't mount rw! [ 295.882634][ T6749] netlink: 56 bytes leftover after parsing attributes in process `syz.0.204'. [ 296.374105][ T6763] loop1: detected capacity change from 0 to 512 [ 296.412076][ T49] Bluetooth: hci0: Malformed Event: 0x2f [ 296.539029][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.545693][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.798396][ T6772] loop0: detected capacity change from 0 to 8 [ 296.960032][ T6769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.212'. [ 297.126185][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 297.357224][ T5902] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 297.366169][ T9] usb 1-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 297.375934][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.403949][ T9] ums-cypress 1-1:1.0: USB Mass Storage device detected [ 297.563291][ T5902] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.574046][ T5902] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.613803][ T6772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.623388][ T6772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.637116][ T5902] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 297.646918][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 297.657950][ T5902] usb 3-1: SerialNumber: syz [ 297.684850][ T6788] loop3: detected capacity change from 0 to 1024 [ 297.694697][ T5865] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 297.750630][ T32] usb 1-1: USB disconnect, device number 5 [ 297.835199][ T6788] can0: slcan on ttynull. [ 297.896188][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 297.923873][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.936103][ T5865] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 297.936941][ T5902] usb 3-1: 0:2 : does not exist [ 297.950172][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 297.962456][ T5865] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.00 [ 297.975912][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.992598][ T6787] can0 (unregistered): slcan off ttynull. [ 298.026159][ T5902] usb 3-1: USB disconnect, device number 8 [ 298.049749][ T5865] usb 2-1: config 0 descriptor?? [ 298.112556][ T3824] hfsplus: b-tree write err: -5, ino 4 [ 298.324163][ T5902] usb 2-1: USB disconnect, device number 5 [ 298.405709][ T6796] netlink: 'syz.0.223': attribute type 11 has an invalid length. [ 298.414127][ T6796] netlink: 36 bytes leftover after parsing attributes in process `syz.0.223'. [ 298.486275][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 298.726419][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 298.750343][ T9] usb 4-1: config 0 has an invalid interface number: 234 but max is 0 [ 298.759096][ T9] usb 4-1: config 0 has no interface number 0 [ 298.765484][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=41.87 [ 298.775116][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.836993][ T9] usb 4-1: config 0 descriptor?? [ 298.874584][ T9] yurex 4-1:0.234: Could not find endpoints [ 299.196183][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 299.402421][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 299.477090][ T5869] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 299.486527][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.497097][ T5869] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 299.508866][ T5869] usb 5-1: config 0 has no interface number 0 [ 299.515163][ T5869] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 299.527458][ T5869] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 299.539521][ T5869] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 299.550008][ T5869] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.583935][ T6799] loop0: detected capacity change from 0 to 32768 [ 299.593691][ T6799] jfs: Bad value for 'discard' [ 299.792316][ T6811] syz.1.227 uses obsolete (PF_INET,SOCK_PACKET) [ 300.649352][ T6809] loop1: detected capacity change from 0 to 32768 [ 301.294310][ T5869] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 301.303993][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.312363][ T5869] usb 5-1: Product: syz [ 301.316843][ T5869] usb 5-1: Manufacturer: syz [ 301.321710][ T5869] usb 5-1: SerialNumber: syz [ 301.484798][ T5869] usb 5-1: config 0 descriptor?? [ 301.494368][ T6803] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 301.560147][ T6814] loop2: detected capacity change from 0 to 32768 [ 301.628284][ T6814] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 301.701039][ T5865] usb 4-1: USB disconnect, device number 13 [ 301.769970][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.780132][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.833778][ T6814] XFS (loop2): Ending clean mount [ 301.901156][ T5869] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.967288][ T5820] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 302.145359][ T5869] usb 5-1: USB disconnect, device number 3 [ 302.339300][ T6829] loop0: detected capacity change from 0 to 1024 [ 302.868349][ T6831] loop3: detected capacity change from 0 to 4096 [ 302.961289][ T6831] NILFS (loop3): invalid segment: Checksum error in segment payload [ 302.970101][ T6831] NILFS (loop3): trying rollback from an earlier position [ 302.978778][ T6831] NILFS (loop3): invalid segment: Sequence number mismatch [ 302.989893][ T6831] NILFS (loop3): error -22 while searching super root [ 303.224765][ T6838] loop1: detected capacity change from 0 to 1024 [ 304.492489][ T6868] loop1: detected capacity change from 0 to 128 [ 304.534141][ T6868] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 304.535170][ T6868] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.690835][ T5813] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.990246][ T6875] loop4: detected capacity change from 0 to 1024 [ 305.047720][ T6875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 305.060422][ T6875] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.356134][ T6888] loop3: detected capacity change from 0 to 2048 [ 305.389664][ T6888] EXT4-fs: Ignoring removed mblk_io_submit option [ 305.414834][ T6893] loop0: detected capacity change from 0 to 128 [ 305.426344][ T5869] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 305.433109][ T6891] loop2: detected capacity change from 0 to 1024 [ 305.485563][ T6888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.512949][ T6893] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.565705][ T6882] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.252: bg 0: block 234: padding at end of block bitmap is not set [ 305.582632][ T6893] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.600236][ T5869] usb 2-1: device descriptor read/64, error -71 [ 305.637034][ T6891] veth0_macvtap: left promiscuous mode [ 305.662105][ T6882] EXT4-fs (loop3): Remounting filesystem read-only [ 305.669344][ T6891] macvtap0: entered allmulticast mode [ 305.674130][ T6873] delete_channel: no stack [ 305.695337][ T6882] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 305.716752][ T49] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 305.777629][ T6893] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 305.822982][ T6898] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 305.857323][ T5869] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 305.901965][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 305.929365][ T6893] (unnamed net_device) (uninitialized): option ad_select: invalid value (105) [ 306.002222][ T5820] ===================================================== [ 306.010055][ T5820] BUG: KMSAN: uninit-value in hfsplus_lookup+0x674/0xf70 [ 306.018381][ T5820] hfsplus_lookup+0x674/0xf70 [ 306.023255][ T5820] __lookup_slow+0x560/0x760 [ 306.028193][ T5820] lookup_slow+0x6a/0xd0 [ 306.032596][ T5820] walk_component+0x444/0x650 [ 306.037618][ T5820] path_lookupat+0x251/0x6b0 [ 306.042374][ T5820] filename_lookup+0x2bd/0x800 [ 306.047575][ T5820] user_path_at+0x91/0x3d0 [ 306.055476][ T5820] __x64_sys_umount+0x143/0x250 [ 306.061587][ T5820] x64_sys_call+0x1057/0x3e20 [ 306.066229][ T5869] usb 2-1: device descriptor read/64, error -71 [ 306.067316][ T5820] do_syscall_64+0xd9/0x210 [ 306.077497][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.083584][ T5820] [ 306.086106][ T5820] Uninit was created at: [ 306.090548][ T5820] __alloc_frozen_pages_noprof+0x689/0xf00 [ 306.096677][ T5820] alloc_pages_mpol+0x328/0x860 [ 306.101703][ T5820] alloc_frozen_pages_noprof+0xf7/0x200 [ 306.107646][ T5820] allocate_slab+0x24d/0x1220 [ 306.112489][ T5820] ___slab_alloc+0x1024/0x34e0 [ 306.119217][ T5820] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 306.125222][ T5820] hfsplus_alloc_inode+0x5a/0xd0 [ 306.130676][ T5820] alloc_inode+0x87/0x4a0 [ 306.135200][ T5820] iget_locked+0x239/0x12d0 [ 306.140051][ T5820] hfsplus_iget+0x5c/0xb80 [ 306.144632][ T5820] hfsplus_btree_open+0x128/0x1cf0 [ 306.150156][ T5820] hfsplus_fill_super+0x1161/0x2730 [ 306.159053][ T5820] get_tree_bdev_flags+0x6e6/0x920 [ 306.164376][ T5820] get_tree_bdev+0x38/0x50 [ 306.170364][ T5820] hfsplus_get_tree+0x35/0x40 [ 306.175228][ T5820] vfs_get_tree+0xb3/0x5c0 [ 306.180000][ T5820] do_new_mount+0x733/0x1420 [ 306.184773][ T5820] path_mount+0x6db/0x1e90 [ 306.187704][ T5869] usb usb2-port1: attempt power cycle [ 306.189551][ T5820] __se_sys_mount+0x6eb/0x7d0 [ 306.199769][ T5820] __x64_sys_mount+0xe4/0x150 [ 306.204628][ T5820] x64_sys_call+0x3604/0x3e20 [ 306.209672][ T5820] do_syscall_64+0xd9/0x210 [ 306.214386][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.220649][ T5820] [ 306.223085][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 306.232961][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.243336][ T5820] ===================================================== [ 306.250557][ T5820] Disabling lock debugging due to kernel taint [ 306.260329][ T5820] Kernel panic - not syncing: kmsan.panic set ... [ 306.266908][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(none) [ 306.278149][ T5820] Tainted: [B]=BAD_PAGE [ 306.282553][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.292789][ T5820] Call Trace: [ 306.296189][ T5820] [ 306.299218][ T5820] __dump_stack+0x26/0x30 [ 306.303756][ T5820] dump_stack_lvl+0x53/0x270 [ 306.308564][ T5820] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.314592][ T5820] dump_stack+0x1e/0x25 [ 306.318944][ T5820] vpanic+0x361/0xc50 [ 306.323151][ T5820] panic+0x15d/0x160 [ 306.327289][ T5820] kmsan_report+0x31c/0x320 [ 306.332001][ T5820] ? __msan_warning+0x1b/0x30 [ 306.336846][ T5820] ? hfsplus_lookup+0x674/0xf70 [ 306.341906][ T5820] ? __lookup_slow+0x560/0x760 [ 306.346839][ T5820] ? lookup_slow+0x6a/0xd0 [ 306.351427][ T5820] ? walk_component+0x444/0x650 [ 306.356458][ T5820] ? path_lookupat+0x251/0x6b0 [ 306.361410][ T5820] ? filename_lookup+0x2bd/0x800 [ 306.366525][ T5820] ? user_path_at+0x91/0x3d0 [ 306.371287][ T5820] ? __x64_sys_umount+0x143/0x250 [ 306.376505][ T5820] ? x64_sys_call+0x1057/0x3e20 [ 306.381579][ T5820] ? do_syscall_64+0xd9/0x210 [ 306.386466][ T5820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.392733][ T5820] ? kmsan_get_metadata+0xfb/0x160 [ 306.398046][ T5820] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 306.404526][ T5820] ? __msan_memcpy+0x108/0x1c0 [ 306.409490][ T5820] ? hfsplus_bnode_read+0x6f8/0x990 [ 306.414923][ T5820] ? kmsan_get_metadata+0xfb/0x160 [ 306.420236][ T5820] ? kmsan_get_metadata+0xfb/0x160 [ 306.425558][ T5820] __msan_warning+0x1b/0x30 [ 306.430249][ T5820] hfsplus_lookup+0x674/0xf70 [ 306.435242][ T5820] ? kmsan_get_metadata+0xfb/0x160 [ 306.440566][ T5820] ? kmsan_get_metadata+0xfb/0x160 [ 306.445878][ T5820] ? __pfx_hfsplus_lookup+0x10/0x10 [ 306.451277][ T5820] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.457280][ T5820] ? __pfx_hfsplus_lookup+0x10/0x10 [ 306.462717][ T5820] __lookup_slow+0x560/0x760 [ 306.467529][ T5820] lookup_slow+0x6a/0xd0 [ 306.471959][ T5820] walk_component+0x444/0x650 [ 306.476790][ T5820] ? kmsan_get_metadata+0xfb/0x160 [ 306.482103][ T5820] path_lookupat+0x251/0x6b0 [ 306.487058][ T5820] filename_lookup+0x2bd/0x800 [ 306.492005][ T5820] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.497952][ T5820] ? strncpy_from_user+0x255/0x470 [ 306.503191][ T5820] ? kmsan_get_metadata+0xfb/0x160 [ 306.508406][ T5820] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.514383][ T5820] user_path_at+0x91/0x3d0 [ 306.518985][ T5820] __x64_sys_umount+0x143/0x250 [ 306.524038][ T5820] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 306.530578][ T5820] x64_sys_call+0x1057/0x3e20 [ 306.535484][ T5820] do_syscall_64+0xd9/0x210 [ 306.540211][ T5820] ? irqentry_exit+0x16/0x60 [ 306.544997][ T5820] ? clear_bhb_loop+0x40/0x90 [ 306.549789][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.555830][ T5820] RIP: 0033:0x7f2eaf58ff17 [ 306.560328][ T5820] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 306.580053][ T5820] RSP: 002b:00007ffc35d77e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 306.588656][ T5820] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2eaf58ff17 [ 306.596719][ T5820] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc35d77f00 [ 306.604774][ T5820] RBP: 00007ffc35d77f00 R08: 0000000000000000 R09: 0000000000000000 [ 306.612836][ T5820] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc35d78ff0 [ 306.620965][ T5820] R13: 00007f2eaf611c05 R14: 000000000004aa74 R15: 00007ffc35d7a0c0 [ 306.629160][ T5820] [ 306.632680][ T5820] Kernel Offset: disabled [ 306.637079][ T5820] Rebooting in 86400 seconds..