last executing test programs: 6.37109353s ago: executing program 0 (id=444): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@delalloc}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x514, &(0x7f0000000500)="$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") setreuid(0xffffffffffffffff, 0xee00) removexattr(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=@known='trusted.syz\x00') 5.9914021s ago: executing program 0 (id=448): sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r0, r0, 0x0) socket$rds(0x15, 0x5, 0x0) recvmsg(r0, &(0x7f00000032c0)={0x0, 0x0, 0x0}, 0x100) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.015303077s ago: executing program 0 (id=453): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x0, 0x11e2, &(0x7f0000002480)="$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") r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x1104) fchdir(r0) 4.865622126s ago: executing program 3 (id=457): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup, 0xffffffffffffffff, 0x10, 0x2008, 0x0, @value}, 0x20) 4.856481652s ago: executing program 2 (id=458): syz_mount_image$bcachefs(&(0x7f00000003c0), &(0x7f0000000000)='./file1\x00', 0x808040, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x5903, &(0x7f0000000f00)="$eJzs3W2QXFXdIPBzu3synZm8TAJIBJkMgSiCmglvhS+l0fWtAKlYWErYKAxkgtEkpJJBIKAEF1wowEJLS1E/oIXUotGiClaJlMjLJqyiFKtLbSG1uot+8CnkISWQh7J8nKdm+p5Oz52+c3t6ekICv18lc/ucvv0/5957+vb9n+6ZDgAAALwm7Ll+275zjvrAr744/NI1H/7ZpmtDb3m8vhpX6EuXV7xSPeRA6q4sGV9mx8WbrvrBnwcuft8v7+75/su71x27/vfvP+zi+z9z5q7bvv3Qi/Pv/eczRXHjeDpxfzl5Lgmh+vO9X//S7seOHKtLQgjlpG9HCIuSxQ8tSjIhBv8eQliXFg6rTLzznpdOWT+2vPam7gn1CzNBjPfXtmo6zrbvu/yk8If3rrnuN0t//KOunc/u2L9KUm0YTyEsuLDx8V0hhLnp/zFxtC2JD06Xq0MIPQ2PO6OgX8e12P8VOeWj0+WcdNlbECfevyxTLmXWy5ajrsyyp6C9mcrrR7vrFZmXKWdPRjOV189Yvyhd/jRdnjjN+OX4PwmlJFTq3d+Y7B8joeG4JSEZP5bVerlUP7Yh3f5MOcmUS5lyuSuzXePtpgOtnCQT6+N6mfp4Oq6k9cc2nqubODen/vXpspo+UV+O5ZC9UdM76UZ9u8bFfu2doi8HQqnhHNSsvn7g04PRm9b1JosnPWa0iXjf7jU3Ly+vfXhPX04/kruTNH7SVvztv14071M/vPGyJXnxLyyl8Uttxf/jWY8/f/6N3/tWbvxbY/xyW/FPfqDnubMeuX5Z7v7ZG/dPpa34Q888esvSwy/amdv/22P8alvxV+16vHv+vgcezO3/YNw/c9uK//Q7P/inu56879nc+CHG72kr/tpdW77c3b/vhNz4D8b909ve+Hlh5+lP9ff/ZSAv/hMx/vy24t+547Z33LHwpjNzj+/quH/62op/9vH3Xzdv333H5J07k9s79coJ8Np0WHqNdUNabjfPnKmGfOGbA5XaNd+89P/8TjaUufgca2dBJ+MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAjhiJP+54f+/8f7nquk5e70xtOl2jLWzwkhmRtC2DYytHVkw+ZLBj5z6WVbNw9tHBgaGRjePLL1yoFT3zKwdXjLxqErx+4dfOsptcctDkltmRwzqe3u0dHRUt/Eutjefzp+5x+Wn/Evfw1h8Ijf9Vdy+7/itk13HN7kZ0ayavQ9my4753enfTfdrr60X31N+jU6Ojoacvr1r+f9446v7v3zCSEMvm6qfj369Lt/MaFD4xX746RK3aHWoe6kp2k/6r1O+xP3V2X9ho3Dg1Pv37HHl3O24z9f9ezf11/xlX/U9m81dzta3L9zV41uLH1jzdn//o2raxVF/XqljnvR/o5bEfsX91813d8L0u1akLNdlZztuv43Dz7586NufHFHGKy8sHRy20Xb1ZUOgK7k9S21G1voSRZNqK+m68cjHh+3YmTTlhXbrtz+1g2bhi4ZvmR489tXnrry9MHTTj9txfiWr+jw9sf239ji9h+Y8bTwczt+Gn+2Np6K+lW0P8b6Vbw/GnuU9/zrOfdLX3v7bY+cU6soGudx7fr5JF32jB3nlaFhvE3eV822q2g/hBAGmu2H5188Mxz5fzZcV3QeajwyjT8zklWjjy3723fP+M6Sd9UqDsh5vrFDbZ7n673e35/x/VVNj8foQbp/u0M53a7epv1a+dgjXTfv+evn6/2bMydcMTQysnVl7ee8tKfzkqOb9itbG7dr6fjPckh3S6gP0ybjdUxXqPUve/6Mq2f3am96X2+yuOl2ZcX7dq+5eXl57cN78vZ0cnetxblhfm2ZvCFnzY2ZB5brHW7W/sH6/CsaH/0f+s69H7/3J6dOGh8n134WbVeSs10/fvLOr33/K//1J53brg+9+/G+v/3fTy+vVRwq55V6r9P+JI3nlZNDKHr+LQ3NtyP3+Vdqvj1Fz79sO/vXbx5vIFPuDeW2nq8nP9Dz3FmPXL8s9/m6t9Xn69UTSuWC5+vBMn6yz6+kMrEfs/f8mjBQklWjv7zhsB0PXbP6qFpF0biur91sXJ/SQv6Rs12/OP+p/ksH/sv/7tx54wdvueeC3w+t+kKtov3jHvvSmeNeTfdvNWf/1nsd887G/fu2iy/duK5Wf/Be/6bLgvwnnkq2Xbn9s0MbNw5v3dbadrX6ehrbye7ldl9P49ltccF2lSZt1+zdaGV/tfp8i/1f1/b+mvh86w1JW68L23+9aN6nfnjjZX2THpU2dGEpjV9qK/4fz3r8+fNv/N63cuPfGuNX2oo/9Myjtyw9/KKdufFvT9L41bbir9r1ePf8fQ88mBt/MPZ/blvxn37nB/9015P3PZsbP8T4ve3t/xd2nv5Uf/9fcuM/kaTtjF0jhXDPS6esr5WT0JU+32I/uib0K2TLSaZcypTLjeVSba613kA5SSbWx/XS+mMb+tLMJ3Lq41VYdUlt+XIsh+yNqesPNqWGc3+z+qLrVACAV7v4/n+8Bo3v/w+nF0r5Mw2w30zzsCU5cWMetn8+Z86E+5ek8ePj4zxg/9vC4Njy2oHahf5030eIz4fsPGds54TjJsZod56zaP59WaYc+1WbL6805KGpyXlNJbQw/z65nann3zObXzw/PnDDpG4NNMxbZY9fVzpj1uzzDpn+VsYi5I2P7LxY/DxH/4Kwery9FsdH9nM08ThkP0cT2zkqc+Js93M0Mx0fsdtTjI/xLhe/vzH5+IUp9u/+49c8Wvb4TeN4V8fWn+33Zzswb9j0lHbg5g1n9/0w85I58dMn2ME+bxjr43ZUWpxP/HhOfafmE+PpIvZr7xR9ORDMJwKvVjH/j68RY/n/2AX4v2XWK7oOzV41xni5nxMqN+9PUd4x+XN6PW29jq/dteXL3f37Tsi9znmw1c/9bJlQ6in43E/RflyeKRfux5wJmqJ8L9tO0X7Pfi6jN8xva7/fueO2d9yx8KYzc/f76toLafF+/9qE0vyC/X4I5AvN48sXXhP5wmzPn71i+Uj6wafZykc+llM/3XykZ9KN+naNO+Tyka4D2y8A4NAR8//6+2dp/v//4grpdURR3npiphzj5eatOdcneXnrR9LlFZn1e9PfqJjudfPZx99/3bx99x2Tm7fc3moe+t8mlPoK89CZ5c25ecTqznxePDePqOdZM8sTc/tfzxNnlqfnxq/n6TPLo3P3Tz2Pntk8QG78+jzAoZ7nFszXZRqLxVbn6161eXT667OzlUefm1M/3Ty6d9KN+naNk0cDALyyYv4fL+Ni/v9IZr2Zvs+emxd06Lo9+/dA6vGfOFB55WznfbOdt852Xj/b8xKHel482/NCsztP9prPi9NG5cUAABzMYv4/Ny3n5/8zy0+a5W9dE/IT+XnT+PLzgyQ/P9Tnv+T/3hcvJv8HAHh1i/l//LXH+Pf//kdazv7denl6Tnx5ujx9qvHTcp7e+Xm24HMAr+w8wNz965sHAADgldA1nilN/j37T6bL7O/Z5/1e/vk567eqkl4eXzSydXj4gsu2rBsaGb5g86XrhrddcPnWDSMjw5tr6800b8zNW9K8sStU0v3RfL1s3rYw/XsIC3P+HkJ2/Rj26PEbk/8eQrbZuQV/R2D/8Wutv3nHrzTF+s3GR97xzov/iZz1o/rxv/jTJ1+wftsFGzZvGNkwtHHD9uGJ641lrT3T+N7MuFum9X2pmR+TlKb//Z2d6UdpUj+60v2R9/3sSaYfi9KeLMr7/oOcfv/qf331c8eP/uOuEAaPKL9hRvsvWTX6388b/sjInt9tGet/acr+19dM+1X0faXZ9eP2VDZeum3kpPWXXrY5+42S7YnzGaV6eZbmM9Knf7nF+Ym1OfXT/ZxCedKNg1PL8xMAAEwQ3/+P17Px/cOvpBdQsb71PH1m7x/n5umDreXp2e8lK8rTs+vH7W01T6/OME/Ptl+Upzdbv1menpd358X/WM7609X6OJnZ5zxyx8mFrY2T7PcZFI2T7PrTHSfJDMdJtv2icdJs/WbjJO+458X/aM76eVofDzP7XE7ueLi1tfHw5ky5aDxk15/ueCjNcDxk2y8aD83WbzYe8o5vXvxzctZv1cTxMTYwxsfF8AWXX7r1sw3rzfb3X8y8f7P7/R/tar3/s/u5r9nv/+x+rmz2+z+zz5Xl9v+Jmc2Etd7/2f1+l3YdsPna9MNmRZ8/K5rHXZNTP9153DmTbhyczOPCKyfm//Htnpj/35QuO/020KH/PWm+x6xp/A59j1nRdYzX8ykaOwh4PQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoTXdlyfhyz/Xb9p1z1Ad+9cXhl6758M82Xfumq37w54GL3/fLu3u+//Ludceu//37D7v4/s+cueu2bz/04vx7//lMYeC+8Z+VE9NiNYTkuSSE6s/3fv1Lux87cqwuCSGUk74dISxKFj+0KMlEGPx7CGFdvZ8T77znpVPWjy2vval7Qv3CTJDsdoXecuxPYz9DuKJwizgEVdNxtn3f5SeFP7x3zXW/WfrjH3XtfHbH/lWSasN4CmHBhY2P7wohzE3/j4mjbUl8cLpcHULoaXjcGQX9Oq7F/q/IKR+dLueky96COPH+ZZlyKbNethx1ZZY9Be3NVF4/2l2vyLxMOXsymqm8fsb6Renyp+nyxGnGL8f/SSgloVLv/sZk/xgJDcctCcn4sazWy6X6sQ3p9mfKSaZcypTLXZntGm83HWjlJJlYH9fL1MfTcSWtP7bxXN3EuTn1r0+X1fSJ+nIsh+yNmt5JN+rbNS72a+8UfTkQSg3noGb19QOfHozetK43WTzpMaNNxPt2r7l5eXntw3v6cvqR3J2k8ZO24m//9aJ5n/rhjZctyYt/YSmNX2or/h/Pevz582/83rdy498a45fbin/yAz3PnfXI9cty98/euH8qbcUfeubRW5YeftHO3P7fHuNX24q/atfj3fP3PfBgbv8H4/6Z21b8p9/5wT/d9eR9z+bGDzF+T1vx1+7a8uXu/n0n5MZ/MO6f3vbGzws7T3+qv/8vA3nxn4jx57cV/84dt73jjoU3nZl7fFfH/dPXVvyzj7//unn77jsm79yZ3N6pV06A16bD0musG9Jyu3nmTDXkC98cqNSu+eal/+d3sqGMsXYWzGJ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABenX579amfPO89H11TSUJIctYZbSLeV56zatVAG+0OPfPoLUsPv2hnY92SNuIAAAAAxWIeXqrXVMOScHkyNxzddP04R3B0LCUT67NzCDFOdo6g3TilDsUpdyhOpUNxujoUZ06H4nR3KE61IE41tBZn7hRxKmOjosX+9EzZn9bj9HYozrwOxZnfoTgLOhRnYYfi9E0Zp/VxuKhDcRZ3KM5hHYpzeIfiHNGhOK/rUJwjOxQnO6c83XE4P13zqLw44zfKhXEqSbl+R7P59CPTdo6ZYTu9Be3ML3o9brGduS22c1zmcaVptlNtsZ03zrCdpMV23jzDdkoF7cRxe0W2f7GdWGpx/F/ZoTjbOxTnqg7FubpDcT7foThf6FCca2YYB6BVMf/fn+/1he7Ku0JPesbJzgLEfHfp+M/Jr3d5J6QY7w2Z+jlF8bKJeibe0un2LzuBkIm3LFPfNSFepZ6PTBGv2hhveebOwu3NTihk+ndipr67KF52YgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZtFvrz71k+e956NrQhLG/jU12kS8rzxn1aqBNtrdvebm5eW1D+9prOuutBEIAAAAKBTz8K56TTV0V1aG7mTOhPWq6TxANS2X+2rL/gVh9dgyGSiNl3uSRVM+rpI+bsXIpi0rtl25/a0bNg1dMnzJ8Oa3rzx15emDp51+2or1GzYOD9Z+htBdEC+EMD79sO3K7Z8d2rhxeOu2WmW2/0vSxy1Jy0n6uP63hcGx5bVp/xcXtFea1N7s3Sg+egAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Ae7dhci51X/Afw8M7Mz023zz/7p2zQ0myEvJWrRJG4l1dJ9QLDQJiFLQWarawk2weKmCW1SYh3bgG1NUISWQIjkwkgsthZv+mKL2BcCkRoNuDFIW7QXeqG0WklLLiRlJLtzZmdmZzLrWJo2fj4X88yc8zvn95y5WPg+OwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHywpqojE5XRsfHBJISkS02tgziXzadpuY++X35++/cLw6dXNo8Vcn1sBAAAAPQUc/hAY6QYCrlsyIarpj8tDU0TYTb3AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/3umqiMTldGx8YuTEJIuNbUO4lw2n6blPvq+8c6Tn3l1ePivzWOlPvYBAAAAeos5PNMYKYZSWBYGkqta6uKzgUVt69vr4j6L51nX/uygW92yedZdM8+6j/Wo21C/7goAAADw0Rfzf64xMhQKuQVd83+vXB/rlrTVZevXfn4rAAAAAPx3Yv4vNEZKoZArNfL6fPP+0ra6uL7X/+3j+hVd1vf6f/76+tX/6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgo2OqOjJRGR0bzyYhJF1qah3EuWw+Tct99F3zwuDfbzny0NLmsUKuj40AAACAnmIOn43exVDIDYaBcPF07h++6eDTX3z62ZEQwkzMz+fDrk07dty9ZuY11q0+dmTge0ff+tacutUzr+ftgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPtmqjoyURkdG78oCSHpUlPrIM5l82la7qPv65/7wp8fP/ncm81jpT72AQAAAHqLOXw2+xdDKeRDPlwx/ak565+VaVvf7ZkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcOG45xv3fX3T5OTmu73xxhtvGm/O918mAADg/bYkJKH2H7py4/m+awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MNgqjoyURkdGy8mISRdamodxLlsPk3LffRNnz9eWHD6hZeax0p97AMAAAD0FnP4bPYvhlIYCAPh8ulPnZ4JTOf/oQ/wJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAPlanqyERldGx8QRJC0qWm1kGcy+bTtNxH38d2H/js4YXfvbl5rJDrYyMAAACgp5jD842RYijkPh4K4er658nWBUm2fu38XGB23faWZYPzXldtWZed97o9bSfL1U8zs64Y9xuauTbWleeuKzetK4VG+3LLurCvZdWCHvcZAAAA4DyK+b/QGBkKhVyhKef+pKV+SM4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALqYqo5MVEbHxpMkhKRLTa2DOJfNp2m5j773/eb/L/nKT/fubB4r9bEPAAAA0FvM4bPZvxhKYXH4v7B4OveHodb6WPePypnDj/7zLytDWHXFieFc+7Y/jG9+9fqNL7a/hJBprc6EsLDeL+nS79e/e/Te5bUzj4ew6vLs1XP6hXP3a90yrT1T2bx+x9ET23t8OQAAAHCBiPl/oDEyFAq5u7rm/5i8e+T/hukAvvDe3T+/rP5aT+RtKzJD9X6ZLv0+v/zJP61Y+7e3zub/c/X71IGthy9raTgz0iZJa6Nbd244cd2hTDz1TP9sW//4vXzpm2/+a8uuR87M9C+GYn18Ua5T/7mvbS5Ka5OZ/ePr3ttfbe2f63L+h3770slfLtr77tn+7ywZbPS/5hznP3f/wVsf3nf9gSMbWvuHEMqd+r/97s3hyj/c+WD7+QfbNm7+5ptf2yRp7djSU4fWHizd0No/aesfv/+fnXxs348f+c6zsX/8rcjKZfPtn2nr/8qeS3e//MDGRa39M13O/+Jtrw5vK3/79+3nv6Nl11zXu5h7/ieufer21zal97dPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXFimqiMTldGx8UwSQtKlptZBnMvm07TcR983bjn+9m17f/SD5rFSH/sAAAAAvcUcPpv9i6EU8iEfBqdz/zOVzet3HD2xPQzNzCb1a25y2z07PrFl28677jhPdw4AAADMV8z/ucbIUCjkloeBev4f3bpzw4nrDmVi/s/E/L/lzsnNq0Kj7pU9l+5++YGNixrPCUKY/llA8Wzdp2frbrrx+NCpP35tRce6NbN1x5aeOrT2YOmGWBea61aHxvOJJ6596vbXNqX3N+6vue6TX902WX88EfcdvPXhfdcfOLKhcY76dbC+b6ybzOwfX/fe/mqsy9avxfq5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC5pqojE5XRsfGQDSHpUlPrIM5l82la7qPvuuW/ePCS088tbh4r5PrYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX26yc0jrKPA/jz7CZvttmkTdoXjIppWhWlHiwKInpRUZFWpOCpUqTa2oMoCCJKPZhKK5aqeBGsXoqooEYpKNhYLK2Siv+KFw8qKFQPQikGtEvxoJLdZ7ab6Y6rkyqonw8MT55nZr7zm3menc0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/ygDfWPN9vCO+xu3nHPDR4/edeKRm965d9tFD7/63cSm6z7cO/jSyZnNK7Z8ef2yTfvvXjO9+/lDPw2/9cvRnsEPtZpVqVsLIR6PIdTenX3msZmPz5obiyGEahyZDGE0Lj00GnMJq38OIWxu1zl/55snLt8y127bNTBvfEkuJH9foV7N6mkZmV8v/y61tM62Nh68JHx97frtny5/4/X+qWOTpw6JtY71FMLijZ3n94cQFqVtTrbaxrKTU7suhDDYcd6VPeo6/w/Wf2lB/9zU/i+19R452f6VuX4ld1y+n+nPtYM9rrdQRXWUPa6XoVw//zJaqKI6s/HR1L6d2lV/Mr+abTFUYuhrl39PPLVGQse8xRCbc1lr9yvtuQ3p/nP9mOtXcv1qf+6+mtdNC60a4/zx7LjcePY67kvjKzrf1V3cWjB+dmpr6YN6MuuH/B8t9dP+aN9XU1bX7O/U8neodLyDuo23Jz5NRj2N1ePS0875tYts38z6Jy6sbnjv8EhBHXFvTPmxVP7WT0aHbn9t5wNjRfkbKym/Uir/m7VHfrht5wvPFeY/neVXS+VfdmDw+Nr3d6wsfD6z2fPpK5V/x9EPnlz+/zunus11M39Pll8rlX/N9JGB4caBg4X1r86ez6JS+V9dfeO3r3y+71hhfsjyB0vlb5i+76mB8cbFhfkHWx+FenOFllg/P05d8cX4+PcTRfmfZc9/uEt+7Jn/8uTuq15csmtN4fpclz2fkVL133zB/u1DjX3nFb07454z9c0J8N+0LP2P9Xjql/2duVAdvxeenehrfQMNpW34TF4oZ+46i//CfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+I0dOCABAAAAEPT/dTsCBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4KAAD//2InKEQ=") 4.856311256s ago: executing program 4 (id=459): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 4.72338244s ago: executing program 3 (id=460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x851}, 0x14) 4.723171939s ago: executing program 4 (id=461): userfaultfd(0x801) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.675124751s ago: executing program 0 (id=462): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000000c0)={0x0, 0xb, 0xe0, 0x0, 0x0, 0x2, 0x0}) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x7, 0x0, 0x0) 4.67204957s ago: executing program 3 (id=463): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaa12eba488aaaaaaaaaaaa08004500001c000000000002907800000002e00000011100907800000002c2bc9145399c2e39b6925c7b35475b621a905fd2e30f3a5692c16fd45f07f2f70bdbe2752bd2d3d565da6e8bd4707994f81df692c84099e625123c029fe95adad8ad4d744a044ee0f787ac8479d68d8907655eef44c44b2e7f0b07b0092c75df91700e8ea485f62211"], 0x0) getitimer(0x1, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x22020600) timerfd_create(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$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") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000140)={0xffff7523, 0x81, 0xefcc, 0x4000a, 0x5, '\x00', 0x7fff, 0x10}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/30) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 3.495439874s ago: executing program 0 (id=464): setresgid(0xee01, 0x0, 0x0) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/228, 0xe4}], 0x1, 0x401, 0x9) 3.495238496s ago: executing program 1 (id=465): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004d80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setfsuid(r2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000000)) 3.369604144s ago: executing program 1 (id=466): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 3.367453525s ago: executing program 4 (id=467): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0xa3}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 3.179367043s ago: executing program 0 (id=468): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_genetlink_get_family_id$nfc(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000", @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0xc894}, 0x4000000) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="c14a8cf012b79241197fa55c95cb78c868dc7f4065db6a1f55fdb9b3b620905db1150adbd5a48a5968dce0ca0c3b439a84136af4f91b835cf51a0b762c624ee970f63316960a1c5a1e36e766cf0fbb9676e41671fbe2c846cae88f54cd08de9d971d8205b0f52c3dc829935ceb9b6f73bf7cacade0e52ab90b160f562cc866b026c1261b336312bd662d41d1b80d8141466b9092866d89534e4425d9f046c0f047516825d6671ed32c121c5aa880c9759fb464a544c710dec4bd5b3663332c9310983127de7a7c3e9253a76a0a63a3c692fb2c07fdbae7c2", 0xd8}, {&(0x7f0000000280)}, {0x0}], 0x3, 0x0, 0x0, 0x4024814}}], 0x1, 0x48044) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 3.165064515s ago: executing program 1 (id=469): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x20) 3.149769886s ago: executing program 4 (id=470): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='+\x00'/12, @ANYBLOB=']'], 0x20) 2.987418217s ago: executing program 2 (id=471): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 2.237514145s ago: executing program 4 (id=472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x1c, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010120, @broadcast}, "3297e3ba0fa8a2e7"}}, 0x2a) 2.171019225s ago: executing program 1 (id=473): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x1104) 1.987433621s ago: executing program 2 (id=474): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e0612"], 0x9) 1.949860529s ago: executing program 2 (id=475): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x80044d76, 0x0) 1.85142113s ago: executing program 2 (id=476): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) 1.610904341s ago: executing program 3 (id=477): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004d80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setfsuid(r2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000000)) 908.91867ms ago: executing program 2 (id=478): r0 = open(0x0, 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x733d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) unshare(0x60600) r7 = socket$key(0xf, 0x3, 0x2) dup(r7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x737, '\x00', 0x0, r6, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$FUSE_NOTIFY_INVAL_INODE(r1, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x12011, r8, 0x4000) 908.79927ms ago: executing program 3 (id=479): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, @void, @value}, 0x94) 908.68343ms ago: executing program 1 (id=480): init_module(0x0, 0xfe5f, 0x0) 643.445043ms ago: executing program 4 (id=481): r0 = socket(0xa, 0x1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x4, 0x0, &(0x7f0000003c00)) 643.359314ms ago: executing program 1 (id=482): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$nci(r0, 0x0, 0x0) 0s ago: executing program 3 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xa1641000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1f4, 0x0) kernel console output (not intermixed with test programs): forked to background, child pid 6156 [ 15.631142][ T6157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 15.638511][ T6157] eql: remember to turn off Van-Jacobson compression on your slave devices [ 15.696723][ T14] gve 0000:00:00.0 enp0s0: Device link is up. Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. syzkaller login: [ 36.735903][ T6481] cgroup: Unknown subsys name 'net' [ 37.011377][ T6481] cgroup: Unknown subsys name 'cpuset' [ 37.015051][ T6481] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 37.356255][ T6481] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 38.811487][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.815000][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.815406][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.837911][ T6497] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.848358][ T6501] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.850823][ T6507] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.851197][ T6507] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.851881][ T6507] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.852119][ T6507] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.852445][ T6507] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.853533][ T6507] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.853778][ T6507] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.854003][ T6507] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.854631][ T6507] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.854878][ T6507] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.857489][ T6507] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.860181][ T6507] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.860582][ T6507] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.861211][ T6507] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.861630][ T6507] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.862440][ T6507] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 38.872945][ T6508] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 38.874806][ T6508] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 38.880895][ T6508] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 38.884816][ T6508] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 39.186512][ T6502] chnl_net:caif_netlink_parms(): no params data found [ 39.205770][ T6492] chnl_net:caif_netlink_parms(): no params data found [ 39.252290][ T6499] chnl_net:caif_netlink_parms(): no params data found [ 39.327902][ T6502] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.328050][ T6502] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.328177][ T6502] bridge_slave_0: entered allmulticast mode [ 39.329126][ T6502] bridge_slave_0: entered promiscuous mode [ 39.331223][ T6502] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.331280][ T6502] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.331400][ T6502] bridge_slave_1: entered allmulticast mode [ 39.332199][ T6502] bridge_slave_1: entered promiscuous mode [ 39.413148][ T6494] chnl_net:caif_netlink_parms(): no params data found [ 39.444365][ T6502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.477828][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.477938][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.478037][ T6492] bridge_slave_0: entered allmulticast mode [ 39.479263][ T6492] bridge_slave_0: entered promiscuous mode [ 39.480937][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.480981][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.481075][ T6492] bridge_slave_1: entered allmulticast mode [ 39.481961][ T6492] bridge_slave_1: entered promiscuous mode [ 39.483764][ T6502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.514257][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.514342][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.514463][ T6499] bridge_slave_0: entered allmulticast mode [ 39.515386][ T6499] bridge_slave_0: entered promiscuous mode [ 39.535516][ T6502] team0: Port device team_slave_0 added [ 39.541041][ T6502] team0: Port device team_slave_1 added [ 39.542954][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.543029][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.543498][ T6499] bridge_slave_1: entered allmulticast mode [ 39.544326][ T6499] bridge_slave_1: entered promiscuous mode [ 39.595637][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.598242][ T6505] chnl_net:caif_netlink_parms(): no params data found [ 39.603632][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.617053][ T6502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.619246][ T6502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.619277][ T6502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.621417][ T6499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.622449][ T6502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.622474][ T6502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.622500][ T6502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.660154][ T6499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.683548][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.685655][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.687949][ T6494] bridge_slave_0: entered allmulticast mode [ 39.688804][ T6494] bridge_slave_0: entered promiscuous mode [ 39.690695][ T6494] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.690754][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.691004][ T6494] bridge_slave_1: entered allmulticast mode [ 39.692219][ T6494] bridge_slave_1: entered promiscuous mode [ 39.718713][ T6492] team0: Port device team_slave_0 added [ 39.720411][ T6492] team0: Port device team_slave_1 added [ 39.740208][ T6499] team0: Port device team_slave_0 added [ 39.743245][ T6502] hsr_slave_0: entered promiscuous mode [ 39.743843][ T6502] hsr_slave_1: entered promiscuous mode [ 39.772191][ T6494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.773977][ T6494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.781691][ T6499] team0: Port device team_slave_1 added [ 39.795078][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.795138][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.795165][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.796254][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.796278][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.796303][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.811769][ T6494] team0: Port device team_slave_0 added [ 39.848761][ T6494] team0: Port device team_slave_1 added [ 39.849507][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.849532][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.849560][ T6499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.850640][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.850664][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.850697][ T6499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.888435][ T6499] hsr_slave_0: entered promiscuous mode [ 39.890858][ T6499] hsr_slave_1: entered promiscuous mode [ 39.892888][ T6499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.895077][ T6499] Cannot create hsr debugfs directory [ 39.903471][ T6505] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.905610][ T6505] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.907613][ T6505] bridge_slave_0: entered allmulticast mode [ 39.910458][ T6505] bridge_slave_0: entered promiscuous mode [ 39.941913][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.941968][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.942244][ T6494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.942887][ T6505] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.942944][ T6505] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.943329][ T6505] bridge_slave_1: entered allmulticast mode [ 39.944161][ T6505] bridge_slave_1: entered promiscuous mode [ 39.957697][ T6492] hsr_slave_0: entered promiscuous mode [ 39.958189][ T6492] hsr_slave_1: entered promiscuous mode [ 39.958527][ T6492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.958555][ T6492] Cannot create hsr debugfs directory [ 39.975607][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.975661][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.975688][ T6494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.991079][ T6505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.005596][ T6505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.082882][ T6505] team0: Port device team_slave_0 added [ 40.111743][ T6494] hsr_slave_0: entered promiscuous mode [ 40.112261][ T6494] hsr_slave_1: entered promiscuous mode [ 40.112604][ T6494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.112644][ T6494] Cannot create hsr debugfs directory [ 40.113920][ T6505] team0: Port device team_slave_1 added [ 40.154983][ T6505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.155031][ T6505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.155078][ T6505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.178405][ T6505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.178452][ T6505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.178479][ T6505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.280781][ T6505] hsr_slave_0: entered promiscuous mode [ 40.282935][ T6505] hsr_slave_1: entered promiscuous mode [ 40.283741][ T6505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.283772][ T6505] Cannot create hsr debugfs directory [ 40.292331][ T6502] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.304997][ T6502] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.327343][ T6502] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.334543][ T6502] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.401377][ T6499] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.429970][ T6499] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.444005][ T6499] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.465332][ T6499] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.495476][ T6492] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.511457][ T6492] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.526661][ T6492] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.531498][ T6492] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.556994][ T6494] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.564175][ T6494] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.567775][ T6494] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.582995][ T6494] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.627104][ T6502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.644785][ T6502] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.651675][ T6505] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.655400][ T6505] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.681657][ T6505] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.685493][ T6505] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.701428][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.701573][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.702835][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.702889][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.734835][ T6502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.753768][ T6499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.785191][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.814986][ T6505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.823331][ T6505] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.837464][ T6492] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.852416][ T516] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.852484][ T516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.853614][ T516] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.853670][ T516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.857920][ T6499] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.867669][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.867854][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.881151][ T6056] Bluetooth: hci1: command tx timeout [ 40.881370][ T6504] Bluetooth: hci3: command tx timeout [ 40.886674][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.886796][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.887323][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.887362][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.888259][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.888308][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.896281][ T6502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.922971][ T6492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.925502][ T6492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.941757][ T6494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.960293][ T6056] Bluetooth: hci0: command tx timeout [ 40.960455][ T6056] Bluetooth: hci2: command tx timeout [ 40.960626][ T6504] Bluetooth: hci4: command tx timeout [ 40.997430][ T6494] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.006383][ T6505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.018189][ T516] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.018269][ T516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.027270][ T6502] veth0_vlan: entered promiscuous mode [ 41.045406][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.045487][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.053055][ T6502] veth1_vlan: entered promiscuous mode [ 41.096101][ T6502] veth0_macvtap: entered promiscuous mode [ 41.105050][ T6502] veth1_macvtap: entered promiscuous mode [ 41.120694][ T6502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.123354][ T6502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.132751][ T6502] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.135393][ T6502] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.137922][ T6502] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.141964][ T6502] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.158140][ T6499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.223997][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.263434][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.263529][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.274858][ T6505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.284736][ T6499] veth0_vlan: entered promiscuous mode [ 41.333126][ T6492] veth0_vlan: entered promiscuous mode [ 41.337933][ T6492] veth1_vlan: entered promiscuous mode [ 41.348548][ T6499] veth1_vlan: entered promiscuous mode [ 41.367666][ T516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.367749][ T516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.378765][ T6492] veth0_macvtap: entered promiscuous mode [ 41.394570][ T6492] veth1_macvtap: entered promiscuous mode [ 41.403057][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.406281][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.411656][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.432155][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.432230][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.432808][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.434249][ T6492] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.434286][ T6492] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.434315][ T6492] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.434343][ T6492] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.457213][ T6505] veth0_vlan: entered promiscuous mode [ 41.461614][ T6494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.514537][ T6502] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.525725][ T6505] veth1_vlan: entered promiscuous mode [ 41.532927][ T6499] veth0_macvtap: entered promiscuous mode [ 41.535116][ T6499] veth1_macvtap: entered promiscuous mode [ 41.564329][ T6499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.564402][ T6499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.568718][ T6499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.568742][ T6499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.569525][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.576390][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.576418][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.586469][ T6499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.586530][ T6499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.586710][ T6499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.586731][ T6499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.588139][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.623611][ T6499] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.623689][ T6499] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.623741][ T6499] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.623777][ T6499] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.628084][ T6576] loop3: detected capacity change from 0 to 512 [ 41.640971][ T6505] veth0_macvtap: entered promiscuous mode [ 41.643180][ T6576] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.643237][ T6576] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.650962][ T6505] veth1_macvtap: entered promiscuous mode [ 41.661561][ T6576] EXT4-fs (loop3): 1 truncate cleaned up [ 41.661644][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.661687][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.662519][ T6576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.748394][ T6494] veth0_vlan: entered promiscuous mode [ 41.755342][ T6494] veth1_vlan: entered promiscuous mode [ 41.782064][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.785477][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.788201][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.791802][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.794523][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.797465][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.800041][ T6505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.833806][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.833869][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.855276][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.855339][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.855359][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.855379][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.855397][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.855416][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.856007][ T6505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.884349][ T6505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.884434][ T6505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.884797][ T6505] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.884827][ T6505] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.900952][ T6494] veth0_macvtap: entered promiscuous mode [ 41.902767][ T6494] veth1_macvtap: entered promiscuous mode [ 41.965585][ T476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.965655][ T476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.984134][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.984198][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.984218][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.984238][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.984256][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.984275][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.984297][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.984316][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.985129][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.986381][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.986409][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.986427][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.986446][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.986464][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.986483][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.986504][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.986523][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.987033][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.988416][ T6494] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.988453][ T6494] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.988482][ T6494] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.988510][ T6494] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.185702][ T516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.185771][ T516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.213475][ T516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.213532][ T516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.229810][ T516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.229865][ T516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.257257][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.257311][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.923976][ T6596] loop2: detected capacity change from 0 to 32768 [ 42.941692][ T6596] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3 (6596) [ 42.960950][ T6504] Bluetooth: hci3: command tx timeout [ 42.961027][ T6504] Bluetooth: hci1: command tx timeout [ 42.964111][ T6596] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 42.964252][ T6596] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 42.964314][ T6596] BTRFS info (device loop2): using free-space-tree [ 42.988148][ T6601] loop4: detected capacity change from 0 to 16 [ 43.027312][ T6599] xt_hashlimit: size too large, truncated to 1048576 [ 43.049441][ T6501] Bluetooth: hci4: command tx timeout [ 43.049514][ T6501] Bluetooth: hci2: command tx timeout [ 43.049562][ T6501] Bluetooth: hci0: command tx timeout [ 43.058419][ T6601] erofs (device loop4): mounted with root inode @ nid 36. [ 44.218690][ T6628] loop4: detected capacity change from 0 to 512 [ 44.224672][ T6628] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.295375][ T6628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.039570][ T6504] Bluetooth: hci1: command tx timeout [ 45.039653][ T6504] Bluetooth: hci3: command tx timeout [ 45.159110][ T6501] Bluetooth: hci0: command tx timeout [ 45.159191][ T6501] Bluetooth: hci2: command tx timeout [ 45.159245][ T6501] Bluetooth: hci4: command tx timeout [ 45.177884][ T6505] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 46.247876][ T6502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.355579][ T6650] loop0: detected capacity change from 0 to 32768 [ 46.401135][ T6657] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.412108][ T6650] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 46.419192][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 46.470009][ T6650] XFS (loop0): Ending clean mount [ 46.477321][ T6650] XFS (loop0): Quotacheck needed: Please wait. [ 46.483344][ T6494] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.518547][ T6650] XFS (loop0): Quotacheck: Done. [ 46.596486][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.633699][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.663238][ T6665] loop1: detected capacity change from 0 to 8 [ 46.665550][ T6665] squashfs: Unknown parameter '/q>"' [ 47.121263][ T6504] Bluetooth: hci3: command tx timeout [ 47.121345][ T6504] Bluetooth: hci1: command tx timeout [ 47.201496][ T6504] Bluetooth: hci4: command tx timeout [ 47.201575][ T6504] Bluetooth: hci2: command tx timeout [ 47.204988][ T6504] Bluetooth: hci0: command tx timeout [ 47.291211][ T6499] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 47.537317][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.537579][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.792219][ T6685] loop1: detected capacity change from 0 to 64 [ 48.471319][ T6684] loop0: detected capacity change from 0 to 40427 [ 48.498946][ T6684] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 48.499064][ T6684] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 48.516047][ T6684] F2FS-fs (loop0): invalid crc value [ 48.821398][ T6684] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 48.821904][ T6684] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 49.337215][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 49.428343][ T6701] loop3: detected capacity change from 0 to 512 [ 49.444814][ T6701] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.490715][ T6701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.523398][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 49.692590][ T11] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 49.695482][ T11] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 49.698375][ T11] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 49.705418][ T11] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.710189][ T11] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 49.712903][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.732567][ T11] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 49.800684][ T11] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 49.918743][ T6708] udevd[6708]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 50.205077][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 50.212008][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 50.783442][ T6483] usb 1-1: USB disconnect, device number 2 [ 50.876045][ T6502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.469054][ T6749] loop0: detected capacity change from 0 to 256 [ 53.492738][ T6761] loop1: detected capacity change from 0 to 512 [ 53.498730][ T6761] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.548190][ T6761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.023273][ T6772] loop0: detected capacity change from 0 to 512 [ 54.680252][ T6772] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.728040][ T6772] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.48: corrupted xattr entries [ 54.731270][ T6772] EXT4-fs (loop0): Remounting filesystem read-only [ 54.731331][ T6772] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.731436][ T6772] EXT4-fs (loop0): 1 truncate cleaned up [ 54.732307][ T6772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.951931][ T6492] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.988457][ T6786] loop3: detected capacity change from 0 to 1024 [ 56.163165][ T6806] netlink: 156 bytes leftover after parsing attributes in process `syz.3.59'. [ 56.167255][ T6807] syz.4.58 uses obsolete (PF_INET,SOCK_PACKET) [ 56.346811][ T6812] loop1: detected capacity change from 0 to 1024 [ 56.369043][ T6812] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 56.369112][ T6812] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 56.369236][ T6812] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 56.373872][ T6812] EXT4-fs (loop1): invalid journal inode [ 56.373941][ T6812] EXT4-fs (loop1): can't get journal size [ 56.374496][ T6812] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.61: blocks 2-2 from inode overlap system zone [ 56.383352][ T6812] EXT4-fs (loop1): failed to initialize system zone (-117) [ 56.383473][ T6812] EXT4-fs (loop1): mount failed [ 56.390690][ T6818] loop3: detected capacity change from 0 to 512 [ 56.420513][ T6818] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.445227][ T6818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.491594][ T6844] block device autoloading is deprecated and will be removed. [ 59.083503][ T6502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.206429][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.206691][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.227532][ T6856] Bluetooth: MGMT ver 1.23 [ 59.372424][ T6861] loop3: detected capacity change from 0 to 256 [ 60.522637][ T6875] loop1: detected capacity change from 0 to 2048 [ 60.640069][ T6875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.647083][ T6881] loop4: detected capacity change from 0 to 512 [ 60.654023][ T6881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.772760][ T6881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.811678][ T6492] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.968059][ T6884] loop2: detected capacity change from 0 to 40427 [ 61.981233][ T6884] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 61.983500][ T6884] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 62.119387][ T6884] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 62.119450][ T6884] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 62.131561][ T6899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.134139][ T6899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.222487][ T6494] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.307987][ T6499] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.723641][ T2390] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.726836][ T2390] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.697830][ T6942] input: syz0 as /devices/virtual/input/input3 [ 66.629482][ T6956] netlink: 684 bytes leftover after parsing attributes in process `syz.3.103'. [ 66.629664][ T6956] netlink: 684 bytes leftover after parsing attributes in process `syz.3.103'. [ 66.634076][ T6957] netlink: 40 bytes leftover after parsing attributes in process `syz.4.106'. [ 66.634609][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.106'. [ 66.668151][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 67.603798][ T6976] loop4: detected capacity change from 0 to 32768 [ 68.297381][ T6976] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 68.516161][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.516407][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.522546][ T6976] XFS (loop4): Ending clean mount [ 70.050975][ T1786] cfg80211: failed to load regulatory.db [ 70.159692][ T6494] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 70.222139][ T7009] loop1: detected capacity change from 0 to 512 [ 70.247249][ T7009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.387481][ T6492] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.623725][ T7017] hub 2-0:1.0: USB hub found [ 70.625334][ T7017] hub 2-0:1.0: 8 ports detected [ 72.118637][ T7026] loop1: detected capacity change from 0 to 4096 [ 72.478552][ T7040] capability: warning: `syz.3.129' uses deprecated v2 capabilities in a way that may be insecure [ 73.045446][ T7048] hub 2-0:1.0: USB hub found [ 73.046347][ T7048] hub 2-0:1.0: 8 ports detected [ 73.556346][ T7037] process 'syz.1.126' launched '/dev/fd/6' with NULL argv: empty string added [ 73.568426][ T7051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.133'. [ 73.944649][ T7056] Zero length message leads to an empty skb [ 75.214890][ T7060] loop3: detected capacity change from 0 to 256 [ 75.587333][ T7065] loop3: detected capacity change from 0 to 2048 [ 75.637011][ T7065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.145166][ T6502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.537651][ T7085] loop3: detected capacity change from 0 to 512 [ 77.546895][ T7085] journal_path: Non-blockdev passed as './file1' [ 77.546969][ T7085] EXT4-fs: error: could not find journal device path [ 78.425466][ T7098] loop4: detected capacity change from 0 to 256 [ 78.615270][ T31] audit: type=1326 audit(78.360:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7105 comm="syz.0.149" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b5b728 code=0x0 [ 78.707518][ T7107] ======================================================= [ 78.707518][ T7107] WARNING: The mand mount option has been deprecated and [ 78.707518][ T7107] and is ignored by this kernel. Remove the mand [ 78.707518][ T7107] option from the mount to silence this warning. [ 78.707518][ T7107] ======================================================= [ 79.596006][ T7123] loop3: detected capacity change from 0 to 64 [ 80.715327][ T6501] Bluetooth: hci4: unexpected cc 0x2007 length: 100 > 2 [ 80.779586][ T7139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.786536][ T7139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.192970][ T7149] loop3: detected capacity change from 0 to 2048 [ 81.234281][ T7149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.062955][ T7159] loop0: detected capacity change from 0 to 512 [ 82.238948][ T7159] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.306453][ T7158] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 82.456042][ T7159] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.163: corrupted xattr entries [ 82.458151][ T7159] EXT4-fs (loop0): Remounting filesystem read-only [ 82.458854][ T7159] EXT4-fs (loop0): 1 truncate cleaned up [ 82.473752][ T7159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.790975][ T6502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.851292][ T7159] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.001907][ T7168] loop4: detected capacity change from 0 to 256 [ 83.043234][ T7168] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 84.241199][ T7177] loop1: detected capacity change from 0 to 64 [ 84.634474][ T7182] loop1: detected capacity change from 0 to 512 [ 84.720013][ T6501] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 84.720168][ T6501] Bluetooth: hci4: Injecting HCI hardware error event [ 84.721061][ T6501] Bluetooth: hci4: hardware error 0x00 [ 84.848320][ T7182] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.862317][ T7182] EXT4-fs (loop1): 1 truncate cleaned up [ 84.863258][ T7182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.078079][ T7166] loop3: detected capacity change from 0 to 32768 [ 85.190505][ T7166] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 85.389054][ T6502] ocfs2: Unmounting device (7,3) on (node local) [ 87.039041][ T6501] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 87.060747][ T7222] loop4: detected capacity change from 0 to 512 [ 87.075028][ T7222] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.224310][ T7222] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.180: corrupted xattr entries [ 87.234679][ T7222] EXT4-fs (loop4): Remounting filesystem read-only [ 87.234779][ T7222] EXT4-fs (loop4): 1 truncate cleaned up [ 87.235692][ T7222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.603176][ T7222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.715428][ T7221] xt_CT: No such helper "snmp" [ 88.491092][ T7238] loop3: detected capacity change from 0 to 256 [ 88.524161][ T7238] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 89.583051][ T7232] loop2: detected capacity change from 0 to 32768 [ 89.600131][ T7244] loop0: detected capacity change from 0 to 8 [ 89.658939][ T7253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.661464][ T7253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.673526][ T7232] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 89.773883][ T7232] XFS (loop2): Ending clean mount [ 89.778746][ T7232] XFS (loop2): Quotacheck needed: Please wait. [ 89.815680][ T7232] XFS (loop2): Quotacheck: Done. [ 89.831101][ T7257] loop3: detected capacity change from 0 to 4096 [ 89.888814][ T6505] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 90.756709][ T6492] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.923423][ T7275] loop2: detected capacity change from 0 to 256 [ 90.943354][ T7277] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.943823][ T7275] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 90.969198][ T7275] exFAT-fs (loop2): error, data size is invalid(10) [ 92.124093][ T7295] loop2: detected capacity change from 0 to 164 [ 92.168053][ T7295] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 92.234144][ T7298] trusted_key: syz.2.204 sent an empty control message without MSG_MORE. [ 92.319014][ T6504] Bluetooth: hci3: command 0x0405 tx timeout [ 92.562705][ T7306] loop2: detected capacity change from 0 to 512 [ 92.565597][ T7306] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.588249][ T7306] EXT4-fs (loop2): 1 truncate cleaned up [ 92.591419][ T7306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.009172][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.009431][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.546182][ T6505] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.647224][ T7314] loop4: detected capacity change from 0 to 512 [ 93.659203][ T7314] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.836373][ T7323] loop3: detected capacity change from 0 to 256 [ 93.836400][ T7314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.848498][ T7323] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 93.866002][ T7323] exFAT-fs (loop3): error, data size is invalid(10) [ 94.545585][ T7326] loop0: detected capacity change from 0 to 256 [ 94.597388][ T6494] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.265694][ T7345] input: syz1 as /devices/virtual/input/input4 [ 95.607511][ T7342] loop3: detected capacity change from 0 to 256 [ 95.630316][ T7342] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 95.634318][ T7343] loop0: detected capacity change from 0 to 512 [ 95.647967][ T7343] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.652583][ T7343] EXT4-fs (loop0): 1 truncate cleaned up [ 95.653474][ T7343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.749125][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.749547][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.959171][ T7354] netlink: 'syz.2.222': attribute type 1 has an invalid length. [ 96.070608][ T7356] loop2: detected capacity change from 0 to 512 [ 96.759087][ T7356] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.824880][ T7356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.836901][ T7333] loop4: detected capacity change from 0 to 32768 [ 96.854557][ T7367] loop3: detected capacity change from 0 to 256 [ 96.861533][ T6505] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.016185][ T7333] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 97.031019][ T7367] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 97.043684][ T7367] exFAT-fs (loop3): error, data size is invalid(10) [ 97.692849][ T7333] XFS (loop4): Ending clean mount [ 97.703220][ T7333] XFS (loop4): Quotacheck needed: Please wait. [ 97.805046][ T7333] XFS (loop4): Quotacheck: Done. [ 97.849933][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.850480][ T7380] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.941088][ T6494] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 98.555194][ T7380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.567210][ T7380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.680965][ T6499] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.823591][ T7380] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.823680][ T7380] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.823710][ T7380] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.823740][ T7380] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.668118][ T7405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.668372][ T7405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.814966][ T7407] loop0: detected capacity change from 0 to 512 [ 99.817684][ T7407] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.910577][ T7407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.983341][ T7421] loop1: detected capacity change from 0 to 512 [ 100.004584][ T7421] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.013365][ T6499] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.018201][ T7421] EXT4-fs (loop1): 1 truncate cleaned up [ 100.019196][ T7421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.247647][ T7437] block device autoloading is deprecated and will be removed. [ 101.397756][ T7437] syz.4.244: attempt to access beyond end of device [ 101.397756][ T7437] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 101.531043][ T7448] loop3: detected capacity change from 0 to 256 [ 101.539350][ T7448] vfat: Unknown parameter 'unate' [ 101.744566][ T6492] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.826169][ T7456] loop0: detected capacity change from 0 to 512 [ 101.850700][ T7456] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.933564][ T7456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.067682][ T7468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.071917][ T7468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.092811][ T7469] loop3: detected capacity change from 0 to 256 [ 102.126071][ T6499] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.282769][ T7471] usb usb1: usbfs: process 7471 (syz.3.257) did not claim interface 0 before use [ 102.376841][ T7475] loop0: detected capacity change from 0 to 256 [ 102.381006][ T7475] exfat: Deprecated parameter 'utf8' [ 102.405535][ T7475] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 102.409658][ T7477] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.485015][ T7481] loop3: detected capacity change from 0 to 512 [ 102.487957][ T7481] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.509972][ T7481] EXT4-fs (loop3): 1 truncate cleaned up [ 102.528084][ T7481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.712053][ T7488] xt_TCPMSS: Only works on TCP SYN packets [ 102.841960][ T7492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.842209][ T7492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.992315][ T7496] usb usb1: usbfs: process 7496 (syz.4.268) did not claim interface 0 before use [ 103.242759][ T7484] loop0: detected capacity change from 0 to 32768 [ 103.469083][ T7484] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.262 (7484) [ 103.526197][ T7484] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.529776][ T7484] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 103.532561][ T7484] BTRFS info (device loop0): using free-space-tree [ 103.543910][ T6502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.724787][ T7537] loop3: detected capacity change from 0 to 256 [ 104.733991][ T7537] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 104.757720][ T7537] exFAT-fs (loop3): error, data size is invalid(10) [ 104.793692][ T6499] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.803095][ T7540] usb usb1: usbfs: process 7540 (syz.1.279) did not claim interface 0 before use [ 105.043399][ T7554] loop1: detected capacity change from 0 to 1024 [ 105.125905][ T7557] loop3: detected capacity change from 0 to 512 [ 105.127588][ T7557] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.142721][ T7557] EXT4-fs (loop3): 1 truncate cleaned up [ 105.143669][ T7557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.189291][ T12] hfsplus: b-tree write err: -5, ino 4 [ 105.451223][ T7568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.451561][ T7568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.830633][ T7575] loop2: detected capacity change from 0 to 256 [ 105.844267][ T7575] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 105.866489][ T7575] exFAT-fs (loop2): error, data size is invalid(10) [ 106.151848][ T7582] loop4: detected capacity change from 0 to 256 [ 106.222587][ T7582] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 106.253329][ T7582] overlay: filesystem on ./file0 not supported [ 107.035382][ T7588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.035650][ T7588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.066987][ T7590] loop2: detected capacity change from 0 to 1024 [ 107.133417][ T7590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.202973][ T6505] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.356317][ T7602] loop2: detected capacity change from 0 to 4096 [ 107.383329][ T7604] loop0: detected capacity change from 0 to 256 [ 107.398187][ T7604] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 107.417651][ T7604] exFAT-fs (loop0): error, data size is invalid(10) [ 107.535876][ T7608] warning: `syz.2.304' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.596208][ T6502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.596246][ T7610] loop1: detected capacity change from 0 to 2048 [ 107.643721][ T7612] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.694247][ T7610] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 107.701857][ T7610] Remounting filesystem read-only [ 108.043425][ T7627] loop1: detected capacity change from 0 to 2048 [ 108.048989][ T7627] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 108.049093][ T7627] UDF-fs: Scanning with blocksize 512 failed [ 108.052244][ T7627] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.203136][ T7630] loop1: detected capacity change from 0 to 256 [ 108.213373][ T7630] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 108.552635][ T7634] loop1: detected capacity change from 0 to 8 [ 108.737127][ T7634] SQUASHFS error: Unable to read inode 0x147 [ 109.260496][ T7638] loop3: detected capacity change from 0 to 512 [ 109.267654][ T7638] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.282067][ T7638] EXT4-fs (loop3): 1 truncate cleaned up [ 109.283001][ T7638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.287447][ T7639] xt_CT: No such helper "snmp" [ 109.357544][ T7643] netlink: 64 bytes leftover after parsing attributes in process `syz.1.317'. [ 109.757245][ T7649] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 109.785551][ T7645] loop1: detected capacity change from 0 to 32768 [ 109.881497][ T7652] netlink: 60 bytes leftover after parsing attributes in process `syz.2.320'. [ 109.881664][ T7652] netlink: 60 bytes leftover after parsing attributes in process `syz.2.320'. [ 109.952051][ T7645] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 109.988334][ T6492] ocfs2: Unmounting device (7,1) on (node local) [ 110.249906][ T7663] loop2: detected capacity change from 0 to 256 [ 110.272643][ T7663] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 110.554905][ T6502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.799828][ T7680] loop0: detected capacity change from 0 to 256 [ 110.944000][ T7680] exfat: Deprecated parameter 'utf8' [ 111.419017][ T7680] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 111.458093][ T7686] mmap: syz.2.333 (7686): VmData 37498880 exceed data ulimit 128. Update limits or use boot option ignore_rlimit_data. [ 111.473889][ T7685] loop3: detected capacity change from 0 to 512 [ 111.475907][ T7685] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.527652][ T7685] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.330: corrupted xattr entries [ 111.527981][ T7685] EXT4-fs (loop3): Remounting filesystem read-only [ 111.528053][ T7685] EXT4-fs (loop3): 1 truncate cleaned up [ 111.531047][ T7685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.575920][ T7691] loop2: detected capacity change from 0 to 128 [ 111.594259][ T7691] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.822900][ T7700] loop4: detected capacity change from 0 to 256 [ 112.495757][ T7685] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.618289][ T7700] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 112.632935][ T6505] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.685945][ T7706] loop3: detected capacity change from 0 to 512 [ 112.694041][ T7706] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.712421][ T7706] EXT4-fs (loop3): 1 truncate cleaned up [ 112.713326][ T7706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.602048][ T7720] loop4: detected capacity change from 0 to 4096 [ 113.648407][ T7720] ntfs3(loop4): ino=1a, mi_enum_attr [ 113.654673][ T7720] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 113.970878][ T7729] loop2: detected capacity change from 0 to 4096 [ 115.061398][ T7742] loop0: detected capacity change from 0 to 512 [ 115.125481][ T7742] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 115.365876][ T7742] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.351: corrupted xattr entries [ 115.369856][ T7742] EXT4-fs (loop0): Remounting filesystem read-only [ 115.369961][ T7742] EXT4-fs (loop0): 1 truncate cleaned up [ 115.370883][ T7742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.646609][ T7742] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.976511][ T7780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.006791][ T7780] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 118.362845][ T7791] loop2: detected capacity change from 0 to 512 [ 118.392929][ T7791] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.432104][ T7790] loop0: detected capacity change from 0 to 4096 [ 118.437783][ T7791] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.367: corrupted xattr entries [ 118.464694][ T7791] EXT4-fs (loop2): Remounting filesystem read-only [ 118.464811][ T7791] EXT4-fs (loop2): 1 truncate cleaned up [ 118.468483][ T6502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.485383][ T7791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.510742][ T7797] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.713605][ T7791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.763465][ T7807] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.763611][ T7807] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.763692][ T7807] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.763729][ T7807] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.784470][ T7807] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 120.182300][ T7826] loop3: detected capacity change from 0 to 4096 [ 121.235154][ T7847] loop0: detected capacity change from 0 to 512 [ 121.238430][ T7847] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.258935][ T7847] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.386: corrupted xattr entries [ 121.264035][ T7847] EXT4-fs (loop0): Remounting filesystem read-only [ 121.264189][ T7847] EXT4-fs (loop0): 1 truncate cleaned up [ 121.265083][ T7847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.852139][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.854917][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.908845][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 121.913904][ T7858] usb usb1: usbfs: process 7858 (syz.1.390) did not claim interface 0 before use [ 121.933884][ T7847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.027442][ T7860] loop1: detected capacity change from 0 to 512 [ 122.027973][ T7860] journal_path: Non-blockdev passed as './file1' [ 122.043702][ T7860] EXT4-fs: error: could not find journal device path [ 123.322288][ T7864] loop4: detected capacity change from 0 to 262144 [ 123.361199][ T7864] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.393 (7864) [ 123.386094][ T7870] loop0: detected capacity change from 0 to 4096 [ 123.459084][ T7864] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 123.459185][ T7864] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 123.459240][ T7864] BTRFS info (device loop4): using free-space-tree [ 123.539569][ T7883] loop1: detected capacity change from 0 to 64 [ 123.733131][ T6494] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 123.749503][ T7902] usb usb1: usbfs: process 7902 (syz.1.401) did not claim interface 0 before use [ 123.788306][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.403'. [ 123.870025][ T7905] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.870103][ T7905] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.870134][ T7905] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.870163][ T7905] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.871203][ T7905] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 125.704725][ T7929] loop3: detected capacity change from 0 to 512 [ 125.705211][ T7929] journal_path: Non-blockdev passed as './file1' [ 125.719003][ T7929] EXT4-fs: error: could not find journal device path [ 125.901581][ T7936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.904505][ T7936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.300003][ T2390] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.300108][ T2390] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.651620][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'. [ 128.852052][ T7973] Bluetooth: MGMT ver 1.23 [ 129.348292][ T7977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.348546][ T7977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.424245][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.424488][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.450041][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.450283][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.463652][ T7983] capability: warning: `syz.2.432' uses 32-bit capabilities (legacy support in use) [ 129.659911][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 130.482815][ T7994] loop0: detected capacity change from 0 to 256 [ 132.125406][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 132.135148][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.441'. [ 132.889383][ T8018] loop0: detected capacity change from 0 to 512 [ 132.916930][ T8018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.030842][ T8022] loop4: detected capacity change from 0 to 128 [ 133.045915][ T6499] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.050389][ T8022] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.076914][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 133.892755][ T6494] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.997037][ T8036] syzkaller1: entered promiscuous mode [ 133.997106][ T8036] syzkaller1: entered allmulticast mode [ 134.081797][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'. [ 134.155019][ T8046] loop0: detected capacity change from 0 to 8192 [ 134.424890][ T8060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.428746][ T8060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.446007][ T8059] delete_channel: no stack [ 134.730367][ T8067] loop3: detected capacity change from 0 to 512 [ 134.755211][ T8067] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.574970][ T8055] loop2: detected capacity change from 0 to 32768 [ 135.577341][ T8055] bcachefs: bch2_fs_parse_param() Error parsing option fix_errors: option_value [ 135.598114][ T8067] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.463: corrupted xattr entries [ 135.598457][ T8067] EXT4-fs (loop3): Remounting filesystem read-only [ 135.598559][ T8067] EXT4-fs (loop3): 1 truncate cleaned up [ 135.599545][ T8067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.821780][ T8067] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.069867][ T8097] syzkaller1: entered promiscuous mode [ 137.069931][ T8097] syzkaller1: entered allmulticast mode [ 139.118248][ T8126] [ 139.118985][ T8126] ====================================================== [ 139.120806][ T8126] WARNING: possible circular locking dependency detected [ 139.122606][ T8126] 6.15.0-rc2-syzkaller-gc72692105976 #0 Not tainted [ 139.124309][ T8126] ------------------------------------------------------ [ 139.126091][ T8126] syz.0.468/8126 is trying to acquire lock: [ 139.127574][ T8126] ffff800092445fe8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 139.129790][ T8126] [ 139.129790][ T8126] but task is already holding lock: [ 139.131683][ T8126] ffff0000d6091628 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x14c/0xb14 [ 139.134387][ T8126] [ 139.134387][ T8126] which lock already depends on the new lock. [ 139.134387][ T8126] [ 139.137092][ T8126] [ 139.137092][ T8126] the existing dependency chain (in reverse order) is: [ 139.139405][ T8126] [ 139.139405][ T8126] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 139.141634][ T8126] __mutex_lock_common+0x1d0/0x2190 [ 139.143086][ T8126] mutex_lock_nested+0x2c/0x38 [ 139.144430][ T8126] smc_switch_to_fallback+0x44/0xa3c [ 139.145940][ T8126] smc_sendmsg+0xf8/0x86c [ 139.147173][ T8126] __sys_sendto+0x36c/0x4f4 [ 139.148456][ T8126] __arm64_sys_sendto+0xd8/0xf8 [ 139.149863][ T8126] invoke_syscall+0x98/0x2b8 [ 139.151210][ T8126] el0_svc_common+0x130/0x23c [ 139.152610][ T8126] do_el0_svc+0x48/0x58 [ 139.153827][ T8126] el0_svc+0x58/0x150 [ 139.155081][ T8126] el0t_64_sync_handler+0x78/0x108 [ 139.156669][ T8126] el0t_64_sync+0x198/0x19c [ 139.158000][ T8126] [ 139.158000][ T8126] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 139.160103][ T8126] sockopt_lock_sock+0x84/0x144 [ 139.161466][ T8126] do_ip_setsockopt+0x118c/0x290c [ 139.162974][ T8126] ip_setsockopt+0x68/0x134 [ 139.164323][ T8126] udp_setsockopt+0xb8/0xd0 [ 139.165640][ T8126] sock_common_setsockopt+0xb0/0xcc [ 139.167148][ T8126] do_sock_setsockopt+0x1ec/0x328 [ 139.168600][ T8126] __arm64_sys_setsockopt+0x170/0x1e0 [ 139.170266][ T8126] invoke_syscall+0x98/0x2b8 [ 139.171643][ T8126] el0_svc_common+0x130/0x23c [ 139.173020][ T8126] do_el0_svc+0x48/0x58 [ 139.174232][ T8126] el0_svc+0x58/0x150 [ 139.175427][ T8126] el0t_64_sync_handler+0x78/0x108 [ 139.176927][ T8126] el0t_64_sync+0x198/0x19c [ 139.178278][ T8126] [ 139.178278][ T8126] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 139.180246][ T8126] __lock_acquire+0x1728/0x3058 [ 139.181764][ T8126] lock_acquire+0x14c/0x2e0 [ 139.183066][ T8126] __mutex_lock_common+0x1d0/0x2190 [ 139.184619][ T8126] mutex_lock_nested+0x2c/0x38 [ 139.186033][ T8126] rtnl_lock+0x20/0x2c [ 139.187313][ T8126] start_sync_thread+0xe0/0x2014 [ 139.188770][ T8126] do_ip_vs_set_ctl+0x3ac/0x90c [ 139.190206][ T8126] nf_setsockopt+0x270/0x290 [ 139.191581][ T8126] ip_setsockopt+0x124/0x134 [ 139.192965][ T8126] tcp_setsockopt+0xcc/0xe8 [ 139.194301][ T8126] sock_common_setsockopt+0xb0/0xcc [ 139.195928][ T8126] smc_setsockopt+0x1e0/0xb14 [ 139.197327][ T8126] do_sock_setsockopt+0x1ec/0x328 [ 139.198813][ T8126] __arm64_sys_setsockopt+0x170/0x1e0 [ 139.200375][ T8126] invoke_syscall+0x98/0x2b8 [ 139.201774][ T8126] el0_svc_common+0x130/0x23c [ 139.203241][ T8126] do_el0_svc+0x48/0x58 [ 139.204490][ T8126] el0_svc+0x58/0x150 [ 139.205686][ T8126] el0t_64_sync_handler+0x78/0x108 [ 139.207229][ T8126] el0t_64_sync+0x198/0x19c [ 139.208535][ T8126] [ 139.208535][ T8126] other info that might help us debug this: [ 139.208535][ T8126] [ 139.211329][ T8126] Chain exists of: [ 139.211329][ T8126] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 139.211329][ T8126] [ 139.215013][ T8126] Possible unsafe locking scenario: [ 139.215013][ T8126] [ 139.217026][ T8126] CPU0 CPU1 [ 139.218405][ T8126] ---- ---- [ 139.219800][ T8126] lock(&smc->clcsock_release_lock); [ 139.221249][ T8126] lock(sk_lock-AF_INET); [ 139.223136][ T8126] lock(&smc->clcsock_release_lock); [ 139.225326][ T8126] lock(rtnl_mutex); [ 139.226373][ T8126] [ 139.226373][ T8126] *** DEADLOCK *** [ 139.226373][ T8126] [ 139.228551][ T8126] 1 lock held by syz.0.468/8126: [ 139.229909][ T8126] #0: ffff0000d6091628 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x14c/0xb14 [ 139.232825][ T8126] [ 139.232825][ T8126] stack backtrace: [ 139.234424][ T8126] CPU: 1 UID: 0 PID: 8126 Comm: syz.0.468 Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 139.237353][ T8126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.240172][ T8126] Call trace: [ 139.241074][ T8126] show_stack+0x2c/0x3c (C) [ 139.242263][ T8126] __dump_stack+0x30/0x40 [ 139.243421][ T8126] dump_stack_lvl+0xd8/0x12c [ 139.244608][ T8126] dump_stack+0x1c/0x28 [ 139.245694][ T8126] print_circular_bug+0x324/0x32c [ 139.247012][ T8126] check_noncircular+0x154/0x174 [ 139.248440][ T8126] __lock_acquire+0x1728/0x3058 [ 139.249759][ T8126] lock_acquire+0x14c/0x2e0 [ 139.250951][ T8126] __mutex_lock_common+0x1d0/0x2190 [ 139.252329][ T8126] mutex_lock_nested+0x2c/0x38 [ 139.253622][ T8126] rtnl_lock+0x20/0x2c [ 139.254702][ T8126] start_sync_thread+0xe0/0x2014 [ 139.256035][ T8126] do_ip_vs_set_ctl+0x3ac/0x90c [ 139.257312][ T8126] nf_setsockopt+0x270/0x290 [ 139.258554][ T8126] ip_setsockopt+0x124/0x134 [ 139.259861][ T8126] tcp_setsockopt+0xcc/0xe8 [ 139.261134][ T8126] sock_common_setsockopt+0xb0/0xcc [ 139.262481][ T8126] smc_setsockopt+0x1e0/0xb14 [ 139.263710][ T8126] do_sock_setsockopt+0x1ec/0x328 [ 139.265089][ T8126] __arm64_sys_setsockopt+0x170/0x1e0 [ 139.266527][ T8126] invoke_syscall+0x98/0x2b8 [ 139.267714][ T8126] el0_svc_common+0x130/0x23c [ 139.268973][ T8126] do_el0_svc+0x48/0x58 [ 139.270068][ T8126] el0_svc+0x58/0x150 [ 139.271145][ T8126] el0t_64_sync_handler+0x78/0x108 [ 139.272563][ T8126] el0t_64_sync+0x198/0x19c [ 139.314583][ T8127] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 139.320184][ T8126] IPVS: stopping backup sync thread 8127 ...