last executing test programs: 6m26.46408913s ago: executing program 3 (id=194): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x46f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) 6m25.520650198s ago: executing program 3 (id=202): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x30, 0x13, 0xbaa23f3d13f2d1f5, 0x3, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_TXQLEN={0x8}, @IFLA_CARRIER={0x5, 0x21, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 6m25.033485441s ago: executing program 3 (id=205): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x0, 0x10000008, {0x0, 0x100}, 0x4}) 6m24.736108647s ago: executing program 3 (id=209): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x402, &(0x7f00000001c0)=ANY=[], 0x1, 0x242, &(0x7f0000000380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) link(&(0x7f0000000040)='./file0/file0\x00', 0x0) 6m24.171525267s ago: executing program 3 (id=213): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) 6m22.960537472s ago: executing program 3 (id=223): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40186e8d, &(0x7f0000000040)={0x80, 0xf, 0x400, 0x40, 0x5, 0x3, 0x2401}) 6m22.313236181s ago: executing program 32 (id=223): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$eJzs3UuMHEfdAPDq2Z31M5/H+WyyOCaxCSThkd14vZiHBXEUX7DiiFukiIvlOMHCMQhHgkQ52D5xI1FkrjzEKZcIEBK5ICsnLpGIJS45BQ4csIwUiQME7EW7WzU7+/eMemZt73h2fj+ptqa6aqaqZ3t6erq7qhIwthpLf+fnp6uULr3z5tG/P/y3LYtLnmiXaC39nexINVNKVU5Phtf7cGI5vv7Raye7xVWaW/pb0umZa+3nbkspnU/70uXUSnsuXXnjvbmnj184dnH/+28dvnpn1h4AAMbLty4fnt/9lz/dv/Pjtx84kja1l5fj81ZOb8/H/UfygX85/m+k1emqI3SaCuUmc2iEchNdynXW0wzlJnvUPxVet9mj3Kaa+ic6lnVbbxhlZTtupaoxsyrdaMzMLP8mT0u/66eqmbOnz7xwbkgNBW67fz6YUtonCMI4hoUdw94DASyL1wtvcj6eWbg17Veb7K/+a082uj8fboP13v7VP1r1/+qCPQ63z0bdmsp6lc/R9pyO1xHi/UuDfv7L68XrEc0+29nrOsKoXF/o1c6JdW7HWvVqf9wuNqqv57i8D98I+Z2fn/g/HZX/MdDdv5z/F4SxDQvD3gEBd61439xCVvLjfX0xf1NN/uaa/C01+Vtr8rfV5MM4++3LP0mvVyu/8+Nv+kHPh5XzbPfk+P8GbE88Hzlo/fG+30Hdav3xfmK4m/3+xLOnvvL8c1eW7/+v2tv/jby978vpVv5sXc4FyvnCeF69fe9/a3U9jR7l7g3tuadL+aXHu1aXq3atvE7q2M/c1I7p1c/b0avc3tXlWqHclhw2h/bG45Ot4Xnl+KPsV8v7NRnWtxnWYyq0o+xXduY4tgPWomyPve7/L9vndGpWL5w+c+rxnC7b6R8nmpsWlx9Y53YDt67f/j/TaXX/n+3t5c1G535hx8ryqnO/0ArL53osP5jT5XvuOxNblpbPnPzemedv98rDmDv3yqvfPXHmzKkfeOCBBx60Hwx7zwTcabMvv/T92XOvvPrY6ZdOvHjqxVNnDx46dHBu7tBXD87PLh3Xz3Ye3QMbycqX/rBbAgAAAAAAAAAAAPTrh8eOXvnzu1/+YLn//0r/v9L/v9z5W/r//zj0/4/95Es/+NIPcGeX/KUyYYDVqVCumcP/h/buCvXsDs/7RI7b8/jl/v+lujiua2nPfWF5HL+3lAvDCdw0XspUGIMkzhf46RxfzPEvEwxRtaX74hzXjW9dtvUyPoVxKUZT+b+VraGMY1L6f/ca16ns/3euQxu5/dajO+Gw1xHo7h/G/xaEsQ0LC2bxAO4Ow57/s5z3LPHZP3xz82Ioxa49uXp/GccvhVtxt88/qf6NNf9ne/67vvd/Yca81trq/ffPrn7QUW3a02/9cf3LONC7Bqv/41x/WZtHUn/1L/wi1B8vCPXpP6H+rX3Wf9P6711b/f/N9Ze37dGH+q1/ucVVY3U74nnjcv0vnjcurof1L2N7Drz+a5yo8UauH8bZqMwzO6hRmf+3l3gfxpdyuuwIy30Ocb6TQdtf7q8o3wO7w+tXNd9v5v8dbV/Lcd3nocz/W7bHVpd0oyPd7PLebtR9DYyqD13/E4SxDQsLC3f2hFaNoVbO0N//Yf9OGHb9w37/68T5f+MxfJz/N+bH+X9jfpz/N+bH+fVifpz/N76fcf7fmH9feN04P/B0Tf4na/L31OTfX5O/tyb/UzX5+2vyH6jJf7Am/96a/Idq8j9Tk//ZmvyHa/Ifrcn/XE3+Rlf6o4zr+sM4i/3zfP5hfJTrP70+/7tq8oHR9dO3Dzz13G++3Vru/z/VPh9SruMdyelm/u38o5yO171TR3ox792c/mvIv9vPd8A4ieNnxO/3R2rygdFV7vPy+YYxVHUfsaffcat6HeczWj6f4y/k+Is5fizHMzmezfGBHM+tU/u4M5769e8Ov16t/N7fEfL7vZ889geK40Qd7LM98fzAoPezx3H8BnWr9a+xOxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDQNJb+zs9PVyldeufNo88ePz27uOSJdonW0t/JjlSz/byUHs/xRI5/nh9c/+i1k53xjcV4KqUqzaUqVe3l6Zlr7Zq2pZTOp33pcmqlPZeuvPHe3NPHLxy7uP/9tw5fvYNvAQAAAGx4/wsAAP//2XsNow==") r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40186e8d, &(0x7f0000000040)={0x80, 0xf, 0x400, 0x40, 0x5, 0x3, 0x2401}) 4m55.297546639s ago: executing program 5 (id=819): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xd3}, 0x94) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 4m54.179463066s ago: executing program 5 (id=827): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000680)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9]}) 4m53.493723863s ago: executing program 5 (id=833): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0xff04, 0x0) 4m52.96649932s ago: executing program 5 (id=836): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000100)='./file1\x00', 0x800800, &(0x7f0000000800)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@sys_tz}, {@zero_size_dir}, {@umask={'umask', 0x3d, 0x5}}, {@errors_continue}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x3c}}, {@errors_continue}, {@sys_tz}]}, 0x1, 0x1541, &(0x7f0000001f40)="$eJzs3AuYTlXbOPD7XmvtMSQ9TXIY1lr35kkOiyTJIUkOSZIkSU4JSZO8kpAYckoakpAchuQwhOQwMWmcz+dDQpI0SRKSU7L+14RXffV+9fa+7+f7f3P/rmtf1v2sfa+99r6fbR+Y+abzkBqNalZtQETwL8ELfyQCQCwADACAawAgAICycWXjMvuzS0z81zbC/r0eSrnSM2BXEtc/a+P6Z21c/6yN65+1cf2zNq5/1sb1z9q4/oxlZZum5b+Wl6y78Pv/rIyv//+HZJQc88Waktd3AYj5sylc/6yN6/9/VvBnVuL6Z21c/6wq9kpPgP0vwOd/VpDtH/Zw/bM2rj9jWdmVfv/8l5dLF7U/XFf+t/0Q+f/4GPwbliv89WOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlkWc9pcpALjUvtLzYowxxhhjjDHG2L+Pz3alZ8AYY4wxxhhjjLH/PAQBEhQEEAPZIBayQw4QAHA15IJrIALXQhxcB7nhesgDeSEf5Id4KAAFQYMBCwQhFILCEIUboAjcCEWhGBSHEuCgJJSCm6A03Axl4BYoC7dCObgNykMFqAiV4HaoDHdAFbgTqsJdUA2qQw2oCXdDLbgHasO9UAfug7pwP9SDB6A+PAgN4CFoCA9DI3gEGsOj0ASaQjNoDi3+Uv4L0B1ehB7QExKhF/SGl6AP9IV+0B8GwMswEF6BQfAqJMFgGAKvwVB4HYbBGzAcRsBIeBNGwVswGsbAWBgHyTAeJsDbMBHegUkwGabAVEiBaTAd3oUZMBNmwXswG96HOTAX5sF8SIUPYAEshDT4EBbBR5AOi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAx7ATPoFdsBv2/L1+/0z+qV/kfwp7oQsCAgoUqFBhDMZgLMZiDsyBOTEn5sJcGMEIxmEc5sbcmAfzYD7Mh/EYjwWxIBo0SEhYCAthFKNYBItgUSyKxbE4OnRYCkthabwZy2AZLItlsRyWw/JYAStgJayElbEyVsEqWBWrYjWshjWwBt6Nd2MvrI21sQ7WwbpY99LrKWyADbAhNsRG2AgbY2Nsgk2wGTbDFtgCW2JLbIWtsA22wbbYFtthO0zABGyP7bEDdsCO2BE7YSfsjJ2xC3bFrhkvZAN8EV/EnlhN9MLe2Bv7YFK2ftgf++PLOBBfwVfwVUzCwTgEX8PX8HUchidxOI7AkTgSK4u3cDSOQRLjMBmTcQJOwIk4ESfhZJyMUzEFp+F0nI4zcCbOxPdwNr6P7+NcnIvzMRVTcQEuxDRMw0V4CtNxMS7BpbgMl+MyXImrcCWuwbW4BtfjetyIG3EzbsatuBW343b8GBUAfoK7cTcm4V7ci/twH+7H/XgAD2AGZuBBPIiH8BAexsN4BI/gUTyGx/EYnsATeBJP4Wk8jWfxLJ7D5+K/avhxsdVJIDIpoUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTAGAERUREURUUQUFUVFcVFcOOFEKVFKlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JDIr00gMxsZiCDYRTYW8eAa0FMOwlWgt2ognxAgcju1ES5cgnhbtxWjsIP4mxuCzopMYh53F86KL6Cq6iRdEd9HK9RA9xSTsJXqLqdhH9BX9RH8xA6uL93B29hriVZEkBosh4jUxH18Xw8QbYrgYIUaKN8Uo8ZYYLcaIsWKcSBbjxQTxtpgo3hGTxGQxRUwVKWKamC7eFTPETDFLvCdmi/fFHDFXzBPzRar4QCwQC0Wa+FAsEh+JdLFYLBFLxTKxXKwQK8UqsVqsEWvFOrFebBAbxSaxWWwRW8U2sV3sEB+LneITsUvsFnvEp2Kv+EzsE5+L/eILcUB8KTLEV+Kg+FocEt+Iw+JbcUR8J46KY+K4+F6cED+Ik+KUOC3OiLPiR3FO/CTOCy9AohRSSiUDGSOzyViZXeaQV8mcMrh4dK+VcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7ZRTVaXNWRNebdMhHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefkgnyadle+otfkWdlJ/mc7Cyfl11kV9lN/iTPSy97yJ4SeoHsLV+SfWRf2U/2lwPky3KgfEUOkq/KJDlYDpGvyaHydTlMviGHyxFypHxTjpJvydFyjBwrx8lkOV5OkG/LifIdOUlOllPkVJkip8l+F0eaJeUf5r/9y/zMS6+cJgf9vPWNcpPcLLfIrXKb3C53yI/lTrlT7pK75B65R+6Ve+U+uU/ul/vlAXlAZsgMeVAelIfkIXlYHpZH5BF5VB6TZ+T38oT8QZ6Up+QpeUaelWfluYvHABQqoaRSKlAxKpuKVdlVDnWVyqmuVrnUNSqirlVx6jqVW12v8qi8Kp/Kr+JVAVVQaWWUVaRCVUgVVlF1A178wqjiqoRyqqQqpW76Z/JVEXWjKqqK/Sr/0vwS/8H8WqgWqqVqqVqpVqqNaqPaqraqnWqnElSCaq/aqw6qg+qoOqpOqpPqrDqrLqqL6qa6qe6qu+qheqhElah6q5dUH9VX9VP91QD1shqoBqpBapBKUklqiBqihqqhapgapoar4WqkGqlGqVFqtBqtxqqxKlklqwlqgpqoJqpJapKaoqaoFJWipqvpaoaaoWapWWq2mq3mqDlqnpqnUlWqWqAWqDSVphapRSpdLVaL1VK1VC1Xy9VKtVKtVqvVWrVWrVfrVbrapDapLWqL2qa2qR1qh9qpdqpdapfao/aovWqv2qf2qf1qvzqgDqgMlaEOqoPqkDqkDqvD6og6oo6qo+q4Oq5OqBPqpDqpTqvT6qw6q86pc+q8Oq8gECACEahABTFBTBAbxAY5ghxBziBnkCvIFUSCSBAXxAW5g+uDPEHeIF+QP4gPCgQFAx2YwAbiYtGjwQ1BkeDGoGhQLCgelAhcUDIoFdwUlA5uDsoEtwRlg1uDcsFtQfmgQlAxqBTcHlQO7giqBHcGVYO7gmpB9aBGUDO4O6gV3BPUDu4NssF9Qd3g/qBe8EBQP3gwaBA8FDQMHg4aBY8EjYNHgyZB06BZ0Dxo8RfHrxP83vjen8z7uOuhe+pE3Uv31i/pPrqv7qf76wH6ZT1Qv6IH6Vd1kh6sh+jX9FD9uh6m39DD9Qg9Ur+pR+m39Gg9Ro/V43SyHq8n6Lf1RP2OnqQn6yl6qk7R0/R0/a6eoWfqWfo9PVu/r+fouXqenq9T9Qd6gV6o0/SHepH+SKfrxXqJXqqX6eV6hV6pV+nVeo1eq9fp9XqD3qg36c16i96qt+nteof+WO/Un+hderfeoz/Ve/Vnep/+XO/XX+gD+kudob/SB/XX+pD+Rh/W3+oj+jt9VB/Tx/X3+oT+QZ/Up/RpfUaf1T/qc/onfV77zJv7zMu7UUaZGBNjYk2syWFymJwmp8llcpmIiZg4E2dym9wmj8lj8pl8Jt7Em4KmoMlEhkwhU8hETdQUMUVMUVPUFDfFjTPOlDKlTGlT2pQxZUxZU9aUM+VMeVPeVDQVze3mdnOHucPcae40d5m7THVT3dQ0NU0tU8vUNrVNHVPH1DV1TT1Tz9Q39U0D08A0NA1NI9PINDaNTRPTxDQzzUwL08K0NC1NK9PKtDFtTFvT1rQz7UyCSTDtTXvTwXQwHU1H08l0Mp1NZ9PFdDHdTDfT3XQ3PUwPk2gSTW/T2/QxfUw/088MMAPMQDPQDDKDTJJJMkPMEDPUDDXDzDAz3IwwIzNvVM1bZrQZY8aacSbZJJsJZoKZaCaaSWaSmWKmmBSTYqab6WaGmWFmmVlmtplt5pg5Zp6ZZ1JNqllgFpg0k2YWmUUm3aSbJWaJWWaWmRVmhVllVpk1Zo1ZB+vMBrPBbDKbzBazxWwz28wOs8PsNDvNLrPL7DF7zF6z1+wz+8x+s98cMAdMhskwB81Bc8gcMofNYXPEHDFHzVFz3Bw3J8wJc9KcNKfNaXPW5L14vfQm1ma3OexVNqe92uay19j/Guez+W28LWALWm3z2Ly/io21tqgtZovbEtbZkraUvek3cXlbwVa0lezttrK9w1b5TVzL3mNr23ttHXufrWnv/lVc195v69lHbH1EANvUNrTNbSP7iG1sH7VNbFPbzDa3be2Ttp19yibYp217+8xv4gV2oV1lV9s1dq3dZXfb0/aMPWS/sWftj7aH7WkH2JftQPuKHWRftUl28G/ikfZNO8q+ZUfbMXasHfebeIqdalPsNDvdvmtn2Jm/iVPtB3a2TbNz7Fw7z87/Oc6cU5r90C6yH9l0G8ASu9Qus8vtCrvy73NdatfbDXaj3Wk/sVvsVrvNbrc7Lt0I2912j/3U7rWf2YP2a7vffmEP2MM2w371c5y5f4ftt/aI/c4etcfscfu9PWF/UJeyM/f9e/uTPW+9BUICkqQooBjKRrGUnXLQVZSTrqZcdA1F6FqKo+soN11PeSgv5aP8FE8FqCBpMmSJKKRCVJiidANdml5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnKIGepvb0DHWgv1FHepY60XPUmZ6nLtSVutEL1J1epB7UkxKpF/Wml6gP9aV+1J8G0Ms0kF6hQfQqJdFgGkKv0VB6nYbRGzScRtBIepNG0Vs0msbQWBpHyTSeJtDbNJHeoUk0mabQVEqhaTSd3qUZNJNm0Xs0m96nOTSX5tF8SqUPaAEtpDT6kBbRR5ROi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQx7STPqFdtJv20Ke0lz6jffQ57acv6AB9SRn0FR2kr+kQfUOH6Vvfk76jo3SMjtP3dIJ+oJN0ik7TGTpLP9I5+onOkycIMRShDFUYhDFhtjA2zB7mCK8Kc4ZXh7nCa8JIeG0YF14X5g6vD/OEecN8Yf4wPiwQFgx1aEIbUhiGhcLCYTS8ISwS3hgWDYuFxcMSoQtLhqXCm8LS4c1hmfCWsGx4a1guvC0sH1YIH7mvUnh7WDm8I6wS3hlWDe8Kq4XVwxphzfDusFZ4T1g7vDesE94XlgnvD+uFD4T1wwfDBuFDYcPw4bBR+EjYOHw0bBI2DZuFzcMW4WNhy/DxsFXYOmwTPhG2DZ8M24VPhQnh02H78Jmf++9f+I/7E8NeYe/wpfCl0Pt75bzo/Ghq9IPogujCaFr0w+ii6EfR9Oji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3NbOBQyecdMoFLsZlc7Euu8vhrnI53dUul7vGRdy1Ls5d53K7610el9flc/ldvCvgCjrtjLOOXOgKucIu6m5wRdyNrigUc8VdCedcSVfKNXctXAvX0j3uWrnWro17wj3hnnRPuqfcU+5p19494zq4v7mO7lnXyT3nnnPPuy6uq+vmXnDd3fhcF87JRNfb9XZ9XB/Xz/VzA9wAN9ANdIPcIJfkktwQN8QNdUPdMDfMDXfD3Ug30o1yo9xoN9qNdWNdskt2E9wEN9FNdJPcJDfFTXEpLsVNd9PdDDfDVZ55YStz3Bw3z81zqS7VLXCZ94xpbpFb5NJdulvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vlr7kwqNvr9rl9br/b7w64L12G+8oddF+7Q+4bd9h9646479xRd8wdd9+7E+4Hd9KdcqfdGXfW/ejOuZ/ceeddcmR8ZELk7cjEyDuRSZHJkSmRqZGUyLTI9Mi7kRmRmZFZkfcisyPvR+ZE5kbmReZHUiMfRBZEFkbSIh9GFkU+iqRHFkeWRJZGlkWWR7wvsCX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS/ubfRl/iy/rb/Xl/G2+vK/gK/pHfRPf1DfzzX0L/5hv6R/3rXxr38Y/4dv6J307/5RP8E/79v4Z38H/zXf0z/pO/jnf2T/vu/iuvpt/wXf3L/oevqdP9L18b/+S7+P7+n6+vx+QeZRiMi/nr/okP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVHZBjnk/14P8G/7Sf6d/wkP9lP8VN9ip/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+o/8Av8Qp/mP/SL/Ec+3S++9FLSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/pM/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/zz6wxxhhjjP0p4y83xa97LrzO7/U7OeIXK/cGgKu35s/4ZX/mHeW6PBfafUV82wgAPN2z80OXlmrVEhMTL66bLiEoPBfg0r8EwcVb1kvxYmgDT0ICtIbSvzv/vqLrWfqD8aO3AuT4RU4sXI4vj/85ACb+zviPPTFyQbnwdNx/M/5cgKKFL+dkh8vxYmjz8/uV1lDmH8w/b8s/mH/2L5IBWv0iJydcji/PvxQ8Ds9Awq/WZIwxxhhjjDHGLugrKna89Px56X98/t7zeby6nJMNLsd/9HzOGGOMMcYYY4yxK+/Zrt2eeiwhoXXHf75R5S9l/elGY/hPjcyN3214D3DpEwUA/+KAAJkN+T+5F5v/zMoPX3zN9Ze3lXTx1PmvXcvO+AD+d5TyrzfG/v2TK/m3EmOMMcYYY+w/4fLd/68/V1dqQowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWBb0P/F7xa70PjLGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGNX2v8LAAD//4fU8aA=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 4m51.377055937s ago: executing program 5 (id=846): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 4m46.940592795s ago: executing program 5 (id=879): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f000009dfc0), 0x2080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x100004, "c501440f42745b24ec8dfb60b21508f286600000000000000000963300"}) 4m46.025678662s ago: executing program 33 (id=879): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f000009dfc0), 0x2080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x100004, "c501440f42745b24ec8dfb60b21508f286600000000000000000963300"}) 1m32.646754294s ago: executing program 6 (id=2788): r0 = socket$inet_udplite(0x2, 0x2, 0x88) fchown(r0, 0xee01, 0x0) fchown(r0, 0x0, 0x0) 1m32.46848575s ago: executing program 6 (id=2790): r0 = mq_open(&(0x7f00000010c0)='!selinu\xff\x7f\x00\x00inux\x04T\x8b\xa5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\xda\xcb)\x80\xdaO\n\xda\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\x03\x00\x00\x00\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00\xe7jIm\xda\x8c3\xd5\xc9E@g\x85\xd21\xe2p\xc2\xc0?:\x83j\xa51\xbe\xf4\a\xe9p\xa1\xdb&\xae\x1d\x9a\x03\x8eN\xf7Y\x86\x8b\x18\x03c\n\'5\xd1\xe4\xd1X\x89\x10\f\x98Z\xb2\xf5\xfc\xfa\xc5.r\x01o&\x8d\x92\x063\x107}\r\'\xcfb\x94}\xb7A8\x1f\xf2\x18\xccu\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) mq_notify(r0, &(0x7f0000000080)={0x0, 0x36, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 1m32.27650421s ago: executing program 6 (id=2792): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xe, "b4b1cff6"}]}}, 0x0}, 0x0) 1m30.072417042s ago: executing program 7 (id=2813): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff210}]}, 0x10) 1m29.685910986s ago: executing program 7 (id=2816): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0x8002}, {0x20, 0x0, 0x0, 0xdffff034}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)="9cdfa98e", 0xdf9c}], 0x1}}], 0x1, 0x0) 1m29.25038047s ago: executing program 7 (id=2819): setresgid(0xee01, 0xee00, 0xee00) setfsgid(0x0) setfsgid(0x0) 1m28.956537336s ago: executing program 6 (id=2821): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000240)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f63fc6247b93ea81416b1324d35327f7ace27f9c5a9c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da897405ad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb302ad11273d94d3d75d"], 0x1, 0xa29, &(0x7f0000001580)="$eJzs3ctvXNd9B/DvHfEl2lBlW3VVwbZGMmTTNkuRVC1B8KKWyKFEl4+CpAALbWEZllQIIurCbgHb6EIFiq5qxAiCAEk2gZdZGXAW8SbQLllmlUWAxP9BYGSlBAgmmDtDiY+ZoUhRpKJ8PoPR3MfvnPO7c+/coxnO3BP+nNXr9fK+zflLP9rNZHn0nJ/8+vMvPm3c/+dW+rIvrxc/SQaSVJOeP5bHSu/E5ML87CYV3UyuJLmdFEn603zsYP+auSspvpUn783fTvGDHG5TbGCLG8em6vxF2+vjDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHkkTk6OjY0VmpucuvV3trBwCvMv6leq+Kkf9Lr5a3URfm2aLpGjcMzCwMtT34UP3Vj/b+Od4nmvOPdcc+Xsgnzzx7ME3numprJTvktCu+PDjT26+u7x87YN7i3o3LdT/cHPalr7tFbtQm5tenJ+ePXehVp1enK+ePX169OTFqcXq1HRqi5cXl2qz1YmF2rml+YXq0MQr1bGzZ09VayOX5y/NXZgcmamtLDzzd+Ojo6erb438U+3cwuL83Mm3RhYnLk7PzEzPXShjGqsbMWcaB+I/Ti9Vl2rnZqvV6zeWr53aLMlG0FjbNUV1X1YFjW9W0/jo+PjY2Pj42OnXz75+ZnS0Z8OC0XWyIWLvD1r2zo8fyjkctqnS6v8zk+nM5VLeTrXtbSKTWch8Zjusb1np/0+crHVtd3X/v9LLH763+kjK/v+F5twLnfr/DrlsfqvXmzVvt/zK7cN8nE9yM+9mOcu5lg8euMb+rMvs9w9aY+tWffCt3Xi7kFrmMp3FzGc6szlXLqm2llRzNqdzOqN5JxczlcVUM5XpzKSWxVzOYpZSK4+oiSyklnNZynwWUs1QJvJKqhnL2ZzNqVRTy0guZz6XMpcLmcy5spbruVE+76e65Hg3aOx+gsa7BO1w/19/FP8nyMO2o+dveBD1Vv/f7j16M6C+MjU0sWtZAQAAADvpb3+eA4ee/tmvk948X34uPzU9Uxvd67QAAACAHVR+Xe+5xkNvY+r5FN7/AwAAwOOmKH9jVyQZzNHmVPOXUPviQwAAAAB4TJR//3+h8TDYmDqa4u6VUK7sdW4AAADAzrh7jf10usbuplfhL4ZXLv9bvdp8vNqKaF3nd3BqeqY2MjE/88ZYXiqvMlD+0mBDbfuSorf8+cGrOdaMOjbYfBxcW+NAI2ps5I2xvJrjrQ0ZerHx8OJQm8jxZuTLzciXu0SeakQCwOPueJf++H77/1cz3IwYPtLTl6TnSJuedVTPCgCPis3H2Nk0ovj7e+//e1vVrun/n871o82vFIzkvbyf5VzNcPlrg/IbB2tq/ZfPWp8Z3P0awmiGN/k0YCX2F2cqGe7weUBf1tc7nuFNPhFoxuZfk1MPf0cAwC463qEf3kr/P7zq/X82vv+/O7TQNT8pBIBHwt0R7B/ixF5vIwCwll4aAAAAAAAAAAAAAAAAAAAAAAAAAAAAdt6OXu1/YJvFf9Ma1+/hDkOwYWJ/6znYfj3fTrJ7OReNtvp3rsLKDtRTT7Jb+2v3JnIw2faz2vYw7kuy99u1lYm9PCsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwW4pkX7vllaQ/yWiSk7uf1fYVjS3q4tauZfLI+IfVM8Wd3MlHObB36QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJ5a1/+vpPn4RHNReirJiSRXkvzzXue4k+7sdQI7ZP82y626/n9jn6depKe521P0TkwuzM+W4yf0N9Z//fkXnzbuq4r33287ZWBl3eASrRbWx/7wyZWpp8pSg5PXPrz5n+//R3XyfCrpy/mlqZnJ2QsLb94r8mzxZVJN875iJd//PvHTz9ps+ZeNLW1vfbtT5ZMzubHdv2lXunu73dxYvjbeaGmp9vbSf/37jY9WrXo6x5IXh5KhtS39W+PeoaVj6e3WWvFN8X/FgXw3V8r933g2inrR2EV/VW7//us3lq+NvPf+8tUOOR3M0SRXk4H7z+lo5wE5yqOu0ttodbQMavxzqF193cf0aFvjWIdteKo8ZAZb29B3X9tQ3SSBVc97pd36ZkanOmT0TF5qs6fr/UnnjF7qvqfbK74pflVczC/zv6vG/6g09v+JdH51rq2ijFx1pHSMrDQjyy0fX73infWRv/3efWXfdpgatur/17x4K6vO/619tUPno3rR9Xy0qsWtvS7WtbjuqOjyuih7pEPrSrTOPp3KtPI81IzqkOdf57Wk50i3s+KG3vq1zU5pK+XfbL96u6//7xdD+V1uGf8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB49BXJvnbLK8mJJAdX5qtJfQvV9ndaURkstprijrp195/HQmWrBYo7uZOPcuDhpAMAAAAAAADAbjs/+fXnX3zauJd/j993p15v/X2/mvQkOVh8Z38mF+ZnN6moN7mS5HZjeqBT0B/qTWuXNsrlyXvztxtzh9tWcPB+twsA6OxPAQAA//8pUm3K") 1m28.821870315s ago: executing program 7 (id=2823): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x61, 0x800}, @rumble={0x7, 0x5}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1m28.355881273s ago: executing program 7 (id=2825): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000000800)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000700)=ANY=[@ANYBLOB="00fb8101408a9f9e8755f9a5a4c14af1c37801b23531862360e7c169ccfbb93fc8"], 0x381, 0x2) 1m28.316136109s ago: executing program 6 (id=2826): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005080)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000280)="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", 0xf04}, {&(0x7f0000000040)="9310fdd03674c423cd1b3079b89c98f64d8422720397ca0311114b3e8dd63abc02b6e17c1945b93250", 0x29}], 0x2}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="7d036468cce5dd58499a6e47b8be112bda9793fddb932d473c978e06731710fa339e79b51041d806b8f1e8be6775801888644414e0afb2de40eb23483febeb4d5640d9cb1a03", 0x46}, {&(0x7f0000002280)="000e166f6c65a36a72b8d33156adfbd4dbfe81bf992de83af270c1455bc0dfb3df833d0710d89036d66d55e6fd784879a8304d3d43c524ff1db1f825aea1ba1be60ede3ecd165b5639d3cff668f54e1090e822cdb40576e9e6e3b5882cfe263705bb43b4cda8bbf466afd08ae33bb15c610329ca0c7a0ffae95568535c228985c9cf49242fa98072401d23101ec1116e15a257a6d805e80957526aad5315d0754f9e6b9078f6cb8f3791f75fa457d3b1a543fcdd7437e6a622cd2f6fbe9200188d59d66cc0e4dd49bd370f920102dd423bb5c70081cfb7e366ad2e75965dbc29c48a19", 0xe3}, {&(0x7f0000002380)="e335db9152d0041cc5cd141633c50fb3adaade74b9529b69e070877b92ed5486a6e812a62055e2f02e7e03e102bb30e926ea764661829dbeb7b400d426448c0b141743", 0x43}, {&(0x7f0000002400)="70cc0f847335423f6e01125edda011af202c3889bd22098253d29239cf28ad406254fc6113e567b3faaf99b6f801c6b456fcd5416c88a0e6d4ae8f0fb1339d4a86a53ef18bf4cde166b57aa303a9cfb38231b27cc3e79739c8dcb083be0d228384d5da251dbf1dce46a1ac173d432f355c5c4ee8a9d2a40e88541e2ec28aa3740700e6eef567adb6d1c1811b368dbf68e8ca71c4141348f4e726c8cc20ac79d8e84413c17d5344e726bb5fa008137611f65e69d33caed7b6", 0xb8}], 0x4}}], 0x2, 0x2000c044) 1m27.689393661s ago: executing program 7 (id=2829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 1m17.572571656s ago: executing program 6 (id=2841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x42fb384493bcfca9) 1m12.51142192s ago: executing program 34 (id=2829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 1m8.829136095s ago: executing program 1 (id=2891): syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x1, 0x5db5, &(0x7f000000bc40)="$eJzs3UuPFNfZB/CnL9Nz4TWMLL2WhbIYY+dCMDBcDLnb3iRSVpEiNlmBxmMLBScRkCi2UBhrFvkGUbJIlOyzyifIHj6EF1kGCZKNV6moZs6BmqKHHgLT1TPn95OaqqdOVfcp/n2druoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED88Ps/PteLiKu/SguWI/4vBhH9iMW6XomIxZXlvP4wIl6PreZ4rV59PqLefuufYxEXI+L+0YiHj+6s1YvP77Ef/z7y/8f++dcfnP7933537+QfT73dbv/T+j/u/eRuui0AAADguVRVVfXSx/zj6fN9v+tOAQBTkV//qyQvV6vVarVaffjqpmq8u80iIjaa29TvGe6OuzIAYHZtxBddd4EOyb9ow4g40nUngJnmuPvD6eGjO2u9lG+v+Xqwst2ejwXZkf9G7/H5HbtNJ2kfYzKt+9dmDOLVXfqzOKU+zJKcf7+d/9Xt9lFab7/zn5bd8h9tn/pUnJz/oJ1/y+HJvz82/1Ll/IfPlf9A/gAAAAAAMMPy3/+XO/7+d/7Fd2VPnvX978qU+gAAAAAAAAAAL9uLjv/3mPH/AAAAYGbVn9Vrfz76ZNlun7Hr5Vd6Ea+01gcKk06WWeq6HwAAAAAAAAAAAABQkuH2MbxXehFzEfHK0lJVVfWlqV0/rxfd/qArff+hZF0/yQMAwLb7R1vn8vciFiLiSvqtv7mlpaWqWlhcqpaqxfn8fnY0v1AtNj7X5mm9bH60hzfEw1FVX9lCY7umSZ+XJ7W3r6++rVE12EPHpqPDwAEgIrZfjR56RTpkqupYdP0uh4PB4//w8fhnL7q+nwIAAAD7r6qqqpd+zvt4+s6/33WnAICpyK//7e8F1Gq1Wq1WH766qRrvbrOIiI3mNvV7hrvjrgwAmF0b8UXXXaBD8i/aMCJe77oTwEzrdd0B9sXDR3fWeinfXvP1II3vno8F2ZH/Rm9ru7z9uOkk7WNMpnX/2oxBvLpLf16bUh9mSc6/387/6nb7KK233/lPy2751/u53EF/upbzH7Tzbzk8+ffH5l+qnP/wufIfyB8AAAAAAGZY/vv/su9/8y4DAAAAAAAAwIHz8NGdtXzea/7+/0tj1nP+5+GU8+/Jv0g5/34r/6+11hs05h+8/yT/fz26s/ajP3x+PE/3mv98numle1Yv3SN66ZZ6wzR9kb172ubcYFTf0lyvPximY36quQ/jetyI9VjdsW4//X88aT+3o73u6dyO9vM72odPtV/Y0T6XfnegWsztZ2Itfh434oOt9rptfsL+L0xorya05/wHHv9FyvkPG5c6/6XU3mtNaw8+6z/1uG9Ox93Oe7+9d391/3dnos0YPN63pnr/TnTQn63/kyOj+OWt9Ztnfn3t9u2b5yJNdiw9H2nykuX859Ll8fP/m9vt+Xm/+Xh98NnoufOfFZsx3DX/Nxvz9f6enHLfupDzH6VLzv+D1D7+8X+Q89/98X+qg/4AAAAAAAAAAAAAAADAs1RVtXWK6HsRcSmd/9PVuZkAwHTl1/8qycvVarVarVYfvrqpGu/dZhERf29uU79n+M24KwMAZtl/IuLzrjtBZ+RfsPx7f/X0ra47A0zVrU8+/em1GzfWb97quicAAAAAAAAAwP8qj/+50hj/+a2IWG6tt2P81/dj5UXH/xzmmccDjL7kgb53sdkfDfqN4cbfiGeP/30inj3+93DC7c1NaB9NaJ+f0L4woX3siR4NOf83GuOd1/kfbw2/XsL4r+0x70uQ8z/RuD/X+X+1tV4z/+ovBzn//o78z97++Bdnb33y6enrH1/7aP2j9Z9dXF29dOHyO6uXV89+eP3Gevq3wx7vr5x/HvvacaBlyfnnzOVflpz/l1Mt/7Lk/L+SavmXJeef3+/Jvyw5//zZR/5lyfmfTLX8y5Lz/3qq5V+WnP+pVMu/LDn/t1Mt/7Lk/E+nWv5lyfmfSbX8y5LzP5tq+Zcl55+/4ZJ/WXL++cgG+Zcl538+1fIvS87/QqrlX5ac/8VUy78sOf93Ui3/suT8L6Va/mXJ+V9OtfzLkvP/RqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv97qZZ/WXL+76Za/mV58vv/ZsyYMZNnun5mAgAAAAAAAAAAAADapnE4cdf7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8lx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYedeY+Q66/uBn13v2muHy/4hBP9DgLVjgkmW7Poe0xrMraQJaSkktKUX49prx8S3eu3cFClGoU2kRm2k8iK8KAQaqXlTEQGqUpUiV2oFEkjkFa3UNqRKqCJKWkP7AirCVjPz/B7PjPfmM46ZOefzkeKfd/bMzDNnnpnd7zrfBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDduvfOPDhUFEXjv+Yf40XxisbfV0+MNz7c8I6f9woBAACAXr3U/PPsq/MFu5dxpbZjvv6mb39lbm5urnjme297/afn5vInJopifFVRND8XXrjlbza0H5M8UIwNDbd9PLzE3a9Y4vMjS3x+dInPr1zi86uW+PzYEp8/7wScZ3Xr5zHNG9vQ/Ot465QWlxejzc9tmOdaDwytGh6On+U0DTWvMzd6oDhUHC5miumO41vHDjWP/+q6xn3dWMR9Dbfd11WNHfLD+/bFGobSOd7QcV/nbjO8+O5i4kc/vG/fhz7z7JXzzSVPQ8fttda5cX1jnZ9Kl7TWOlSsyuck1jncts6r5nlOVnSsc6h5vcbfu9d5dpnrXHFumZdU93M+Vgw3//508zyNtP9YL5+nq9JlP766KIrT55bdfcx591UMF2s6Lhk+9/yMtXZk4zYaW+k1xcgF7dN1y9injbl/Q+c+7X5NxPO/Ll1vZIE1tD9NL35y5XnP+4Xu09B41Au9Vrr34MV+rfTLHox98XTzQT807x7ckB7/fdcsvAfn3Tvz7MH8uNv24Pql9uDwyhXNNecnYah5nXN7cFPH8Sua9zTUnC9cs/genDp55PjU7D33vv3Qkb0HZw7OHN06Pb19y45t0zumpw4cOjyT/ix5tvvfmmI4vwbWp3MXr4G3dh3bvlXnPn/xXodji7wOx7uOvdivw5HuBzd0aV6Q5+/p1mvj1sZJH3t4uFjgNdZ8fq7t/XWYH3fb63Ck7XU479eUeV6HI8t4HTaOOX7t8r5nGWn7b741vFxfC8bb9mD39yPde/Bifz/SL3twLO2Lf7l24a8FV6X1PjR5od+PrDhvD+aHm957Gpfk7/fHbmiO+fbllY1PXLayODU7c+L6u/eePHliU5HGJfHatr3SvV/XtD2m4rz9OnzB+3X3g9/81pXzXD6eztXY2xt/jC34XDWO2Xr94s9V86vb/Oez49LNRRoX2aU+n/N9NW+cz5wlFzmfjWM+NdX79+I5l7a9/44u8P4buf9nzfvZkG/qgRWjI63X74p8dkY73o87n6qR5nvXUPO+z04t7/14NP13qd+PL1/k/Xht17EX+/14tPvBxfvx0FI/7ehN9/M5lvbJ4enF348bx6zdfKF7cmTR9+Or0xxK5/9tKSnkXNS2dxbat/m+RkZG0+MaiXvo3KdbOo4fTdmscV9PbC63Tzde3bqtFfnRnXOp9ulE17EXe5/m96uF9unQUj99K6f7+RxL++LyLYvv08YxZ7b2/t65Ov7a9t65cqk9OLpiZWPNo3kTtt7v51bHHry+2FccKw4X+5ufXdncT0PN+5rctrw9uDL9d6nfK9cusgc3dh17sfdg/jq20N4bGjn/wV8E3c/nWNoXj25bfA82jnnfjov7vevGdEk+pu171+6fry30M68ru07Ty/kzr8Y6/37H4j+bbRxz+IYLzZmLn6fr0iWXzXOeul+/C72m9heX5jytTev8wQ0Ln6fGehrHfHrnMvfT7qIovnzz7ubPe9O/r3zp1He+0vHvLrtbn3tq57nbOu+7jvn+3efLN+8+8083/eRCHiMA/e1nzT83rGl9rWv7l6nl/Ps/AAAAMBAi9w+nmcn/AAAAUBmR++P/Cs/kfwAAAKiMyP0jaWY1yf8P/evr7vjp/UVu5s8l8fk4Dcefax0XHdfH0scTc+c0Ln/P4//wzY/dv7z7Hi6K4qc3/fO8xz/0XKyr5ZG0zonvdl5+nrXfXdb9f/y2c8e1dwDH0+3H4+neBl/9r+ea15vY2ZpnbjrTnB8+/dADjc+f3dn6OLqTL/x367g/S2Xe3Qf+ruP6G59p3d+GZxZ/XHG9L35w9c1v+Oi5+4vrDa1/VfNhPPrO1u3G77155L2t48+m4xZa/9/+0RNfbBx/91vmX//9w/Ov/4V0u8+n+ZOXWpe3n9PGx3G9P0jrj/uL613/ha/Nu/4nP9A6/sn0vDyWZvf63/0nb3yp/XzF+uN+dj/bul7c//Rf/XvzenF7cfvd6x9713Md56P79s98qXU7u+78nxXtx8flcT953z3b+Tw3bqd9v4Un/vBMx3ku/q11vb/uWn/c3vFn51//dV3rPL5pTfP6C1XGPzvz/LyPN9az+y+f7ng8T34/nb/33NK83bEfp/2YPv+/j7Rur/u3JTz9/c73kzj+sfHW6zJub6pr/Y90rf/0mxvnbun13/ij1vqffNfXO5+P/2itY/eLrbnU+g9+7tsd1//8d1rPx4m7Jo8emz11KDrU4+l3/xz/Xuv2Vo2tXnPZK175qlen98ruj/ccO3n7zImJ6YnpopgYwF+J93Kv/wtp/mdrnL7Yt39fURR3tX1du/b9rf1XvOnsH7/5xsdvj+P+8X2tyx++ufV1663puEfS5afT8x2389nPtL4e9rr+uJ+FZl7vMp36xoPbl3VgevyPrrui+SobOtO6uPv9qqx4nT/7us7X/TO3tuZT6bzOpd/MvP6KbzSP677/+N0ID3+k9fqO7+Ti+r2u/y/S833L863bj9vN603fx3xtbef7Yzw/T93f9ZsGxlu/xeN0ev8oTrc+H0fF91QPn73iQpa5oNl7ZqcOHzp66u6pkzOzJ6dm77l3z5Fjp46e3NP83Zx7PrHU9c+9vtc0X9/7Z7ZvLZqv9mOt8TL7ea//+G379u+Yvmb/zIG9pw6cvO34zImD+2Zn983sn71m74EDM3ctdf1D+3dt2rxzy47NkwcP7d91w86dW3ZOHjp6rLGM1qKWsH36jsmjJ/Y0rzK7a+vOTdu2bZ2ePHJs/8yuHdPTk6eWun7za9Nk49p3Tp6YObz35KEjM5Ozh+6d2bVp5/btm5f87X5Hjh+YnZg6cero1KnZmRNTrccycbJ5ceNr31LXh4bZz62e9+vUUPrufdN12/PvZ214/JML3lTrkK5fIPqD9LtovvXnf7ptOR9H7h9NM6tJ/gcAAIA6iNy/Ms1M/gcAAIDKiNy/Ks1M/gcAAIDKiNw/lmZWk/yv/6//r/+v/x/0//X/y9D/1/8vQ/9f/38Q1q//r/9P7/qt/x+5f3VR1DL/AwAAQB1E7l+TZib/AwAAQGVE7r8szUz+BwAAgMqI3P+KNLOa5H/9f/1//X/9/6D/r/9fhv6//n8Z+v/6/4Owfv1//X9612/9/8j9r0wzq0n+BwAAgDqI3P+qNDP5HwAAACojcv+r08zkfwAAAKiMyP3jaWY1yf/6//r/+v/6/0H/X/+/DP1//f8y9P/1/wdh/fr/+v/0rt/6/5H7/1+aWU3yPwAAANRB5P7XpJnJ/wAAAFAZkftfm2Ym/wMAAEBlRO6/PM2sJvlf/1//X/9f/z/o/+v/l6H/r/9fhv6//v8grF//X/+f3vVb/z9y/+vSzGqS/wEAAKAOIvdfkWYm/wMAAEBlRO5/fZqZ/A8AAACVEbl/bZpZTfK//r/+v/6//n/Q/9f/L0P/X/+/DP1//f9BWL/+v/4/veu3/n/k/v+fZlaT/A8AAAB1ELn/yjQz+R8AAAAqI3L/G9LM5H8AAACojMj9V6WZ1ST/6//r/+v/6/8H/X/9/zL0//X/y9D/1/8fhPXr/+v/07t+6/9H7n9jmllN8j8AAADUQeT+N6WZyf8AAABQGZH735xmJv8DAABAZUTun0gzq0n+1//X/9f/1/8P+v/6/2Xo/+v/l6H/r/8/COvX/9f/p3f91v+P3L8uzawm+R8AAADqIHL/+jQz+R8AAAAqI3L/1Wlm8j8AAABURuT+DWlmNcn/+v/6//r/+v9B/1//vwz9f/3/MvT/9f8HYf36//r/9K7f+v+R+9+SZlaT/A8AAAB1ELn/mjQz+R8AAAAqI3L/W9PM5H8AAACojMj9G9PMapL/9f/1//X/9f+D/r/+fxn6//r/Zej/6/8Pwvr1//X/6V2/9f8j978tzawm+R8AAADqIHL/tWlm8j8AAABURuT+69LM5H8AAACojMj9k2lmNcn/+v/6//r/+v9B/1//vwz9f/3/MvT/9f8HYf36//r/9K7f+v+R+9+eZlaT/A8AAAB1ELn/+jQz+R8AAAAqI3L/VJqZ/A8AAACVEbl/Os2sJvlf/1//X/9f/z/o/+v/l6H/r/9fhv6//v8grF//X/+f3vVb/z9y/6Y0s5rkfwAAAKiDyP2b08zkfwAAAKiMyP1b0szkfwAAAKiMyP1b08xqkv/1//X/9f/1/4P+v/5/Gfr/+v9l6P/r/w/C+vX/9f/pXb/1/yP3b0szq0n+BwAAgDqI3L89zUz+BwAAgMqI3L8jzUz+BwAAgMqI3H9DmllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+nWlmNcn/AAAAUAeR+9+RZib/AwAAQGVE7v+FNDP5HwAAACojcv8vppnVJP/r/+v/6//r/wf9f/3/MvT/9f/L0P/X/x+E9ev/6//Tu37r/0fu35VmVpP8DwAAAHUQuf+daWbyPwAAAFRG5P53pZnJ/wAAAFAZkft3p5nVJP/r/+v/6//r/wf9f/3/MvT/9f/L0P/X/x+E9ev/6//Tu37r/0fuf3eaWU3yPwAAANRB5P73pJnJ/wAAAFAZkfvfm2Ym/wMAAEBlRO5/X5pZTfK//r/+v/6//n/Q/9f/L0P/X/+/DP1//f9BWL/+v/4/veu3/n/k/venmdUk/wMAAEAdRO7/pTQz+R8AAAAqI3L/B9LM5H8AAACojMj9N6aZ1ST/6//r/+v/6/8H/X/9/zL0//X/y9D/1/8fhPXr/+v/07t+6/9H7v/lNLOa5H8AAACog8j9N6WZyf8AAABQGZH7b04zk/8BAACgMiL3fzDNrCb5X/9f/1//X/8/6P/r/5eh/6//X4b+v/7/IKxf/1//n971W/8/cv8taWY1yf8AAABQB5H7fyXNTP4HAACAyojc/6tpZvI/AAAAVEbk/g+lmdUk/+v/6//r/+v/B/1//f8y9P/1/8vQ/9f/H4T16//r/9O7fuv/R+7/tTSzmuR/AAAAqIPI/R9OM5P/AQAAoDIi938kzUz+BwAAgMqI3H9rmllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+29LMapL/AQAAoA4i9380zUz+BwAAgMqI3P/raWbyPwAAAFRG5P7fSDOrSf7X/9f/1//X/w/6//r/Zej/6/+Xof+v/z8I69f/1/+nd/3W/4/c/5tpZjXJ/wAAAFAHkfs/lmYm/wMAAEBlRO7/rTQz+R8AAAAqI3L/b6eZ1ST/6//r/+v/6/8H/X/9/zL0//X/y9D/1/8fhPXr/+v/07t+6/9H7v+dNLOa5H8AAACog8j9v5tmJv8DAABAZUTu35NmJv8DAABAZUTu/3iaWU3yv/6//r/+v/5/0P/X/y9D/1//vwz9f/3/QVi//r/+P73rt/5/5P69aWY1yf8AAABQB5H7fy/NTP4HAACAyojcvy/NTP4HAACAyojcvz/NrCb5X/9f/1//X/8/6P/r/5eh/6//X4b+v/7/IKxf/1//n971W/8/cv9MmllN8j8AAADUQeT+A2lm8j8AAABURuT+g2lm8j8AAABURuT+29PMapL/9f/1//X/9f+D/r/+fxn6//r/Zej/6/8Pwvr1//X/6V2/9f8j9x9KM6tJ/gcAAIA6iNz/iTQz+R8AAAAqI3L/HWlm8j8AAABURuT+w2lmNcn/+v/6//r/+v9B/1//vwz9f/3/MvT/9f8HYf36//r/9K7f+v+R+4+kmdUk/wMAAEAdRO4/mmYm/wMAAEBlRO4/lmYm/wMAAEBlRO4/nmZWk/yv/6//r/+v/x/0//X/y9D/1/8vQ/9f/38Q1q//r/9P7/qt/x+5//fTzGqS/wEAAKAOIvefSDOT/wEAAKAyIvfPppnJ/wAAAFAZkftPppnVJP/r/+v/6//r/wf9f/3/MvT/9f/L0P/X/x+E9ev/6//Tu37r/0fuP5VmVpP8DwAAAHUQuf/ONDP5H/6PfXtWAGDboTD82Ne2bdu2bdu+xzaL02TlAfY0Mzvf16RNu4ofAABgG9n9T6rb7H8AAADYRnb/k+u2Iftf/6//1//r/0P/r/9fof/X/6/Q/+v/r/C//l//z3Fn6/+z+59Stw3Z/wAAADBBdv9T6zb7HwAAALaR3f+0us3+BwAAgG1k9z+9bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K/+v/9f8cd7b+P7v/GXXbkP0PAAAAE2T3P7Nus/8BAABgG9n9z6rb7H8AAADYRnb/s+u2Iftf/6//1//r/0P/r/9fof/X/6/Q/+v/r/C//l//z3Fn6/+z+59Ttw3Z/wAAADBBdv9z6zb7HwAAALaR3f+8us3+BwAAgG1k9z+/bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K/+v/9f8cd7b+P7v/BXXbkP0PAAAAE2T3v7Bus/8BAABgG9n9L6rb7H8AAADYRnb/i+u2Iftf/6//1//r/0P/r/9fof/X/6/Q/+v/r/C//l//z3Fn6/+z+19Stw3Z/wAAADBBdv9L6zb7HwAAALaR3f+yus3+BwAAgG1k97+8bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K/+v/9f8cd7b+P7v/FXXbkP0PAAAAE2T3v7Jus/8BAABgG9n9r6rb7H8AAADYRnb/q+u2Iftf/6//1//r/0P/r/9fof/X/6/Q/+v/r/C//l//z3Fn6/+z+19Ttw3Z/wAAADBBdv9r6zb7HwAAALaR3f+6us3+BwAAgG1k97++bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K/+v/9f8cd7b+P7v/DXXbkP0PAAAAE2T3v7Fus/8BAABgG9n9b6rb7H8AAADYRnb/m+u2Iftf/6//1//r/0P/r/9fof/X/6/Q/+v/r/C//l//z3Fn6/+z+99Stw3Z/wAAADBBdv9b6zb7HwAAALaR3f+2us3+BwAAgG1k97+9bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K/+v/9f8cd7b+P7v/HXXbkP0PAAAAE2T3v7Nus/8BAABgG9n976rb7H8AAADYRnb/u+u2Iftf/6//1//r/0P/r/9fof/X/6/Q/+v/r/C//l//z3Fn6/+z+99Ttw3Z/wAAADBBdv976zb7HwAAALaR3f++us3+BwAAgG1k97+/bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K/+v/9f8cd7b+P7v/A3XbkP0PAAAAE2T3f7Bus/8BAABgG9n9H6rb7H8AAADYRnb/h+u2Iftf/6//1//r/0P/r/9fof/X/6/Q/+v/r/C//l//z3Fn6/+z+z9Stw3Z/wAAADBBdv9H6zb7HwAAALaR3f+xus3+BwAAgG1k93+8bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K/+v/9f8cd7b+P7v/E3XbkP0PAAAAE2T3f7Jus/8BAABgG9n9n6rb7H8AAADYRnb/p+u2Iftf/6//1//r/0P/r/9fof/X/6/Q/+v/r/C//l//z3Fn6/+z+z9Ttw3Z/wAAADBBdv9n6zb7HwAAALaR3f+5us3+BwAAgG1k93++bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K/+v/9f8cd7b+P7v/C3XbkP0PAAAAE2T3f7Fus/8BAABgG9n9X6rb7H8AAADYRnb/l+u2Iftf/6//1//r/0P/r/9fof/X/6/Q/+v/r/C//l//z3Fn6/+z+79Stw3Z/wAAADBBdv9X6zb7HwAAALaR3f+1us3+BwAAgG1k93+9bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K/+v/9f8cd7b+P7v/G3XbkP0PAAAAE2T3f7Nus/8BAABgG9n936rb7H8AAADYRnb/t+u2Iftf/6//1//r/0P/r/9fof/X/6/Q/+v/r/C//l//z3Fn6/+z+79Ttw3Z/wAAADBBdv936zb7HwAAALaR3f+9us3+BwAAgG1k93+/bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K/+v/9f8cd7b+P7v/B3XbkP0PAAAAE2T3/7Bus/8BAABgG9n9P6rb7H8AAADYRnb/j+u2Iftf/6//1//r/0P/r/9fof/X/6/Q/+v/r/C//l//z3Fn6/+z+39Stw3Z/wAAADBBdv9P6zb7HwAAALaR3f+zus3+BwAAgG1k9/+8bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K/+v/9f8cd7b+P7v/F3XbkP0PAAAAE2T3/7Jus/8BAABgG9n9v6rb7H8AAADYRnb/r+u2Iftf/6//1//r/0P/r/9fof/X/6/Q/+v/r/C//l//z3Fn6/+z+39Ttw3Z/wAAADBBdv9v6zb7HwAAALaR3f+7us3+BwAAgG1k9/++bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K/+v/9f8cd7b+P7v/D3XbkP0PAAAAE2T3/7Fus/8BAABgG9n9f6rb7H8AAADYRnb/n+u2Iftf/6//1//r/0P/r/9fof/X/6/Q/+v/r/C//l//z3Fn6/+z+/9Stw3Z/wAAADBBdv9f6zb7HwAAALaR3f+3us3+BwAAgG1k9/+9bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K/+v/9f8cd7b+P7v/H3XbkP0PAAAAE2T3/7Nus/8BAABgG9n9/6rb7H8AAADYRnb/v+u2Iftf/6//1//r/0P/r/9fof/X/6/Q/+v/r/C//l//z3Fn6/+z+/9Ttw3Z/wAAADBBdv9/6zb7HwAAALaR3f+/us3+BwAAgG1k9/+/bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K/+v/9f8cd7b+P7v/hrptyP4HAACACbL7b6zb7H8AAADYRnb/TXWb/Q8AAADbyO6/uW4bsv/1//p//b/+P/T/+v8V+n/9/wr9v/7/Cv/r//X/HHe2/j+7/5a6bcj+BwAAgAmy+2+t2+x/AAAA2EZ2/211m/0PAAAA28juv71uG7L/9f/6f/2//j/0//r/Ffp//f8K/b/+/wr/6//1/xx3tv4/u/+Oum3I/gcAAIAJsvvvrNvsfwAAANhGdv9ddZv9DwAAANvI7r+7bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K/+v/9f8cd7b+P7v/nrptyP4HAACACbL7763b7H8AAADYRnb/fXWb/Q8AAADbyO6/v24bsv/1//p//b/+P/T/+v8V+n/9/wr9v/7/Cv/r//X/HHe2/j+7/4G6bcj+BwAAgAmy+x+s2+x/AAAA2EZ2/0N1m/0PAAAA28juf7huG7L/9f/6f/2//j/0//r/Ffp//f8K/b/+/wr/6//1/xx3tv4/u/+Rum3I/gcAAIAJsvsfrdvsfwAAANhGdv9jdZv9DwAAANvI7n+8bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K/+v/9f8cd7b+P7v/iQAAAP//xTxxVA==") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) 1m5.913147152s ago: executing program 1 (id=2903): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x23}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 1m4.263940788s ago: executing program 1 (id=2913): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) 1m3.704524267s ago: executing program 1 (id=2918): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) close(r0) 1m3.200662709s ago: executing program 1 (id=2922): syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYRES16=0x0], 0xff, 0x27f, &(0x7f00000002c0)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='mqueue\x00', 0x10001, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, 0x0) 1m2.624181206s ago: executing program 1 (id=2925): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r0, 0x8924, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x13, "4feda26323b172e0"}) 56.17169447s ago: executing program 35 (id=2841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x42fb384493bcfca9) 51.911543182s ago: executing program 0 (id=2939): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) 51.335149567s ago: executing program 0 (id=2941): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000001640)={0x2020}, 0x2020) 50.802866792s ago: executing program 0 (id=2943): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x23, 0x7, {0x7, 0x21, "4c0de4e8eb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 50.216505905s ago: executing program 4 (id=2945): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r0, 0x40384708, 0x0) 49.973997492s ago: executing program 4 (id=2946): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x5000000) 49.521386371s ago: executing program 4 (id=2947): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) 49.144058385s ago: executing program 2 (id=2948): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x4, 0x46) 49.104297424s ago: executing program 4 (id=2949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="1ec86e88bf4ba4466ecffff7edad", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 48.449443398s ago: executing program 4 (id=2950): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 48.448479336s ago: executing program 2 (id=2951): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1db) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0xffffffff, 0xe, 0x5, 0x7}) 48.01645337s ago: executing program 2 (id=2952): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @local, 0x0, 0x8000, 'lc\x00', 0x0, 0xffffffff}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 47.694552848s ago: executing program 2 (id=2953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 47.318339399s ago: executing program 0 (id=2954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000003c0)={0x3c, r1, 0x201, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000094}, 0x404c004) 46.383616687s ago: executing program 36 (id=2925): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r0, 0x8924, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x13, "4feda26323b172e0"}) 46.342389012s ago: executing program 0 (id=2956): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7f, 0xef0, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000ec0), 0x402, r0}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) 46.334091818s ago: executing program 2 (id=2957): syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000005a40)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x67, 0x2d, 0x33, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000f3c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000180)={0x0, 0xfffffffffffff800, 0x6, 0x8, 0x2, [0x100c54, 0xd, 0x3, 0x4001]}) 46.330488914s ago: executing program 4 (id=2958): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf01, 0x0) 45.573609631s ago: executing program 0 (id=2959): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea608641619f36514000cc008002c0107000200060019c00364bc24eab556a705251e618294ff005100000000f4d49302000000a6d0001000000e45916f996b2823b47a", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 44.204689676s ago: executing program 2 (id=2960): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000007b, 0x4004) 31.061820412s ago: executing program 37 (id=2958): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf01, 0x0) 30.036732801s ago: executing program 38 (id=2959): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea608641619f36514000cc008002c0107000200060019c00364bc24eab556a705251e618294ff005100000000f4d49302000000a6d0001000000e45916f996b2823b47a", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 28.869660236s ago: executing program 39 (id=2960): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000007b, 0x4004) 20.263567293s ago: executing program 8 (id=2870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x68, r1, 0x213, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x6, @link='broadcast-link\x00'}}}}, 0x68}}, 0x4048080) 19.684895253s ago: executing program 8 (id=2964): prlimit64(0x0, 0xf, &(0x7f0000000600)={0x8001, 0x8}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 19.311898093s ago: executing program 8 (id=2965): r0 = io_uring_setup(0x4d43, &(0x7f0000000000)={0x0, 0xc4ca, 0x40, 0x1, 0x9}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) 19.001503437s ago: executing program 8 (id=2966): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYBLOB="08001c"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 17.272079435s ago: executing program 8 (id=2967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800017, &(0x7f0000005b00)={[{@fsck}, {@background_compression={'background_compression', 0x3d, 'gzip'}}, {@discard}, {@compression={'compression', 0x3d, 'zstd'}}, {@journal_flush_disabled}, {@degraded}, {@recovery_pass_last={'recovery_pass_last', 0x3d, 'set_may_go_rw'}}, {@reconstruct_alloc}, {@verbose}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x593f, &(0x7f0000005c00)="$eJzs3WuQXFW9KPC1u3synZk8JgEk8pgMgSiCmgmvwkdp9PoqQCoWlhJuFAYywWgSUkkQCCjBC14owEJLS1E/oIXURaNFFahESuRxE66iFFcPZSF19Bz0g6eQQ0ogUpbHOTXTe3Vm9vSe3dPdExL4/SqZ3Wv17v9ee+3Vu/d/dc90AAAA4FVh93Vb9p59xHt/8bnhF6/+wE82XBN6y2P11bhCX7q8/OVqIftTd2XR2DI7Ll5/5Xf/NHDRu39+V893Xtq15pi1v3vPIRfd98kzdt76jQdfmHvPP58uihvH0wn7ysmzSQjVn+75yud3PXr4aF0SQignfdtDWJAsfHBBkgkx+PcQwpq0cFRl4p13v3jy2tHlNTd2T6ifnwlivL+6VdNxtm3vZSeG379r1bW/WvyD73fteGb7vlWS6rjxFMK8C8Y/viuEMDv9PyqOtkXxwelyZQihZ9zjTi9o17FNtn9ZTvnIdDkrXfZmHzhrYjHevyRTLmUeli1HXZllT0G725XXjlbXKzInU86ejNqV185YvyBd/jhdnjDN+OX4PwmlJFTqzV+fTBwK8bglIRk7ltV6uVQ/tiHd/0w5yZRLmXK5K7NfY9tNB1o5SSbWx/Uy9fF0XEnrjxl/rm7gnJz616bLavpEfSmWQ/ZGTe+kG/X9GhPbtWeKtuwPpXHnoEb19QOfHozetK43WTjpMSMNxPt2rbppaXn1Q7v7ctqR3JWk8ZOW4m/75YI5H//eDZcuyot/QSmNX2op/h/OfOy582749tdz498S45dbin/S/T3PnvnwdUty+2dP7J9KS/GHnn7k5sWHXrgjt/23xfjVluKv2PlY99y99z+Q2/7B2D+zW4r/1Nve98c7n7j3mdz4IcbvaSn+6p2bvtDdv/f43PgPxP7pbW38PL/jtCf7+/88kBf/8Rh/bkvx79h+61tvn3/jGbnHd2Xsn76W4p913H3Xztl779F5587ktk69cgK8Oh2SXmNdn5ZbzTPbNS5f+NpApXbNNyf9P7eTG8pcfI5uZ14n4wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABACOGwE//f+//9I33PVtJyd3rjqVJtGetnhZDMDiFs2Tq0eeu6jRcPfPKSSzdvHFo/MLR1YHjj1s1XDJzyxoHNw5vWD10xeu/gm06uPW5hSGrL5OhJ2+4eGRkp9U2si9v7H8ft+P3S0//jLyEMHvab/kpu+5fduuH2Qxv8zEhWjLxzw6Vn/+bUb6X71Ze2q69Bu0ZGRkZCTrv+89x/3P6lPX86PoTB10zVrkeeesfPJjRorGJfnFSpO9Qa1J30NGxHvdVpe2J/VdauWz88OHX/jj6+nLMf//PKZ/6+9vIv/qPWv9Xc/Wiyf2evGFlf+uqqs/7rq1fVKora9XId96L+jnsR2xf7r5r297x0v+bl7FclZ7+u+9UDT/z0iBte2B4GK88vnrztov3qSgdAV/LaprYbt9CTLJhQX03Xj0c8Pm7Z1g2blm25Ytub1m0Yunj44uGNb1l+yvLTBk897dRlY3u+rMP7H7f/uib3f/+Mp/mf3v7j+LO58VTUrqL+GG1XcX+Mb1He86/nnM9/+S23Pnx2raJonMe16+eTdNkzepyXh3HjbXJfNdqvon4IIQw06ofnXjgjHP7bddcWnYfGH5nxPzOSFSOPLvnrt07/5qK31yr2y3l+fINaPM/XW72vPWP9VU2Px8gB2r/doZzuV2/Ddi1/9OGum3b/5TP19s2aFS4f2rp18/LazzlpS+ckRzZsV7Y27tfisZ/lkHZLqA/TBuN1VFeotS97/oyrZ3u1N72vN1nYcL+y4n27Vt20tLz6od15PZ3cVdvi7DC3tkyOyllzfeaB5XqDG23/QH3+FY2P/vd/856P3POjUyaNj5NqP4v2K8nZrx88cceXv/PF//2jzu3X+9/xWN9f//UTS2sVB8t5pd7qtD3J+PPKSSEUPf8Wh8b7kfv8KzXen6LnX3Y7+9ZvHG8gU+4N5amer9W85+tJ9/c8e+bD1y3Jfb7uafb5etWEUrng+XqgjJ/s8yupTGzHzD2/JgyUZMXIz68/ZPuDV688olZRNK7ra4/103OzJ7xentxE/pGzXz8778n+Swb+17907rzx3Tfeff7vhlZ8tlbR+nGPbenMca+m/VvN6d96q2PeOb5/33zRJevX1OoP3OvfdFmQ/8Rxs+WKbZ8aWr9+ePOW5var2dfTuJ1sL7f6ehrPbgsL9qs0ab9m7kYz/dXs8y22f03L/TXx+dYbkpau47b9csGcj3/vhkv7Jj0q3dAFpTR+qaX4fzjzsefOu+HbX8+Nf0uMX2kp/tDTj9y8+NALd+TGvy1J41dbir9i52Pdc/fe/0Bu/MHY/tktxX/qbe/7451P3PtMbvwQ4/e21v/P7zjtyf7+P+fGfzxJtzN6jRTC3S+evLZWTkJX+nyL7eia0K6QLSeZcilTLo8vl2pzrfUNlJNkYn1cL60/ZlxbGvloTn28Cqsuqi1fiuWQvTF1/YGmNO7c36h+0nVq/kspAMArUnz/P16Dxvf/h9MLJZdHNKPdPGxRTtyYh+2bz5k14f5Fafz4+Dhf2f/mMDi6vGagdqE/3fcR4vMhO88Zt3P8sRNjtDrPWTT/viRTju2qzZdXxuWhqcnz75XQxPz75O1MPf+e2f3i+fGB6yc1a2DcvFX2+HWlM2aNPu+QaW9lNELe+MjOi8XPc/TPCyvHttfk+Mh+jiYeh+znaOJ2jsicOFv9HE274yM2e4rxMdbk4vc3Jh+/MEX/7jt+jaNlj980jnd1dP2Zfn+2A/OGDU9p+2/ecMr3w3LjN/t+mHnJnPjpE+xAnzeM9XE/Kk3OJ34kp75T84nxdBHbtWeKtuwP055PBDhIxPw/vkaM5v+jF+B/y6xXdB2avWqM8XI/J1Ru3J6ivGPy5/R6WnodX71z0xe6+/cen3ud80Azn/sZ3YlNE2p6Cj73U9SPSzPlWelLZG4/5kzQFOV72e0U9Xv2cxm9YW5L/X7H9lvfevv8G8/I7feVtRfS4nzkyxNKcwv6/SDIFxrHly+8KvKFmZ4/e9nykfSDTzOVj3w4p366+UjPpBv1/RozPh9plA/sL03nI137t10AwMEj5v/198/S/P/f4grpdURR3npCphzj5eatOdcneXnrB9Pl5Zn1e9PfqJjudfNZx9137Zy99x6dm7fc1mwe+n8mlPoK89D28ubcPGJlZz4vnptH1POs9vLE3PbX88T28vTc+PU8vb08Ord/6nl0e/MAufHr8wAHe55bMF+X2VgsNjtf94rNo9Nfn52pPPqcnPrp5tG9k27U92vMQfe+njwaAHiFifl/vIyL+f/DmfXafZ89Ny/o0HV79u+B1OM/vr/yypnO+2Y6b53pvH6m5yUO9rx4pueFZnae7FWfF6cblRcDAHAgi/n/7LScn/+3l580yt+6JuQn8vOG8eXnB0h+frDPf8n/vS9eTP4PAPDKFvP/+GuP8e///d+0nP279fL0nPjydHn6VOOn6Ty98/NswecAXt55gNn71jcPAADAy6FrLFOa/Hv2H0uX2d+zz/u9/PNy1m9WJb08vnDr5uHh8y/dtGZo6/D5Gy9ZM7zl/Ms2r9u6dXhjbb1288bcvCXNG7tCJe2Pxutl87b56d9DmJ/z9xCy68ewR47dmPz3ELKbnV3wdwT2Hb/m2pt3/EpTrN9ofOQd77z4H81ZP6of/4s+cdL5a7ecv27juq3rhtav2zY8cb3RrLVnGt+bGbtlWt+XmvkxSWn639/ZmXaUJrWjKyThtz/M/372JNOOBWlLFuR9/0FOu3/x/7/06eNG/nFnCIOHlY9qq/+SFSM/PHf4g1t3/2bTaPtLueN3tD31NdN2FX1faXb9uD+V9Zds2Xri2ksu3Zj9RsnWxPmMUr08Q/MZ6dO/3OT8xOqc+ul+TqE86caBqen5CQAAJojv/8fr2fj+4RfTC6jxX5PcXJ7e3vvHuXn6YHN5evZ7yYry9Oz6cX+bzdOrbebp2e0X5emN1m+Up+fl3XnxP5yz/nQ1P07a+5xH7ji5oLlxkv0+g6Jxkl1/uuMkaXOcZLdfNE4ard9onOQd97z4H8pZP0/z46G9z+XkjodbmhsPb8iUi8ZDdv3pjodSm+Mhu/2i8dBo/UbjIe/45sU/O2f9Zk0cH6MDY2xcDJ9/2SWbPzVuvZn+/ov22zez3//RqubbP7Of+5r59s/s58pmvv3tfa4st/2PtzcT1nz7Z/b7XVq13+Zr0w+bFX3+rGged1VO/XTncWdNunFgMo8LL5+Y/8e3e2L+f2O67PTbQAf/96T5HrOG8Tv0PWZF1zGvzNfzfa+AXs8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXh26K4tGF127r9uy9+wj3vuLzw2/ePUHfrLhmtdf+d0/DVz07p/f1fOdl3atOWbt795zyEX3ffKMnbd+48EX5t7zz6cLA/eN/ayckBarISTPJiFUf7rnK5/f9ejho3VJCKGc9G0PYUGy8MEFSSbC4N9DCGvq7Zx4590vnrx2dHnNjd0T6udngmT3K/SWY3vGtzOEywv3iINQNR1n2/ZedmL4/btWXfurxT/4fteOZ7bvWyWpjhtPIcy7YPzju0IIs9P/o+JoWxQfnC5XhhB6xj3u9IJ2Hdtk+5fllI9Ml7PSZW9BnHj/kky5lFkvW466Msuegu21K68dra5XZE6mnD0ZtSuvnbF+Qbr8cbo8YZrxy/F/EkpJqNSbvz7ZN0bCuOOWhGTsWFbr5VL92IZ0/zPlJFMuZcrlrsx+jW03HWjlJJlYH9fL1MfTcSWtP6bWxu68/T4np/616bKaPlFfiuWQvVHTO+lGfb/GxHbtyWvIflIKjTsj1tcPfHowetO63mThpMeMNBDv27XqpqXl1Q/t7stpR3JXksZPWoq/7ZcL5nz8ezdcuigv/gWlNH6ppfh/OPOx58674dtfz41/S4xfbin+Sff3PHvmw9ctye2fPbF/Ki3FH3r6kZsXH3rhjtz23xbjV1uKv2LnY91z997/QG77B2P/zG4p/lNve98f73zi3mdy44cYv6el+Kt3bvpCd//e43PjPxD7p7e18fP8jtOe7O//80Be/Mdj/Lktxb9j+61vvX3+jWfkHt+VsX/6Wop/1nH3XTtn771HV/Pi39apV06AV6dD0mus69Nyq3lmu8blC18bqNSu+eak/+d2ckMZo9uZN4PxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Zfr1Vad87Nx3fmhVJQkhyVlnpIF4X3nWihUDLWx36OlHbl586IU7xtctaiEOAAAAUCzm4aV6TTUsCpcls8ORDdePcwRHxlIysT47hxDjZOcIWo1T6lCccofiVDoUp6tDcWZ1KE53h+JUC+JUQ3NxZk8RpzI6KppsT8+U7Wk+Tm+H4szpUJy5HYozr0Nx5ncoTt+UcZofhws6FGdhh+Ic0qE4h3YozmEdivOaDsU5vENxsnPK0x2Hc9M1j8iLM3ajXBinkpTrdzSaTz883c7RbW6nt2A7c4tej5vczuwmt3Ns5nGlaW6n2uR2XtfmdpImt/OGNrdTKthOHLeXZ9sXtxNLTY7/KzoUZ1uH4lzZoThXdSjOZzoU57MdinN1m3EAmhXz/335Xl/orrw99KRnnOwsQMx3F4/9nPx6l3dCivGOytTPKoqXTdQz8RZPt33ZCYRMvCWZ+q4J8Sr1fGSKeNXx8ZZm7izc3+yEQqZ9J2Tqu4viZScWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAG/fqqUz527js/tCokYfRfQyMNxPvKs1asGGhhu7tW3bS0vPqh3ePruistBAIAAAAKxTy8q15TDd2V5aE7mTVhvWo6D1BNy+W+2rJ/Xlg5ukwGSmPlnmTBlI+rpI9btnXDpmVbrtj2pnUbhi4evnh441uWn7L8tMFTTzt12dp164cHaz9D6M6Nd9zf0pmIsemHLVds+9TQ+vXDm7fU1su2f1H6uEVpOQm1x/W/OQyOLq+ptX9kfqZ/su0vhez2Zu5Gs8cQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhvdu0uRK6z/gP4c2ZmZybb5p/507dpaDZDXkrUokncSqqhc0Cw0CYhS0FmqmsJNsHipgltUmId24BtTVCElkCI5MJILLYWb/pii9gXApEaDbgxSFu0F3qhtFpJSy4kZSS7c2ZnZmcy61i6bfx8LubMPM/veX7nmYuF79kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiiTtdHxSnmsOhyFEPWoqXeRzKWzcVwaoO+Xn9/5/dzI2VWtY7nMABsBAAAAfSU5fKg5kg+5TDqkw9VTn5aFBTMTYSb3AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/3sma6PjlfJY9ZIohKhHTb2LZC6djePSAH3feOfJz7w6MvLX1rHiAPsAAAAA/SU5PNUcyYdiWB6Goqvb6pJnA4s71nfWJfssmWNd57ODXnXL51h37RzrPtanblPjuicAAADAR1+S/zPNkULIZRb2zP/9cn1St7SjLt24DvJbAQAAAOC/k+T/XHOkGHKZYjOvzzXvL+uoS9b3+799sn5lj/X9/p+/sXH1f3oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+OiYrI2OV8pj1XQUQtSjpt5FMpfOxnFpgL5rXxj++y3HHlrWOpbLDLARAAAA0FeSw2eidz7kMsNhKFwylftHbjr89BeffnY0hDAd87PZsGfLrl13r51+TerWnDg29L3jb31rVt2a6dd5OyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC+mayNjlfKY9UFUQhRj5p6F8lcOhvHpQH6vv65L/z58dPPvdk6VhxgHwAAAKC/JIfPZP98KIZsyIYrpz61Zv3zUh3rez0zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4e93zjvq9vmZjYerc33njjTfPNfP9lAgAA3m9LQxTq/6GrNs/3XQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8Gk7XR8Up5rJqPQoh61NS7SObS2TguDdA3fv5kbuHZF15qHSsOsA8AAADQX5LDZ7J/PhTDUBgKV0x96vZMYCr/Fz7AmwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+VCZro+OV8lh1YRRC1KOm3kUyl87GcWmAvo/tPfTZo4u+e3PrWC4zwEYAAABAX0kOzzZH8iGX+XjIhWsanyfaF0TpxrX7c4GZdTvblg3PeV2tbV16zuv2dZws0zjN9Lp8sl9h+tpcV5q9rtSyrhia7Utt68KBtlUL+9xnAAAAgHmU5P9cc6QQcplcS879SVt9Qc4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHqYrI2OV8pj1SgKIepRU+8imUtn47g0QN/7fvP/l37lp/t3t44VB9gHAAAA6C/J4TPZPx+KYUn4v7BkKveHQnt9UvePyrmjj/7zL6tCWH3lqZFM57Y/TN786vUbX+x8CSHVXp0KYVGjX7S+e79f/+7Re1fUzz0ewuor0tfM6hcu3K99y7j+TGXrxl3HT+3s8+UAAADARSLJ/0PNkULIZe7qmf+T5N0n/zdNBfBF9+79+eWN10Yi71iRKjT6pXr0+/yKJ/+0ct3f3jqf/y/U71OHth+9vK3h9EiHKK6Xt+/edOr6I6nk1NP90x39k+/lS99881/b9jxybrp/PuQb44sz3frPfu2wIK5PpA5WN7x3sNbeP9Pj/A/99qXTv1y8/93z/d9ZOtzsf+0Fzn/h/sO3PnzghkPHNrX3DyGUuvV/+92bw1V/uPPBzvMPd2zc+s23vnaI4vqJZWeOrDtcXN/eP+ron3z/Pzv92IEfP/KdZ5P+yW9FVi2fa/9UR/9X9l229+UHNi9u75/qcf4Xb3t1ZEfp27/vPP8dbbtmet7F7PM/cd1Tt7+2Jb6/cwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODiMlkbHa+Ux6qpKISoR029i2QunY3j0gB937jl5Nu37f/RD1rHigPsAwAAAPSX5PCZ7J8PxZAN2TA8lfufqWzduOv4qZ2hMD0bNa6ZiR337PrEth2777pjnu4cAAAAmKsk/2eaI4WQy6wIQ438X96+e9Op64+kkvyfSvL/tjsntq4OzbpX9l229+UHNi9uPicIYepnAfnzdZ+eqbvpxpOFM3/82squdWtn6k4sO3Nk3eHi+qQutNatCc3nE09c99Ttr22J72/eX2vdJ7+6Y6LxeCLZd/jWhw/ccOjYpuY5Gtfhxr5J3UTqYHXDewdrSV26cc03zg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzDZZGx2vlMeqIR1C1KOm3kUyl87GcWmAvhtW/OLBS88+t6R1LJcZYCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4NztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYr5/QOKo4DuDv7SZmm03apBWMimlaFaUeLAoielFRkVak4KlSpNragygIIko9mEorlqp4EaxeiqigRiko2FgsrZKK/4oXDyooVA9CKQa0oXhQye6b7Way49ZJFdTPB4aX92bmO7+Z93Y2CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8q/T1jDTawzsenLntvJs+efyeE4/d8t792y559PUfxjbd8PHe/ldOTm1eseXrG5dt2n/vmsndLx76ZfCd3452DX6k2axK3VoI8XgMofb+9HNPTH16zuxYDCFU49B4CMNx6aHhmEtY/WsIYXOrzrk73z5x5ZbZdtuuvjnjS3Ih+fsK9WpWT9PQ3Hr5b6mldbZ15uHLwrfXr9/++fK33uydODZ+6pBYa1tPISze2H5+bwhhUdpmZattJDs5tetCCP1t513dpa4LT7P+ywv656f2rNTWu+Rk+1fm+pXccfl+pjfX9ne53kIV1VH2uG4Gcv38y2ihiurMxodT+25qV/3F/Gq2xVCJoadV/n3x1BoJbfMWQ2zMZa3Vr7TmNqT7z/Vjrl/J9au9uftqXDcttGqMc8ez43Lj2eu4J42vaH9Xd3B7wfi5qa2lD+rJrB/yfzTV5/3Ruq+GrK7pP6nln1Bpewd1Gm9NfJqMehqrx6Xzzvm9g2zf1PqnLq5u+ODwUEEdcW9M+XFefu008rd+Njxw5xs7Hxopyt9YSfmVUvV/t/bIT3fsfOmFwvxns/xqqfwrDvQfX/vhjpWFz2c6ez49pfLvOvrR08vPvnui01w38vdk+bVS+ddNHukbnDlwsLD+1dnzWVQq/5trb/7+tS/3HSvMD1l+f6n8DZMPPNM3OnNpYf7B5keh3lihJdbPzxNXfTU6+uNYUf4X2fMf7JAfu+a/Or77mpeX7FpTuD7XZc9nqFT9t160f/vAzL4Lit6dcc+Z+uYE+H9alv7HejL1y/7OXKi23wvPj/U0v4EG0jZ4Ji+UM3udxX9jPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAf7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE8FAAD//6jLMUI=") 15.488473825s ago: executing program 8 (id=2968): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0xfc, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 0s ago: executing program 40 (id=2968): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0xfc, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): 037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.221794][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.285149][ T6569] EXT4-fs (loop6): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 376.518780][T12054] loop0: detected capacity change from 0 to 1024 [ 376.873587][T12066] loop6: detected capacity change from 0 to 256 [ 377.163708][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 377.184851][T12047] loop7: detected capacity change from 0 to 40427 [ 377.235240][T12047] F2FS-fs (loop7): build fault injection rate: 771 [ 377.277251][T12047] F2FS-fs (loop7): invalid crc value [ 377.326288][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 377.338150][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.365353][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.411553][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 377.442234][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 377.479601][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.519297][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 377.529343][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 377.538608][ T24] usb 3-1: Manufacturer: syz [ 377.562239][T12047] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 377.573523][ T24] usb 3-1: config 0 descriptor?? [ 377.756709][ T8613] syz-executor: attempt to access beyond end of device [ 377.756709][ T8613] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 377.790437][ T8613] CPU: 1 UID: 0 PID: 8613 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 377.790477][ T8613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.790493][ T8613] Call Trace: [ 377.790503][ T8613] [ 377.790514][ T8613] dump_stack_lvl+0x189/0x250 [ 377.790572][ T8613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.790610][ T8613] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 377.790650][ T8613] ? __pfx_queue_work_on+0x10/0x10 [ 377.790676][ T8613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.790707][ T8613] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 377.790741][ T8613] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 377.790777][ T8613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.790805][ T8613] ? f2fs_hw_is_readonly+0x39b/0x470 [ 377.790842][ T8613] f2fs_handle_critical_error+0x37c/0x540 [ 377.790879][ T8613] f2fs_write_end_io+0x495/0x810 [ 377.790918][ T8613] ? blkg_put+0x22/0x240 [ 377.790961][ T8613] __submit_merged_bio+0x27a/0x6a0 [ 377.790995][ T8613] __submit_merged_write_cond+0x255/0x530 [ 377.791031][ T8613] f2fs_write_data_pages+0x261d/0x3000 [ 377.791065][ T8613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.791129][ T8613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 377.791177][ T8613] ? arch_stack_walk+0xfc/0x150 [ 377.791233][ T8613] ? __mod_zone_page_state+0xd7/0x140 [ 377.791290][ T8613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.791317][ T8613] ? folios_put_refs+0x560/0x640 [ 377.791367][ T8613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.791395][ T8613] ? __lock_acquire+0xab9/0xd20 [ 377.791445][ T8613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.791471][ T8613] ? do_raw_spin_lock+0x121/0x290 [ 377.791508][ T8613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.791541][ T8613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.791594][ T8613] ? do_raw_spin_unlock+0x122/0x240 [ 377.791624][ T8613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 377.791658][ T8613] do_writepages+0x32e/0x550 [ 377.791709][ T8613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.791743][ T8613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.791771][ T8613] ? do_raw_spin_unlock+0x122/0x240 [ 377.791806][ T8613] filemap_fdatawrite+0x191/0x230 [ 377.791830][ T8613] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 377.791913][ T8613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.791948][ T8613] ? do_raw_spin_unlock+0x122/0x240 [ 377.791982][ T8613] f2fs_sync_dirty_inodes+0x31f/0x830 [ 377.792039][ T8613] f2fs_write_checkpoint+0x94a/0x1de0 [ 377.792103][ T8613] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 377.792186][ T8613] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 377.792221][ T8613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.792249][ T8613] ? kfree+0x18e/0x440 [ 377.792294][ T8613] ? kill_f2fs_super+0x298/0x6c0 [ 377.792340][ T8613] kill_f2fs_super+0x2c3/0x6c0 [ 377.792383][ T8613] ? __pfx_kill_f2fs_super+0x10/0x10 [ 377.792416][ T8613] ? radix_tree_delete_item+0x2b6/0x400 [ 377.792461][ T8613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.792489][ T8613] ? shrinker_free+0x2ce/0x3e0 [ 377.792527][ T8613] deactivate_locked_super+0xbc/0x130 [ 377.792569][ T8613] cleanup_mnt+0x425/0x4c0 [ 377.792605][ T8613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.792633][ T8613] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.792678][ T8613] task_work_run+0x1d4/0x260 [ 377.792717][ T8613] ? __pfx_task_work_run+0x10/0x10 [ 377.792745][ T8613] ? __x64_sys_umount+0x122/0x160 [ 377.792797][ T8613] ? exit_to_user_mode_loop+0x40/0x110 [ 377.792842][ T8613] exit_to_user_mode_loop+0xec/0x110 [ 377.792880][ T8613] do_syscall_64+0x2bd/0x3b0 [ 377.792927][ T8613] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.792963][ T8613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.792986][ T8613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.793015][ T8613] ? exc_page_fault+0x9f/0xf0 [ 377.793052][ T8613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.793076][ T8613] RIP: 0033:0x7f9def38fc57 [ 377.793097][ T8613] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 377.793118][ T8613] RSP: 002b:00007ffe674391f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 377.793142][ T8613] RAX: 0000000000000000 RBX: 00007f9def410925 RCX: 00007f9def38fc57 [ 377.793158][ T8613] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe674392b0 [ 377.793174][ T8613] RBP: 00007ffe674392b0 R08: 0000000000000000 R09: 0000000000000000 [ 377.793191][ T8613] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe6743a340 [ 377.793208][ T8613] R13: 00007f9def410925 R14: 000000000005c332 R15: 00007ffe6743a380 [ 377.793247][ T8613] [ 378.263289][T12097] nbd: must specify a size in bytes for the device [ 378.266378][ T8613] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 378.591370][ T24] rc_core: IR keymap rc-hauppauge not found [ 378.597500][ T24] Registered IR keymap rc-empty [ 378.603306][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.629146][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.653902][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 378.668867][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 378.722807][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.743152][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.763531][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.789756][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.819462][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.842831][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.866070][T12112] delete_channel: no stack [ 378.871692][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.880828][T12110] delete_channel: no stack [ 378.922653][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.953295][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.993980][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 379.044998][ T24] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 379.062552][ T24] mceusb 3-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 379.135401][ T24] usb 3-1: USB disconnect, device number 17 [ 379.443895][T12118] loop6: detected capacity change from 0 to 8192 [ 379.482984][ T43] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 379.518703][T12129] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.641813][T12131] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 379.652622][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 379.654946][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 379.694239][ T43] usb 2-1: config 71 has an invalid interface number: 182 but max is 0 [ 379.722694][ T43] usb 2-1: config 71 has no interface number 0 [ 379.783932][ T43] usb 2-1: config 71 interface 182 has no altsetting 0 [ 379.818914][ T43] usb 2-1: string descriptor 0 read error: -22 [ 379.831180][ T43] usb 2-1: New USB device found, idVendor=0fd9, idProduct=003f, bcdDevice=4b.bd [ 379.850754][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.098476][ T43] dvb-usb: found a 'Elgato EyeTV DTT rev. 2' in warm state. [ 380.145738][T12143] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 380.163367][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 380.179860][T12143] team0: Device ipvlan2 is already an upper device of the team interface [ 380.202368][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT rev. 2) [ 380.212677][ T43] usb 2-1: media controller created [ 380.302073][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.509646][T12128] loop7: detected capacity change from 0 to 32768 [ 380.537272][ T43] DVB: Unable to find symbol dib7000p_attach() [ 380.550293][T12128] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2167 (12128) [ 380.568964][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT rev. 2' [ 380.608640][T12128] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 380.652654][T12128] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 380.689538][T12128] BTRFS info (device loop7): disk space caching is enabled [ 380.707545][T12128] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 380.759180][ T43] rc_core: IR keymap rc-dib0700-rc5 not found [ 380.776943][ T43] Registered IR keymap rc-empty [ 380.790088][ T43] dvb-usb: could not initialize remote control. [ 380.804547][ T43] dvb-usb: Elgato EyeTV DTT rev. 2 successfully initialized and connected. [ 380.821199][ T43] usb 2-1: USB disconnect, device number 17 [ 380.953921][T12128] BTRFS info (device loop7): rebuilding free space tree [ 380.981882][ T43] dvb-usb: Elgato EyeTV DTT rev. 2 successfully deinitialized and disconnected. [ 381.038405][T12128] BTRFS info (device loop7): disabling free space tree [ 381.071735][T12128] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 381.102656][T12128] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 381.493459][ T8613] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 381.940018][T12203] Illegal XDP return value 4294967282 on prog (id 134) dev N/A, expect packet loss! [ 382.964496][ T43] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 383.122539][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 383.142776][ T43] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 383.151960][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.621499][T12224] loop7: detected capacity change from 0 to 1024 [ 383.642791][ T43] usb 2-1: Product: syz [ 383.647055][ T43] usb 2-1: Manufacturer: syz [ 383.651690][ T43] usb 2-1: SerialNumber: syz [ 383.662168][ T43] usb 2-1: config 0 descriptor?? [ 383.732029][T12224] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.917193][ T43] peak_usb 2-1:0.0: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 383.926882][T12224] EXT4-fs error (device loop7): ext4_generic_delete_entry:2668: inode #2: block 16: comm syz.7.2218: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1 [ 384.002279][T12224] EXT4-fs error (device loop7) in ext4_delete_entry:2739: Corrupt filesystem [ 384.047163][T12224] EXT4-fs warning (device loop7): ext4_rename_delete:3726: inode #2: comm syz.7.2218: Deleting old file: nlink 4, error=-117 [ 384.146554][ T43] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 384.162966][ T43] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 384.197555][ T43] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 384.218575][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.228741][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.327490][ T8613] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.436013][ T43] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 384.483786][ T43] usb 2-1: USB disconnect, device number 18 [ 385.001515][T12263] nbd: couldn't find a device at index 17 [ 385.023747][T12266] openvswitch: netlink: Message has 8 unknown bytes. [ 385.065285][T12266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.149245][ T30] audit: type=1326 audit(1751335410.386:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12270 comm="syz.1.2239" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7a9f8e929 code=0x0 [ 385.318147][T12277] netlink: 'syz.7.2241': attribute type 1 has an invalid length. [ 385.947127][T12284] loop7: detected capacity change from 0 to 32768 [ 386.004460][T12284] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 386.013294][T12284] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 386.029103][T12284] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 386.039780][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 386.061020][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 386.224134][ T24] kworker/1:0: attempt to access beyond end of device [ 386.224134][ T24] loop7: rw=0, sector=2322168557869136, nr_sectors = 8 limit=32768 [ 386.407620][ T24] gfs2: fsid=syz:syz.0: jid=0: Failed [ 386.448814][T12284] gfs2: fsid=syz:syz.0: error recovering journal 0: -5 [ 386.794380][T12309] rdma_op ffff8880543941f0 conn xmit_rdma 0000000000000000 [ 387.329381][T12319] netlink: 'syz.2.2260': attribute type 2 has an invalid length. [ 387.355102][T12319] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2260'. [ 387.398536][T12292] loop6: detected capacity change from 0 to 32768 [ 387.425844][T12317] loop1: detected capacity change from 0 to 4096 [ 387.795208][T12317] ntfs3(loop1): failed to convert name for inode 1e. [ 387.857069][T12317] ntfs3(loop1): ino=1f, mi_enum_attr [ 387.875484][T12317] ntfs3(loop1): ino=1f, mi_enum_attr [ 388.262550][T12343] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 388.349437][T12343] CIFS mount error: No usable UNC path provided in device string! [ 388.349437][T12343] [ 388.381412][T12343] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 388.767513][T12356] loop1: detected capacity change from 0 to 1024 [ 388.936762][ T68] hfsplus: b-tree write err: -5, ino 4 [ 389.032554][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 389.113791][T12368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2284'. [ 389.212523][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 389.263382][ T24] usb 8-1: config index 0 descriptor too short (expected 42, got 18) [ 389.271771][ T24] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 389.312565][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 389.349359][ T24] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 389.392627][ T24] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 389.400730][ T24] usb 8-1: Product: syz [ 389.422496][ T24] usb 8-1: SerialNumber: syz [ 389.465870][ T24] r8152-cfgselector 8-1: Unknown version 0x0000 [ 389.472228][ T24] r8152-cfgselector 8-1: config 0 descriptor?? [ 389.473380][T12381] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2290'. [ 389.505501][ T24] hub 8-1:0.0: bad descriptor, ignoring hub [ 389.511509][ T24] hub 8-1:0.0: probe with driver hub failed with error -5 [ 390.022539][T12372] loop6: detected capacity change from 0 to 32768 [ 390.081409][T12377] loop1: detected capacity change from 0 to 32768 [ 390.089399][ T24] r8152-cfgselector 8-1: reset high-speed USB device number 5 using dummy_hcd [ 390.115222][T12377] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2289 (12377) [ 390.131955][T12372] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 390.158169][T12377] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 390.202693][T12377] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 390.272602][T12377] BTRFS info (device loop1): using free-space-tree [ 390.339034][ T6569] (syz-executor,6569,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 390.423104][ T6569] ocfs2: Unmounting device (7,6) on (node local) [ 390.599034][ T5832] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 390.685975][ T43] r8152-cfgselector 8-1: USB disconnect, device number 5 [ 390.901112][T12420] loop0: detected capacity change from 0 to 512 [ 390.960757][T12421] loop6: detected capacity change from 0 to 2048 [ 390.994663][T12420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.064035][T12421] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 391.113113][T12420] ext4 filesystem being mounted at /389/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 391.137300][T12427] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 391.186494][T12430] loop1: detected capacity change from 0 to 512 [ 391.194736][T12430] EXT4-fs: Ignoring removed orlov option [ 391.201944][T12430] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 391.218413][T12431] tipc: Started in network mode [ 391.249811][T12421] NILFS (loop6): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 391.261289][T12431] tipc: Node identity _, cluster identity 4711 [ 391.321669][T12421] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 391.343236][T12430] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 391.387048][T12420] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: block 32: comm syz.0.2301: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 391.403102][T12430] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.2300: corrupted in-inode xattr: e_value size too large [ 391.429936][T12421] Remounting filesystem read-only [ 391.445672][T12430] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2300: couldn't read orphan inode 15 (err -117) [ 391.460591][T12420] EXT4-fs (loop0): Remounting filesystem read-only [ 391.510076][T12420] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #12: comm syz.0.2301: directory missing '.' [ 391.527279][T12430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.558584][T12421] NILFS (loop6): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 391.657799][T12421] NILFS error (device loop6): nilfs_bmap_last_key: broken bmap (inode number=16) [ 391.667003][ T5922] kernel write not supported for file /444/timerslack_ns (pid: 5922 comm: kworker/0:4) [ 391.695489][T12439] autofs: Bad value for 'fd' [ 391.701152][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.764371][T12421] NILFS (loop6): error -5 truncating bmap (ino=16) [ 391.961317][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.045697][T12448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 392.147004][ T6569] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 392.294628][T12458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.652006][T12471] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 392.658605][T12471] [U] J"—e:ÀÆ" [ 392.700806][T12473] loop1: detected capacity change from 0 to 512 [ 392.751731][T12473] EXT4-fs: Ignoring removed nobh option [ 392.781458][T12473] EXT4-fs: Ignoring removed mblk_io_submit option [ 392.810438][T12473] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.2321: corrupted in-inode xattr: overlapping e_value [ 392.857268][T12473] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2321: couldn't read orphan inode 15 (err -117) [ 392.913220][T12473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.003329][T12480] loop6: detected capacity change from 0 to 512 [ 393.043314][T12480] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 393.098588][T12456] loop7: detected capacity change from 0 to 32768 [ 393.109354][ T6569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.136590][T12456] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 393.155957][T12456] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 393.180374][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.257121][T12456] XFS (loop7): Ending clean mount [ 393.287932][T12456] XFS (loop7): Quotacheck needed: Please wait. [ 393.391640][ T30] audit: type=1326 audit(1751335418.626:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.6.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd558e929 code=0x7ffc0000 [ 393.437078][ T30] audit: type=1326 audit(1751335418.666:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.6.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6cd558e929 code=0x7ffc0000 [ 393.450035][T12500] loop1: detected capacity change from 0 to 512 [ 393.460544][ T30] audit: type=1326 audit(1751335418.666:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.6.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd558e929 code=0x7ffc0000 [ 393.488891][T12456] XFS (loop7): Quotacheck: Done. [ 393.563561][ T30] audit: type=1326 audit(1751335418.666:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.6.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd558e929 code=0x7ffc0000 [ 393.588309][T12500] EXT4-fs (loop1): orphan cleanup on readonly fs [ 393.602552][ T30] audit: type=1326 audit(1751335418.666:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.6.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f6cd558e929 code=0x7ffc0000 [ 393.625060][ T30] audit: type=1326 audit(1751335418.666:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.6.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd558e929 code=0x7ffc0000 [ 393.650423][ T30] audit: type=1326 audit(1751335418.666:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.6.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd558e929 code=0x7ffc0000 [ 393.673199][T12500] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 393.674745][T12500] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 393.720972][T12500] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2328: attempt to clear invalid blocks 2 len 1 [ 393.747691][T12505] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2331'. [ 393.757223][T12500] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2328: invalid indirect mapped block 1819239214 (level 0) [ 393.786419][T12500] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2328: invalid indirect mapped block 1819239214 (level 1) [ 393.884421][T12500] EXT4-fs (loop1): 1 truncate cleaned up [ 393.895519][T12500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 394.027655][ T8613] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 394.071279][T12500] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 394.142755][T12500] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.2328: Abort forced by user [ 394.171025][T12500] EXT4-fs (loop1): Remounting filesystem read-only [ 394.232534][T12500] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 394.521106][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.885858][T12531] loop7: detected capacity change from 0 to 256 [ 394.986522][T12531] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 395.019039][T12535] loop6: detected capacity change from 0 to 512 [ 395.044430][T12535] EXT4-fs: Ignoring removed orlov option [ 395.060787][T12535] EXT4-fs: Ignoring removed bh option [ 395.087731][T12535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 395.191237][T12535] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.2347: casefold flag without casefold feature [ 395.259001][T12535] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.2347: couldn't read orphan inode 15 (err -117) [ 395.335679][T12535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.401745][T12544] loop7: detected capacity change from 0 to 512 [ 395.461172][T12535] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #2: comm syz.6.2347: invalid size [ 395.530267][T12544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 395.612726][T12544] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.675009][ T6569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.751006][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.936222][ T8613] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 396.136269][T12561] loop0: detected capacity change from 0 to 128 [ 396.456223][T12574] nbd: couldn't find device at index 956301312 [ 397.228060][T12564] loop7: detected capacity change from 0 to 32768 [ 397.428533][T12564] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 397.513551][ T36] (kworker/u8:2,36,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 397.609464][ T30] audit: type=1800 audit(1751335422.836:63): pid=12564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2355" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 397.616192][T12592] loop0: detected capacity change from 0 to 65536 [ 397.651275][T12564] (syz.7.2355,12564,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 397.723553][T12592] XFS (loop0): log sector size in bytes/log2 (0x0/0x1) are not zero [ 397.727095][T12564] (syz.7.2355,12564,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 397.733008][T12592] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x2ec/0x400, xfs_sb block 0x0 [ 397.753607][T12592] XFS (loop0): Unmount and run xfs_repair [ 397.759405][T12592] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 397.766948][T12592] 00000000: 58 46 53 42 00 00 02 00 00 00 00 00 00 01 00 00 XFSB............ [ 397.776003][T12592] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 397.776771][T12564] (syz.7.2355,12564,1):__ocfs2_prepare_orphan_dir:2180 ERROR: status = -2 [ 397.784955][T12592] 00000020: e6 3a d8 4b 68 1a 44 ea 8f 8e 21 0c be 25 14 91 .:.Kh.D...!..%.. [ 397.784989][T12592] 00000030: 00 00 00 00 00 00 80 80 00 00 00 00 00 00 00 20 ............... [ 397.785013][T12592] 00000040: 00 00 00 00 00 00 00 21 00 00 00 00 00 00 00 22 .......!......." [ 397.785035][T12592] 00000050: 00 00 00 08 00 00 80 00 00 00 00 02 00 00 00 00 ................ [ 397.785060][T12592] 00000060: 00 00 10 80 b4 b4 02 00 01 00 00 02 00 00 00 00 ................ [ 397.785083][T12592] 00000070: 00 00 00 00 00 00 00 00 09 09 08 01 0f 00 00 19 ................ [ 397.785173][T12592] XFS (loop0): SB validate failed with error -117. [ 397.882919][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.892048][T12564] (syz.7.2355,12564,0):ocfs2_prepare_orphan_dir:2224 ERROR: status = -2 [ 397.900646][T12564] (syz.7.2355,12564,0):ocfs2_prepare_orphan_dir:2240 ERROR: status = -2 [ 397.936405][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.967072][T12564] (syz.7.2355,12564,1):ocfs2_unlink:964 ERROR: status = -2 [ 398.136967][T12616] loop6: detected capacity change from 0 to 512 [ 398.204593][T12616] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 398.221922][T12616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 398.250832][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.261527][T12616] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.2381: corrupted in-inode xattr: e_value size too large [ 398.277404][T12616] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.2381: couldn't read orphan inode 15 (err -117) [ 398.365013][T12616] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.397474][ T8613] ocfs2: Unmounting device (7,7) on (node local) [ 398.647539][ T6569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.849618][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.373674][T12654] loop7: detected capacity change from 0 to 512 [ 399.388906][T12647] mkiss: ax0: crc mode is auto. [ 399.395295][T12654] EXT4-fs: Ignoring removed orlov option [ 399.422310][T12654] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 399.469859][T12654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 399.482715][T12654] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.2398: corrupted in-inode xattr: e_value size too large [ 399.505230][T12654] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.2398: couldn't read orphan inode 15 (err -117) [ 399.540611][T12664] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2403'. [ 399.589033][T12654] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.626701][ T30] audit: type=1800 audit(1751335424.866:64): pid=12654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2398" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 399.731324][ T8613] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.806156][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.078615][T12682] loop7: detected capacity change from 0 to 512 [ 400.195308][T12682] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2406: bg 0: block 5: invalid block bitmap [ 400.218980][T12682] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 400.243343][T12682] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2406: invalid indirect mapped block 3 (level 2) [ 400.261615][T12682] EXT4-fs (loop7): 2 truncates cleaned up [ 400.280528][T12682] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.359624][T12692] loop0: detected capacity change from 0 to 1024 [ 400.490290][ T8613] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.084573][T12714] loop0: detected capacity change from 0 to 256 [ 401.248317][T12718] sd 0:0:1:0: device reset [ 401.745619][T12732] netlink: 'syz.2.2433': attribute type 27 has an invalid length. [ 401.771006][T12734] tipc: Started in network mode [ 401.776611][T12734] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 401.791638][T12734] tipc: Enabled bearer , priority 10 [ 402.053206][T12741] loop0: detected capacity change from 0 to 1024 [ 402.099827][T12741] hfsplus: bad catalog entry type [ 402.211785][ T1157] hfsplus: b-tree write err: -5, ino 4 [ 402.373072][T12750] usb usb8: usbfs: process 12750 (syz.0.2441) did not claim interface 0 before use [ 402.405417][T12746] loop1: detected capacity change from 0 to 4096 [ 402.425217][T12746] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 402.511668][T12746] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 402.717576][T12756] loop0: detected capacity change from 0 to 16 [ 402.784111][T12756] erofs (device loop0): mounted with root inode @ nid 36. [ 402.932017][ T5923] tipc: Node number set to 4269801488 [ 403.199086][T12762] loop1: detected capacity change from 0 to 1024 [ 404.036364][T12784] loop6: detected capacity change from 0 to 256 [ 404.069094][T12779] loop1: detected capacity change from 0 to 4096 [ 404.148351][T12787] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 404.155063][T12784] FAT-fs (loop6): Directory bread(block 64) failed [ 404.195303][T12765] loop0: detected capacity change from 0 to 32768 [ 404.199768][T12784] FAT-fs (loop6): Directory bread(block 65) failed [ 404.235234][T12784] FAT-fs (loop6): Directory bread(block 66) failed [ 404.260047][T12765] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 404.265812][T12784] FAT-fs (loop6): Directory bread(block 67) failed [ 404.343094][T12784] FAT-fs (loop6): Directory bread(block 68) failed [ 404.384126][T12784] FAT-fs (loop6): Directory bread(block 69) failed [ 404.409813][T12784] FAT-fs (loop6): Directory bread(block 70) failed [ 404.445752][T12784] FAT-fs (loop6): Directory bread(block 71) failed [ 404.485347][T12784] FAT-fs (loop6): Directory bread(block 72) failed [ 404.509906][ T5826] ocfs2: Unmounting device (7,0) on (node local) [ 404.527906][T12784] FAT-fs (loop6): Directory bread(block 73) failed [ 404.640837][T12800] pim6reg: entered allmulticast mode [ 404.684934][T12800] pim6reg: left allmulticast mode [ 405.552820][T12838] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2482'. [ 405.782225][T12846] loop7: detected capacity change from 0 to 2048 [ 405.862754][T12846] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 405.947115][ T30] audit: type=1326 audit(1751335431.186:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9bb8e929 code=0x7ffc0000 [ 405.989728][T12846] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 406.045363][ T30] audit: type=1326 audit(1751335431.186:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9bb8e929 code=0x7ffc0000 [ 406.161972][ T30] audit: type=1326 audit(1751335431.216:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3a9bb8e929 code=0x7ffc0000 [ 406.219251][ T30] audit: type=1326 audit(1751335431.216:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9bb8e929 code=0x7ffc0000 [ 406.309567][ T30] audit: type=1326 audit(1751335431.216:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9bb8e929 code=0x7ffc0000 [ 406.396761][ T30] audit: type=1326 audit(1751335431.246:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3a9bb8e929 code=0x7ffc0000 [ 406.520490][ T30] audit: type=1326 audit(1751335431.246:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9bb8e929 code=0x7ffc0000 [ 406.592864][T12874] loop6: detected capacity change from 0 to 128 [ 406.620293][T12874] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 406.661447][ T30] audit: type=1326 audit(1751335431.246:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9bb8e929 code=0x7ffc0000 [ 406.705198][T12874] ext4 filesystem being mounted at /327/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 406.781582][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2504'. [ 406.796753][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2504'. [ 406.810368][T12885] netlink: 'syz.2.2504': attribute type 7 has an invalid length. [ 406.908128][ T6569] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 407.094045][T12891] program syz.7.2507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.155997][T12895] program syz.7.2507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.194474][T12895] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 407.859540][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2519'. [ 407.922905][T12918] loop7: detected capacity change from 0 to 1024 [ 407.965756][T12920] loop6: detected capacity change from 0 to 256 [ 408.006966][T12918] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.013064][ T43] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 408.039966][T12920] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 408.067597][ T30] audit: type=1800 audit(1751335433.306:73): pid=12918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2520" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 408.184174][T12926] loop6: detected capacity change from 0 to 512 [ 408.191852][T12926] EXT4-fs: Ignoring removed mblk_io_submit option [ 408.205496][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 408.236786][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 408.276350][ T8613] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.304455][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 408.316098][T12926] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 408.358502][ T43] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 408.390642][T12926] EXT4-fs (loop6): orphan cleanup on readonly fs [ 408.417008][T12926] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 408.417807][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.434836][T12926] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 408.502631][ T43] usb 2-1: Product: syz [ 408.512296][T12926] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 408.523872][ T43] usb 2-1: Manufacturer: syz [ 408.526319][T12926] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2523: bg 0: block 40: padding at end of block bitmap is not set [ 408.542504][ T43] usb 2-1: SerialNumber: syz [ 408.575510][ T43] usb 2-1: config 0 descriptor?? [ 408.582531][T12926] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 408.611010][T12926] EXT4-fs (loop6): 1 truncate cleaned up [ 408.624674][T12926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 408.627282][T12914] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 408.693472][T12914] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 408.729287][ T43] usb 2-1: ucan: probing device on interface #0 [ 408.852271][T12926] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.2523: bad symlink. [ 408.950486][ T6569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.378670][ T43] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 409.433238][ T43] usb 2-1: USB disconnect, device number 19 [ 410.200744][T12966] loop7: detected capacity change from 0 to 32768 [ 410.255140][T12966] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2541 (12966) [ 410.312970][T12966] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 410.351029][T12966] BTRFS info (device loop7): using sha256 (sha256-x86_64) checksum algorithm [ 410.507447][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2550'. [ 410.541595][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2550'. [ 410.587159][T12999] netlink: 'syz.6.2550': attribute type 30 has an invalid length. [ 410.701689][ T8613] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 410.752353][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2554'. [ 411.126561][T13016] program syz.2.2558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.264256][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2559'. [ 411.322816][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2559'. [ 411.517256][T13026] sp0: Synchronizing with TNC [ 411.663963][T12982] loop0: detected capacity change from 0 to 32768 [ 411.725864][T12982] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 411.932708][T12982] XFS (loop0): Ending clean mount [ 411.993880][T12982] XFS (loop0): Quotacheck needed: Please wait. [ 412.129439][T12982] XFS (loop0): Quotacheck: Done. [ 412.352049][ T5826] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 414.268916][T13121] loop1: detected capacity change from 0 to 512 [ 414.302484][T13121] EXT4-fs (loop1): Test dummy encryption mode enabled [ 414.325438][T13121] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 414.350235][T13121] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 414.374633][T13121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.492263][T13121] EXT4-fs (loop1): can't disable delalloc during remount [ 414.603188][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.965205][T13146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.358409][T13161] binder: 13160:13161 ioctl 400c620e 200000000380 returned -22 [ 415.381091][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2619'. [ 415.404484][T13164] tipc: Started in network mode [ 415.417395][T13164] tipc: Node identity , cluster identity 4711 [ 415.430642][T13162] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 415.431995][T13164] tipc: Failed to obtain node identity [ 415.454321][T13166] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2622'. [ 415.468834][T13164] tipc: Enabling of bearer rejected, failed to enable media [ 415.469972][T13162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.832265][T13181] loop7: detected capacity change from 0 to 512 [ 415.928544][T13181] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 415.959946][T13181] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 415.982043][T13184] loop1: detected capacity change from 0 to 16 [ 416.020525][T13181] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 416.030386][T13184] erofs (device loop1): mounted with root inode @ nid 36. [ 416.054094][T13181] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 416.066802][T13184] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 416.102677][T13181] System zones: 0-2, 18-18, 34-34 [ 416.113498][T13184] erofs (device loop1): readahead error at folio 0 @ nid 89 [ 416.141874][T13181] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.2629: iget: bad i_size value: 360287970189639680 [ 416.168218][T13184] erofs (device loop1): read error -117 @ 0 of nid 89 [ 416.196023][ T30] audit: type=1800 audit(1751335441.436:74): pid=13184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2631" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 416.241730][T13181] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.2629: couldn't read orphan inode 15 (err -117) [ 416.309771][T13181] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.638067][ T8613] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.000319][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 417.057311][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2645'. [ 417.108540][T13216] netlink: 'syz.2.2645': attribute type 18 has an invalid length. [ 417.142646][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 417.182079][T13193] loop0: detected capacity change from 0 to 32768 [ 417.246019][T13193] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 417.424071][T13193] XFS (loop0): Ending clean mount [ 417.447332][T13193] XFS (loop0): Quotacheck needed: Please wait. [ 417.541708][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.562024][T13193] XFS (loop0): Quotacheck: Done. [ 417.739844][T13204] loop1: detected capacity change from 0 to 32768 [ 417.795839][T13218] loop6: detected capacity change from 0 to 32768 [ 417.824289][T13218] btrfs: Deprecated parameter 'usebackuproot' [ 417.843282][T13218] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 417.862564][ T5826] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 417.886956][T13204] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 417.903752][T13218] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2646 (13218) [ 417.988636][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.048325][T13218] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 418.102734][T13204] XFS (loop1): Ending clean mount [ 418.153101][T13218] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm [ 418.162178][T13218] BTRFS info (device loop6): using free-space-tree [ 418.476324][T13218] BTRFS info (device loop6): rebuilding free space tree [ 418.491184][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.553773][ T5832] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 418.840523][ T6569] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 418.919846][T13289] loop0: detected capacity change from 0 to 256 [ 418.943456][T13283] xt_CT: No such helper "pptp" [ 419.457767][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.609418][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.867898][T13319] loop0: detected capacity change from 0 to 128 [ 419.909208][T13319] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 419.947211][T13319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.121687][T13324] loop1: detected capacity change from 0 to 4096 [ 420.161289][T13324] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 420.779053][T13343] loop1: detected capacity change from 0 to 4096 [ 420.839833][T13348] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 421.791814][T13384] loop7: detected capacity change from 0 to 256 [ 421.840140][T13384] exfat: Deprecated parameter 'namecase' [ 421.861266][T13384] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 422.016222][T13370] loop0: detected capacity change from 0 to 32768 [ 422.241530][T13389] loop7: detected capacity change from 0 to 4096 [ 422.671449][T13406] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2721'. [ 423.083916][T13394] loop1: detected capacity change from 0 to 32768 [ 423.130766][T13418] loop6: detected capacity change from 0 to 512 [ 423.160993][T13423] loop0: detected capacity change from 0 to 8 [ 423.178831][T13418] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.2726: corrupted in-inode xattr: invalid ea_ino [ 423.197125][T13423] squashfs: Unknown parameter '×½DÅ6 [ 423.197125][T13423] ꛽è´þ-¦!Ë1[I‚\3I' [ 423.237218][T13418] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.2726: couldn't read orphan inode 15 (err -117) [ 423.316475][T13418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.502208][ T6569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.590312][T13430] loop0: detected capacity change from 0 to 1024 [ 423.734640][ T36] hfsplus: b-tree write err: -5, ino 4 [ 423.984521][T13439] loop1: detected capacity change from 0 to 1024 [ 424.255216][ T43] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 424.418443][ T43] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 424.434571][ T43] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 424.446648][ T43] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 424.459975][ T43] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 424.473636][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.552084][T13442] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 425.283112][T13466] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2749'. [ 425.388995][ T43] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 425.418160][ T43] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input16 [ 425.532993][ T43] usb 3-1: USB disconnect, device number 18 [ 425.539044][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 425.989796][ T30] audit: type=1326 audit(1751335451.226:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13480 comm="syz.7.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9def38e929 code=0x7ffc0000 [ 426.092603][ T30] audit: type=1326 audit(1751335451.246:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13480 comm="syz.7.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9def38e929 code=0x7ffc0000 [ 426.180950][T13479] loop1: detected capacity change from 0 to 4096 [ 426.181325][ T30] audit: type=1326 audit(1751335451.246:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13480 comm="syz.7.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9def38e929 code=0x7ffc0000 [ 426.242904][T13479] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 426.325008][T13485] loop0: detected capacity change from 0 to 256 [ 426.346287][ T30] audit: type=1326 audit(1751335451.246:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13480 comm="syz.7.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9def38e929 code=0x7ffc0000 [ 426.405344][ T30] audit: type=1326 audit(1751335451.246:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13480 comm="syz.7.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f9def38e929 code=0x7ffc0000 [ 426.450348][T13485] FAT-fs (loop0): Directory bread(block 64) failed [ 426.475036][T13485] FAT-fs (loop0): Directory bread(block 65) failed [ 426.503146][ T30] audit: type=1326 audit(1751335451.746:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13480 comm="syz.7.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9def38e929 code=0x7ffc0000 [ 426.530990][T13485] FAT-fs (loop0): Directory bread(block 66) failed [ 426.566164][T13485] FAT-fs (loop0): Directory bread(block 67) failed [ 426.572674][ T30] audit: type=1326 audit(1751335451.746:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13480 comm="syz.7.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9def38e929 code=0x7ffc0000 [ 426.619062][T13485] FAT-fs (loop0): Directory bread(block 68) failed [ 426.642632][T13485] FAT-fs (loop0): Directory bread(block 69) failed [ 426.664290][T13485] FAT-fs (loop0): Directory bread(block 70) failed [ 426.701591][T13485] FAT-fs (loop0): Directory bread(block 71) failed [ 426.732348][T13485] FAT-fs (loop0): Directory bread(block 72) failed [ 426.740630][T13485] FAT-fs (loop0): Directory bread(block 73) failed [ 427.565303][T13517] loop1: detected capacity change from 0 to 4096 [ 427.631318][T13531] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 427.662660][ T5969] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 427.728425][T13517] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 427.812717][T13517] Remounting filesystem read-only [ 427.895981][ T5969] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 427.905491][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.927453][ T5832] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 427.937016][ T5969] usb 3-1: Product: syz [ 427.942947][ T5969] usb 3-1: Manufacturer: syz [ 427.947594][ T5969] usb 3-1: SerialNumber: syz [ 427.965954][ T5969] usb 3-1: config 0 descriptor?? [ 428.200612][ T5969] hso 3-1:0.0: Failed to find BULK IN ep [ 428.227190][ T5969] usb-storage 3-1:0.0: USB Mass Storage device detected [ 428.376173][ T5922] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 428.426137][ T5969] usb 3-1: USB disconnect, device number 19 [ 428.552839][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 428.564084][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 428.587961][ T5922] usb 2-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 428.604014][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.626115][ T5922] usb 2-1: config 0 descriptor?? [ 432.388263][T13621] loop6: detected capacity change from 0 to 1764 [ 432.846281][T13629] loop7: detected capacity change from 0 to 1024 [ 432.898116][T13629] EXT4-fs: Ignoring removed bh option [ 432.991988][T13629] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.751219][T13638] loop0: detected capacity change from 0 to 1024 [ 434.560041][T13650] loop1: detected capacity change from 0 to 1024 [ 442.741023][ T68] hfsplus: b-tree write err: -5, ino 4 [ 442.986612][ T8613] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.801627][T13674] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 443.801627][T13674] The task syz.2.2843 (13674) triggered the difference, watch for misbehavior. [ 445.650135][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.671690][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.736070][T13678] loop1: detected capacity change from 0 to 32768 [ 445.797713][T13696] sctp: [Deprecated]: syz.0.2855 (pid 13696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.797713][T13696] Use struct sctp_sack_info instead [ 445.843546][T13678] [ 445.843546][T13678] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 445.843546][T13678] [ 445.946493][T13678] ERROR: (device loop1): diWrite: ixpxd invalid [ 445.946493][T13678] [ 446.038715][T13678] ERROR: (device loop1): txCommit: [ 446.038715][T13678] [ 446.265981][ T5832] [ 446.265981][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 446.265981][ T5832] [ 446.328651][T13702] loop0: detected capacity change from 0 to 256 [ 446.360260][ T5832] [ 446.360260][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 446.360260][ T5832] [ 446.431553][T13702] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 447.229774][T13708] program syz.4.2862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 447.848547][T13716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2865'. [ 450.698255][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 450.713100][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 450.723106][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 450.734320][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 450.745957][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 451.070435][T13763] loop1: detected capacity change from 0 to 64 [ 451.622393][ C0] sched: DL replenish lagged too much [ 451.857216][T13771] ptrace attach of "./syz-executor exec"[5832] was attempted by ""[13771] [ 452.659387][T13758] chnl_net:caif_netlink_parms(): no params data found [ 452.846114][ T5831] Bluetooth: hci6: command tx timeout [ 453.615595][T13758] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.676044][T13758] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.716108][T13758] bridge_slave_0: entered allmulticast mode [ 453.784639][T13758] bridge_slave_0: entered promiscuous mode [ 453.854420][T13758] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.892667][T13758] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.925430][T13758] bridge_slave_1: entered allmulticast mode [ 453.992046][T13758] bridge_slave_1: entered promiscuous mode [ 454.498581][T13758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.556167][T13777] loop1: detected capacity change from 0 to 32768 [ 454.599114][T13758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.922617][ T5831] Bluetooth: hci6: command tx timeout [ 455.170435][T13758] team0: Port device team_slave_0 added [ 455.286093][T13758] team0: Port device team_slave_1 added [ 455.721463][T13758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.802601][T13758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.971985][T13758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.171997][T13758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.238613][T13758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.452214][T13758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.002692][ T5831] Bluetooth: hci6: command tx timeout [ 457.032662][T13758] hsr_slave_0: entered promiscuous mode [ 457.075841][T13758] hsr_slave_1: entered promiscuous mode [ 457.115993][T13758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.189707][T13758] Cannot create hsr debugfs directory [ 457.939815][T13846] loop1: detected capacity change from 0 to 64 [ 458.023607][T13846] hfs: filesystem is marked locked, mounting read-only. [ 458.314672][ T5832] hfs: walked past end of dir [ 458.369443][ T5832] hfs: walked past end of dir [ 458.934854][T13758] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 459.082914][ T5831] Bluetooth: hci6: command tx timeout [ 464.824341][T13758] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 464.988073][T13758] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 465.640011][T13758] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 466.477757][T13758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.669504][T13758] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.938398][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.946024][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.085335][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.092736][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.292608][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 467.355270][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 467.382698][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 467.391728][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 467.403655][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 469.177540][T13895] support for cryptoloop has been removed. Use dm-crypt instead. [ 469.493266][ T51] Bluetooth: hci1: command tx timeout [ 469.757504][T13758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.842304][T13877] chnl_net:caif_netlink_parms(): no params data found [ 470.998890][T13877] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.051863][T13877] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.103293][T13877] bridge_slave_0: entered allmulticast mode [ 471.144799][T13877] bridge_slave_0: entered promiscuous mode [ 471.229596][T13877] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.262693][T13877] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.330024][T13877] bridge_slave_1: entered allmulticast mode [ 471.370369][T13877] bridge_slave_1: entered promiscuous mode [ 471.563360][ T51] Bluetooth: hci1: command tx timeout [ 471.776871][T13877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.870642][T13877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.384676][T13877] team0: Port device team_slave_0 added [ 472.637121][T13877] team0: Port device team_slave_1 added [ 473.019997][T13877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.047915][T13877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.140355][T13877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.224148][T13877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.246772][T13877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.334707][T13877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.570533][T13758] veth0_vlan: entered promiscuous mode [ 473.643602][ T51] Bluetooth: hci1: command tx timeout [ 473.696285][ T5922] usb 2-1: USB disconnect, device number 20 [ 474.045475][T13877] hsr_slave_0: entered promiscuous mode [ 474.093194][T13877] hsr_slave_1: entered promiscuous mode [ 474.132787][T13877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.140463][T13877] Cannot create hsr debugfs directory [ 475.723169][ T51] Bluetooth: hci1: command tx timeout [ 476.208035][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 476.226655][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 476.237432][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 476.258502][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 476.275161][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 478.373447][ T5831] Bluetooth: hci2: command tx timeout [ 480.452650][ T5831] Bluetooth: hci2: command tx timeout [ 482.523924][ T5831] Bluetooth: hci2: command tx timeout [ 484.603023][ T5831] Bluetooth: hci2: command tx timeout [ 491.307630][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 491.319584][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 491.335172][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 491.350230][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 491.358975][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 492.103642][ T5831] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 492.117986][ T5831] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 492.129538][ T5831] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 492.188880][T13956] netlink: 'syz.0.2959': attribute type 25 has an invalid length. [ 492.212618][ T5831] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 492.231219][ T5831] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 492.273366][T13957] netlink: 'syz.0.2959': attribute type 25 has an invalid length. [ 492.364620][T13758] veth1_vlan: entered promiscuous mode [ 492.626986][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.405740][ T51] Bluetooth: hci7: command tx timeout [ 493.727071][T13758] veth0_macvtap: entered promiscuous mode [ 494.289726][ T51] Bluetooth: hci8: command tx timeout [ 494.853737][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 494.866419][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 494.885098][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 494.894307][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 494.902255][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 494.991794][T13758] veth1_macvtap: entered promiscuous mode [ 495.484043][ T5831] Bluetooth: hci7: command tx timeout [ 495.518393][T13758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.678615][T13758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.879043][T13758] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.896789][T13758] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.908849][T13758] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.924137][T13758] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.256719][T13877] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 496.365132][ T5831] Bluetooth: hci8: command tx timeout [ 496.447106][T13877] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 496.503750][T13877] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 496.686986][T13877] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 497.003183][ T5831] Bluetooth: hci5: command tx timeout [ 497.013624][T13964] chnl_net:caif_netlink_parms(): no params data found [ 497.392930][T13966] chnl_net:caif_netlink_parms(): no params data found [ 497.563799][ T5831] Bluetooth: hci7: command tx timeout [ 497.721648][T13969] chnl_net:caif_netlink_parms(): no params data found [ 497.769849][T13958] chnl_net:caif_netlink_parms(): no params data found [ 498.025645][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.047771][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.306495][T13964] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.322830][T13964] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.330375][T13964] bridge_slave_0: entered allmulticast mode [ 498.352134][T13964] bridge_slave_0: entered promiscuous mode [ 498.445523][ T5831] Bluetooth: hci8: command tx timeout [ 498.619089][T13964] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.632716][T13964] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.640140][T13964] bridge_slave_1: entered allmulticast mode [ 498.661351][T13964] bridge_slave_1: entered promiscuous mode [ 499.082851][ T5831] Bluetooth: hci5: command tx timeout [ 499.266515][T13964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.321263][T13964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.466294][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.480990][T13969] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.502319][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.511665][T13969] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.542570][T13969] bridge_slave_0: entered allmulticast mode [ 499.550856][T13969] bridge_slave_0: entered promiscuous mode [ 499.642937][ T5831] Bluetooth: hci7: command tx timeout [ 499.970669][T13964] team0: Port device team_slave_0 added [ 500.125753][T13969] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.160969][T13969] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.169928][T13969] bridge_slave_1: entered allmulticast mode [ 500.203701][T13969] bridge_slave_1: entered promiscuous mode [ 500.522753][ T5831] Bluetooth: hci8: command tx timeout [ 500.598327][T13964] team0: Port device team_slave_1 added [ 500.748683][T13969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.906167][T13966] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.918587][T13966] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.935261][T13966] bridge_slave_0: entered allmulticast mode [ 500.956511][T13966] bridge_slave_0: entered promiscuous mode [ 501.118906][T13969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.162747][ T5831] Bluetooth: hci5: command tx timeout [ 501.174505][T13958] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.181768][T13958] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.221565][T13958] bridge_slave_0: entered allmulticast mode [ 501.274120][T13958] bridge_slave_0: entered promiscuous mode [ 501.304589][T13958] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.311864][T13958] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.443453][T13958] bridge_slave_1: entered allmulticast mode [ 501.474830][T13958] bridge_slave_1: entered promiscuous mode [ 501.497097][T13966] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.522789][T13966] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.540568][T13966] bridge_slave_1: entered allmulticast mode [ 501.614770][T13966] bridge_slave_1: entered promiscuous mode [ 502.140250][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2966'. [ 503.244394][ T5831] Bluetooth: hci5: command tx timeout [ 503.448691][T13966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.477479][T13964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.496087][T13964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.550460][T13964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.622029][T13969] team0: Port device team_slave_0 added [ 503.669782][T13877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.103970][T14016] loop8: detected capacity change from 0 to 32768 [ 504.155982][T13958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.194945][T13966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.353736][T14016] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,background_compression=gzip,degraded=yes,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,read_only,reconstruct_alloc [ 504.353788][T14016] allowing incompatible features above 0.0: (unknown version) [ 504.353807][T14016] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 504.403644][T14016] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0 [ 504.418132][T14016] bcachefs (loop8): recovering from clean shutdown, journal seq 10 [ 504.426392][T14016] bcachefs (loop8): dropping and reconstructing all alloc info [ 504.463757][T13964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.470810][T13964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.525052][T14016] bcachefs (loop8): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 504.548992][T14016] bcachefs (loop8): check_topology... [ 504.549083][T14016] bcachefs (loop8): btree root extents unreadable, must recover from scan [ 504.565531][T14016] bcachefs (loop8): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 504.577638][T14016] bcachefs (loop8): bch2_check_root(): error restart_recovery [ 504.585292][T14016] bcachefs (loop8): scan_for_btree_nodes... [ 504.643491][T14016] bcachefs (loop8): btree node scan found 3 nodes after overwrites [ 504.664695][T14016] done [ 504.667505][T14016] bcachefs (loop8): check_topology... [ 504.667588][T14016] bcachefs (loop8): btree root extents unreadable, must recover from scan [ 504.681896][T14016] bcachefs (loop8): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX [ 504.693074][T14016] bcachefs (loop8): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 504.753892][T14016] bcachefs (loop8): empty interior btree node at btree=extents level=1 [ 504.753919][T14016] u64s 5 type btree_ptr SPOS_MAX len 0 ver 0, fixing [ 504.769771][T14016] bcachefs (loop8): bch2_btree_repair_topology_recurse(): error ECHILD [ 504.778278][T14016] bcachefs (loop8): empty btree root extents [ 504.787329][T14016] done [ 504.790122][T14016] bcachefs (loop8): accounting_read... [ 504.796609][T13964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.814525][T14016] done [ 504.817321][T14016] bcachefs (loop8): alloc_read... done [ 504.824232][T14016] bcachefs (loop8): snapshots_read... done [ 504.847833][T14016] bcachefs (loop8): check_allocations... [ 504.856702][T14016] bcachefs (loop8): btree ptr not marked in member info btree allocated bitmap [ 504.856762][T14016] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 504.898741][T14016] bcachefs (loop8): btree ptr not marked in member info btree allocated bitmap [ 504.898765][T14016] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 504.933522][T14016] bcachefs (loop8): btree ptr not marked in member info btree allocated bitmap [ 504.933548][T14016] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 505.017723][T14016] bcachefs (loop8): btree ptr not marked in member info btree allocated bitmap [ 505.017748][T14016] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 505.081573][T13969] team0: Port device team_slave_1 added [ 505.093566][T14016] done [ 505.099296][T14016] bcachefs (loop8): going read-write [ 505.152843][T14016] bcachefs (loop8): Fixed errors, running fsck a second time to verify fs is clean [ 505.177057][T14016] bcachefs (loop8): going read-only [ 505.182901][T14016] bcachefs (loop8): finished waiting for writes to stop [ 505.226457][T14016] bcachefs (loop8): flushing journal and stopping allocators, journal seq 11 [ 505.236235][T14016] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 11 [ 505.260111][T14016] bcachefs (loop8): unclean shutdown complete, journal seq 12 [ 505.270167][T13958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.281600][T14016] bcachefs (loop8): done going read-only, filesystem not clean [ 505.289514][T14016] bcachefs (loop8): done starting filesystem [ 505.483780][T13758] bcachefs (loop8): shutting down [ 505.604968][T13966] team0: Port device team_slave_0 added [ 505.647553][T13758] bcachefs (loop8): shutdown complete [ 506.573307][T13958] team0: Port device team_slave_0 added [ 506.604624][T13966] team0: Port device team_slave_1 added [ 506.615491][T13958] team0: Port device team_slave_1 added [ 506.775390][T13964] hsr_slave_0: entered promiscuous mode [ 506.806654][T13964] hsr_slave_1: entered promiscuous mode [ 506.824073][T13964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.831856][T13964] Cannot create hsr debugfs directory [ 506.850300][T13969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.867868][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.944360][T13969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.969721][T13969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.982583][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.050285][T13969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.108741][T13877] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.127730][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.145842][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.555918][ T1157] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.218410][T13966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.255219][T13966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.318078][T13966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.348591][T13958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.372798][T13958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.418218][T13958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.451003][T13958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.479424][T13958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.540918][T13958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.778525][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.786033][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.821346][T13966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.847738][T13966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.887556][T13966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.334604][T13969] hsr_slave_0: entered promiscuous mode [ 509.363898][T13969] hsr_slave_1: entered promiscuous mode [ 509.381138][T13969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.390856][T13969] Cannot create hsr debugfs directory [ 509.557413][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.564707][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.956205][T13966] hsr_slave_0: entered promiscuous mode [ 509.987278][T13966] hsr_slave_1: entered promiscuous mode [ 510.000101][T13966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.024178][T13966] Cannot create hsr debugfs directory [ 510.060382][T13958] hsr_slave_0: entered promiscuous mode [ 510.084283][T13958] hsr_slave_1: entered promiscuous mode [ 510.091381][T13958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.109386][T13958] Cannot create hsr debugfs directory [ 520.638946][T13877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.271220][T13877] veth0_vlan: entered promiscuous mode [ 522.412858][T13877] veth1_vlan: entered promiscuous mode [ 522.653411][T13877] veth0_macvtap: entered promiscuous mode [ 522.739419][T13877] veth1_macvtap: entered promiscuous mode [ 522.870329][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 522.903269][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 522.923356][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 522.934882][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 522.953793][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 523.025149][T13877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.091450][T13877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.283517][T13877] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.330195][T13877] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.373474][T13877] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.438860][T13877] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.092549][ T51] Bluetooth: hci0: command tx timeout [ 526.213537][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 526.224910][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 526.235151][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 526.263216][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 526.276511][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 527.163337][ T5831] Bluetooth: hci0: command tx timeout [ 528.362994][ T5831] Bluetooth: hci3: command tx timeout [ 529.242856][ T5831] Bluetooth: hci0: command tx timeout [ 530.451714][ T5831] Bluetooth: hci3: command tx timeout [ 531.323219][ T5831] Bluetooth: hci0: command tx timeout [ 532.523133][ T5831] Bluetooth: hci3: command tx timeout [ 534.604736][ T51] Bluetooth: hci3: command tx timeout [ 535.994650][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.008564][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.019082][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.027540][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.035815][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 538.123871][ T51] Bluetooth: hci4: command tx timeout [ 540.206450][ T51] Bluetooth: hci4: command tx timeout [ 542.283307][ T51] Bluetooth: hci4: command tx timeout [ 544.367151][ T51] Bluetooth: hci4: command tx timeout [ 552.679936][ T5831] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 552.738213][ T5838] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 552.749740][ T5838] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 552.761689][ T5838] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 552.793856][ T5838] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 552.803582][ T5838] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 552.811911][ T5838] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 552.821020][ T5838] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 552.833607][ T5838] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 552.845385][ T5838] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 554.924318][T14117] Bluetooth: hci9: command tx timeout [ 554.931523][T14117] Bluetooth: hci10: command tx timeout [ 555.399710][ T5831] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 555.417545][ T5831] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 555.442939][ T5831] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 555.454463][ T5831] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 555.465506][ T5831] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 557.003800][T14117] Bluetooth: hci10: command tx timeout [ 557.009428][T14117] Bluetooth: hci9: command tx timeout [ 557.085533][T14071] chnl_net:caif_netlink_parms(): no params data found [ 557.572919][ T5831] Bluetooth: hci11: command tx timeout [ 557.748255][T14112] chnl_net:caif_netlink_parms(): no params data found [ 557.841389][T14106] chnl_net:caif_netlink_parms(): no params data found [ 558.200287][T14100] chnl_net:caif_netlink_parms(): no params data found [ 558.777916][T14111] chnl_net:caif_netlink_parms(): no params data found [ 559.083978][ T5831] Bluetooth: hci9: command tx timeout [ 559.089538][ T5831] Bluetooth: hci10: command tx timeout [ 559.582051][T14071] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.625246][T14071] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.650702][ T5831] Bluetooth: hci11: command tx timeout [ 559.675240][T14071] bridge_slave_0: entered allmulticast mode [ 559.694180][T14071] bridge_slave_0: entered promiscuous mode [ 559.900204][T14071] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.923976][T14071] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.931487][T14071] bridge_slave_1: entered allmulticast mode [ 559.970349][T14071] bridge_slave_1: entered promiscuous mode [ 560.660903][T14112] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.684085][T14112] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.691771][T14112] bridge_slave_0: entered allmulticast mode [ 560.737105][T14112] bridge_slave_0: entered promiscuous mode [ 560.758948][T14112] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.793314][T14112] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.801317][T14112] bridge_slave_1: entered allmulticast mode [ 560.877601][T14112] bridge_slave_1: entered promiscuous mode [ 561.000792][T14100] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.024406][T14100] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.034498][T14100] bridge_slave_0: entered allmulticast mode [ 561.054947][T14100] bridge_slave_0: entered promiscuous mode [ 561.164983][ T5831] Bluetooth: hci10: command tx timeout [ 561.170596][ T5831] Bluetooth: hci9: command tx timeout [ 561.187504][T14106] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.211613][T14106] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.219910][T14106] bridge_slave_0: entered allmulticast mode [ 561.244526][T14106] bridge_slave_0: entered promiscuous mode [ 561.296090][T14071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.439137][T14100] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.464243][T14100] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.490641][T14100] bridge_slave_1: entered allmulticast mode [ 561.511471][T14100] bridge_slave_1: entered promiscuous mode [ 561.639915][T14106] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.663158][T14106] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.672114][T14106] bridge_slave_1: entered allmulticast mode [ 561.708402][T14106] bridge_slave_1: entered promiscuous mode [ 561.731868][ T5831] Bluetooth: hci11: command tx timeout [ 561.831760][T14071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.098248][T14112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.261433][T14100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.816049][T14112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.994200][T14100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.273936][T14111] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.281198][T14111] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.303220][T14111] bridge_slave_0: entered allmulticast mode [ 563.335933][T14111] bridge_slave_0: entered promiscuous mode [ 563.358037][T14111] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.372873][T14111] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.380475][T14111] bridge_slave_1: entered allmulticast mode [ 563.404980][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 563.432915][T14111] bridge_slave_1: entered promiscuous mode [ 563.461927][T14071] team0: Port device team_slave_0 added [ 563.491353][T14071] team0: Port device team_slave_1 added [ 563.777213][T14100] team0: Port device team_slave_0 added [ 563.810159][ T5831] Bluetooth: hci11: command tx timeout [ 563.931799][T14106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.976120][T14106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.211974][T14128] chnl_net:caif_netlink_parms(): no params data found [ 564.273519][T14112] team0: Port device team_slave_0 added [ 564.286037][T14100] team0: Port device team_slave_1 added [ 564.728521][T14111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.871587][T14071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.892603][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.957231][T14071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.014003][T14112] team0: Port device team_slave_1 added [ 565.683830][T14106] team0: Port device team_slave_0 added [ 565.709539][T14106] team0: Port device team_slave_1 added [ 565.728513][T14111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.959978][T14071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.992916][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.061436][T14071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.289001][T14100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.307227][T14100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.358194][T14100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.757523][T14111] team0: Port device team_slave_0 added [ 566.943297][T14112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.950525][T14112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.027750][T14112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.116113][T14100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.132928][T14100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.202158][T14100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.254896][T14106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.261943][T14106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.342796][T14106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.386721][T14111] team0: Port device team_slave_1 added [ 567.458331][T14112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.472683][T14112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.554012][T14112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.813787][T14106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.833545][T14106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.888989][T14106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.352019][T14128] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.372818][T14128] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.380626][T14128] bridge_slave_0: entered allmulticast mode [ 568.414772][T14128] bridge_slave_0: entered promiscuous mode [ 568.541878][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.550337][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.669930][T14111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.692606][T14111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.756909][T14111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.904685][T14112] hsr_slave_0: entered promiscuous mode [ 568.924613][T14112] hsr_slave_1: entered promiscuous mode [ 568.942168][T14112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.964215][T14112] Cannot create hsr debugfs directory [ 568.971536][T14128] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.993593][T14128] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.001112][T14128] bridge_slave_1: entered allmulticast mode [ 569.043840][T14128] bridge_slave_1: entered promiscuous mode [ 569.173791][T14100] hsr_slave_0: entered promiscuous mode [ 569.185571][T14100] hsr_slave_1: entered promiscuous mode [ 569.209545][T14100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 569.232643][T14100] Cannot create hsr debugfs directory [ 569.460630][T14111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.483929][T14111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.550856][T14111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.795277][T14128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.080024][T14071] hsr_slave_0: entered promiscuous mode [ 570.116212][T14071] hsr_slave_1: entered promiscuous mode [ 570.133469][T14071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.141145][T14071] Cannot create hsr debugfs directory [ 570.331627][T14128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.565074][T14106] hsr_slave_0: entered promiscuous mode [ 570.572218][T14106] hsr_slave_1: entered promiscuous mode [ 570.605303][T14106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.622717][T14106] Cannot create hsr debugfs directory [ 570.981601][T14128] team0: Port device team_slave_0 added [ 571.388413][T14128] team0: Port device team_slave_1 added [ 571.707696][T14111] hsr_slave_0: entered promiscuous mode [ 571.734709][T14111] hsr_slave_1: entered promiscuous mode [ 571.751249][T14111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.772809][T14111] Cannot create hsr debugfs directory [ 571.953728][T14128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.960774][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.033922][T14128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.560787][T14128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.588985][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.657916][T14128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.594879][T14128] hsr_slave_0: entered promiscuous mode [ 573.613110][T14128] hsr_slave_1: entered promiscuous mode [ 573.630400][T14128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.664264][T14128] Cannot create hsr debugfs directory [ 575.732810][ T5831] Bluetooth: hci6: command 0x0406 tx timeout [ 582.561904][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 582.592923][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 582.621390][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 582.645639][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 582.653691][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 583.339386][T14195] chnl_net:caif_netlink_parms(): no params data found [ 583.834879][T14195] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.852636][T14195] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.860191][T14195] bridge_slave_0: entered allmulticast mode [ 583.928189][T14195] bridge_slave_0: entered promiscuous mode [ 583.954685][T14195] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.961913][T14195] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.003413][T14195] bridge_slave_1: entered allmulticast mode [ 584.043896][T14195] bridge_slave_1: entered promiscuous mode [ 584.318895][T14195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.396450][T14195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.685670][T14117] Bluetooth: hci1: command tx timeout [ 584.734037][T14195] team0: Port device team_slave_0 added [ 584.777304][T14195] team0: Port device team_slave_1 added [ 585.092804][T14195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.099878][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.282747][T14195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.334710][T14195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.341844][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.472674][T14195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.875653][T14195] hsr_slave_0: entered promiscuous mode [ 585.904027][T14195] hsr_slave_1: entered promiscuous mode [ 585.912245][T14195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 585.954527][T14195] Cannot create hsr debugfs directory [ 586.324267][ T5831] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 586.338035][ T5831] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 586.348769][ T5831] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 586.379311][ T5831] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 586.387929][ T5831] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 586.772845][ T5831] Bluetooth: hci1: command tx timeout [ 587.391029][T14204] chnl_net:caif_netlink_parms(): no params data found [ 587.909170][T14204] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.933752][T14204] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.941587][T14204] bridge_slave_0: entered allmulticast mode [ 587.976460][T14204] bridge_slave_0: entered promiscuous mode [ 587.999928][T14204] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.027098][T14204] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.045300][T14204] bridge_slave_1: entered allmulticast mode [ 588.062897][T14204] bridge_slave_1: entered promiscuous mode [ 588.314979][T14204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.384033][T14204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.443278][ T5831] Bluetooth: hci12: command tx timeout [ 588.733947][T14204] team0: Port device team_slave_0 added [ 588.849331][ T5831] Bluetooth: hci1: command tx timeout [ 588.857695][T14204] team0: Port device team_slave_1 added [ 589.052834][T14204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.059891][T14204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.137569][T14204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.175829][T14204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.194880][T14204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.283249][T14204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.635801][T14204] hsr_slave_0: entered promiscuous mode [ 589.664146][T14204] hsr_slave_1: entered promiscuous mode [ 589.671151][T14204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.704340][T14204] Cannot create hsr debugfs directory [ 590.523247][ T5831] Bluetooth: hci12: command tx timeout [ 590.923103][ T5831] Bluetooth: hci1: command tx timeout [ 592.604040][ T5831] Bluetooth: hci12: command tx timeout [ 594.682946][ T5831] Bluetooth: hci12: command tx timeout [ 596.573622][T14117] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 596.587633][T14117] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 596.601924][T14117] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 596.611457][T14117] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 596.620430][T14117] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 597.351005][T14219] chnl_net:caif_netlink_parms(): no params data found [ 597.830193][T14219] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.856147][T14219] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.873355][T14219] bridge_slave_0: entered allmulticast mode [ 597.902848][T14219] bridge_slave_0: entered promiscuous mode [ 597.914706][T14219] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.926451][T14219] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.942900][T14219] bridge_slave_1: entered allmulticast mode [ 597.971634][T14219] bridge_slave_1: entered promiscuous mode [ 598.193938][T14219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.246271][T14219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.584037][T14219] team0: Port device team_slave_0 added [ 598.630194][T14219] team0: Port device team_slave_1 added [ 598.684211][T14117] Bluetooth: hci13: command tx timeout [ 598.872825][T14219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.879850][T14219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.950693][T14219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.993082][T14219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.000117][T14219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.076431][T14219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.389230][T14219] hsr_slave_0: entered promiscuous mode [ 599.409774][T14219] hsr_slave_1: entered promiscuous mode [ 599.424450][T14219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.442588][T14219] Cannot create hsr debugfs directory [ 600.763442][ T5831] Bluetooth: hci13: command tx timeout [ 601.336967][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 602.843698][T14117] Bluetooth: hci13: command tx timeout [ 604.923716][T14117] Bluetooth: hci13: command tx timeout [ 613.724349][ T5831] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 613.737369][ T5831] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 613.747939][ T5831] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 613.759730][ T5831] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 613.767983][ T5831] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 613.877799][T14117] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 613.910440][T14117] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 613.930943][T14117] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 613.939723][T14117] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 613.949069][T14117] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 614.912820][ T5838] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 614.959462][ T5838] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 614.970529][ T5838] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 614.991601][ T5838] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 615.006162][ T5838] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 615.866073][T14237] chnl_net:caif_netlink_parms(): no params data found [ 615.890608][ T5838] Bluetooth: hci14: command tx timeout [ 616.043080][ T5838] Bluetooth: hci15: command tx timeout [ 616.349448][T14237] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.387121][T14237] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.399406][T14237] bridge_slave_0: entered allmulticast mode [ 616.423247][T14237] bridge_slave_0: entered promiscuous mode [ 616.444974][T14237] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.452215][T14237] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.484504][T14237] bridge_slave_1: entered allmulticast mode [ 616.516245][T14237] bridge_slave_1: entered promiscuous mode [ 616.699584][ T5838] Bluetooth: hci8: command 0x0406 tx timeout [ 616.707141][ T5838] Bluetooth: hci7: command 0x0406 tx timeout [ 617.083134][T14115] Bluetooth: hci16: command tx timeout [ 617.963213][T14115] Bluetooth: hci14: command tx timeout [ 618.123429][T14115] Bluetooth: hci15: command tx timeout [ 619.163194][T14115] Bluetooth: hci16: command tx timeout [ 620.053508][T14115] Bluetooth: hci14: command tx timeout [ 620.203101][T14115] Bluetooth: hci15: command tx timeout [ 621.243037][T14115] Bluetooth: hci16: command tx timeout [ 621.803602][T14115] Bluetooth: hci5: command 0x0406 tx timeout [ 621.917652][T14237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.948015][T14237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.035379][T14230] chnl_net:caif_netlink_parms(): no params data found [ 622.125182][ T5831] Bluetooth: hci14: command tx timeout [ 622.283442][ T5831] Bluetooth: hci15: command tx timeout [ 622.428886][T14237] team0: Port device team_slave_0 added [ 622.614973][T14237] team0: Port device team_slave_1 added [ 623.177938][T14237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.206704][T14237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.273060][T14237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.305631][T14237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.324308][T14115] Bluetooth: hci16: command tx timeout [ 623.345661][T14237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.404358][T14237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.428833][T14232] chnl_net:caif_netlink_parms(): no params data found [ 623.595764][T14230] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.612730][T14230] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.620997][T14230] bridge_slave_0: entered allmulticast mode [ 623.665916][T14230] bridge_slave_0: entered promiscuous mode [ 623.725940][T14230] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.762241][T14230] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.771073][T14230] bridge_slave_1: entered allmulticast mode [ 623.803236][T14230] bridge_slave_1: entered promiscuous mode [ 624.266483][T14237] hsr_slave_0: entered promiscuous mode [ 624.290203][T14237] hsr_slave_1: entered promiscuous mode [ 624.312983][T14237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.320650][T14237] Cannot create hsr debugfs directory [ 624.489932][T14230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.661280][T14230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.277637][T14230] team0: Port device team_slave_0 added [ 625.296420][T14232] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.312738][T14232] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.320317][T14232] bridge_slave_0: entered allmulticast mode [ 625.362971][T14232] bridge_slave_0: entered promiscuous mode [ 625.387989][T14232] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.406213][T14232] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.423917][T14232] bridge_slave_1: entered allmulticast mode [ 625.445946][T14232] bridge_slave_1: entered promiscuous mode [ 625.599726][T14230] team0: Port device team_slave_1 added [ 626.080347][T14232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.013619][T14230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.020772][T14230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.095968][T14230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.125670][T14230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.142719][T14230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.213266][T14230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.295215][T14232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.705629][T14232] team0: Port device team_slave_0 added [ 627.868517][T14230] hsr_slave_0: entered promiscuous mode [ 627.885700][T14230] hsr_slave_1: entered promiscuous mode [ 627.903304][T14230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.912846][T14230] Cannot create hsr debugfs directory [ 627.931408][T14232] team0: Port device team_slave_1 added [ 628.596789][T14232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.617347][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.685395][T14232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.779204][T14232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.792547][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.866217][T14232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.340498][T14232] hsr_slave_0: entered promiscuous mode [ 629.366275][T14232] hsr_slave_1: entered promiscuous mode [ 629.392920][T14232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.400666][T14232] Cannot create hsr debugfs directory [ 630.009601][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.018516][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 643.579871][ T5831] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 643.606188][ T5831] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 643.619568][ T5831] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 643.628649][ T5831] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 643.653035][ T5831] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 644.400829][T14262] chnl_net:caif_netlink_parms(): no params data found [ 645.001975][T14262] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.052754][T14262] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.060378][T14262] bridge_slave_0: entered allmulticast mode [ 645.086006][T14262] bridge_slave_0: entered promiscuous mode [ 645.115182][T14262] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.142796][T14262] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.150364][T14262] bridge_slave_1: entered allmulticast mode [ 645.176233][T14262] bridge_slave_1: entered promiscuous mode [ 645.496284][T14262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.574179][T14262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.723076][ T5831] Bluetooth: hci17: command tx timeout [ 645.928560][T14262] team0: Port device team_slave_0 added [ 646.015004][T14262] team0: Port device team_slave_1 added [ 646.362135][T14262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.402687][T14262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.556136][T14262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.613069][T14262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.620117][T14262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.786242][T14262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.324809][T14262] hsr_slave_0: entered promiscuous mode [ 647.374731][T14262] hsr_slave_1: entered promiscuous mode [ 647.382029][T14262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.417622][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 647.461613][T14262] Cannot create hsr debugfs directory [ 647.595549][ T5831] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 647.609952][ T5831] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 647.623846][ T5831] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 647.648958][ T5831] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 647.668947][ T5831] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 647.803475][ T5831] Bluetooth: hci17: command tx timeout [ 648.836295][T14271] chnl_net:caif_netlink_parms(): no params data found [ 649.396015][T14271] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.413200][T14271] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.439710][T14271] bridge_slave_0: entered allmulticast mode [ 649.458025][T14271] bridge_slave_0: entered promiscuous mode [ 649.484747][T14271] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.492089][T14271] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.503974][T14271] bridge_slave_1: entered allmulticast mode [ 649.547317][T14271] bridge_slave_1: entered promiscuous mode [ 649.723920][ T5831] Bluetooth: hci18: command tx timeout [ 649.796494][T14271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.838565][T14271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.885173][ T5831] Bluetooth: hci17: command tx timeout [ 650.120306][T14271] team0: Port device team_slave_0 added [ 650.266928][T14271] team0: Port device team_slave_1 added [ 650.561492][T14271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.576631][T14271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.645151][T14271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.687138][T14271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.702763][T14271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.768003][T14271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.125971][T14271] hsr_slave_0: entered promiscuous mode [ 651.144545][T14271] hsr_slave_1: entered promiscuous mode [ 651.164696][T14271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 651.195049][T14271] Cannot create hsr debugfs directory [ 651.803253][T14115] Bluetooth: hci18: command tx timeout [ 651.963548][T14115] Bluetooth: hci17: command tx timeout [ 652.522777][T14115] Bluetooth: hci3: command 0x0406 tx timeout [ 653.882986][ T5831] Bluetooth: hci18: command tx timeout [ 655.964228][ T5831] Bluetooth: hci18: command tx timeout [ 657.005955][T14115] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 657.032532][T14115] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 657.044060][T14115] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 657.060634][T14115] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 657.068949][T14115] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 658.068479][T14286] chnl_net:caif_netlink_parms(): no params data found [ 658.727591][T14286] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.764855][T14286] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.792943][T14286] bridge_slave_0: entered allmulticast mode [ 658.827098][T14286] bridge_slave_0: entered promiscuous mode [ 658.858194][T14286] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.895937][T14286] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.936905][T14286] bridge_slave_1: entered allmulticast mode [ 658.963231][T14286] bridge_slave_1: entered promiscuous mode [ 659.163682][T14115] Bluetooth: hci19: command tx timeout [ 659.276608][T14286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.319461][T14286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.611827][T14286] team0: Port device team_slave_0 added [ 659.638852][T14286] team0: Port device team_slave_1 added [ 659.926483][T14286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.942627][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.045056][T14286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.246680][T14286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.273068][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.373928][T14286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.725870][T14286] hsr_slave_0: entered promiscuous mode [ 660.747240][T14286] hsr_slave_1: entered promiscuous mode [ 660.766855][T14286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.785283][T14286] Cannot create hsr debugfs directory [ 661.244291][ T5838] Bluetooth: hci19: command tx timeout [ 662.771110][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 663.323713][T14115] Bluetooth: hci19: command tx timeout [ 665.163498][ T31] INFO: task kworker/u8:8:1157 blocked for more than 143 seconds. [ 665.171420][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 665.242680][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 665.251461][ T31] task:kworker/u8:8 state:D stack:19976 pid:1157 tgid:1157 ppid:2 task_flags:0x4208160 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 665.372438][ T31] Workqueue: netns cleanup_net [ 665.377474][ T31] Call Trace: [ 665.380792][ T31] [ 665.411105][T14115] Bluetooth: hci19: command tx timeout [ 665.522516][ T31] __schedule+0x16f5/0x4d00 [ 665.527183][ T31] ? __lock_acquire+0xab9/0xd20 [ 665.532115][ T31] ? schedule+0x165/0x360 [ 665.698876][ T31] ? __pfx___schedule+0x10/0x10 [ 665.742582][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.748372][ T31] ? schedule+0x91/0x360 [ 665.830077][ T31] schedule+0x165/0x360 [ 665.864673][ T31] schedule_preempt_disabled+0x13/0x30 [ 665.870251][ T31] __mutex_lock+0x724/0xe80 [ 665.902442][ T31] ? __mutex_lock+0x51b/0xe80 [ 665.907244][ T31] ? rcu_barrier+0x4c/0x570 [ 665.911777][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 666.004035][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.009825][ T31] ? __mutex_unlock_slowpath+0x6ed/0x700 [ 666.052582][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 666.058733][ T31] rcu_barrier+0x4c/0x570 [ 666.092633][ T31] netdev_run_todo+0x327/0xea0 [ 666.097556][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 666.126884][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 666.152706][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.158472][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.196758][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.222837][ T31] ? nsim_destroy+0x3ec/0x670 [ 666.242737][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.248833][ T31] ? kfree+0x18e/0x440 [ 666.278035][ T31] nsim_destroy+0x40c/0x670 [ 666.298333][ T31] __nsim_dev_port_del+0x14d/0x1b0 [ 666.322846][ T31] nsim_dev_reload_destroy+0x288/0x490 [ 666.342650][ T31] nsim_dev_reload_down+0x8a/0xc0 [ 666.347822][ T31] devlink_reload+0x1b6/0x8d0 [ 666.372421][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.378201][ T31] ? xa_get_mark+0x67/0x7b0 [ 666.422764][ T31] ? __pfx_devlink_reload+0x10/0x10 [ 666.428187][ T31] ? xa_get_mark+0x70f/0x7b0 [ 666.472910][ T31] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 666.478552][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 666.512962][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.518728][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.562661][ T31] ? class_remove_file_ns+0x121/0x160 [ 666.568164][ T31] ops_undo_list+0x187/0x990 [ 666.592504][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 666.597759][ T31] cleanup_net+0x4c5/0x800 [ 666.602217][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 666.642703][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.648585][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 666.682820][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 666.688700][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 666.729661][ T31] process_scheduled_works+0xae1/0x17b0 [ 666.772768][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 666.778938][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.802757][ T31] worker_thread+0x8a0/0xda0 [ 666.807502][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 666.859766][ T31] ? __kthread_parkme+0x7b/0x200 [ 666.867423][ T31] kthread+0x711/0x8a0 [ 666.871614][ T31] ? __pfx_worker_thread+0x10/0x10 [ 666.892670][ T31] ? __pfx_kthread+0x10/0x10 [ 666.897391][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.913381][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 666.918723][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.950602][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.961084][ T31] ? __pfx_kthread+0x10/0x10 [ 666.982722][ T31] ret_from_fork+0x3fc/0x770 [ 666.987505][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 667.003277][ T31] ? __switch_to_asm+0x39/0x70 [ 667.008136][ T31] ? __switch_to_asm+0x33/0x70 [ 667.022943][ T31] ? __pfx_kthread+0x10/0x10 [ 667.027673][ T31] ret_from_fork_asm+0x1a/0x30 [ 667.042615][ T31] [ 667.065127][ T31] INFO: task syz-executor:13958 blocked for more than 145 seconds. [ 667.092722][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 667.100479][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 667.184899][ T31] task:syz-executor state:D stack:22088 pid:13958 tgid:13958 ppid:1 task_flags:0x400140 flags:0x00004004 [ 667.212495][ T31] Call Trace: [ 667.215970][ T31] [ 667.223205][ T31] __schedule+0x16f5/0x4d00 [ 667.227841][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 667.251083][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 667.262797][ T31] ? __lock_acquire+0xab9/0xd20 [ 667.267789][ T31] ? schedule+0x165/0x360 [ 667.272198][ T31] ? __pfx___schedule+0x10/0x10 [ 667.297570][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 667.312483][ T31] ? schedule+0x91/0x360 [ 667.318259][ T31] schedule+0x165/0x360 [ 667.332401][ T31] schedule_preempt_disabled+0x13/0x30 [ 667.337990][ T31] __mutex_lock+0x724/0xe80 [ 667.354355][ T31] ? __mutex_lock+0x51b/0xe80 [ 667.359168][ T31] ? del_device_store+0xd1/0x360 [ 667.406880][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 667.412064][ T31] ? __lock_acquire+0xab9/0xd20 [ 667.442648][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 667.447651][ T31] del_device_store+0xd1/0x360 [ 667.472770][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 667.477817][ T31] ? __pfx_del_device_store+0x10/0x10 [ 667.532760][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 667.537844][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 667.562694][ T31] ? sysfs_kf_write+0x166/0x260 [ 667.567721][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 667.607477][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 667.631929][ T31] kernfs_fop_write_iter+0x378/0x4f0 [ 667.652523][ T31] vfs_write+0x54b/0xa90 [ 667.656924][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 667.692431][ T31] ? __pfx_vfs_write+0x10/0x10 [ 667.697368][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 667.731531][ T31] ? kmem_cache_free+0x18f/0x400 [ 667.762779][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 667.768559][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 667.803192][ T31] ksys_write+0x145/0x250 [ 667.807648][ T31] ? __pfx_ksys_write+0x10/0x10 [ 667.835641][ T31] ? rcu_is_watching+0x15/0xb0 [ 667.840571][ T31] ? do_syscall_64+0xbe/0x3b0 [ 667.874739][ T31] do_syscall_64+0xfa/0x3b0 [ 667.879412][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.913801][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.920082][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 667.963328][ T31] ? exc_page_fault+0x9f/0xf0 [ 667.982440][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.988462][ T31] RIP: 0033:0x7fd81018d3df [ 668.022417][ T31] RSP: 002b:00007ffc5bc069e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 668.030958][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd81018d3df [ 668.082896][ T31] RDX: 0000000000000001 RSI: 00007ffc5bc06a30 RDI: 0000000000000005 [ 668.108155][ T31] RBP: 00007fd810211d8d R08: 0000000000000000 R09: 00007ffc5bc06837 [ 668.142610][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 668.150696][ T31] R13: 00007ffc5bc06a30 R14: 00007fd810ee4620 R15: 0000000000000003 [ 668.203338][ T31] [ 668.212477][ T31] INFO: task syz-executor:13964 blocked for more than 146 seconds. [ 668.220463][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 668.273187][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 668.307583][ T31] task:syz-executor state:D stack:22168 pid:13964 tgid:13964 ppid:1 task_flags:0x480140 flags:0x00004006 [ 668.342788][ T31] Call Trace: [ 668.346323][ T31] [ 668.349330][ T31] __schedule+0x16f5/0x4d00 [ 668.382685][ T31] ? __lock_acquire+0xab9/0xd20 [ 668.387703][ T31] ? schedule+0x165/0x360 [ 668.392106][ T31] ? __pfx___schedule+0x10/0x10 [ 668.452577][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.458360][ T31] ? schedule+0x91/0x360 [ 668.486419][ T31] schedule+0x165/0x360 [ 668.490717][ T31] schedule_preempt_disabled+0x13/0x30 [ 668.519679][ T31] __mutex_lock+0x724/0xe80 [ 668.542796][ T31] ? __mutex_lock+0x51b/0xe80 [ 668.547710][ T31] ? rcu_barrier+0x4c/0x570 [ 668.582722][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 668.587888][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.617419][ T31] ? __mutex_unlock_slowpath+0x6ed/0x700 [ 668.643853][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 668.649979][ T31] rcu_barrier+0x4c/0x570 [ 668.685440][ T31] netdev_run_todo+0x327/0xea0 [ 668.690354][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 668.712705][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.718487][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.744154][ T31] ? nsim_destroy+0x3ec/0x670 [ 668.749274][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.772618][ T31] nsim_destroy+0x40c/0x670 [ 668.777272][ T31] __nsim_dev_port_del+0x14d/0x1b0 [ 668.792608][ T31] nsim_dev_reload_destroy+0x288/0x490 [ 668.798204][ T31] nsim_drv_remove+0x58/0x160 [ 668.822691][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 668.828117][ T31] device_release_driver_internal+0x46f/0x7c0 [ 668.853700][ T31] bus_remove_device+0x34d/0x410 [ 668.858786][ T31] device_del+0x511/0x8e0 [ 668.873155][ T31] ? __lock_acquire+0xab9/0xd20 [ 668.878278][ T31] ? __pfx_device_del+0x10/0x10 [ 668.902628][ T31] device_unregister+0x20/0xc0 [ 668.907534][ T31] del_device_store+0x2aa/0x360 [ 668.930503][ T31] ? __pfx_del_device_store+0x10/0x10 [ 668.946833][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 668.951910][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.979070][ T31] ? sysfs_kf_write+0x166/0x260 [ 668.993991][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.999752][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 669.023150][ T31] kernfs_fop_write_iter+0x378/0x4f0 [ 669.028663][ T31] vfs_write+0x54b/0xa90 [ 669.042566][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 669.048609][ T31] ? __pfx_vfs_write+0x10/0x10 [ 669.073278][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.080282][ T31] ? kmem_cache_free+0x18f/0x400 [ 669.102685][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.108487][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.123061][ T31] ksys_write+0x145/0x250 [ 669.127585][ T31] ? __pfx_ksys_write+0x10/0x10 [ 669.143977][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.149760][ T31] ? do_syscall_64+0xbe/0x3b0 [ 669.182753][ T31] do_syscall_64+0xfa/0x3b0 [ 669.187410][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.212549][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.218842][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.232734][ T31] ? exc_page_fault+0x9f/0xf0 [ 669.237549][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.262862][ T31] RIP: 0033:0x7fb5c358d3df [ 669.267416][ T31] RSP: 002b:00007ffcb8a9e450 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 669.293096][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fb5c358d3df [ 669.324134][ T31] RDX: 0000000000000001 RSI: 00007ffcb8a9e4a0 RDI: 0000000000000005 [ 669.332225][ T31] RBP: 00007fb5c3611d8d R08: 0000000000000000 R09: 00007ffcb8a9e2a7 [ 669.364044][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 669.372146][ T31] R13: 00007ffcb8a9e4a0 R14: 00007fb5c42e4620 R15: 0000000000000003 [ 669.403656][ T31] [ 669.406974][ T31] INFO: task syz-executor:13966 blocked for more than 147 seconds. [ 669.432937][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 669.440695][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.473775][ T31] task:syz-executor state:D stack:22632 pid:13966 tgid:13966 ppid:1 task_flags:0x400140 flags:0x00004004 [ 669.512762][ T31] Call Trace: [ 669.516144][ T31] [ 669.519145][ T31] __schedule+0x16f5/0x4d00 [ 669.542841][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.548628][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 669.562993][ T31] ? __lock_acquire+0xab9/0xd20 [ 669.567988][ T31] ? schedule+0x165/0x360 [ 669.581945][ T31] ? __pfx___schedule+0x10/0x10 [ 669.610841][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.621541][ T31] ? schedule+0x91/0x360 [ 669.633731][ T31] schedule+0x165/0x360 [ 669.638102][ T31] schedule_preempt_disabled+0x13/0x30 [ 669.662233][ T31] __mutex_lock+0x724/0xe80 [ 669.667234][ T31] ? __mutex_lock+0x51b/0xe80 [ 669.671982][ T31] ? del_device_store+0xd1/0x360 [ 669.693759][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 669.700275][ T31] ? __lock_acquire+0xab9/0xd20 [ 669.716773][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 669.721771][ T31] del_device_store+0xd1/0x360 [ 669.743912][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 669.748878][ T31] ? __pfx_del_device_store+0x10/0x10 [ 669.772769][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 669.777836][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.792658][ T31] ? sysfs_kf_write+0x166/0x260 [ 669.797647][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.820607][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 669.842699][ T31] kernfs_fop_write_iter+0x378/0x4f0 [ 669.848135][ T31] vfs_write+0x54b/0xa90 [ 669.864347][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 669.870305][ T31] ? __pfx_vfs_write+0x10/0x10 [ 669.892857][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.898625][ T31] ? kmem_cache_free+0x18f/0x400 [ 669.914971][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.920767][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.944735][ T31] ksys_write+0x145/0x250 [ 669.949181][ T31] ? __pfx_ksys_write+0x10/0x10 [ 669.973672][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.978593][ T31] ? do_syscall_64+0xbe/0x3b0 [ 670.002744][ T31] do_syscall_64+0xfa/0x3b0 [ 670.007393][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.022001][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.046673][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.055583][ T31] ? exc_page_fault+0x9f/0xf0 [ 670.060370][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.083298][ T31] RIP: 0033:0x7f641498d3df [ 670.087810][ T31] RSP: 002b:00007ffcf28aeb80 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 670.112861][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f641498d3df [ 670.142619][ T31] RDX: 0000000000000001 RSI: 00007ffcf28aebd0 RDI: 0000000000000005 [ 670.150725][ T31] RBP: 00007f6414a11d8d R08: 0000000000000000 R09: 00007ffcf28ae9d7 [ 670.183982][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 670.192075][ T31] R13: 00007ffcf28aebd0 R14: 00007f64156e4620 R15: 0000000000000003 [ 670.213397][ T31] [ 670.220840][ T31] INFO: task syz-executor:13969 blocked for more than 148 seconds. [ 670.243695][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 670.251434][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 670.295758][ T31] task:syz-executor state:D stack:21928 pid:13969 tgid:13969 ppid:1 task_flags:0x400140 flags:0x00004004 [ 670.323541][ T31] Call Trace: [ 670.326927][ T31] [ 670.329887][ T31] __schedule+0x16f5/0x4d00 [ 670.353936][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.359724][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 670.374645][ T31] ? __lock_acquire+0xab9/0xd20 [ 670.379617][ T31] ? schedule+0x165/0x360 [ 670.403984][ T31] ? __pfx___schedule+0x10/0x10 [ 670.408986][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.432732][ T31] ? schedule+0x91/0x360 [ 670.437128][ T31] schedule+0x165/0x360 [ 670.441348][ T31] schedule_preempt_disabled+0x13/0x30 [ 670.463820][ T31] __mutex_lock+0x724/0xe80 [ 670.468475][ T31] ? __mutex_lock+0x51b/0xe80 [ 670.485141][ T31] ? del_device_store+0xd1/0x360 [ 670.490231][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 670.513913][ T31] ? __lock_acquire+0xab9/0xd20 [ 670.518915][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 670.543084][ T31] del_device_store+0xd1/0x360 [ 670.547973][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 670.563520][ T31] ? __pfx_del_device_store+0x10/0x10 [ 670.569023][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 670.594966][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.600723][ T31] ? sysfs_kf_write+0x166/0x260 [ 670.625672][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.642554][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 670.647874][ T31] kernfs_fop_write_iter+0x378/0x4f0 [ 670.662934][ T31] vfs_write+0x54b/0xa90 [ 670.667357][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 670.692662][ T31] ? __pfx_vfs_write+0x10/0x10 [ 670.697570][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.717313][ T31] ? kmem_cache_free+0x18f/0x400 [ 670.734319][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.740168][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.763144][ T31] ksys_write+0x145/0x250 [ 670.767602][ T31] ? __pfx_ksys_write+0x10/0x10 [ 670.783035][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.787925][ T31] ? do_syscall_64+0xbe/0x3b0 [ 670.802521][ T31] do_syscall_64+0xfa/0x3b0 [ 670.807147][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.832936][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.839121][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.863090][ T31] ? exc_page_fault+0x9f/0xf0 [ 670.867947][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.883071][ T31] RIP: 0033:0x7f4e2e98d3df [ 670.887663][ T31] RSP: 002b:00007fffc291fc20 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 670.912564][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4e2e98d3df [ 670.920690][ T31] RDX: 0000000000000001 RSI: 00007fffc291fc70 RDI: 0000000000000005 [ 670.983141][ T31] RBP: 00007f4e2ea11d8d R08: 0000000000000000 R09: 00007fffc291fa77 [ 670.991505][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 671.032912][ T31] R13: 00007fffc291fc70 R14: 00007f4e2f6e4620 R15: 0000000000000003 [ 671.064569][ T31] [ 671.068020][ T31] [ 671.068020][ T31] Showing all locks held in the system: [ 671.083405][ T31] 2 locks held by kworker/0:0/9: [ 671.088534][ T31] 2 locks held by kworker/0:1/10: [ 671.112863][ T31] 1 lock held by khungtaskd/31: [ 671.117837][ T31] #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 671.152883][ T31] 3 locks held by kworker/u8:3/49: [ 671.158114][ T31] 6 locks held by kworker/u8:8/1157: [ 671.182632][ T31] #0: ffff88801b2f6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 671.202569][ T31] #1: ffffc90003c5fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 671.222478][ T31] #2: ffffffff8f502bd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 671.231994][ T31] #3: ffff8880352030e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 671.278478][ T31] #4: ffff888035201250 (&devlink->lock_key#8){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 671.312628][ T31] #5: ffffffff8e144800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 671.332557][ T31] 2 locks held by getty/5584: [ 671.337341][ T31] #0: ffff888030a5f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 671.388032][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 671.413630][ T31] 2 locks held by kworker/0:5/5923: [ 671.418933][ T31] 4 locks held by kworker/1:7/5969: [ 671.432553][ T31] #0: ffff888054a88148 ((wq_completion)wg-kex-wg0#18){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 671.463717][ T31] #1: ffffc900043afbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 671.563910][ T31] #2: ffff8880787d1308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 671.592442][ T31] #3: ffff88807a46a0f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 671.628880][ T31] 2 locks held by syz-executor/13758: [ 671.645082][ T31] #0: ffffffff8e88fca8 (bio_slab_lock){+.+.}-{4:4}, at: bioset_exit+0x44a/0x690 [ 671.672593][ T31] #1: ffffffff8e144800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 671.692718][ T31] 2 locks held by kworker/0:3/13785: [ 671.698145][ T31] 3 locks held by kworker/0:7/13853: [ 671.712477][ T31] 1 lock held by syz-executor/13877: [ 671.717857][ T31] #0: ffffffff8e144800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 671.762974][ T31] 4 locks held by syz-executor/13958: [ 671.768462][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 671.793698][ T31] #1: ffff888038699088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 671.822782][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 671.853280][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 671.882888][ T31] 7 locks held by syz-executor/13964: [ 671.888373][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 671.913009][ T31] #1: ffff888060976088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 671.945460][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 671.982670][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 672.002664][ T31] #4: ffff888053d790e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 672.022776][ T31] #5: ffff888053d7a250 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 672.055115][ T31] #6: ffffffff8e144800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 672.092750][ T31] 4 locks held by syz-executor/13966: [ 672.098225][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 672.132784][ T31] #1: ffff88803869a088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 672.152583][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 672.192837][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 672.219077][ T31] 4 locks held by syz-executor/13969: [ 672.233985][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 672.252930][ T31] #1: ffff88804799bc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 672.284596][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 672.312541][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 672.332444][ T31] 2 locks held by kworker/0:11/14042: [ 672.337899][ T31] 4 locks held by syz-executor/14071: [ 672.357276][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 672.394670][ T31] #1: ffff88808eea2488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 672.422491][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 672.443006][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 672.474649][ T31] 4 locks held by syz-executor/14100: [ 672.480128][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 672.503761][ T31] #1: ffff88803b625888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 672.534463][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 672.563844][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 672.592721][ T31] 2 locks held by kworker/0:12/14104: [ 672.598205][ T31] 4 locks held by syz-executor/14106: [ 672.615753][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 672.642647][ T31] #1: ffff88803acd1488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 672.662449][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 672.692754][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 672.714871][ T31] 4 locks held by syz-executor/14111: [ 672.720352][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 672.752809][ T31] #1: ffff88808f0bf488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 672.780833][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 672.802494][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 672.824948][ T31] 4 locks held by syz-executor/14112: [ 672.830431][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 672.872920][ T31] #1: ffff88804bc03888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 672.903662][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 672.922675][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 672.956888][ T31] 4 locks held by kworker/0:13/14116: [ 672.963921][ T31] 4 locks held by syz-executor/14128: [ 672.969332][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 673.003229][ T31] #1: ffff88805a8c6888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 673.022731][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 673.045098][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 673.094475][ T31] 3 locks held by kworker/0:14/14182: [ 673.099962][ T31] 3 locks held by kworker/0:15/14189: [ 673.124110][ T31] 4 locks held by syz-executor/14195: [ 673.129609][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 673.155126][ T31] #1: ffff88808c0e0488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 673.183449][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 673.212989][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 673.243014][ T31] 4 locks held by syz-executor/14204: [ 673.248518][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 673.273816][ T31] #1: ffff8880919a9c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 673.302483][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 673.332918][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 673.352702][ T31] 4 locks held by syz-executor/14219: [ 673.358185][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 673.400308][ T31] #1: ffff888098670088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 673.422549][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 673.442518][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 673.472830][ T31] 4 locks held by syz-executor/14230: [ 673.478310][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 673.512946][ T31] #1: ffff888098672888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 673.542900][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 673.564163][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 673.583039][ T31] 4 locks held by syz-executor/14232: [ 673.600092][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 673.633292][ T31] #1: ffff88806146c088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 673.652621][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 673.674186][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 673.702833][ T31] 4 locks held by syz-executor/14237: [ 673.710536][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 673.734691][ T31] #1: ffff88805dc42c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 673.762817][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 673.783835][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 673.805260][ T31] 4 locks held by syz-executor/14262: [ 673.810744][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 673.853363][ T31] #1: ffff888076bf9888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 673.872708][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 673.893980][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 673.933848][ T31] 4 locks held by syz-executor/14271: [ 673.939338][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 673.972861][ T31] #1: ffff8880abc05088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 673.993644][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 674.022504][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 674.044022][ T31] 4 locks held by syz-executor/14286: [ 674.049516][ T31] #0: ffff888030ef2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 674.075360][ T31] #1: ffff888084948888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 674.102701][ T31] #2: ffff888026d51e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 674.132685][ T31] #3: ffffffff8edaa128 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 674.159675][ T31] [ 674.162104][ T31] ============================================= [ 674.162104][ T31] [ 674.193001][ T31] NMI backtrace for cpu 1 [ 674.193033][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 674.193077][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 674.193093][ T31] Call Trace: [ 674.193103][ T31] [ 674.193115][ T31] dump_stack_lvl+0x189/0x250 [ 674.193168][ T31] ? __wake_up_klogd+0xd9/0x110 [ 674.193201][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.193234][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.193273][ T31] ? __pfx__printk+0x10/0x10 [ 674.193316][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 674.193356][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 674.193383][ T31] ? _printk+0xcf/0x120 [ 674.193414][ T31] ? __pfx__printk+0x10/0x10 [ 674.193445][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 674.193486][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 674.193521][ T31] watchdog+0xfee/0x1030 [ 674.193562][ T31] ? watchdog+0x1de/0x1030 [ 674.193605][ T31] kthread+0x711/0x8a0 [ 674.193641][ T31] ? __pfx_watchdog+0x10/0x10 [ 674.193673][ T31] ? __pfx_kthread+0x10/0x10 [ 674.193699][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.193732][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 674.193767][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.193794][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.193832][ T31] ? __pfx_kthread+0x10/0x10 [ 674.193862][ T31] ret_from_fork+0x3fc/0x770 [ 674.193906][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 674.193949][ T31] ? __switch_to_asm+0x39/0x70 [ 674.193976][ T31] ? __switch_to_asm+0x33/0x70 [ 674.194000][ T31] ? __pfx_kthread+0x10/0x10 [ 674.194030][ T31] ret_from_fork_asm+0x1a/0x30 [ 674.194082][ T31] [ 674.194092][ T31] Sending NMI from CPU 1 to CPUs 0: [ 674.380087][ C0] NMI backtrace for cpu 0 [ 674.380109][ C0] CPU: 0 UID: 0 PID: 14192 Comm: kworker/0:16 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 674.380137][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 674.380154][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 674.380205][ C0] RIP: 0010:unwind_next_frame+0x7c2/0x2390 [ 674.380252][ C0] Code: e8 83 3f b1 00 48 8b 3b 48 85 ff 0f 84 d3 0d 00 00 48 83 c7 38 e8 0e 28 00 00 49 89 c4 48 8b 34 24 e9 a9 02 00 00 49 8d 5e 40 <48> 89 d8 48 c1 e8 03 80 3c 28 00 74 11 48 89 df e8 49 3f b1 00 48 [ 674.380271][ C0] RSP: 0018:ffffc900000066f8 EFLAGS: 00000246 [ 674.380290][ C0] RAX: ffffc900000067fd RBX: ffffc90000006808 RCX: ffffffff8fb54604 [ 674.380307][ C0] RDX: ffffffff9030ea60 RSI: ffffffff9030ea64 RDI: ffffffff8be28c60 [ 674.380324][ C0] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff81728af5 [ 674.380341][ C0] R10: dffffc0000000000 R11: ffffffff81ace6d0 R12: ffffffff9030ea65 [ 674.380358][ C0] R13: ffffc90000006818 R14: ffffc900000067c8 R15: ffffc90000006800 [ 674.380378][ C0] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 674.380398][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 674.380412][ C0] CR2: 0000001b2fd1bff8 CR3: 000000000df38000 CR4: 0000000000350ef0 [ 674.380430][ C0] Call Trace: [ 674.380439][ C0] [ 674.380455][ C0] ? unwind_next_frame+0xa5/0x2390 [ 674.380490][ C0] ? do_softirq+0xec/0x180 [ 674.380533][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 674.380560][ C0] arch_stack_walk+0x11c/0x150 [ 674.380586][ C0] ? do_softirq+0xec/0x180 [ 674.380622][ C0] stack_trace_save+0x9c/0xe0 [ 674.380646][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 674.380679][ C0] kasan_save_track+0x3e/0x80 [ 674.380718][ C0] ? kasan_save_track+0x3e/0x80 [ 674.380758][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 674.380778][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 674.380821][ C0] ? __nf_conntrack_alloc+0x99/0x380 [ 674.380854][ C0] ? init_conntrack+0x155/0xef0 [ 674.380885][ C0] ? nf_conntrack_in+0xbf2/0x1600 [ 674.380912][ C0] ? nf_hook_slow+0xc5/0x220 [ 674.380934][ C0] ? nf_hook+0x217/0x380 [ 674.380964][ C0] ? __ip_local_out+0x4db/0x600 [ 674.380991][ C0] ? ip_local_out+0x26/0x70 [ 674.381018][ C0] ? synproxy_send_client_synack+0x8bb/0xe20 [ 674.381044][ C0] ? nft_synproxy_eval_v4+0x36e/0x560 [ 674.381079][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 674.381109][ C0] ? nft_do_chain+0x40c/0x1920 [ 674.381137][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 674.381171][ C0] ? nf_hook_slow+0xc5/0x220 [ 674.381191][ C0] ? NF_HOOK+0x206/0x3a0 [ 674.381212][ C0] ? NF_HOOK+0x30c/0x3a0 [ 674.381233][ C0] ? __netif_receive_skb+0x143/0x380 [ 674.381275][ C0] ? process_backlog+0x60e/0x14f0 [ 674.381295][ C0] ? __napi_poll+0xc7/0x480 [ 674.381328][ C0] ? net_rx_action+0x707/0xe30 [ 674.381348][ C0] ? handle_softirqs+0x286/0x870 [ 674.381381][ C0] ? do_softirq+0xec/0x180 [ 674.381436][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.381468][ C0] __kasan_slab_alloc+0x6c/0x80 [ 674.381490][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 674.381527][ C0] ? __nf_conntrack_alloc+0x99/0x380 [ 674.381558][ C0] __nf_conntrack_alloc+0x99/0x380 [ 674.381591][ C0] init_conntrack+0x155/0xef0 [ 674.381622][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.381652][ C0] ? __pfx_init_conntrack+0x10/0x10 [ 674.381686][ C0] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 674.381712][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 674.381750][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.381776][ C0] ? __siphash_unaligned+0x232/0x3b0 [ 674.381824][ C0] nf_conntrack_in+0xbf2/0x1600 [ 674.381868][ C0] ? __pfx_nf_conntrack_in+0x10/0x10 [ 674.381905][ C0] ? ipt_do_table+0x2a3/0x1640 [ 674.381933][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.381961][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.381986][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.382012][ C0] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 674.382050][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.382076][ C0] ? ipv4_conntrack_local+0x126/0x210 [ 674.382102][ C0] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 674.382129][ C0] nf_hook_slow+0xc5/0x220 [ 674.382155][ C0] nf_hook+0x217/0x380 [ 674.382186][ C0] ? nf_hook+0x9d/0x380 [ 674.382214][ C0] ? __pfx_nf_hook+0x10/0x10 [ 674.382244][ C0] ? __pfx_dst_output+0x10/0x10 [ 674.382277][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.382304][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.382330][ C0] ? ip_fast_csum+0x1ee/0x2b0 [ 674.382374][ C0] __ip_local_out+0x4db/0x600 [ 674.382401][ C0] ? __pfx_dst_output+0x10/0x10 [ 674.382433][ C0] ip_local_out+0x26/0x70 [ 674.382462][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 674.382499][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 674.382524][ C0] ? nft_osf_init+0x78/0x240 [ 674.382552][ C0] ? synproxy_pernet+0x45/0x270 [ 674.382583][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.382612][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 674.382648][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 674.382677][ C0] ? nf_conntrack_in+0xa24/0x1600 [ 674.382708][ C0] ? nf_ip_checksum+0x13c/0x510 [ 674.382749][ C0] nft_synproxy_do_eval+0x345/0x570 [ 674.382778][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 674.382819][ C0] ? worker_thread+0x8a0/0xda0 [ 674.382854][ C0] ? kthread+0x711/0x8a0 [ 674.382883][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 674.382921][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.382952][ C0] nft_do_chain+0x40c/0x1920 [ 674.382984][ C0] ? call_rcu+0x6ff/0x9c0 [ 674.383006][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.383031][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.383074][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 674.383131][ C0] nft_do_chain_inet+0x25d/0x340 [ 674.383162][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 674.383193][ C0] ? ipt_do_table+0x2a3/0x1640 [ 674.383218][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.383244][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 674.383289][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 674.383320][ C0] nf_hook_slow+0xc5/0x220 [ 674.383346][ C0] NF_HOOK+0x206/0x3a0 [ 674.383368][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.383396][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 674.383420][ C0] ? NF_HOOK+0x9a/0x3a0 [ 674.383442][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 674.383463][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 674.383490][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 674.383515][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.383542][ C0] ? skb_dst+0x4f/0xd0 [ 674.383564][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.383590][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 674.383616][ C0] NF_HOOK+0x30c/0x3a0 [ 674.383640][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 674.383663][ C0] ? NF_HOOK+0x9a/0x3a0 [ 674.383684][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 674.383706][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 674.383735][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 674.383765][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 674.383787][ C0] __netif_receive_skb+0x143/0x380 [ 674.383830][ C0] ? process_backlog+0x2d5/0x14f0 [ 674.383854][ C0] process_backlog+0x60e/0x14f0 [ 674.383887][ C0] ? __pfx_process_backlog+0x10/0x10 [ 674.383909][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.383935][ C0] ? do_raw_spin_lock+0x121/0x290 [ 674.383968][ C0] __napi_poll+0xc7/0x480 [ 674.384001][ C0] ? net_rx_action+0x46d/0xe30 [ 674.384024][ C0] net_rx_action+0x707/0xe30 [ 674.384050][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.384086][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 674.384135][ C0] handle_softirqs+0x286/0x870 [ 674.384177][ C0] ? do_softirq+0xec/0x180 [ 674.384215][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 674.384254][ C0] ? kernel_fpu_end+0xc8/0x120 [ 674.384282][ C0] do_softirq+0xec/0x180 [ 674.384315][ C0] [ 674.384323][ C0] [ 674.384331][ C0] ? __pfx_do_softirq+0x10/0x10 [ 674.384366][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.384391][ C0] ? __local_bh_disable_ip+0xf1/0x190 [ 674.384425][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 674.384462][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 674.384488][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 674.384525][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 674.384560][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 674.384594][ C0] ? srso_alias_return_thunk+0x5/0xfbef5