last executing test programs: 20.05687947s ago: executing program 2 (id=36): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e1f, 0x3, 'sh\x00', 0x11, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e1f, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 19.675084791s ago: executing program 2 (id=37): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvfrom$unix(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) 18.472741933s ago: executing program 2 (id=45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000580)={{0x2000, 0x41000, 0xb, 0xf4, 0x3, 0xe4, 0x40, 0x2, 0x0, 0x30, 0x19}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0x54000, 0xfec00000, 0x8, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x7, 0xab, 0x5, 0x81}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x8, 0x9, 0xfa, 0x80, 0x7, 0xe, 0x4}, {0x30000, 0x9000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb5, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x7e, 0xff, 0x70}, {0x58000, 0xc000, 0xe, 0xd, 0xf, 0x47, 0x3, 0x3, 0x2, 0x3, 0x7, 0x9}, {0x50000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x14222c, 0xb, 0x9501, 0x3000, [0x6840000000000002, 0x3, 0x91, 0x101]}) 18.072932845s ago: executing program 2 (id=49): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f00000002c0)={[{@utf8no}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_lower}, {@utf8}, {@shortname_mixed}, {@numtail}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlate}, {@fat=@sys_immutable}, {@uni_xlateno}, {@shortname_lower}, {@uni_xlate}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 17.576432038s ago: executing program 2 (id=52): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000017c0)="1f", 0x1}], 0x1) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x3) 17.080378831s ago: executing program 2 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x21, 0x0, 0x0) 16.838285609s ago: executing program 32 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x21, 0x0, 0x0) 5.83173441s ago: executing program 1 (id=119): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000040), 0xff, 0x57b, &(0x7f0000000900)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b00), 0x1, 0x4ca, &(0x7f0000000540)="$eJzs3c9vVFsdAPDv3P6kr++1T0n8ERVEFA1hph2gIaxwozGExEhcuYDaDk3TmU7TmSKtLMr/YCKJK/0TXJi4MGHl3p3ujAkuTFCJhpq4mJc7cwttmSkNlLmk8/kkJ3PPvXPv9xzoPef223ZOAAPrbERsR8RoRNyNiKlsfyErcaNT0ve9eP5wYef5w4VCjMbtfxXax9N9seec1EfZNccj4kffj/hp4fW4jc2tlflqtbKe1UvN2lqpsbn1t+Xa/FJlqbJaLs/Nzs1cu3y1fGx9PVP77bPvLd/88R9+/9Wnf9r+zs/TZk1mx/b2Y6/pd4zZ6frIyzip4Yi4+Y7X/VAMZf0ZzbshvJUkIj4XEefS+7+Vd2sAgH5otaaiNbW3DgCcdEk7B1ZIilkuYDKSpFjs5PBOx0RSrTeaF+/VN1YXO7my6RhJ7i1XKzNZrnA6RgppfTbLle3WywfqlyPi04j4xdipdr24UK8u5vngAwAD7KMD8/9/xzrzPwBwwo3n3QAAoO/M/wAweMz/ADB4zP8AMHjM/wAweMz/ADB4zP8AMFB+eOtWWlo72edfL97f3Fip37+0WGmsFGsbC8WF+vpacaleX2p/Zk/tTder1utrs1di40GpWWk0S43NrTu1+sZq8077c73vVEb60isA4DCfnnnyl0JEbF8/1S6xZy0HczWcbEneDQByM5R3A4DcDOfdACA3vscHuizRu0/PXxF63PMUQwt84C58Sf4fBpX8Pwwu+X8YXPL/MLharYI1/wFgwMjxA+/h5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw4k22SyEpZmuBT0aSFIsRH0fEdIwU7i1XKzMR8UlE/HlsZCytz6YnjubdcgDg7SX/KGTrf12YOj958Oho4X9jkU33P/vV7V8+mG8212fT/f8eO5W9p/k4218+NJClBgEgJ7vz9O48vuvF84cLu6Wf7Xn23c7iomncnax0jgzHcPt1vP3gMPGfQlbvSJ9Xho4h/vajiPhit/4X2rmR6Wzl04Px09gf9zV+si9+0j7WeU3/LT5/DG2BQfMkHX9udLv/kjjbfu1+/4+3R6h3tzv+7bw2/iUvx7+hHuPf2aPGuPLHH/Q89ijiy8Pd4hey4XW8Hatb/PNHjP/Xr3zt3P4zX2n9OuJCdI2/74xSs7ZWamxuXVquzS9Vliqr5fLc7NzMtctXy6V2jrq0m6l+3T+vX/zksP5P9Ig//ob+f/OI/f/N/+/+5OuHxP/2N7r//58+JH46J37riPHnJ37Xc/nuNP5i9/5n5/Tu/8Ujxn/6963FI74VAOiDxubWyny1Wlm30beN9NntA2iGjdw20q+A47jOF95jU/MemYD37dVNn3dLAAAAAAAAAAAAAACAXvrxB0959xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICT67MAAAD//x4p1Yw=") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 5.771704052s ago: executing program 3 (id=120): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r1, 0x2, {0x0, 0x1, 0x4}}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000280)={0x1d, r1, 0x2, {0x0, 0x0, 0x2}}, 0x18) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r1, 0x0, {0x2, 0xf0, 0x3}, 0xff}, 0x18) 5.483034339s ago: executing program 3 (id=121): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080)={[{@user_xattr}, {@i_version}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 5.130114959s ago: executing program 1 (id=122): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000057c0)=ANY=[@ANYBLOB='alloc_mode=default,active_logs=4,mode=fragment:block,noinline_xattr,background_gc=sync,background_gc=off,noinline_xattr,fastboot,fsync_mode=strict,discard_unit=section,noquota,disable_ext_identify,extent_cache,resgid=', @ANYRESOCT, @ANYBLOB="2c757365725f78610974722c009683b8ed5d18a7ccd5d4b167e3be683f8dd883774abefdb0f4044e811c8bf7ada4f0a6b5dc9cc39fa0e1fdea3b4f14f894bb3d02aefe22bac31dc746e403a27286fb1437f973a3a21b75fe3496cdf483bd6ca86c63dd03e15e0c34f51622764e2f1148d8f9d6398821e2d5638494f409f88f099537510ac3bb6b6442b01084ba28a49930cd9f07e6151945964d5e00ba00f6aa921b4cb0ace886a1"], 0x21, 0x554e, &(0x7f0000000240)="$eJzs3E1vG0UYAOBx0vSbEiEO3LqoQkqk2qrTD8EtQCs+RKqowIETOLZjubG9Uew4IScOHBEH/gkCiRNHfgMHztwQBxA3JJB3JqgpTUGKEzfJ80jrd2d2992ZTWTp3V05AKfWbPbHb6VwJVwIIUyHEC6HUKyX0lJYjOGlEMLVEMLUI0sp9f/TcTaEcDGEcGWUPOYspU1fXR9eu/3ru79//+O5M5e+/u6nyc0amLRXQgjd9bi+1Y0xb8X4MPXXhu0idm8NU4wbumupnce41VwpMmzVdverFfFmK+6fr2/2R3G1U6uPYqu9WvSv9+IJ+8PWbp7igIe1jaLdaK4Usd3Pi9jaiePa3onfbTv9QczTSPk+LdKHwWA3xv7mdjPOZ32tiPXeIPXHvHmjuT2KwxTT6UI97zSKcawc5Eo/015+r93b3M6GzY1+O+9ltyvVVyvVO+XqRt5oDpq3yrVu486tbK7VGe1WHjRr3cVWnrc6zUo9785nc616vVytZnN3myvtWi+rVis3KzfKt+fT2vXsrfsfZp1GNjeKb7R7m4N2p5+t5htZPGI+W6jcfG0+u1bN3l9azpYf3Lu3tPzBx3c/uv/60jtvZjOjv9q/h5XNLdxYWChXb5QXqvMHuwDP9vxT2t1hfZ4GPcb5w4GUJj0AgONH/Q9MwuHV/xsPQnh6/b/73fa0+n/6P+r/oP4fi2NV/572+v8Q5g8Hov4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fp755u1iZTa2L6X+51LXC6ldCiFMhRD+eoLpcHZPzumUZ2af/WceG8MPpVBkGJ3jXFouhhAW0/Ln84d9FQAAAODk+vazq1/Gaj1+zE56QIxZKS1PFG/aTF3+ZIwnm5n9ZUzZpkYfL44pWfH/fSZsjylbcQPr/JiSxVtuZ8aV7X+Z3hPOPxJKMUw9fsTYZgsAAEzM3krgaKsQAAAAjtIX+25ZO9JxcMSKB8PpXfz0Av+5GNLDvgux7dEfAAAAHF/7vhgOAAAAnBhF/e/3/wAAAOBki7//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzNzr3cJg7EcQD+G+PF+9Ki1d63ldygjJSQY44RBaQJSiAtpAFqILeUEEHkB1GIiIDYjkX0fZI9sWX9ZsbhwMygAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALj1ki+ndzf/bpjnrTQNFQNpKdwAAAIA9VtliWv4xrq5/1vd/17f+1tdJRAwiYt/wPY1vO5lpnZO983z2pg33EWVCUceoPn5ExEV1bOJP128BAAAAvqRhcVrO5pN64b08jftuFY0d/T/M63Lw67KlqpOIyMaPLaUNirx/LYWVn+9hXO+t53TlBFbevFWVcspt2FbaUaof22xn7fJXRVIVB95Ka30HAAA+UbpTHBqF+N4PAABwvq76bgBd+H7wiSS2S5kvS4Gjqsh3Igz6AQAA4HwlfTcAAAAA6Fw5/j9l/7/oZ/+/eLL/HwAAAHxYtf8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXVpli+lyNp80zVlvmmmnNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwzP68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fv20YVBwD83Z3P/QEIE5CHIAQSAyzUdUtLN8QAihj4E5Ci1C2hLj/aDLSqkLKwocxdEIwIIYHC1n+AqRtSK3UpWwcPRWJhMbrzXXxpKtVtlDsn+Xykd+9rx7n3fWfJ8vfeSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI0+mMZJduhM4rh47s7DGytZf/eRPnNr495i1rI4qjPp/eG16oOo21wiAAAAHB5JWd+HEO6nm0tZH3fy+j8tX5PV/D++MInLev7Rur/sy9o/a3/8/uCVrYE6k3Gyk15YHQ5O7kyltXeznG8vPvEVrfzK5/dekvwNiT9ef3mU5tcz+v727Q/beXikjmwBgGdxouyLoPw+lPX9JhMD4NBoVQrvsv5POs3mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCH0Xp4royjEMJiaxpn7j68sfK4/tbGvcWynb15c6N6zuwUaQjhwupwcLLGucy7q9euX1oeDgdX6g9eDyE0Nfr7xfQvfTrDi0No5PrsVfDfeDx+qt862nzOuwri4s2el3z2R/Dkz45OtJefTAAAHDRp0bKvkffTzaXsuWghhPFP2+v/typxmLH+f/DZ2TvVsar1f7+2Gc6/3trlr3pXr11/Z/Xy8sXBxcEX757qv9c/fe7MmXO9/F5Jzx0TAAAAdqddtGr9Hy/sXP8/XonDjPX/1z/0v52O9Fd+VP/vNF30azoTAACAw+2lN/7953HbLKN2O3yzvLZ2pT85bj0+NTk2kOpTO1K0av2fLDSdFQAAAFCH0Xq0bf3/fCUOM67/P//zq79Wz5mEEI4V6/8nVr4cnq9vOnOtjj8nbnqOAAAANOtY0arr/2m+/z/e2vIQhxDefnMSF/8GcKb6P/nou1+qYyWV/f+n65viXIq7k+uR990QWt1tP/6zscQAAAA4kI4WLSv2/043lz7/7fgnbfv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2fwAAAP//Fwg9JA==") timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000002900), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}}, &(0x7f0000000040)) 4.499190827s ago: executing program 3 (id=124): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x200008c5) io_uring_enter(r0, 0x2219, 0xec0b, 0x16, 0x0, 0x0) 3.912313523s ago: executing program 3 (id=127): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0xbd}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) read(r0, &(0x7f0000000bc0)=""/4096, 0x1000) 3.559821462s ago: executing program 3 (id=129): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x10, &(0x7f0000000240)={0x40, 0xa, 0x4, "de7cdae3"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="f20c04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.193821392s ago: executing program 1 (id=130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000003c0)={0x74, 0x0, 0x22}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000500)="66b80500000066b9000000000f01d9dd1d360f01c4c129abea00101f01770066b9c209000066b80050000066ba000000000f30366797660fe9b70800640fae5071", 0x41}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.638056498s ago: executing program 0 (id=131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {}, {}, {0xe, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4004884) 2.393160454s ago: executing program 0 (id=132): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 2.215480479s ago: executing program 0 (id=134): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0x2}}]}}]}, 0x40}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.971483066s ago: executing program 0 (id=136): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x4) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}, 0x10000}], 0x1, 0x12000, 0x0) 1.851125409s ago: executing program 1 (id=138): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r0, &(0x7f0000000680)=""/4096, 0x1000) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) 1.741951112s ago: executing program 4 (id=140): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0x81) setxattr(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000180)=@known='user.incfs.size\x00', 0x0, 0x0, 0x3) fsync(r0) 1.649288725s ago: executing program 4 (id=141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 1.406558221s ago: executing program 4 (id=142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.267160735s ago: executing program 4 (id=143): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x208018, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) 1.027700902s ago: executing program 0 (id=144): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) ioctl$FITRIM(r0, 0x40406f06, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x100}) 908.084105ms ago: executing program 1 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x17e, 0x23) lseek(r0, 0x1, 0x4) 851.405666ms ago: executing program 3 (id=146): r0 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r0, 0x200}], 0x1, 0xdb3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 755.723089ms ago: executing program 1 (id=147): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12016aca50cbd0c345"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 346.91641ms ago: executing program 4 (id=148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd03, 0x25dfdbf9, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x43}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 216.375974ms ago: executing program 4 (id=149): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="4011d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x20, 0x14, 0x1, 'K'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 0s ago: executing program 0 (id=150): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x2b2, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x42dc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4142, 0x1f7) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) truncate(&(0x7f0000000300)='./file1\x00', 0x6000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. [ 77.129876][ T5750] cgroup: Unknown subsys name 'net' [ 77.291335][ T5750] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.675081][ T5750] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.063553][ T5764] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.075244][ T5764] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.083047][ T5764] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.096574][ T5766] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.104106][ T5766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.112045][ T5766] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.120227][ T5766] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.128162][ T5766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.191106][ T5766] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.195215][ T5082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.207370][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.208029][ T5766] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.224542][ T5082] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.224804][ T5766] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.231901][ T5082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.247901][ T5766] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.258780][ T5766] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.274832][ T5766] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.286641][ T5082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.297992][ T5764] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.313126][ T5764] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.321945][ T5764] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.334117][ T5764] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.341887][ T5764] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.625962][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 80.716789][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 80.839881][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 80.851340][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.859753][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.867046][ T5762] bridge_slave_0: entered allmulticast mode [ 80.873869][ T5762] bridge_slave_0: entered promiscuous mode [ 80.900116][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 80.920631][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.927837][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.937031][ T5762] bridge_slave_1: entered allmulticast mode [ 80.943673][ T5762] bridge_slave_1: entered promiscuous mode [ 80.981396][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.990865][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.998271][ T5765] bridge_slave_0: entered allmulticast mode [ 81.005171][ T5765] bridge_slave_0: entered promiscuous mode [ 81.013102][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.020434][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.027834][ T5765] bridge_slave_1: entered allmulticast mode [ 81.035077][ T5765] bridge_slave_1: entered promiscuous mode [ 81.108516][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.121471][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.132782][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.145796][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.226491][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.233677][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.241152][ T5771] bridge_slave_0: entered allmulticast mode [ 81.248023][ T5771] bridge_slave_0: entered promiscuous mode [ 81.257349][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.264550][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.271676][ T5771] bridge_slave_1: entered allmulticast mode [ 81.278587][ T5771] bridge_slave_1: entered promiscuous mode [ 81.289614][ T5765] team0: Port device team_slave_0 added [ 81.299213][ T5762] team0: Port device team_slave_0 added [ 81.315837][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.322936][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.330444][ T5769] bridge_slave_0: entered allmulticast mode [ 81.337825][ T5769] bridge_slave_0: entered promiscuous mode [ 81.353724][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.360930][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.368400][ T5769] bridge_slave_1: entered allmulticast mode [ 81.376370][ T5769] bridge_slave_1: entered promiscuous mode [ 81.384598][ T5765] team0: Port device team_slave_1 added [ 81.391856][ T5762] team0: Port device team_slave_1 added [ 81.417739][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.442250][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.488724][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.501724][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.511761][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.518973][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.545344][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.558137][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.566590][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.592889][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.618653][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.627425][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.653851][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.665991][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.672924][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.699466][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.719140][ T5771] team0: Port device team_slave_0 added [ 81.746775][ T5769] team0: Port device team_slave_0 added [ 81.755292][ T5769] team0: Port device team_slave_1 added [ 81.785057][ T5771] team0: Port device team_slave_1 added [ 81.791328][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.798357][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.824495][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.837167][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.844116][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.870067][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.921334][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.928805][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.955042][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.974851][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.981816][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.010606][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.042205][ T5765] hsr_slave_0: entered promiscuous mode [ 82.048517][ T5765] hsr_slave_1: entered promiscuous mode [ 82.087360][ T5762] hsr_slave_0: entered promiscuous mode [ 82.094782][ T5762] hsr_slave_1: entered promiscuous mode [ 82.101021][ T5762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.109002][ T5762] Cannot create hsr debugfs directory [ 82.165220][ T5764] Bluetooth: hci0: command tx timeout [ 82.172598][ T5771] hsr_slave_0: entered promiscuous mode [ 82.178914][ T5771] hsr_slave_1: entered promiscuous mode [ 82.185797][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.193716][ T5771] Cannot create hsr debugfs directory [ 82.221782][ T5769] hsr_slave_0: entered promiscuous mode [ 82.228103][ T5769] hsr_slave_1: entered promiscuous mode [ 82.234136][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.242016][ T5769] Cannot create hsr debugfs directory [ 82.324464][ T5764] Bluetooth: hci2: command tx timeout [ 82.324556][ T5768] Bluetooth: hci1: command tx timeout [ 82.404515][ T5768] Bluetooth: hci3: command tx timeout [ 82.593473][ T5765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.609301][ T5765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.629650][ T5765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.649842][ T5765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.701115][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.710471][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.738251][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.766477][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.786933][ T5762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.818670][ T5762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.832601][ T5762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.846371][ T5762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.909093][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.933789][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.943309][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.961638][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.028929][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.092094][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.123881][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.131234][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.160569][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.172146][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.179381][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.201638][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.239883][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.263364][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.290000][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.297209][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.311640][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.318747][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.341847][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.369360][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.376518][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.400020][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.407161][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.433258][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.489095][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.496291][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.527377][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.534545][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.599935][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.773724][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.911501][ T5765] veth0_vlan: entered promiscuous mode [ 83.960640][ T5765] veth1_vlan: entered promiscuous mode [ 84.041508][ T5765] veth0_macvtap: entered promiscuous mode [ 84.067736][ T5765] veth1_macvtap: entered promiscuous mode [ 84.078539][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.096083][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.131584][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.163665][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.208546][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.220070][ T5765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.231202][ T5765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.240068][ T5765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.248984][ T5765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.254534][ T5768] Bluetooth: hci0: command tx timeout [ 84.276433][ T5771] veth0_vlan: entered promiscuous mode [ 84.289569][ T5771] veth1_vlan: entered promiscuous mode [ 84.332805][ T5769] veth0_vlan: entered promiscuous mode [ 84.380286][ T5762] veth0_vlan: entered promiscuous mode [ 84.400425][ T5769] veth1_vlan: entered promiscuous mode [ 84.406394][ T5768] Bluetooth: hci1: command tx timeout [ 84.415024][ T5768] Bluetooth: hci2: command tx timeout [ 84.438127][ T5762] veth1_vlan: entered promiscuous mode [ 84.471684][ T5771] veth0_macvtap: entered promiscuous mode [ 84.484952][ T5768] Bluetooth: hci3: command tx timeout [ 84.491965][ T5771] veth1_macvtap: entered promiscuous mode [ 84.505986][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.513972][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.574111][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.588254][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.600684][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.610087][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.615867][ T5769] veth0_macvtap: entered promiscuous mode [ 84.624924][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.641792][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.652918][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.665439][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.677153][ T5769] veth1_macvtap: entered promiscuous mode [ 84.685594][ T5762] veth0_macvtap: entered promiscuous mode [ 84.696126][ T5762] veth1_macvtap: entered promiscuous mode [ 84.717330][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.733059][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.741913][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.750977][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.791302][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.802633][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.813758][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.824952][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.835967][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.850859][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.861388][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.872879][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.883640][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.904813][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.934473][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.959608][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.971751][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.982417][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.993317][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.003804][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.018023][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.028377][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.039681][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.049881][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.060443][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.071491][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.082524][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.093554][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.103186][ T5762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.114763][ T5762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.123508][ T5762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.133860][ T5762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.150529][ T5820] batman_adv: batadv0: Adding interface: macvlan2 [ 85.157141][ T5820] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.185797][ T5820] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 85.215048][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.228850][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.238051][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.247948][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.469515][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.497670][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.504393][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.519285][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.559011][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.575010][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.604031][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.624212][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.659391][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.669421][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.731626][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.784365][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.793746][ T5817] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.919371][ T5828] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.015347][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 86.028214][ T5817] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 86.043619][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.056050][ T5817] usb 3-1: config 0 has no interface number 0 [ 86.066941][ T5817] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 86.082679][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.099129][ T5817] usb 3-1: Product: syz [ 86.103498][ T5817] usb 3-1: Manufacturer: syz [ 86.110581][ T5817] usb 3-1: SerialNumber: syz [ 86.129273][ T5817] usb 3-1: config 0 descriptor?? [ 86.162588][ T5817] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 86.224392][ T5817] usb 3-1: No valid video chain found. [ 86.329614][ T5768] Bluetooth: hci0: command tx timeout [ 86.423119][ T9] usb 3-1: USB disconnect, device number 2 [ 86.485580][ T5768] Bluetooth: hci2: command tx timeout [ 86.491430][ T5764] Bluetooth: hci1: command tx timeout [ 86.565291][ T5764] Bluetooth: hci3: command tx timeout [ 86.645383][ T5817] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.847121][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.865432][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.886714][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.949334][ T5817] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.006157][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.062666][ T5817] usb 4-1: config 0 descriptor?? [ 87.182947][ T5847] syz.2.11[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.531760][ T5817] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 87.575244][ T5817] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 87.593345][ T28] audit: type=1800 audit(1777421834.084:2): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12" name="file1" dev="overlay" ino=36 res=0 errno=0 [ 87.635028][ T5849] process 'syz.1.12' launched './file1' with NULL argv: empty string added [ 88.100077][ T5847] loop2: detected capacity change from 0 to 40427 [ 88.188798][ T5847] F2FS-fs (loop2): invalid crc value [ 88.234472][ T5847] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.404395][ T5764] Bluetooth: hci0: command tx timeout [ 88.434041][ T5847] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.578915][ T5764] Bluetooth: hci1: command tx timeout [ 88.584728][ T5768] Bluetooth: hci2: command tx timeout [ 88.609155][ T5765] syz-executor: attempt to access beyond end of device [ 88.609155][ T5765] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 88.630049][ T5765] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 88.645379][ T5765] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 88.654649][ T5768] Bluetooth: hci3: command tx timeout [ 88.775156][ T5797] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.877325][ C1] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 88.892969][ T5798] usb 4-1: USB disconnect, device number 2 [ 89.034380][ T5797] usb 1-1: Using ep0 maxpacket: 32 [ 89.048856][ T5797] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 89.064985][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.073065][ T5797] usb 1-1: Product: syz [ 89.084360][ T5797] usb 1-1: Manufacturer: syz [ 89.088992][ T5797] usb 1-1: SerialNumber: syz [ 89.107020][ T5797] usb 1-1: config 0 descriptor?? [ 89.115843][ T5797] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 89.146964][ T5878] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.662215][ T5890] loop2: detected capacity change from 0 to 512 [ 89.708090][ T5890] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.771593][ T5890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.790974][ T5890] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.911242][ T5904] loop3: detected capacity change from 0 to 164 [ 90.002765][ T5904] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 90.044602][ T5817] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.165388][ T5798] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 90.253836][ T5817] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.263248][ T5817] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 90.276516][ T5817] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.287218][ T5817] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 90.300395][ T5817] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 90.313244][ T5817] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.322405][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.331777][ T5817] usb 2-1: Product: syz [ 90.335999][ T5817] usb 2-1: Manufacturer: syz [ 90.349621][ T5817] cdc_wdm 2-1:1.0: skipping garbage [ 90.354958][ T5817] cdc_wdm 2-1:1.0: skipping garbage [ 90.363039][ T5817] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 90.369138][ T5817] cdc_wdm 2-1:1.0: Unknown control protocol [ 90.369756][ T5798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 90.391298][ T5798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.402267][ T5798] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 90.412877][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.423422][ T5798] usb 3-1: config 0 descriptor?? [ 90.431473][ T5798] hub 3-1:0.0: USB hub found [ 90.544240][ T5797] gspca_topro: reg_r err -71 [ 90.551971][ T5797] gspca_topro: Sensor soi763a [ 90.576845][ T5797] usb 1-1: USB disconnect, device number 2 [ 90.598608][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 90.605433][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 90.615564][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 90.622260][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 90.628780][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 90.635419][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 90.637919][ T5798] hub 3-1:0.0: 1 port detected [ 90.644326][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 90.652917][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 90.659361][ T8] usb 2-1: USB disconnect, device number 2 [ 90.665563][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 90.665587][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 90.665603][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 91.287099][ T5798] usb 3-1: USB disconnect, device number 3 [ 91.351568][ T5917] mmap: syz.0.32 (5917) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.395181][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.624129][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 91.698223][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.741280][ T8] usb 4-1: Product: syz [ 91.751895][ T8] usb 4-1: Manufacturer: syz [ 91.757392][ T8] usb 4-1: SerialNumber: syz [ 91.923269][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.161761][ T5797] IPVS: starting estimator thread 0... [ 92.194200][ T8] usb 4-1: USB disconnect, device number 3 [ 92.274498][ T5928] IPVS: using max 23 ests per chain, 55200 per kthread [ 93.968096][ T5962] loop2: detected capacity change from 0 to 128 [ 94.009579][ T5962] ======================================================= [ 94.009579][ T5962] WARNING: The mand mount option has been deprecated and [ 94.009579][ T5962] and is ignored by this kernel. Remove the mand [ 94.009579][ T5962] option from the mount to silence this warning. [ 94.009579][ T5962] ======================================================= [ 94.059119][ T5962] FAT-fs (loop2): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 94.200786][ T5953] loop3: detected capacity change from 0 to 32768 [ 94.289402][ T5953] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 94.549443][ T5953] XFS (loop3): Ending clean mount [ 94.653209][ T5953] XFS (loop3): Quotacheck needed: Please wait. [ 94.721891][ T5953] XFS (loop3): Quotacheck: Done. [ 94.919141][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.029347][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.041245][ T5769] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.181618][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.212287][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.297491][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.404746][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 95.412073][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.428170][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.455583][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 95.481871][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.541369][ T8] usb 1-1: config 0 descriptor?? [ 95.591312][ T8] hub 1-1:0.0: USB hub found [ 95.614413][ T5798] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.780963][ T8] hub 1-1:0.0: 1 port detected [ 95.791292][ T5764] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.802406][ T5764] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.815408][ T5764] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.825768][ T5764] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.834626][ T5764] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.843203][ T5798] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.854344][ T5764] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.861718][ T5798] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.872184][ T5798] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 95.897430][ T5798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 95.905849][ T5798] usb 4-1: SerialNumber: syz [ 96.139377][ T5798] usb 4-1: 0:2 : does not exist [ 96.194180][ T5798] usb 4-1: USB disconnect, device number 4 [ 96.291805][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.431957][ T8] hub 1-1:0.0: activate --> -90 [ 96.552764][ T5996] chnl_net:caif_netlink_parms(): no params data found [ 96.663679][ T23] cfg80211: failed to load regulatory.db [ 96.840500][ T5818] usb 1-1: USB disconnect, device number 3 [ 96.883386][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.900013][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.908924][ T5996] bridge_slave_0: entered allmulticast mode [ 96.918990][ T5996] bridge_slave_0: entered promiscuous mode [ 96.947487][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.955076][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.962367][ T5996] bridge_slave_1: entered allmulticast mode [ 96.970729][ T5996] bridge_slave_1: entered promiscuous mode [ 97.025828][ T5996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.051082][ T49] hsr_slave_0: left promiscuous mode [ 97.060467][ T49] hsr_slave_1: left promiscuous mode [ 97.068414][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.084533][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.101547][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.109277][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.123684][ T49] batman_adv: batadv0: Removing interface: macvlan2 [ 97.131994][ T49] bridge_slave_1: left allmulticast mode [ 97.144395][ T49] bridge_slave_1: left promiscuous mode [ 97.151410][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.171013][ T49] bridge_slave_0: left allmulticast mode [ 97.181804][ T49] bridge_slave_0: left promiscuous mode [ 97.188003][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.234877][ T49] veth1_macvtap: left promiscuous mode [ 97.249274][ T49] veth0_macvtap: left promiscuous mode [ 97.255279][ T49] veth1_vlan: left promiscuous mode [ 97.261093][ T49] veth0_vlan: left promiscuous mode [ 97.821064][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.927545][ T5764] Bluetooth: hci1: command tx timeout [ 98.032142][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.048099][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.059024][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.072803][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.083226][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.094024][ T9] usb 1-1: config 0 descriptor?? [ 98.236624][ T49] team0 (unregistering): Port device team_slave_1 removed [ 98.283331][ T49] team0 (unregistering): Port device team_slave_0 removed [ 98.332805][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.388113][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.550192][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 98.575146][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 98.970601][ T49] bond0 (unregistering): Released all slaves [ 99.108034][ T5996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.238007][ T5996] team0: Port device team_slave_0 added [ 99.261515][ T5996] team0: Port device team_slave_1 added [ 99.313677][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.337604][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.396373][ T5996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.419697][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.449391][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.504381][ T5996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.738132][ T5996] hsr_slave_0: entered promiscuous mode [ 99.749226][ T5996] hsr_slave_1: entered promiscuous mode [ 99.914604][ C1] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 99.918301][ T49] IPVS: stop unused estimator thread 0... [ 100.007651][ T5764] Bluetooth: hci1: command tx timeout [ 100.183794][ T5996] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.214928][ T5996] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.238121][ T5996] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.260708][ T5996] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.376866][ T5996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.411934][ T5996] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.478747][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.485985][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.509588][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.516901][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.769075][ T9] usb 1-1: USB disconnect, device number 4 [ 101.482098][ T5996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.583558][ T6097] loop1: detected capacity change from 0 to 32768 [ 101.693607][ T6097] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 101.919635][ T6097] XFS (loop1): Ending clean mount [ 102.084616][ T5764] Bluetooth: hci1: command tx timeout [ 102.127283][ T5771] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 102.606622][ T5996] veth0_vlan: entered promiscuous mode [ 102.651880][ T5996] veth1_vlan: entered promiscuous mode [ 102.816971][ T5996] veth0_macvtap: entered promiscuous mode [ 102.842823][ T5996] veth1_macvtap: entered promiscuous mode [ 102.906576][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.973682][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.011822][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.038109][ T6151] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.064354][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.099362][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.128967][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.158701][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.226350][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.283720][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.318575][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.339496][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.354429][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.371872][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.383612][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.407466][ T6164] netlink: 27 bytes leftover after parsing attributes in process `syz.1.91'. [ 103.433916][ T5996] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.473549][ T5996] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.496573][ T5996] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.521947][ T5996] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.730029][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.753937][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.822978][ T3449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.841061][ T3449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.978936][ T6182] loop3: detected capacity change from 0 to 4096 [ 104.080455][ T6182] NILFS (loop3): invalid segment: Checksum error in segment payload [ 104.114515][ T6182] NILFS (loop3): trying rollback from an earlier position [ 104.164874][ T5764] Bluetooth: hci1: command tx timeout [ 104.212415][ T6187] ip6erspan0: entered allmulticast mode [ 104.252634][ T6182] NILFS (loop3): recovery complete [ 104.328818][ T6195] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.617505][ T6203] netlink: 'syz.4.101': attribute type 5 has an invalid length. [ 104.805060][ T6209] batadv_slave_1: entered promiscuous mode [ 104.816943][ T6209] syz_tun: entered promiscuous mode [ 104.841075][ T6207] syz_tun: left promiscuous mode [ 104.848137][ T6207] batadv_slave_1: left promiscuous mode [ 104.984580][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 105.165210][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 105.404444][ T5752] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.599673][ T5752] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 105.621155][ T5752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.637787][ T5752] usb 1-1: Product: syz [ 105.643445][ T5752] usb 1-1: Manufacturer: syz [ 105.648287][ T5752] usb 1-1: SerialNumber: syz [ 105.658187][ T5752] usb 1-1: config 0 descriptor?? [ 105.673169][ T5752] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 106.196323][ T6257] loop4: detected capacity change from 0 to 128 [ 106.277666][ T6257] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.321335][ T6259] loop1: detected capacity change from 0 to 1024 [ 106.331389][ T6257] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.446492][ T6259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.510349][ T6257] syz.4.118 (pid 6257) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 106.655585][ T6276] loop3: detected capacity change from 0 to 512 [ 106.695341][ T6276] EXT4-fs: Ignoring removed i_version option [ 106.759060][ T6276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.784595][ T6257] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 106.802375][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.815660][ T6276] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.986676][ T5996] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.074729][ T28] audit: type=1800 audit(1777421853.564:3): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.121" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 107.123676][ T5752] gspca_sunplus: reg_w_riv err -71 [ 107.140748][ T5752] sunplus: probe of 1-1:0.0 failed with error -71 [ 107.171786][ T5752] usb 1-1: USB disconnect, device number 5 [ 107.407354][ T6294] loop4: detected capacity change from 0 to 2048 [ 107.469860][ T6294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.484651][ T6294] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.655347][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.831884][ T5996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.838187][ T6304] loop0: detected capacity change from 0 to 256 [ 107.887727][ T6284] loop1: detected capacity change from 0 to 40427 [ 107.952614][ T6284] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 107.979096][ T6284] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 108.067478][ T6284] F2FS-fs (loop1): invalid crc value [ 108.072845][ T6284] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 108.205987][ T6284] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.360232][ T6284] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 108.375241][ T6284] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.609029][ T6284] syz.1.122: attempt to access beyond end of device [ 108.609029][ T6284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.660201][ T6284] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 108.784439][ T5818] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.994566][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 109.021369][ T5818] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 109.045101][ T5818] usb 4-1: config 0 has no interface number 0 [ 109.054418][ T5818] usb 4-1: config 0 interface 184 has no altsetting 0 [ 109.090136][ T5818] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 109.114637][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.143501][ T5818] usb 4-1: Product: syz [ 109.153583][ T5818] usb 4-1: Manufacturer: syz [ 109.166033][ T5818] usb 4-1: SerialNumber: syz [ 109.192195][ T5818] usb 4-1: config 0 descriptor?? [ 109.225155][ T5818] smsc75xx v1.0.0 [ 109.640227][ T6333] trusted_key: syz.0.132 sent an empty control message without MSG_MORE. [ 109.860862][ T5818] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 109.877713][ T5818] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 109.906320][ T6340] Zero length message leads to an empty skb [ 110.499967][ T5818] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 110.510903][ T5818] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 110.520582][ T5818] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 110.531042][ T5818] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 110.541551][ T5818] usb 4-1: USB disconnect, device number 5 [ 111.283468][ T6372] loop0: detected capacity change from 0 to 32768 [ 111.332709][ T6372] JBD2: Ignoring recovery information on journal [ 111.377400][ T6372] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.463423][ T28] audit: type=1800 audit(1777421857.954:4): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.144" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 111.506820][ T28] audit: type=1800 audit(1777421858.004:5): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.144" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 111.554478][ T5818] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.565715][ T6369] 9pnet_fd: p9_fd_create_tcp (6369): problem connecting socket to 127.0.0.1 [ 111.661798][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.148'. [ 111.764637][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 111.773304][ T5818] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 111.784765][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 111.804758][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.830819][ T5818] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.848202][ T5818] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.858175][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.953819][ T6372] syz.0.144 (6372) used greatest stack depth: 18288 bytes left [ 111.990756][ T5762] [ 111.993113][ T5762] ====================================================== [ 112.000130][ T5762] WARNING: possible circular locking dependency detected [ 112.007147][ T5762] syzkaller #0 Not tainted [ 112.011559][ T5762] ------------------------------------------------------ [ 112.018576][ T5762] syz-executor/5762 is trying to acquire lock: [ 112.024719][ T5762] ffff88805b48d118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: __ocfs2_flush_truncate_log+0x352/0x1130 [ 112.037859][ T5762] [ 112.037859][ T5762] but task is already holding lock: [ 112.045215][ T5762] ffff88805b4fb498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 112.057950][ T5762] [ 112.057950][ T5762] which lock already depends on the new lock. [ 112.057950][ T5762] [ 112.068349][ T5762] [ 112.068349][ T5762] the existing dependency chain (in reverse order) is: [ 112.076930][ T5818] usb 2-1: GET_CAPABILITIES returned 0 [ 112.077337][ T5762] [ 112.077337][ T5762] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 112.082830][ T5818] usbtmc 2-1:16.0: can't read capabilities [ 112.093311][ T5762] down_write+0x97/0x200 [ 112.093336][ T5762] __ocfs2_move_extents_range+0x1a63/0x35d0 [ 112.093357][ T5762] ocfs2_move_extents+0x3a7/0x9a0 [ 112.115875][ T5762] ocfs2_ioctl_move_extents+0x527/0x6c0 [ 112.121957][ T5762] ocfs2_ioctl+0x199/0x7e0 [ 112.126911][ T5762] __se_sys_ioctl+0xfd/0x170 [ 112.132011][ T5762] do_syscall_64+0x55/0xa0 [ 112.136930][ T5762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.143330][ T5762] [ 112.143330][ T5762] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 112.153825][ T5762] __lock_acquire+0x2df1/0x7d40 [ 112.159190][ T5762] lock_acquire+0x19e/0x420 [ 112.164195][ T5762] down_write+0x97/0x200 [ 112.168937][ T5762] __ocfs2_flush_truncate_log+0x352/0x1130 [ 112.175248][ T5762] ocfs2_flush_truncate_log+0x4f/0x60 [ 112.181131][ T5762] ocfs2_sync_fs+0x11d/0x330 [ 112.186235][ T5762] sync_filesystem+0x1c2/0x220 [ 112.191504][ T5762] generic_shutdown_super+0x6f/0x2b0 [ 112.197296][ T5762] kill_block_super+0x44/0x90 [ 112.202482][ T5762] deactivate_locked_super+0x97/0x100 [ 112.208361][ T5762] cleanup_mnt+0x43b/0x4d0 [ 112.213283][ T5762] task_work_run+0x1d4/0x260 [ 112.218380][ T5762] exit_to_user_mode_loop+0xe6/0x110 [ 112.224173][ T5762] exit_to_user_mode_prepare+0xee/0x180 [ 112.230222][ T5762] syscall_exit_to_user_mode+0x1a/0x50 [ 112.236186][ T5762] do_syscall_64+0x61/0xa0 [ 112.241108][ T5762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.247512][ T5762] [ 112.247512][ T5762] other info that might help us debug this: [ 112.247512][ T5762] [ 112.257723][ T5762] Possible unsafe locking scenario: [ 112.257723][ T5762] [ 112.265151][ T5762] CPU0 CPU1 [ 112.270491][ T5762] ---- ---- [ 112.275832][ T5762] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 112.283119][ T5762] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 112.288192][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.292924][ T5762] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 112.292947][ T5762] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 112.292961][ T5762] [ 112.292961][ T5762] *** DEADLOCK *** [ 112.292961][ T5762] [ 112.292965][ T5762] 2 locks held by syz-executor/5762: [ 112.303697][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.311045][ T5762] #0: ffff88805d1d60e0 [ 112.327270][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 112.331710][ T5762] ( [ 112.342585][ T5798] usb 2-1: USB disconnect, device number 3 [ 112.343551][ T5762] &type->s_umount_key [ 112.354445][ T28] audit: type=1326 audit(1777421858.804:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9391f9cdd9 code=0x7ffc0000 [ 112.355198][ T5762] #69){+.+.}-{3:3} [ 112.361027][ T28] audit: type=1326 audit(1777421858.804:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9391f9cdd9 code=0x7ffc0000 [ 112.364934][ T5762] , at: deactivate_super+0xa4/0xe0 [ 112.364953][ T5762] #1: ffff88805b4fb498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 [ 112.402394][ T28] audit: type=1326 audit(1777421858.804:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9391f9cdd9 code=0x7ffc0000 [ 112.412525][ T5762] ){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 112.412559][ T5762] [ 112.412559][ T5762] stack backtrace: [ 112.412580][ T5762] CPU: 0 PID: 5762 Comm: syz-executor Not tainted syzkaller #0 [ 112.412595][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.412610][ T5762] Call Trace: [ 112.412628][ T5762] [ 112.412640][ T5762] dump_stack_lvl+0x18c/0x250 [ 112.412673][ T5762] ? load_image+0x420/0x420 [ 112.412692][ T5762] ? show_regs_print_info+0x20/0x20 [ 112.412717][ T5762] ? print_circular_bug+0x12b/0x1a0 [ 112.412741][ T5762] check_noncircular+0x2fc/0x400 [ 112.420087][ T28] audit: type=1326 audit(1777421858.804:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9391f9cdd9 code=0x7ffc0000 [ 112.426302][ T5762] ? print_deadlock_bug+0x5d0/0x5d0 [ 112.426326][ T5762] ? lockdep_lock+0xf5/0x230 [ 112.426345][ T5762] ? _find_first_zero_bit+0xd3/0x100 [ 112.448606][ T28] audit: type=1326 audit(1777421858.804:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9391f9cdd9 code=0x7ffc0000 [ 112.455092][ T5762] __lock_acquire+0x2df1/0x7d40 [ 112.455124][ T5762] ? __lock_acquire+0x7d40/0x7d40 [ 112.577878][ T5762] ? verify_lock_unused+0x140/0x140 [ 112.583073][ T5762] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 112.588688][ T5762] ? do_raw_spin_lock+0x11f/0x2c0 [ 112.593700][ T5762] ? mutex_unlock+0x10/0x10 [ 112.598185][ T5762] lock_acquire+0x19e/0x420 [ 112.602671][ T5762] ? __ocfs2_flush_truncate_log+0x352/0x1130 [ 112.608639][ T5762] ? ocfs2_get_system_file_inode+0x202/0x850 [ 112.614607][ T5762] ? __might_sleep+0xe0/0xe0 [ 112.619208][ T5762] ? read_lock_is_recursive+0x20/0x20 [ 112.624577][ T5762] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 112.630731][ T5762] ? __wake_up+0x132/0x1a0 [ 112.635134][ T5762] down_write+0x97/0x200 [ 112.639377][ T5762] ? __ocfs2_flush_truncate_log+0x352/0x1130 [ 112.645345][ T5762] ? down_read_killable+0x340/0x340 [ 112.650526][ T5762] ? _raw_write_unlock+0x28/0x40 [ 112.655452][ T5762] ? jbd2_journal_unlock_updates+0x84/0xe0 [ 112.661239][ T5762] __ocfs2_flush_truncate_log+0x352/0x1130 [ 112.667036][ T5762] ? ocfs2_truncate_log_needs_flush+0x310/0x310 [ 112.673264][ T5762] ? read_lock_is_recursive+0x20/0x20 [ 112.678628][ T5762] ? down_write+0x16e/0x200 [ 112.683138][ T5762] ? down_read_killable+0x340/0x340 [ 112.688331][ T5762] ? __rwlock_init+0x150/0x150 [ 112.693082][ T5762] ocfs2_flush_truncate_log+0x4f/0x60 [ 112.698442][ T5762] ocfs2_sync_fs+0x11d/0x330 [ 112.703011][ T5762] ? ocfs2_put_super+0x1b0/0x1b0 [ 112.707933][ T5762] ? writeback_inodes_sb_nr+0x30/0x30 [ 112.713285][ T5762] ? get_nr_dirty_inodes+0x1d4/0x220 [ 112.718549][ T5762] sync_filesystem+0x1c2/0x220 [ 112.723302][ T5762] generic_shutdown_super+0x6f/0x2b0 [ 112.728577][ T5762] kill_block_super+0x44/0x90 [ 112.733239][ T5762] deactivate_locked_super+0x97/0x100 [ 112.738590][ T5762] cleanup_mnt+0x43b/0x4d0 [ 112.742999][ T5762] task_work_run+0x1d4/0x260 [ 112.747589][ T5762] ? task_work_cancel+0x220/0x220 [ 112.752621][ T5762] ? exit_to_user_mode_loop+0x3b/0x110 [ 112.758070][ T5762] exit_to_user_mode_loop+0xe6/0x110 [ 112.763392][ T5762] exit_to_user_mode_prepare+0xee/0x180 [ 112.768952][ T5762] syscall_exit_to_user_mode+0x1a/0x50 [ 112.774435][ T5762] do_syscall_64+0x61/0xa0 [ 112.778851][ T5762] ? clear_bhb_loop+0x40/0x90 [ 112.783516][ T5762] ? clear_bhb_loop+0x40/0x90 [ 112.788179][ T5762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.794056][ T5762] RIP: 0033:0x7fbf7dd9e017 [ 112.798469][ T5762] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 112.818066][ T5762] RSP: 002b:00007ffdf9ba0de8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 112.826476][ T5762] RAX: 0000000000000000 RBX: 00007fbf7de32120 RCX: 00007fbf7dd9e017 [ 112.834453][ T5762] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf9ba0ea0 [ 112.842410][ T5762] RBP: 00007ffdf9ba0ea0 R08: 00007ffdf9ba1ea0 R09: 00000000ffffffff [ 112.850362][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf9ba1f30 [ 112.858313][ T5762] R13: 00007fbf7de32120 R14: 000000000001b51c R15: 00007ffdf9ba1f70 [ 112.866282][ T5762] [ 112.879439][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.912717][ T5762] ocfs2: Unmounting device (7,0) on (node local) [ 113.023074][ T6390] loop0: detected capacity change from 0 to 64 [ 113.040061][ T28] audit: type=1800 audit(1777421859.534:11): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.150" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 113.064373][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 113.069547][ T28] audit: type=1800 audit(1777421859.564:12): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.150" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 113.075308][ T8] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 113.089866][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.106777][ T8] usb 5-1: config 0 has no interface number 0 [ 113.113421][ T8] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 113.126510][ T8] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 113.146022][ T8] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 113.155310][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.171816][ T8] usb 5-1: Product: syz [ 113.176075][ T8] usb 5-1: Manufacturer: syz [ 113.180672][ T8] usb 5-1: SerialNumber: syz [ 113.186695][ T8] usb 5-1: config 0 descriptor?? [ 113.192165][ T6388] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 113.199497][ T6388] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 113.414995][ T6388] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 113.422236][ T6388] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 113.632317][ T8] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 114.639532][ T8] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 114.650882][ T8] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 114.662015][ T8] asix: probe of 5-1:0.34 failed with error -71 [ 114.672877][ T8] usb 5-1: USB disconnect, device number 2