last executing test programs: 2m15.014857368s ago: executing program 4 (id=112): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 2m14.849929608s ago: executing program 4 (id=113): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={0x0, 0xfe3d}) 2m14.760520847s ago: executing program 4 (id=114): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="c5c3442e25f30600aa773888c21c000000000002"], 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"]) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, &(0x7f00000000c0)) 2m14.649695367s ago: executing program 4 (id=115): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x0) 2m14.443608326s ago: executing program 4 (id=116): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @time, 0x1, {0x81}, 0x0, 0x3}) 2m14.092608164s ago: executing program 4 (id=121): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) 2m13.893822234s ago: executing program 32 (id=121): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) 1m59.767205835s ago: executing program 0 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r0, 0xc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m59.118979123s ago: executing program 0 (id=196): mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85512, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000080"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 1m57.980483998s ago: executing program 0 (id=199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38}}, 0x4000) 1m57.582321126s ago: executing program 0 (id=201): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x820, &(0x7f00000006c0)=ANY=[@ANYBLOB='mode=0']) 1m54.594643154s ago: executing program 0 (id=216): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x94, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x74, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 1m52.726046966s ago: executing program 0 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000041009500007b00000000950f00000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@host}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000240)={0x0, 0x6, 0x37, 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0x60, 0x30, 0xb, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x60}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt(r2, 0xc, 0xb, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = creat(0x0, 0x0) ioctl$FICLONE(r5, 0x40049409, r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev, @private1, [0x0, 0x0, 0xff], [], [], 0x843}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000180)=""/182, 0xb6, 0x10002, &(0x7f0000000240)=@l2tp={0x2, 0x0, @local}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1m51.487863661s ago: executing program 33 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000041009500007b00000000950f00000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@host}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000240)={0x0, 0x6, 0x37, 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0x60, 0x30, 0xb, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x60}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt(r2, 0xc, 0xb, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = creat(0x0, 0x0) ioctl$FICLONE(r5, 0x40049409, r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev, @private1, [0x0, 0x0, 0xff], [], [], 0x843}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000180)=""/182, 0xb6, 0x10002, &(0x7f0000000240)=@l2tp={0x2, 0x0, @local}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3.690341345s ago: executing program 3 (id=792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x8c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}]}, 0x8c}}, 0x0) 3.518004545s ago: executing program 1 (id=793): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000000400', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:'], 0xa) 3.315355944s ago: executing program 3 (id=795): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000000)={0x8, 'veth0_to_team\x00', {'macvtap0\x00'}, 0xc}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0) 3.276245464s ago: executing program 1 (id=796): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 3.109382323s ago: executing program 1 (id=798): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) 2.840187152s ago: executing program 3 (id=799): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) dup2(r0, r1) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) 2.839397622s ago: executing program 1 (id=800): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffc}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xe2}}}}}}}, 0x0) 2.737598331s ago: executing program 2 (id=801): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00') 2.42456833s ago: executing program 1 (id=804): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(r1, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)="0935ccc5bf898d", 0x7}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.4239667s ago: executing program 3 (id=805): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000000c0)={[{@sysvgroups}, {@orlov}, {@nogrpid}, {@init_itable}, {@dioread_nolock}, {@grpjquota, 0x2e}, {@oldalloc}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x0, 0x4da, &(0x7f0000000140)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000880)=0x200) 1.965781048s ago: executing program 3 (id=807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.538466787s ago: executing program 3 (id=809): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.529459936s ago: executing program 5 (id=810): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r0, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006700000008000100000000000c00b10000008001230000000800c3001a0000000800c4"], 0x38}}, 0x10) 1.500186806s ago: executing program 6 (id=811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x3c, r1, 0x9, 0x400, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x80) 1.280984065s ago: executing program 6 (id=812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.262708475s ago: executing program 5 (id=813): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) shutdown(r0, 0x1) close(r0) 1.090691555s ago: executing program 6 (id=814): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r2, 0xfb59b128081ca7fb}, 0x14}}, 0x0) 1.004568614s ago: executing program 5 (id=815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x38, r2, 0x786946cc39350ec1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x17}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4050) 898.925024ms ago: executing program 6 (id=816): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd600300000000000000880000f16048000000000000000000000001ff020000000000000000000000000001040090"], 0x0) 806.606593ms ago: executing program 2 (id=817): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000280)=0x23, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) read(r0, &(0x7f0000001240)=""/4096, 0x1000) 746.684853ms ago: executing program 6 (id=818): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000000c0)={[{@sysvgroups}, {@orlov}, {@nogrpid}, {@init_itable}, {@dioread_nolock}, {@grpjquota, 0x2e}, {@oldalloc}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x0, 0x4da, &(0x7f0000000140)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000880)=0x200) 654.470833ms ago: executing program 5 (id=819): ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007a4000/0x4000)=nil, 0x4000}, 0x1}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0x1, 0x217, &(0x7f00000004c0)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) creat(&(0x7f0000000100)='./bus\x00', 0x0) 604.831063ms ago: executing program 2 (id=820): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x70000000, 0x0, 0x3f00, 0x0, 0x0, 0x1000, 0xff600000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23000000}, 0x3b) 402.519282ms ago: executing program 2 (id=821): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\twr\n'], 0xa) 385.376342ms ago: executing program 2 (id=822): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1018002, &(0x7f0000001880)={[{@discard}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@utf8}, {@utf8}]}, 0x5, 0x1511, &(0x7f00000002c0)="$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") mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 307.280061ms ago: executing program 5 (id=823): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000003b40)={&(0x7f0000000100)=@hci={0x1f, 0x1, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x28048801) sendto$inet(r0, &(0x7f0000000000)="c5211f70e4025ae1fc3fe9036baebb602d89788ab4ea6b2b346468773bc0ae7ba45e36a798209bb550ae116db50358da6112dc10ea3da95e38bca70f19214bf6fec9476b346801e4e5c5b1fde0f7abfafcad437acc406644722d0cf3d1e5dbbd2bd2283324ec25e9e78a4f3d85f8ba4bdbef65d24cb84190760793deb360582c2456959b88c4b81826dfe7842faa294ce0cfeb428464e1053cd2f106843f6c16e5cbdf2a7ec65b7034dec852173a513492f680b91d52d357", 0xb8, 0x20002010, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x250, 0x280, 0x280, 0x0, 0x280, 0x360, 0x365, 0x350, 0x360, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'syzkaller1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x0, 0x6}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'wlan0\x00', {0x0, 0xfffffffffffffffd, 0x30, 0x2, 0x20000000, 0x1ab618fe, 0x802, 0x0, 0x80}}}, @common=@srh={{0x30}, {0x87, 0xfc, 0x2, 0x7d, 0x6, 0x1000, 0x1402}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@mcast2, @mcast2, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffffff], 'rose0\x00', 'veth0\x00', {}, {}, 0x87, 0x0, 0x0, 0x30}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x5, 0x951, 'pptp\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 117.094321ms ago: executing program 6 (id=824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @opaque="6f841fcaf955c253e28c7ab3"}}}}}}, 0x3a) 115.714661ms ago: executing program 2 (id=825): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0xda, &(0x7f00000007c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x1, 0x1, 0x1, 0x0, 0xe, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x9c, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x401, 0x221, 0x6}, [@mdlm_detail={0x8d, 0x24, 0x13, 0x5, "07b4dbe6f14dd3471a58288a1942687b16758f4c80ab1dbbe3e47a943fde94b9265ffc2d948411c53c2c0e5298f1bea8b4546f1261542707a5adfd695d41a6ede901e19dd4e8205168de1b147a2a665b7d4c6bcdaa99015eba061d5f15bdbf15a9b91b963c08bd338ddbe81a7ca26b842c5816193b7590de00fc1fa943005c8309f916f7f413738d26"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xe6, 0x2, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 54.59412ms ago: executing program 1 (id=826): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0xd86, &(0x7f0000002340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "711e8f", 0xd50, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev}, {[], @time_exceed={0x9, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "bede78", 0x0, 0x0, 0x0, @dev, @loopback, [@srh={0x32, 0xe, 0x4, 0x7, 0x0, 0x0, 0x0, [@mcast1, @empty, @private2, @private1, @private1, @loopback, @local]}, @dstopts={0x0, 0x193, '\x00', [@generic={0x0, 0x5f, "f0edb1af7badf7491d2500721be4cce0542133657e2d12f0ae3e134727e49fe7c04867be7426e8cbefd47520beacbe5c36083a972cb3b73de48f661a252e0b0a5a236ddf29543f29a5e18fd1c7b54248c8b03dc91385c9160f3394ff0708c8"}, @hao={0xc9, 0x10, @private1}, @jumbo, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x800, 0x0, 0x0, 0x4]}}, @jumbo, @calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffe, 0x0]}}, @generic={0x0, 0xbc4, "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"}]}]}}}}}}}, 0x0) 0s ago: executing program 5 (id=827): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=@can_newroute={0x24, 0x18, 0x221, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r1}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): from 0 to 1024 [ 85.213070][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 85.388244][ T11] hfsplus: b-tree write err: -5, ino 4 [ 85.414111][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.421284][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.429457][ T4747] device bridge_slave_0 entered promiscuous mode [ 85.465220][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.502910][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.514227][ T4747] device bridge_slave_1 entered promiscuous mode [ 85.583937][ T4795] loop2: detected capacity change from 0 to 2048 [ 85.603863][ T4801] loop1: detected capacity change from 0 to 1024 [ 85.664707][ T4801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.732322][ T4795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.758917][ T4795] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.133: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 85.812624][ T4588] device hsr_slave_0 left promiscuous mode [ 85.823754][ T4588] device hsr_slave_1 left promiscuous mode [ 85.832129][ T4588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.863115][ T4588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.884606][ T4588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.915388][ T4588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.944428][ T4588] device bridge_slave_1 left promiscuous mode [ 85.951467][ T4588] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.977416][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 86.029574][ T4588] device bridge_slave_0 left promiscuous mode [ 86.064900][ T4588] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.156883][ T4588] device veth1_macvtap left promiscuous mode [ 86.193197][ T4588] device veth0_macvtap left promiscuous mode [ 86.209774][ T4588] device veth1_vlan left promiscuous mode [ 86.228021][ T4588] device veth0_vlan left promiscuous mode [ 87.120528][ T4588] team0 (unregistering): Port device team_slave_1 removed [ 87.152215][ T4588] team0 (unregistering): Port device team_slave_0 removed [ 87.182640][ T4588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.219511][ T4588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.286244][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 87.549242][ T4588] bond0 (unregistering): Released all slaves [ 87.615201][ T4747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.628695][ T4747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.773790][ T4747] team0: Port device team_slave_0 added [ 87.824752][ T4747] team0: Port device team_slave_1 added [ 87.999225][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.019605][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.025302][ T4842] loop2: detected capacity change from 0 to 4096 [ 88.095476][ T4842] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 88.126097][ T4747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.151937][ T4842] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 88.167979][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.180559][ T4842] ntfs3: loop2: Failed to load $Extend. [ 88.189442][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.339547][ T4747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.471256][ T4747] device hsr_slave_0 entered promiscuous mode [ 88.518294][ T4747] device hsr_slave_1 entered promiscuous mode [ 88.573882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 88.582982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 88.672280][ T4747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.690152][ T4747] Cannot create hsr debugfs directory [ 89.363164][ T4270] Bluetooth: hci3: command 0x040f tx timeout [ 89.386699][ T4879] loop0: detected capacity change from 0 to 128 [ 89.439601][ T4882] loop2: detected capacity change from 0 to 64 [ 89.447029][ T4879] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 89.463228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.511189][ T4879] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.612087][ T4747] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.649729][ T4747] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.702904][ T4747] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.745954][ T4747] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.884747][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 90.093620][ T4747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.182686][ T4872] loop1: detected capacity change from 0 to 32768 [ 90.296912][ T4747] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.563450][ T4899] tap0: tun_chr_ioctl cmd 1074025680 [ 91.056393][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.071494][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.080159][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.093631][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.102614][ T4870] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.109746][ T4870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.118686][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.127685][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.136159][ T4870] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.143272][ T4870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.150933][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.164297][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.177020][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 91.212088][ T4911] IPVS: Error joining to the multicast group [ 91.232566][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.264152][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.284786][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.313998][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.351517][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.377371][ T4747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.403916][ T4747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.443022][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 91.452464][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.503573][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.511955][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.525099][ T4916] CUSE: unknown device info "workdir" [ 91.530491][ T4916] CUSE: DEVNAME unspecified [ 91.580531][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.609864][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.628092][ T4897] loop0: detected capacity change from 0 to 32768 [ 91.668076][ T4897] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.160 (4897) [ 91.682054][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.763761][ T4897] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.784547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.813917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.825720][ T4897] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 91.908596][ T4897] BTRFS info (device loop0): using free space tree [ 91.933012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 91.946754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 92.106832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.132568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 92.140828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 92.652410][ T4897] BTRFS info (device loop0): enabling ssd optimizations [ 92.746933][ T4747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.762513][ T26] audit: type=1800 audit(1734226102.802:4): pid=4897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.160" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 92.807712][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.816588][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.941754][ T4257] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.468916][ T4985] loop1: detected capacity change from 0 to 64 [ 93.552056][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.586395][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.662261][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.684234][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.742126][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.774298][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.803777][ T4955] loop2: detected capacity change from 0 to 40427 [ 93.819189][ T4747] device veth0_vlan entered promiscuous mode [ 93.847970][ T4747] device veth1_vlan entered promiscuous mode [ 93.855007][ T4955] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 93.881775][ T4955] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 93.968065][ T4955] F2FS-fs (loop2): invalid crc value [ 93.975149][ T4747] device veth0_macvtap entered promiscuous mode [ 93.982612][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.041619][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.051233][ T4955] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.068875][ T4998] loop1: detected capacity change from 0 to 2048 [ 94.078066][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.110116][ T4747] device veth1_macvtap entered promiscuous mode [ 94.130051][ T4998] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.145980][ T5005] loop3: detected capacity change from 0 to 1024 [ 94.191872][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.243530][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.297928][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.318189][ T4955] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 94.336063][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.358528][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.369980][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.373732][ T26] audit: type=1800 audit(1734226104.422:5): pid=4955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.168" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 94.380019][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.419243][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.439803][ T5008] loop0: detected capacity change from 0 to 4096 [ 94.449208][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.459893][ T5008] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 94.474540][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.515183][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.552857][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.558441][ T5008] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 94.581786][ T4255] syz-executor: attempt to access beyond end of device [ 94.581786][ T4255] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 94.584103][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.651555][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.663827][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.675985][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.689946][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.701893][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.719435][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.753055][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.789035][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.800480][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.820243][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.853824][ T4747] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.862550][ T4747] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.903011][ T4747] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.911743][ T4747] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.131956][ T5019] loop3: detected capacity change from 0 to 1024 [ 95.145276][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.183025][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.216375][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.255364][ T5019] binfmt_misc: register: failed to install interpreter file ./file0 [ 95.320925][ T4586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.332502][ T4586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.360988][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.445268][ T4938] hfsplus: b-tree write err: -5, ino 4 [ 96.564194][ T5011] loop1: detected capacity change from 0 to 32768 [ 96.583149][ T5011] XFS: noikeep mount option is deprecated. [ 96.765170][ T5011] XFS (loop1): Mounting V5 Filesystem [ 97.278703][ T5011] XFS (loop1): Ending clean mount [ 97.329716][ T5011] XFS (loop1): Quotacheck needed: Please wait. [ 97.389195][ T5011] XFS (loop1): Quotacheck: Done. [ 97.506584][ T5034] loop5: detected capacity change from 0 to 32768 [ 97.596864][ T5034] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.123 (5034) [ 97.637923][ T5034] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 97.835238][ T5034] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 97.946693][ T5034] BTRFS info (device loop5): using free space tree [ 97.998182][ T5071] loop3: detected capacity change from 0 to 128 [ 98.329177][ T5071] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 98.349962][ T4254] XFS (loop1): Unmounting Filesystem [ 98.489936][ T5071] syz.3.197: attempt to access beyond end of device [ 98.489936][ T5071] loop3: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 98.533266][ T5034] BTRFS info (device loop5): enabling ssd optimizations [ 98.556051][ T5071] Buffer I/O error on dev loop3, logical block 2066843070, lost async page write [ 98.609282][ T5063] loop2: detected capacity change from 0 to 32768 [ 98.616174][ T5071] syz.3.197: attempt to access beyond end of device [ 98.616174][ T5071] loop3: rw=2049, sector=8767744, nr_sectors = 1 limit=128 [ 98.660809][ T5071] Buffer I/O error on dev loop3, logical block 8767744, lost async page write [ 98.703604][ T5071] syz.3.197: attempt to access beyond end of device [ 98.703604][ T5071] loop3: rw=2049, sector=13269809, nr_sectors = 1 limit=128 [ 98.771988][ T4747] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.840934][ T5071] Buffer I/O error on dev loop3, logical block 13269809, lost async page write [ 98.885332][ T5063] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 98.935752][ T5071] syz.3.197: attempt to access beyond end of device [ 98.935752][ T5071] loop3: rw=2049, sector=1157, nr_sectors = 1 limit=128 [ 98.996197][ T5071] Buffer I/O error on dev loop3, logical block 1157, lost async page write [ 99.025474][ T5071] syz.3.197: attempt to access beyond end of device [ 99.025474][ T5071] loop3: rw=2049, sector=3211264, nr_sectors = 1 limit=128 [ 99.102884][ T5071] Buffer I/O error on dev loop3, logical block 3211264, lost async page write [ 99.124978][ T5071] syz.3.197: attempt to access beyond end of device [ 99.124978][ T5071] loop3: rw=2049, sector=8768635, nr_sectors = 1 limit=128 [ 99.181490][ T5071] Buffer I/O error on dev loop3, logical block 8768635, lost async page write [ 99.200882][ T5071] syz.3.197: attempt to access beyond end of device [ 99.200882][ T5071] loop3: rw=2049, sector=13466417, nr_sectors = 1 limit=128 [ 99.294342][ T5071] Buffer I/O error on dev loop3, logical block 13466417, lost async page write [ 99.353841][ T5071] syz.3.197: attempt to access beyond end of device [ 99.353841][ T5071] loop3: rw=2049, sector=209285, nr_sectors = 1 limit=128 [ 99.379813][ T4255] ocfs2: Unmounting device (7,2) on (node local) [ 99.383028][ T5071] Buffer I/O error on dev loop3, logical block 209285, lost async page write [ 99.536028][ T5107] loop1: detected capacity change from 0 to 4096 [ 99.565183][ T4268] sysv_free_block: trying to free block not in datazone [ 99.594603][ T4268] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 100.781709][ T5101] loop0: detected capacity change from 0 to 40427 [ 100.800334][ T5101] F2FS-fs (loop0): invalid crc value [ 100.837058][ T5101] F2FS-fs (loop0): Found nat_bits in checkpoint [ 101.626607][ T5143] loop3: detected capacity change from 0 to 128 [ 101.633341][ T5101] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.703761][ T5143] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.755864][ T4257] syz-executor: attempt to access beyond end of device [ 101.755864][ T4257] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 101.803390][ T5143] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.819812][ T4257] syz-executor: attempt to access beyond end of device [ 101.819812][ T4257] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 101.857884][ T4257] syz-executor: attempt to access beyond end of device [ 101.857884][ T4257] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.028331][ T5158] loop1: detected capacity change from 0 to 512 [ 102.055487][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 102.159666][ T5158] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 102.186699][ T5156] loop2: detected capacity change from 0 to 32768 [ 102.202602][ T5158] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.337240][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 102.535263][ T5156] XFS (loop2): Mounting V5 Filesystem [ 102.675919][ T5183] loop3: detected capacity change from 0 to 256 [ 103.025513][ T5183] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 103.120827][ T5156] XFS (loop2): Ending clean mount [ 103.158935][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.159205][ T5156] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x336/0xf80, inode 0x426 dinode [ 103.180795][ T5156] XFS (loop2): Unmount and run xfs_repair [ 103.186568][ T5156] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 103.193982][ T5156] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 103.202843][ T5156] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 103.211778][ T5156] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 103.220665][ T5156] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 0a 4.Xh............ [ 103.229574][ T5156] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 103.238491][ T5156] 00000050: 00 00 e5 01 00 00 00 00 00 00 00 00 8c bd 1d c9 ................ [ 103.247475][ T5156] 00000060: ff ff ff ff 32 9a 48 68 00 00 00 00 00 00 00 08 ....2.Hh........ [ 103.256356][ T5156] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 103.480019][ T4255] XFS (loop2): Unmounting Filesystem [ 103.514134][ T5183] exFAT-fs (loop3): hint_cluster is invalid (17) [ 103.548465][ T5183] exFAT-fs (loop3): error, found bogus dentry(15) beyond unused empty group(0) (start_clu : 5, cur_clu : 5) [ 103.636848][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.879100][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.909140][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.647022][ T5206] loop3: detected capacity change from 0 to 1024 [ 105.702408][ T5206] EXT4-fs: Ignoring removed nobh option [ 105.763029][ T5206] EXT4-fs: Ignoring removed bh option [ 105.784370][ T5206] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.949589][ T5217] loop2: detected capacity change from 0 to 2048 [ 106.010350][ T5206] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.097944][ T5217] Alternate GPT is invalid, using primary GPT. [ 106.120704][ T5217] loop2: p1 p2 p3 [ 106.302315][ T3622] Alternate GPT is invalid, using primary GPT. [ 106.312775][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 106.321755][ T3622] loop2: p1 p2 p3 [ 106.538840][ T5240] loop1: detected capacity change from 0 to 1024 [ 106.575411][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.584865][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.593786][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.613648][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.621317][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.645872][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.023849][ T9] hfsplus: b-tree write err: -5, ino 4 [ 107.950099][ T5250] netlink: 348 bytes leftover after parsing attributes in process `syz.5.240'. [ 108.745909][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 108.793735][ T4248] udevd[4248]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 108.808419][ T4274] udevd[4274]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 108.821017][ T4246] udevd[4246]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 109.004578][ T4246] udevd[4246]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 109.004742][ T4274] udevd[4274]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 109.027995][ T4248] udevd[4248]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 109.981000][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 110.232755][ T5266] loop1: detected capacity change from 0 to 32768 [ 110.290807][ T5266] XFS (loop1): Mounting V5 Filesystem [ 110.350783][ T5266] XFS (loop1): Ending clean mount [ 110.525432][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.543206][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.566865][ T5239] device bridge_slave_0 entered promiscuous mode [ 110.705319][ T4254] XFS (loop1): Unmounting Filesystem [ 110.803104][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 110.853326][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.874233][ T5309] capability: warning: `syz.3.252' uses deprecated v2 capabilities in a way that may be insecure [ 110.885679][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.910545][ T5239] device bridge_slave_1 entered promiscuous mode [ 110.950319][ T5311] program syz.3.252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.195832][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.258419][ T40] device hsr_slave_0 left promiscuous mode [ 111.264946][ T4306] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.303093][ T40] device hsr_slave_1 left promiscuous mode [ 111.309684][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.340231][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.363944][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.385137][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.413550][ T40] device bridge_slave_1 left promiscuous mode [ 111.419886][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.451889][ T40] device bridge_slave_0 left promiscuous mode [ 111.460605][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.463173][ T4306] usb 3-1: Using ep0 maxpacket: 16 [ 111.490383][ T4306] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 111.508711][ T4306] usb 3-1: config 0 has no interface number 0 [ 111.525384][ T4306] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 111.537745][ T4306] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 111.555956][ T4306] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 111.565588][ T40] device veth1_macvtap left promiscuous mode [ 111.573189][ T40] device veth0_macvtap left promiscuous mode [ 111.579421][ T4306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.589225][ T40] device veth1_vlan left promiscuous mode [ 111.597785][ T4306] usb 3-1: Product: syz [ 111.602039][ T4306] usb 3-1: Manufacturer: syz [ 111.607093][ T40] device veth0_vlan left promiscuous mode [ 111.693112][ T4306] usb 3-1: SerialNumber: syz [ 112.094824][ T4306] usb 3-1: config 0 descriptor?? [ 112.115634][ T5313] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 112.127002][ T5313] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 112.351463][ T5313] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 112.375650][ T5313] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 112.883264][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 113.330548][ T40] team0 (unregistering): Port device team_slave_1 removed [ 113.571025][ T4306] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 113.582374][ T4306] asix: probe of 3-1:0.251 failed with error -524 [ 113.591858][ T4306] usb 3-1: USB disconnect, device number 4 [ 113.633786][ T40] team0 (unregistering): Port device team_slave_0 removed [ 113.733041][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.781886][ T5338] loop5: detected capacity change from 0 to 512 [ 113.807920][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.814725][ T5338] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.861798][ T5338] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 113.873196][ T5338] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 113.881452][ T5338] System zones: 0-1, 15-15, 18-18, 34-34 [ 113.888435][ T5338] EXT4-fs (loop5): orphan cleanup on readonly fs [ 113.895100][ T5338] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 113.904700][ T5338] EXT4-fs warning (device loop5): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 113.938312][ T5338] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 113.966859][ T5338] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.259: bg 0: block 40: padding at end of block bitmap is not set [ 114.001639][ T5338] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 114.039175][ T5338] EXT4-fs (loop5): 1 truncate cleaned up [ 114.045032][ T5338] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 114.150048][ T4747] EXT4-fs (loop5): unmounting filesystem. [ 114.417622][ T5349] loop2: detected capacity change from 0 to 256 [ 114.495832][ T5349] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 114.504941][ T5351] loop5: detected capacity change from 0 to 128 [ 114.541568][ T5351] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 114.558418][ T5349] exFAT-fs (loop2): hint_cluster is invalid (17) [ 114.579772][ T5351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.843553][ T40] bond0 (unregistering): Released all slaves [ 114.939676][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.963142][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 114.976966][ T5330] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 115.020530][ T5355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 115.053138][ T5355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.265'. [ 115.194982][ T5239] team0: Port device team_slave_0 added [ 115.247247][ T5239] team0: Port device team_slave_1 added [ 115.330349][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.378942][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.431779][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.503842][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.521035][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.599791][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.786450][ T5239] device hsr_slave_0 entered promiscuous mode [ 115.819838][ T5239] device hsr_slave_1 entered promiscuous mode [ 115.830195][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.863764][ T5239] Cannot create hsr debugfs directory [ 116.013840][ T5382] Zero length message leads to an empty skb [ 116.103816][ T5385] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 116.155591][ T5388] loop3: detected capacity change from 0 to 64 [ 117.196738][ T5239] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 117.232193][ T5239] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 117.273341][ T5373] loop1: detected capacity change from 0 to 32768 [ 117.276790][ T5239] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 117.370161][ T5239] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 117.648088][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.681224][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.689738][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.712355][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.773683][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.788004][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.806982][ T41] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.833159][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.840291][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.873725][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.894312][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.921293][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.928660][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.948004][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.986132][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.002771][ T41] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 118.024316][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.033699][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.052998][ T41] usb 3-1: Product: syz [ 118.057194][ T41] usb 3-1: Manufacturer: syz [ 118.061814][ T41] usb 3-1: SerialNumber: syz [ 118.067458][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.084653][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.118349][ T41] usb 3-1: config 0 descriptor?? [ 118.143865][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.176598][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.222908][ T5239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.278940][ T5239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.345739][ T41] usb 3-1: USB disconnect, device number 5 [ 118.355103][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.377171][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.409581][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.456286][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.473857][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.493130][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.638526][ T5414] loop3: detected capacity change from 0 to 32768 [ 118.761310][ T5414] XFS (loop3): Mounting V5 Filesystem [ 118.837363][ T5442] loop1: detected capacity change from 0 to 4096 [ 118.864519][ T5442] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 118.930115][ T5414] XFS (loop3): Ending clean mount [ 118.963659][ T5442] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 119.018996][ T5442] ntfs3: loop1: Failed to load $Extend. [ 119.190050][ T4268] XFS (loop3): Unmounting Filesystem [ 119.194809][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.214078][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.257155][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.282299][ T46] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 119.299211][ T4254] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 120.135130][ T5456] sctp: failed to load transform for md5: -2 [ 122.656055][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.744522][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.920792][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.929529][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.949205][ T5239] device veth0_vlan entered promiscuous mode [ 122.963829][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.981674][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.016949][ T5239] device veth1_vlan entered promiscuous mode [ 123.076519][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.094385][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.118323][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.152232][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.163187][ T4421] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 123.186688][ T5239] device veth0_macvtap entered promiscuous mode [ 123.260297][ T5239] device veth1_macvtap entered promiscuous mode [ 123.385543][ T4421] usb 6-1: Using ep0 maxpacket: 16 [ 123.414939][ T4421] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.421203][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.437052][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.447650][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.477422][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.489933][ T4421] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.498068][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.521648][ T4421] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 123.532453][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.552884][ T4421] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 123.553185][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.563539][ T4421] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.587732][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.643106][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.656075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.674865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.908749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.977247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.998625][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.023146][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.036918][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.047449][ T4421] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 124.047481][ T4421] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 124.072600][ T4421] usb 6-1: Manufacturer: syz [ 124.099296][ T4421] usb 6-1: config 0 descriptor?? [ 124.101797][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.101815][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.101833][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.101855][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.101870][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.123923][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.139962][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.140995][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.147672][ T5239] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.147709][ T5239] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.147740][ T5239] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.147769][ T5239] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.372249][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.372320][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.376937][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.484026][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.484098][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.489509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.498456][ T4421] rc_core: IR keymap rc-hauppauge not found [ 124.498473][ T4421] Registered IR keymap rc-empty [ 124.498574][ T4421] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 124.523161][ T4421] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 124.554210][ T4421] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 124.555574][ T4421] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 124.567124][ T4421] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 124.593448][ T4421] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 124.623191][ T4421] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 124.654757][ T4421] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 124.683271][ T4421] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 124.722106][ T5523] loop3: detected capacity change from 0 to 32768 [ 124.761942][ T4421] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 124.866103][ T5523] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.308 (5523) [ 124.883806][ T4421] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 124.923407][ T4421] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 124.964171][ T4421] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 125.007708][ T4421] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 125.015011][ T4412] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.022689][ T5523] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 125.053338][ T5523] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 125.065628][ T4421] mceusb 6-1:0.0: Registered р with mce emulator interface version 1 [ 125.094504][ T4421] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 125.114721][ T5523] BTRFS info (device loop3): doing ref verification [ 125.121387][ T5523] BTRFS info (device loop3): use zlib compression, level 3 [ 125.124608][ T4421] usb 6-1: USB disconnect, device number 2 [ 125.191237][ T5523] BTRFS info (device loop3): using free space tree [ 125.215173][ T4412] usb 2-1: Using ep0 maxpacket: 32 [ 125.231140][ T4412] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 125.289487][ T4412] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 125.364529][ T4412] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 125.434699][ T4412] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 125.489683][ T4412] usb 2-1: config 0 interface 0 has no altsetting 0 [ 125.541355][ T5523] BTRFS info (device loop3): enabling ssd optimizations [ 125.569131][ T4412] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 125.631637][ T4412] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 125.705436][ T4412] usb 2-1: Product: syz [ 125.709654][ T4412] usb 2-1: Manufacturer: syz [ 126.546963][ T4412] usb 2-1: SerialNumber: syz [ 126.563729][ T4412] usb 2-1: config 0 descriptor?? [ 126.595380][ T4412] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 126.612436][ T4412] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 126.695118][ T4268] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 126.948752][ T4421] usb 2-1: USB disconnect, device number 4 [ 126.964525][ T4421] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 129.699485][ T26] audit: type=1326 audit(1734226139.742:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.6.325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f180bd85d19 code=0x0 [ 130.106242][ T5627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.167894][ T5606] loop1: detected capacity change from 0 to 32768 [ 130.213917][ T5606] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.323 (5606) [ 130.284668][ T5606] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.285276][ T5627] syz.2.327 (5627) used greatest stack depth: 19608 bytes left [ 130.348875][ T5606] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 130.379620][ T5606] BTRFS info (device loop1): using free space tree [ 130.459481][ T5641] futex_wake_op: syz.2.328 tries to shift op by -1; fix this program [ 130.606766][ T5606] BTRFS info (device loop1): enabling ssd optimizations [ 130.788426][ T5606] BTRFS error (device loop1): balance: invalid convert data profile raid0 [ 131.799493][ T5669] loop5: detected capacity change from 0 to 1024 [ 131.826850][ T5622] loop3: detected capacity change from 0 to 32768 [ 131.841068][ T5669] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 131.874743][ T5669] EXT4-fs (loop5): invalid journal inode [ 131.880513][ T5669] EXT4-fs (loop5): can't get journal size [ 131.887805][ T4254] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.888610][ T5669] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 131.914947][ T5622] [ 131.914947][ T5622] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.914947][ T5622] [ 131.972669][ T5622] [ 131.972669][ T5622] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.972669][ T5622] [ 132.026304][ T5674] loop6: detected capacity change from 0 to 512 [ 132.058572][ T5674] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 132.087637][ T5675] loop2: detected capacity change from 0 to 128 [ 132.094050][ T5622] [ 132.094050][ T5622] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.094050][ T5622] [ 132.113054][ T5622] JFS: Invalid value of umask [ 132.124188][ T5675] EXT4-fs: Ignoring removed nobh option [ 132.269830][ T5675] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.282763][ T5674] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 132.300096][ T4268] [ 132.300096][ T4268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.300096][ T4268] [ 132.301412][ T4747] EXT4-fs (loop5): unmounting filesystem. [ 132.320818][ T4268] [ 132.320818][ T4268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.320818][ T4268] [ 132.353353][ T5675] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.406892][ T5674] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 132.424186][ T5674] EXT4-fs (loop6): 1 truncate cleaned up [ 132.429872][ T5674] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 132.487244][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.487659][ T5686] loop5: detected capacity change from 0 to 256 [ 132.493611][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.514205][ T5686] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 132.658458][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 132.733893][ T5239] EXT4-fs (loop6): unmounting filesystem. [ 133.430611][ T5711] tun0: tun_chr_ioctl cmd 1074025678 [ 133.451063][ T5711] tun0: group set to 0 [ 133.693439][ T5721] loop1: detected capacity change from 0 to 256 [ 133.731545][ T5721] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 133.846693][ T5721] exFAT-fs (loop1): error, invalid size(size(4096) > aligned(9223372036854777344) [ 133.846693][ T5721] [ 133.859311][ T5721] exFAT-fs (loop1): Filesystem has been set read-only [ 134.302115][ T5732] loop6: detected capacity change from 0 to 1024 [ 134.588666][ T5061] hfsplus: b-tree write err: -5, ino 4 [ 134.632273][ T5723] loop2: detected capacity change from 0 to 32768 [ 134.735203][ T5723] JBD2: Ignoring recovery information on journal [ 134.772850][ T5736] loop3: detected capacity change from 0 to 4096 [ 134.921752][ T5723] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 134.930349][ T5736] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 135.081591][ T5723] (syz.2.348,5723,1):ocfs2_reflink_ioctl:4426 ERROR: status = -14 [ 135.212366][ T4268] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 135.218762][ T4268] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 135.235503][ T4255] ocfs2: Unmounting device (7,2) on (node local) [ 135.251155][ T4268] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 135.481222][ T5753] loop3: detected capacity change from 0 to 256 [ 135.628800][ T5730] loop1: detected capacity change from 0 to 32768 [ 135.799583][ T5730] XFS (loop1): Mounting V5 Filesystem [ 135.883514][ T5769] loop2: detected capacity change from 0 to 8192 [ 135.923361][ T5769] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 135.940840][ T5769] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 135.951791][ T5769] REISERFS (device loop2): using ordered data mode [ 135.959001][ T5769] reiserfs: using flush barriers [ 135.978893][ T5769] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.014100][ T5769] REISERFS (device loop2): checking transaction log (loop2) [ 136.032828][ T5730] XFS (loop1): Ending clean mount [ 136.048110][ T5730] XFS (loop1): Quotacheck needed: Please wait. [ 136.170894][ T5730] XFS (loop1): Quotacheck: Done. [ 136.284493][ T5769] REISERFS (device loop2): Using tea hash to sort names [ 136.305782][ T5769] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 136.411765][ T4254] XFS (loop1): Unmounting Filesystem [ 138.648945][ T5825] loop2: detected capacity change from 0 to 4096 [ 138.785460][ T5808] loop5: detected capacity change from 0 to 32768 [ 138.811249][ T5808] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.366 (5808) [ 138.969906][ T5808] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 138.979443][ T5838] loop1: detected capacity change from 0 to 2048 [ 139.038398][ T5808] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 139.083128][ T5808] BTRFS info (device loop5): setting nodatasum [ 139.120064][ T5808] BTRFS info (device loop5): using free space tree [ 139.131212][ T5847] loop6: detected capacity change from 0 to 256 [ 139.143855][ T5838] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 139.196789][ T5838] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 139.275241][ T5847] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 139.309214][ T5838] EXT4-fs (loop1): Remounting filesystem read-only [ 139.570294][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 139.672865][ T5808] BTRFS info (device loop5): enabling ssd optimizations [ 139.786454][ T26] audit: type=1800 audit(1734226149.832:7): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.366" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 139.969499][ T4747] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 141.235332][ T5898] loop1: detected capacity change from 0 to 512 [ 141.278524][ T5898] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.384: casefold flag without casefold feature [ 141.313301][ T5898] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.384: couldn't read orphan inode 15 (err -117) [ 141.325968][ T5904] loop6: detected capacity change from 0 to 128 [ 141.334573][ T5898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 141.543336][ T5911] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #2: comm syz.1.384: directory missing '.' [ 141.896504][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 142.456281][ T5896] loop3: detected capacity change from 0 to 32768 [ 142.492116][ T5896] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.385 (5896) [ 142.535183][ T5896] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.583486][ T5896] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 142.628700][ T5896] BTRFS info (device loop3): using free space tree [ 143.743817][ T5896] BTRFS info (device loop3): enabling ssd optimizations [ 143.833151][ T26] audit: type=1800 audit(1734226153.872:8): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.385" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 144.008057][ T4268] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.199305][ T5928] loop6: detected capacity change from 0 to 40427 [ 144.267060][ T5928] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff [ 144.287791][ T5928] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x4 [ 144.348834][ T5928] F2FS-fs (loop6): invalid crc value [ 144.390183][ T5928] F2FS-fs (loop6): Found nat_bits in checkpoint [ 144.690079][ T5928] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 144.919594][ T5928] syz.6.392: attempt to access beyond end of device [ 144.919594][ T5928] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 145.166637][ T5239] syz-executor: attempt to access beyond end of device [ 145.166637][ T5239] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 146.199453][ T5970] loop1: detected capacity change from 0 to 32768 [ 146.239432][ T5970] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.401 (5970) [ 146.281256][ T5970] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 146.612223][ T5970] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 146.637490][ T5970] BTRFS info (device loop1): using free space tree [ 146.959090][ T5995] loop3: detected capacity change from 0 to 32768 [ 147.096541][ T5995] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 147.168449][ T5995] JBD2: Ignoring recovery information on journal [ 147.258465][ T5995] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 147.443399][ T5972] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 147.487064][ T5970] BTRFS error (device loop1): open_ctree failed [ 147.568659][ T6046] overlayfs: upper fs does not support tmpfile. [ 147.588776][ T6046] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 147.604399][ T6046] overlayfs: failed to set xattr on upper [ 147.618490][ T6046] overlayfs: ...falling back to index=off,metacopy=off. [ 147.633812][ T6046] overlayfs: upper fs missing required features. [ 147.653199][ T5972] usb 7-1: Using ep0 maxpacket: 8 [ 147.691058][ T5972] usb 7-1: unable to get BOS descriptor or descriptor too short [ 147.732962][ T5972] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 147.748845][ T5972] usb 7-1: can't read configurations, error -71 [ 147.812731][ T4268] ocfs2: Unmounting device (7,3) on (node local) [ 148.065161][ T6054] rose0: tun_chr_ioctl cmd 1074025677 [ 148.077619][ T6054] rose0: linktype set to 825 [ 148.156579][ T6042] loop5: detected capacity change from 0 to 32768 [ 148.207309][ T6042] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.411 (6042) [ 148.282169][ T6042] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.327808][ T6042] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 148.413063][ T6042] BTRFS info (device loop5): using free space tree [ 148.418659][ T6064] loop1: detected capacity change from 0 to 512 [ 148.484652][ T6064] EXT4-fs: Ignoring removed oldalloc option [ 148.539669][ T6072] loop3: detected capacity change from 0 to 128 [ 148.918658][ T6064] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 149.129376][ T6064] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.204625][ T6064] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #2: comm syz.1.417: corrupted inode contents [ 149.249298][ T6064] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #2: comm syz.1.417: mark_inode_dirty error [ 149.334307][ T6064] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #2: comm syz.1.417: corrupted inode contents [ 149.346232][ T6042] BTRFS info (device loop5): enabling ssd optimizations [ 149.448293][ T26] audit: type=1800 audit(1734226159.492:9): pid=6042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.411" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 149.558288][ T6099] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #2: comm syz.1.417: corrupted inode contents [ 149.741555][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 149.872364][ T4747] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.009102][ T6116] loop2: detected capacity change from 0 to 64 [ 150.025436][ T6117] loop1: detected capacity change from 0 to 128 [ 150.224648][ T26] audit: type=1800 audit(1734226160.272:10): pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.424" name="file1" dev="loop1" ino=1048616 res=0 errno=0 [ 150.598493][ T6122] loop3: detected capacity change from 0 to 1024 [ 150.645729][ T6126] loop1: detected capacity change from 0 to 164 [ 150.699027][ T6126] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 150.769831][ T6126] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 150.944036][ T6135] vim2m vim2m.0: vidioc_s_fmt queue busy [ 151.165203][ T6139] loop1: detected capacity change from 0 to 4096 [ 151.174634][ T6143] loop3: detected capacity change from 0 to 64 [ 151.241285][ T6146] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.253575][ T5972] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 151.453040][ T5972] usb 7-1: Using ep0 maxpacket: 16 [ 151.465633][ T5972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.520145][ T5972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.545866][ T5972] usb 7-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 151.588426][ T5972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.648261][ T5972] usb 7-1: config 0 descriptor?? [ 151.772938][ T6127] loop2: detected capacity change from 0 to 32768 [ 151.796518][ T6154] loop3: detected capacity change from 0 to 4096 [ 151.859295][ T6154] NILFS (loop3): invalid segment: Checksum error in segment payload [ 151.880549][ T6154] NILFS (loop3): trying rollback from an earlier position [ 151.911547][ T6154] NILFS (loop3): recovery complete [ 151.928124][ T6159] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.083713][ T5972] apple 0003:05AC:0246.0001: unknown main item tag 0xd [ 152.103364][ T5972] apple 0003:05AC:0246.0001: unexpected long global item [ 152.123871][ T5972] apple 0003:05AC:0246.0001: parse failed [ 152.138453][ T5972] apple: probe of 0003:05AC:0246.0001 failed with error -22 [ 152.315683][ T5972] usb 7-1: USB disconnect, device number 4 [ 152.323434][ T4303] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.357832][ T6168] kvm [6167]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled wrmsr: 0x4000004a data 0x0 [ 152.603025][ T4303] usb 2-1: Using ep0 maxpacket: 16 [ 152.610272][ T4303] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.653020][ T4303] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 152.662127][ T4303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.730079][ T4303] usb 2-1: config 0 descriptor?? [ 152.762855][ T4303] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 153.029532][ T3607] bcm5974 2-1:0.0: could not read from device [ 153.075960][ T6186] loop5: detected capacity change from 0 to 4096 [ 153.080223][ T6162] bcm5974 2-1:0.0: could not read from device [ 153.097103][ T4303] usb 2-1: USB disconnect, device number 5 [ 153.108860][ T4347] hid-generic 000F:0008:0F34.0002: unknown main item tag 0x5 [ 153.129667][ T4347] hid-generic 000F:0008:0F34.0002: unknown main item tag 0x3 [ 153.182476][ T4347] hid-generic 000F:0008:0F34.0002: hidraw0: HID vab.67 Device [syz0] on syz0 [ 153.184914][ T6186] ntfs: volume version 3.1. [ 153.281614][ T6186] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 153.389321][ T6186] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 153.660988][ T6209] netlink: 348 bytes leftover after parsing attributes in process `syz.3.454'. [ 153.740635][ T6211] loop6: detected capacity change from 0 to 64 [ 154.685310][ T6235] tap0: tun_chr_ioctl cmd 1074025681 [ 155.076410][ T6207] loop2: detected capacity change from 0 to 32768 [ 155.326797][ T6246] loop5: detected capacity change from 0 to 256 [ 155.380606][ T6246] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 155.427502][ T6246] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 155.447412][ T6246] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 155.460533][ T6246] UDF-fs: Scanning with blocksize 512 failed [ 155.478696][ T6246] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 155.486944][ T6222] loop1: detected capacity change from 0 to 32768 [ 155.545723][ T6246] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.639292][ T6222] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 155.791315][ T4254] ocfs2: Unmounting device (7,1) on (node local) [ 156.154307][ T6238] loop6: detected capacity change from 0 to 32768 [ 156.413797][ T6265] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 156.472617][ T6267] loop5: detected capacity change from 0 to 1024 [ 156.619796][ T6267] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 157.024279][ T6290] loop6: detected capacity change from 0 to 64 [ 157.273107][ T5902] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 157.488531][ T5902] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 157.508004][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.547058][ T5902] usb 4-1: Product: syz [ 157.582155][ T5902] usb 4-1: Manufacturer: syz [ 157.587110][ T5902] usb 4-1: SerialNumber: syz [ 157.609424][ T5902] usb 4-1: config 0 descriptor?? [ 157.682680][ T6275] loop1: detected capacity change from 0 to 32768 [ 157.708679][ T6300] loop6: detected capacity change from 0 to 8192 [ 157.719325][ T6275] XFS: ikeep mount option is deprecated. [ 157.779179][ T6300] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 157.812113][ T6300] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 157.821635][ T6300] REISERFS (device loop6): using ordered data mode [ 157.828265][ T6300] reiserfs: using flush barriers [ 157.835188][ T6300] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 157.853879][ T6300] REISERFS (device loop6): checking transaction log (loop6) [ 157.868703][ T6275] XFS (loop1): Mounting V5 Filesystem [ 158.001228][ T6318] netlink: 348 bytes leftover after parsing attributes in process `syz.2.479'. [ 158.037788][ T5902] usb 4-1: Firmware: major: 202, minor: 255, hardware type: RZUSB (3) [ 158.106472][ T6275] XFS (loop1): Ending clean mount [ 158.129802][ T6275] XFS (loop1): Quotacheck needed: Please wait. [ 158.137862][ T6300] REISERFS (device loop6): Using tea hash to sort names [ 158.158697][ T6300] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 158.223042][ T6300] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 158.238382][ T6275] XFS (loop1): Quotacheck: Done. [ 158.247890][ T5902] usb 4-1: failed to fetch extended address, random address set [ 158.304439][ T4747] EXT4-fs (loop5): unmounting filesystem. [ 158.356343][ T6300] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 158.522852][ T5902] usb 4-1: USB disconnect, device number 5 [ 158.554444][ T6300] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 158.590946][ T6300] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 158.636317][ T4254] XFS (loop1): Unmounting Filesystem [ 159.452971][ T5902] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 159.643032][ T5902] usb 7-1: Using ep0 maxpacket: 32 [ 159.649847][ T5902] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 159.682367][ T5902] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 159.703022][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.711040][ T5902] usb 7-1: Product: syz [ 159.735770][ T5902] usb 7-1: Manufacturer: syz [ 159.740392][ T5902] usb 7-1: SerialNumber: syz [ 159.773622][ T5902] usb 7-1: config 0 descriptor?? [ 159.794193][ T6342] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 159.804708][ T5902] hub 7-1:0.0: bad descriptor, ignoring hub [ 159.810652][ T5902] hub: probe of 7-1:0.0 failed with error -5 [ 159.847299][ T5902] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input9 [ 159.883491][ T4413] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 160.088888][ C1] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 160.093151][ T4413] usb 6-1: Using ep0 maxpacket: 32 [ 160.098605][ T5902] usb 7-1: USB disconnect, device number 5 [ 160.139795][ T4413] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 160.175786][ T6344] loop3: detected capacity change from 0 to 32768 [ 160.194369][ T4413] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.252510][ T4413] usb 6-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 160.301024][ T6344] JBD2: Ignoring recovery information on journal [ 160.320235][ T4413] usb 6-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 160.401580][ T4413] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.477568][ T4413] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.489251][ T6344] (syz.3.487,6344,0):ocfs2_clear_journal_error:1092 ERROR: File system error -33024 recorded in journal 0. [ 160.532250][ T4413] usb 6-1: Product: syz [ 160.543196][ T6344] (syz.3.487,6344,1):ocfs2_clear_journal_error:1094 ERROR: File system on device loop3 needs checking. [ 160.544727][ T4413] usb 6-1: Manufacturer: syz [ 160.566182][ T4413] usb 6-1: SerialNumber: syz [ 160.642369][ T6344] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 161.057891][ T6369] netlink: 348 bytes leftover after parsing attributes in process `syz.2.490'. [ 161.090298][ T6355] loop1: detected capacity change from 0 to 32768 [ 161.275406][ T6355] XFS (loop1): Mounting V5 Filesystem [ 161.344219][ T4413] usb 6-1: USB disconnect, device number 3 [ 161.368909][ T4268] ocfs2: Unmounting device (7,3) on (node local) [ 161.533309][ T5902] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 161.577121][ T6355] XFS (loop1): Ending clean mount [ 161.646099][ T6355] XFS (loop1): Quotacheck needed: Please wait. [ 161.723366][ T5902] usb 7-1: Using ep0 maxpacket: 16 [ 161.736432][ T5902] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.793517][ T5902] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 161.818825][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.834964][ T5902] usb 7-1: config 0 descriptor?? [ 161.862112][ T5902] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input10 [ 161.884297][ T6355] XFS (loop1): Quotacheck: Done. [ 162.116062][ T3607] bcm5974 7-1:0.0: could not read from device [ 162.137114][ T6380] bcm5974 7-1:0.0: could not read from device [ 162.143488][ T5902] usb 7-1: USB disconnect, device number 6 [ 162.175258][ T3607] bcm5974 7-1:0.0: could not read from device [ 162.217265][ T4254] XFS (loop1): Unmounting Filesystem [ 162.673764][ T6417] rose0: tun_chr_ioctl cmd 1074025677 [ 162.679313][ T6417] rose0: linktype set to 6 [ 162.849658][ T6424] xt_hashlimit: max too large, truncated to 1048576 [ 162.935279][ T6424] Cannot find set identified by id 0 to match [ 163.198312][ T6430] netlink: 348 bytes leftover after parsing attributes in process `syz.2.503'. [ 163.945044][ T6422] loop1: detected capacity change from 0 to 32768 [ 164.272065][ T6422] XFS (loop1): Mounting V5 Filesystem [ 165.061641][ T6422] XFS (loop1): Ending clean mount [ 165.271838][ T4254] XFS (loop1): Unmounting Filesystem [ 165.680477][ T6495] loop5: detected capacity change from 0 to 2048 [ 165.772600][ T6495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.378399][ T6513] loop6: detected capacity change from 0 to 512 [ 166.436079][ T6513] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 166.517997][ T6513] EXT4-fs (loop6): 1 truncate cleaned up [ 166.612995][ T6513] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 166.627289][ T6513] EXT4-fs (loop6): shut down requested (2) [ 166.665211][ T6513] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 166.748649][ T6520] loop2: detected capacity change from 0 to 4096 [ 166.757470][ T5239] EXT4-fs (loop6): unmounting filesystem. [ 166.836359][ T6520] NILFS (loop2): invalid segment: Checksum error in segment payload [ 166.861795][ T6520] NILFS (loop2): trying rollback from an earlier position [ 166.888360][ T6520] NILFS (loop2): recovery complete [ 166.934557][ T6533] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.383111][ T6511] loop5: detected capacity change from 0 to 40427 [ 167.406660][ T6511] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 167.436481][ T6511] F2FS-fs (loop5): invalid crc value [ 167.517190][ T6550] loop6: detected capacity change from 0 to 512 [ 167.535434][ T6511] F2FS-fs (loop5): Found nat_bits in checkpoint [ 167.713997][ T6550] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 167.732345][ T6511] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 167.735885][ T6550] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.880895][ T26] audit: type=1804 audit(1734226177.922:11): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.526" name="/newroot/72/file0/file0" dev="loop5" ino=10 res=1 errno=0 [ 168.021181][ T4747] syz-executor: attempt to access beyond end of device [ 168.021181][ T4747] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 168.089148][ T5239] EXT4-fs (loop6): unmounting filesystem. [ 168.899918][ T6582] loop5: detected capacity change from 0 to 512 [ 168.963231][ T5972] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 168.981057][ T6582] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 169.007254][ T6582] UDF-fs: Scanning with blocksize 512 failed [ 169.024966][ T6582] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 169.032780][ T6582] UDF-fs: Scanning with blocksize 1024 failed [ 169.046551][ T6582] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 169.056503][ T6582] UDF-fs: Scanning with blocksize 2048 failed [ 169.068237][ T6582] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 169.073082][ T6562] loop2: detected capacity change from 0 to 32768 [ 169.128655][ T6582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.184234][ T5972] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 169.207879][ T5972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.263328][ T6587] netlink: 348 bytes leftover after parsing attributes in process `syz.1.541'. [ 169.264345][ T5972] usb 7-1: config 0 descriptor?? [ 169.291961][ T5972] cp210x 7-1:0.0: cp210x converter detected [ 169.550314][ T6562] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 169.636266][ T6562] JBD2: Ignoring recovery information on journal [ 169.729184][ T5972] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 169.751135][ T6562] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 169.949822][ T5972] cp210x 7-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 169.954987][ T6596] loop5: detected capacity change from 0 to 512 [ 169.958366][ T5972] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 169.991552][ T6562] overlayfs: upper fs does not support tmpfile. [ 170.001189][ T5972] usb 7-1: cp210x converter now attached to ttyUSB0 [ 170.016083][ T6562] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 170.036023][ T5972] usb 7-1: USB disconnect, device number 7 [ 170.051375][ T6562] overlayfs: failed to set xattr on upper [ 170.060363][ T6562] overlayfs: ...falling back to index=off,metacopy=off. [ 170.065531][ T6596] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 170.068959][ T5972] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 170.084378][ T6562] overlayfs: upper fs missing required features. [ 170.091498][ T5972] cp210x 7-1:0.0: device disconnected [ 170.160676][ T6602] loop1: detected capacity change from 0 to 512 [ 170.228370][ T6604] loop3: detected capacity change from 0 to 8192 [ 170.236299][ T6602] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 170.259959][ T6604] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 170.260835][ T4255] ocfs2: Unmounting device (7,2) on (node local) [ 170.332205][ T6596] Quota error (device loop5): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 170.359031][ T6596] EXT4-fs warning (device loop5): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 170.380104][ T6602] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 170.389500][ T6602] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 170.403062][ T6604] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 170.412273][ T6604] REISERFS (device loop3): using ordered data mode [ 170.418862][ T6604] reiserfs: using flush barriers [ 170.436693][ T6604] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.437489][ T6602] System zones: 0-1, 15-15, 18-18, 34-34 [ 170.460659][ T6602] EXT4-fs (loop1): orphan cleanup on readonly fs [ 170.467506][ T6602] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 170.476930][ T6602] EXT4-fs warning (device loop1): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 170.491809][ T6602] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 170.495565][ T6604] REISERFS (device loop3): checking transaction log (loop3) [ 170.513363][ T6602] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.543: bg 0: block 40: padding at end of block bitmap is not set [ 170.542792][ T6602] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 170.550400][ T6604] REISERFS (device loop3): Using r5 hash to sort names [ 170.556269][ T6602] EXT4-fs (loop1): 1 truncate cleaned up [ 170.565041][ T6604] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 170.575355][ T4747] EXT4-fs (loop5): unmounting filesystem. [ 170.610984][ T6602] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 171.622127][ T4267] Bluetooth: hci4: command 0x0406 tx timeout [ 171.758860][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 171.908125][ T6637] loop3: detected capacity change from 0 to 256 [ 171.931362][ T6637] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.977582][ T6637] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 171.993023][ T4413] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 172.048909][ T6637] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf32de3a7, utbl_chksum : 0xe619d30d) [ 172.079145][ T6643] loop2: detected capacity change from 0 to 512 [ 172.132537][ T6643] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 172.200602][ T26] audit: type=1800 audit(1734226182.242:12): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.548" name="file1" dev="loop3" ino=1048617 res=0 errno=0 [ 172.213020][ T4413] usb 7-1: Using ep0 maxpacket: 16 [ 172.232142][ T6643] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 172.282625][ T6645] netlink: 348 bytes leftover after parsing attributes in process `syz.1.554'. [ 172.303834][ T6643] System zones: 1-12 [ 172.308865][ T6643] EXT4-fs (loop2): orphan cleanup on readonly fs [ 172.315928][ T4413] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 172.339542][ T6643] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.553: bg 0: block 361: padding at end of block bitmap is not set [ 172.362980][ T4413] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.393000][ T4413] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 172.416704][ T6643] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 172.435752][ T4413] usb 7-1: config 1 has no interface number 1 [ 172.447156][ T6643] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.553: attempt to clear invalid blocks 33619980 len 1 [ 172.471978][ T4413] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 172.493002][ T4413] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.541621][ T6643] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.553: invalid indirect mapped block 1811939328 (level 0) [ 172.566699][ T4413] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.639905][ T4413] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.676726][ T6643] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.553: invalid indirect mapped block 2 (level 2) [ 172.693094][ T4413] usb 7-1: Product: syz [ 172.704413][ T4413] usb 7-1: Manufacturer: syz [ 172.719502][ T6643] EXT4-fs (loop2): 1 truncate cleaned up [ 172.729466][ T6643] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 172.748467][ T4413] usb 7-1: SerialNumber: syz [ 172.884818][ T6643] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 5: comm syz.2.553: lblock 0 mapped to illegal pblock 5 (length 1) [ 172.966342][ T6643] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.553: error -117 reading directory block [ 173.028171][ T6662] loop3: detected capacity change from 0 to 2048 [ 173.045757][ T6643] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 5: comm syz.2.553: lblock 0 mapped to illegal pblock 5 (length 1) [ 173.053313][ T4413] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 173.107389][ T6662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.135083][ T6643] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.553: error -117 reading directory block [ 173.478057][ T4413] usb 7-1: found format II with max.bitrate = 0, frame size=0 [ 173.624782][ T4413] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 173.656605][ T6632] loop5: detected capacity change from 0 to 40427 [ 173.749554][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 173.782602][ T4413] usb 7-1: USB disconnect, device number 8 [ 173.791039][ T6632] F2FS-fs (loop5): invalid crc value [ 173.841497][ T6632] F2FS-fs (loop5): Found nat_bits in checkpoint [ 174.008965][ T6632] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 174.198622][ T4747] syz-executor: attempt to access beyond end of device [ 174.198622][ T4747] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.548225][ T6687] loop1: detected capacity change from 0 to 1024 [ 175.930571][ T6700] netlink: 348 bytes leftover after parsing attributes in process `syz.6.565'. [ 176.980101][ T6723] loop1: detected capacity change from 0 to 256 [ 177.038715][ T6723] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 177.190085][ T6726] loop2: detected capacity change from 0 to 128 [ 177.225800][ T6728] usb usb4: usbfs: process 6728 (syz.5.564) did not claim interface 0 before use [ 177.483832][ T6706] loop3: detected capacity change from 0 to 32768 [ 177.567732][ T6739] netlink: 348 bytes leftover after parsing attributes in process `syz.1.577'. [ 177.600444][ T6706] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 177.854988][ T6717] loop6: detected capacity change from 0 to 32768 [ 177.881057][ T4268] ocfs2: Unmounting device (7,3) on (node local) [ 177.904671][ T6717] XFS (loop6): Mounting V5 Filesystem [ 178.063426][ T6717] XFS (loop6): Ending clean mount [ 178.270254][ T5239] XFS (loop6): Unmounting Filesystem [ 178.728605][ T6760] loop3: detected capacity change from 0 to 512 [ 178.803406][ T6760] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.585: inline data xattr refers to an external xattr inode [ 178.929216][ T6760] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.585: couldn't read orphan inode 12 (err -117) [ 179.014005][ T6760] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 179.110572][ T6760] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.585: Directory hole found for htree leaf block 0 [ 179.305213][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 180.158856][ T6780] loop1: detected capacity change from 0 to 32768 [ 180.229665][ T6780] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 180.303094][ T4305] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 180.303597][ T6782] loop6: detected capacity change from 0 to 40427 [ 180.377680][ T6782] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 180.417832][ T6782] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 180.429552][ T4254] ocfs2: Unmounting device (7,1) on (node local) [ 180.464920][ T6782] F2FS-fs (loop6): invalid crc value [ 180.505984][ T4305] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 180.521717][ T4305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.522335][ T6782] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 180.547295][ T4305] usb 3-1: config 0 descriptor?? [ 180.571090][ T6782] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 180.659010][ T6793] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 180.686180][ T6782] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 180.706053][ T6782] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 181.165162][ T6798] loop1: detected capacity change from 0 to 32768 [ 181.175793][ T5591] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 181.212789][ T6798] XFS (loop1): Mounting V5 Filesystem [ 181.275425][ T6798] XFS (loop1): Ending clean mount [ 181.321164][ T6811] netlink: 348 bytes leftover after parsing attributes in process `syz.6.599'. [ 181.373114][ T4254] XFS (loop1): Unmounting Filesystem [ 181.387008][ T4305] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 181.399633][ T5591] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 181.409641][ T5591] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.418788][ T4305] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 181.437948][ T5591] usb 6-1: config 0 descriptor?? [ 181.445135][ T4305] asix: probe of 3-1:0.0 failed with error -71 [ 181.460467][ T5591] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 181.481133][ T4305] usb 3-1: USB disconnect, device number 6 [ 182.065833][ T5591] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.079547][ T5591] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 182.089286][ T5591] usb 6-1: media controller created [ 182.181204][ T5591] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.199938][ T6817] loop2: detected capacity change from 0 to 256 [ 182.234201][ T6817] exfat: Deprecated parameter 'utf8' [ 182.238543][ T5591] gp8psk_fe: Frontend attached [ 182.245256][ T5591] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 182.257439][ T5591] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 182.276492][ T6817] exfat: Deprecated parameter 'namecase' [ 182.293043][ T6817] exfat: Deprecated parameter 'namecase' [ 182.313731][ T6817] exfat: Deprecated parameter 'utf8' [ 182.372382][ T5591] gp8psk: usb in 138 operation failed. [ 182.387407][ T6817] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 182.399591][ T5591] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 182.409873][ T5591] gp8psk: found Genpix USB device pID = 203 (hex) [ 182.457828][ T5591] usb 6-1: USB disconnect, device number 4 [ 182.622222][ T5591] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 182.888117][ T6831] loop1: detected capacity change from 0 to 128 [ 183.205308][ T6838] loop5: detected capacity change from 0 to 1024 [ 183.229330][ T6839] loop1: detected capacity change from 0 to 128 [ 183.236365][ T6838] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.249365][ T6839] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 183.275456][ T6839] syz.1.612: attempt to access beyond end of device [ 183.275456][ T6839] loop1: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 183.331081][ T6838] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 183.341568][ T6839] Buffer I/O error on dev loop1, logical block 2066843070, lost async page write [ 183.440329][ T6839] syz.1.612: attempt to access beyond end of device [ 183.440329][ T6839] loop1: rw=2049, sector=8767744, nr_sectors = 1 limit=128 [ 183.504296][ T6839] Buffer I/O error on dev loop1, logical block 8767744, lost async page write [ 183.523307][ T6839] syz.1.612: attempt to access beyond end of device [ 183.523307][ T6839] loop1: rw=2049, sector=13269809, nr_sectors = 1 limit=128 [ 183.563106][ T6839] Buffer I/O error on dev loop1, logical block 13269809, lost async page write [ 183.580163][ T4747] EXT4-fs (loop5): unmounting filesystem. [ 183.588659][ T6839] syz.1.612: attempt to access beyond end of device [ 183.588659][ T6839] loop1: rw=2049, sector=1157, nr_sectors = 1 limit=128 [ 183.637756][ T6839] Buffer I/O error on dev loop1, logical block 1157, lost async page write [ 183.665286][ T6839] syz.1.612: attempt to access beyond end of device [ 183.665286][ T6839] loop1: rw=2049, sector=3211264, nr_sectors = 1 limit=128 [ 183.718433][ T6839] Buffer I/O error on dev loop1, logical block 3211264, lost async page write [ 183.744011][ T6833] loop3: detected capacity change from 0 to 40427 [ 183.750591][ T6839] syz.1.612: attempt to access beyond end of device [ 183.750591][ T6839] loop1: rw=2049, sector=8768635, nr_sectors = 1 limit=128 [ 183.778245][ T6839] Buffer I/O error on dev loop1, logical block 8768635, lost async page write [ 183.787523][ T6833] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 183.812858][ T6833] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 183.820853][ T6827] loop2: detected capacity change from 0 to 32768 [ 183.828256][ T6839] syz.1.612: attempt to access beyond end of device [ 183.828256][ T6839] loop1: rw=2049, sector=13466417, nr_sectors = 1 limit=128 [ 183.866838][ T6833] F2FS-fs (loop3): invalid crc value [ 183.884108][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.616'. [ 183.906810][ T6852] device wlan0 entered promiscuous mode [ 183.912606][ T6839] Buffer I/O error on dev loop1, logical block 13466417, lost async page write [ 183.929205][ T6839] syz.1.612: attempt to access beyond end of device [ 183.929205][ T6839] loop1: rw=2049, sector=209285, nr_sectors = 1 limit=128 [ 183.963035][ T6839] Buffer I/O error on dev loop1, logical block 209285, lost async page write [ 183.988394][ T6827] XFS (loop2): Mounting V5 Filesystem [ 184.008336][ T6833] F2FS-fs (loop3): Found nat_bits in checkpoint [ 184.108013][ T6827] XFS (loop2): Ending clean mount [ 184.116115][ T4254] sysv_free_block: trying to free block not in datazone [ 184.134534][ T4254] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 184.185808][ T6833] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 184.205437][ T6833] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 184.262257][ T6864] loop5: detected capacity change from 0 to 4096 [ 184.324593][ T6868] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.330170][ T4255] XFS (loop2): Unmounting Filesystem [ 184.404003][ T26] audit: type=1800 audit(1734226194.452:13): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.617" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 184.464132][ T26] audit: type=1800 audit(1734226194.452:14): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.617" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 184.680539][ T6870] loop1: detected capacity change from 0 to 8192 [ 184.771969][ T6870] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 184.785233][ T6870] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 184.795915][ T6870] REISERFS (device loop1): using ordered data mode [ 184.802447][ T6870] reiserfs: using flush barriers [ 184.821953][ T6870] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.839140][ T6870] REISERFS (device loop1): checking transaction log (loop1) [ 184.855087][ T6870] REISERFS (device loop1): Using r5 hash to sort names [ 184.862359][ T6870] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 184.876231][ T6870] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 185.013052][ T4347] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 185.110727][ T6880] netlink: 348 bytes leftover after parsing attributes in process `syz.2.620'. [ 185.204629][ T4347] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 185.240207][ T4347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.294900][ T4347] usb 7-1: config 0 descriptor?? [ 185.333775][ T4347] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 185.459336][ T6890] sp0: Synchronizing with TNC [ 185.764429][ T4272] Bluetooth: hci0: command 0x0406 tx timeout [ 185.770484][ T4272] Bluetooth: hci1: command 0x0406 tx timeout [ 185.896902][ T6896] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 185.939491][ T4347] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.966996][ T4347] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 186.002995][ T4347] usb 7-1: media controller created [ 186.068180][ T4347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.131419][ T4347] gp8psk_fe: Frontend attached [ 186.155673][ T4347] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 186.196946][ T4347] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 186.260975][ T4347] gp8psk: usb in 138 operation failed. [ 186.277322][ T4347] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 186.328430][ T4347] gp8psk: found Genpix USB device pID = 203 (hex) [ 186.407554][ T4347] usb 7-1: USB disconnect, device number 9 [ 187.396040][ T4347] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 187.646837][ T6913] loop3: detected capacity change from 0 to 47 [ 187.873090][ T4306] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 187.891672][ T6917] loop2: detected capacity change from 0 to 1024 [ 187.957096][ T6919] loop3: detected capacity change from 0 to 2048 [ 188.009414][ T6919] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.053482][ T5279] hfsplus: b-tree write err: -5, ino 4 [ 188.073497][ T4306] usb 6-1: Using ep0 maxpacket: 32 [ 188.092446][ T6921] loop6: detected capacity change from 0 to 2048 [ 188.106147][ T4306] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 188.124496][ T4306] usb 6-1: config 0 has no interface number 0 [ 188.142463][ T6921] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 188.160004][ T4306] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 188.187837][ T4306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.210476][ T4306] usb 6-1: Product: syz [ 188.233095][ T4306] usb 6-1: Manufacturer: syz [ 188.237711][ T4306] usb 6-1: SerialNumber: syz [ 188.244171][ T6921] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 188.272253][ T4306] usb 6-1: config 0 descriptor?? [ 188.285512][ T4306] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 188.296091][ T6921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.503423][ T6911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.515806][ T6911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.931971][ T4306] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 188.983560][ T4306] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 189.208102][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 189.226245][ T4306] usb 6-1: USB disconnect, device number 5 [ 189.236858][ T6941] netlink: 348 bytes leftover after parsing attributes in process `syz.3.647'. [ 189.271890][ T4306] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 189.300455][ T4306] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 189.313162][ T4306] quatech2 6-1:0.51: device disconnected [ 189.459367][ T6944] loop1: detected capacity change from 0 to 256 [ 189.490911][ T6944] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 189.784185][ T4420] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 189.976626][ T6952] loop5: detected capacity change from 0 to 512 [ 190.008312][ T6950] mkiss: ax0: crc mode is auto. [ 190.014670][ T4420] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 190.048458][ T4420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.070172][ T4420] usb 3-1: config 0 descriptor?? [ 190.090348][ T6952] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 190.101398][ T4420] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 190.130239][ T6952] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.318846][ T4747] EXT4-fs (loop5): unmounting filesystem. [ 190.690180][ T4420] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 190.733780][ T4420] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 190.771231][ T4420] usb 3-1: media controller created [ 190.839925][ T4420] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.906418][ T4420] gp8psk_fe: Frontend attached [ 190.922483][ T6967] capability: warning: `syz.6.656' uses 32-bit capabilities (legacy support in use) [ 190.933533][ T4420] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 190.941755][ T4420] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 191.083006][ T4420] gp8psk: usb in 138 operation failed. [ 191.088505][ T4420] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 191.123669][ T4420] gp8psk: found Genpix USB device pID = 203 (hex) [ 191.195195][ T4420] usb 3-1: USB disconnect, device number 7 [ 191.321179][ T4420] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 192.872241][ T7000] loop1: detected capacity change from 0 to 1024 [ 193.010267][ T4938] hfsplus: b-tree write err: -5, ino 4 [ 193.459422][ T6998] loop6: detected capacity change from 0 to 32768 [ 193.571586][ T6998] ialloc: diAlloc returned -5! [ 193.737698][ T7010] loop1: detected capacity change from 0 to 8192 [ 193.765528][ T7010] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 193.783021][ T7010] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 193.802806][ T7010] REISERFS (device loop1): using ordered data mode [ 193.829146][ T7010] reiserfs: using flush barriers [ 193.857660][ T7010] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 193.893615][ T7010] REISERFS (device loop1): checking transaction log (loop1) [ 193.933451][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.939753][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.978985][ T7010] REISERFS (device loop1): Using r5 hash to sort names [ 194.017454][ T7010] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 194.071946][ T7010] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 194.211437][ T7008] loop5: detected capacity change from 0 to 32768 [ 194.229428][ T7008] XFS: ikeep mount option is deprecated. [ 194.288921][ T7008] XFS (loop5): Mounting V5 Filesystem [ 194.402290][ T7008] XFS (loop5): Ending clean mount [ 194.413833][ T7008] XFS (loop5): Quotacheck needed: Please wait. [ 194.459874][ T7008] XFS (loop5): Quotacheck: Done. [ 194.670741][ T4747] XFS (loop5): Unmounting Filesystem [ 195.545165][ T7037] netlink: 348 bytes leftover after parsing attributes in process `syz.3.682'. [ 195.609309][ T7042] loop1: detected capacity change from 0 to 1024 [ 196.087215][ T7056] loop5: detected capacity change from 0 to 4096 [ 196.293080][ T5906] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 196.368599][ T4306] kernel write not supported for file /sg0 (pid: 4306 comm: kworker/0:5) [ 196.489947][ T5906] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.515129][ T5906] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.621277][ T5906] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.663220][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.671876][ T5906] usb 7-1: Product: syz [ 196.676203][ T5906] usb 7-1: Manufacturer: syz [ 196.680907][ T5906] usb 7-1: SerialNumber: syz [ 196.993543][ T5906] usb 7-1: 0:2 : does not exist [ 197.009380][ T5906] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 197.107940][ T5906] usb 7-1: USB disconnect, device number 10 [ 197.166371][ T7067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.693'. [ 197.208315][ T7067] SET target dimension over the limit! [ 197.473958][ T4246] udevd[4246]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.586114][ T7081] netlink: 348 bytes leftover after parsing attributes in process `syz.6.697'. [ 198.773333][ T7090] loop6: detected capacity change from 0 to 256 [ 198.833720][ T7090] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 199.280604][ T7098] loop6: detected capacity change from 0 to 4096 [ 199.541775][ T7086] loop2: detected capacity change from 0 to 32768 [ 199.640586][ T7086] ialloc: diAlloc returned -28! [ 199.716825][ T7091] loop5: detected capacity change from 0 to 32768 [ 199.748083][ T7091] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.703 (7091) [ 199.846655][ T7091] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 199.861943][ T7094] loop1: detected capacity change from 0 to 32768 [ 199.883120][ T7091] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 199.892736][ T7094] XFS: attr2 mount option is deprecated. [ 199.915331][ T7091] BTRFS info (device loop5): using free space tree [ 200.092264][ T7094] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 200.139773][ T7091] BTRFS info (device loop5): enabling ssd optimizations [ 200.285572][ T7094] XFS (loop1): Quotacheck needed: Please wait. [ 200.295764][ T5196] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 200.317167][ T5196] XFS (loop1): Unmount and run xfs_repair [ 200.341280][ T5196] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 200.407855][ T5196] 00000000: 58 41 46 4c 00 00 00 00 bf dc 47 fc 10 d8 4e ed XAFL......G...N. [ 200.725390][ T5196] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 200.746521][ T7141] netlink: 348 bytes leftover after parsing attributes in process `syz.3.712'. [ 200.756924][ T4747] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 200.778072][ T5196] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 01 01 00 00 08 .;.............. [ 200.805823][ T5196] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 200.858091][ T5196] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 200.956689][ T5196] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 200.996937][ T5196] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.019502][ T5196] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.048838][ T5196] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x250/0x430" at daddr 0x3 len 1 error 74 [ 201.106350][ T7094] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 201.280677][ T4254] XFS (loop1): Unmounting Filesystem [ 201.359670][ T7155] loop2: detected capacity change from 0 to 256 [ 201.441395][ T7155] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 201.468081][ T7155] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 201.608795][ T7158] loop5: detected capacity change from 0 to 4096 [ 201.664725][ T7158] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 201.796888][ T7158] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 202.093296][ T75] ntfs3: loop5: ntfs3_write_inode r=5 failed, -22. [ 202.109028][ T4747] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 202.841533][ T7182] loop3: detected capacity change from 0 to 8192 [ 202.967881][ T7182] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 202.992664][ T7182] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 203.016415][ T7182] REISERFS (device loop3): using ordered data mode [ 203.027549][ T7182] reiserfs: using flush barriers [ 203.743101][ T7182] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 203.828430][ T7182] REISERFS (device loop3): checking transaction log (loop3) [ 203.887144][ T7182] REISERFS (device loop3): Using r5 hash to sort names [ 203.902273][ T7182] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 203.939287][ T26] audit: type=1326 audit(1734226213.982:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c5b85d19 code=0x7ffc0000 [ 203.939765][ T7182] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 203.979410][ T26] audit: type=1326 audit(1734226214.022:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c5b85d19 code=0x7ffc0000 [ 204.003295][ T7197] netlink: 16 bytes leftover after parsing attributes in process `syz.6.733'. [ 204.012173][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.733'. [ 204.062071][ T26] audit: type=1326 audit(1734226214.022:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f02c5b85d19 code=0x7ffc0000 [ 204.103637][ T26] audit: type=1326 audit(1734226214.022:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c5b85d19 code=0x7ffc0000 [ 204.193230][ T26] audit: type=1326 audit(1734226214.022:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c5b85d19 code=0x7ffc0000 [ 204.277998][ T26] audit: type=1326 audit(1734226214.052:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02c5b85d19 code=0x7ffc0000 [ 204.327849][ T7204] netlink: 'syz.1.737': attribute type 29 has an invalid length. [ 204.343391][ T7204] netlink: 'syz.1.737': attribute type 29 has an invalid length. [ 204.352202][ T26] audit: type=1326 audit(1734226214.052:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c5b85d19 code=0x7ffc0000 [ 204.377785][ T7207] loop6: detected capacity change from 0 to 512 [ 204.393027][ T7206] netlink: 'syz.1.737': attribute type 29 has an invalid length. [ 204.410585][ T7207] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 204.461334][ T26] audit: type=1326 audit(1734226214.052:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c5b85d19 code=0x7ffc0000 [ 204.497504][ T26] audit: type=1326 audit(1734226214.092:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02c5b85d19 code=0x7ffc0000 [ 204.583545][ T7207] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #15: comm syz.6.738: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 204.649029][ T26] audit: type=1326 audit(1734226214.092:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c5b85d19 code=0x7ffc0000 [ 204.682992][ T7207] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.738: couldn't read orphan inode 15 (err -117) [ 204.725278][ T7207] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 204.743380][ T7207] ext2 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.848458][ T7219] loop1: detected capacity change from 0 to 256 [ 204.886381][ T7207] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.738: Directory hole found for htree leaf block 0 [ 205.188108][ T5239] EXT4-fs (loop6): unmounting filesystem. [ 205.748952][ T7233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.748'. [ 206.015410][ T7216] loop3: detected capacity change from 0 to 32768 [ 206.075469][ T7216] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.740 (7216) [ 206.142963][ T7216] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 206.188717][ T7216] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 206.234523][ T7216] BTRFS info (device loop3): setting nodatacow, compression disabled [ 206.243070][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 206.250778][ T7216] BTRFS info (device loop3): max_inline at 0 [ 206.302996][ T7216] BTRFS info (device loop3): enabling disk space caching [ 206.332863][ T7216] BTRFS info (device loop3): setting datasum, datacow enabled [ 206.368677][ T7216] BTRFS info (device loop3): turning on flush-on-commit [ 206.391387][ T7216] BTRFS info (device loop3): doing ref verification [ 206.438201][ T7216] BTRFS info (device loop3): force clearing of disk cache [ 206.458460][ T7216] BTRFS info (device loop3): enabling ssd optimizations [ 206.477280][ T7216] BTRFS info (device loop3): turning off barriers [ 206.491947][ T7216] BTRFS info (device loop3): max_inline at 4096 [ 206.505035][ T7216] BTRFS info (device loop3): disk space caching is enabled [ 206.591817][ T7259] loop5: detected capacity change from 0 to 8 [ 206.788143][ T7216] BTRFS info (device loop3): rebuilding free space tree [ 206.820554][ T7216] BTRFS info (device loop3): disabling free space tree [ 206.835451][ T7216] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 206.856260][ T7216] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 207.271414][ T4268] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.170648][ T7273] loop1: detected capacity change from 0 to 32768 [ 208.238890][ T7273] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.758 (7273) [ 208.333823][ T7273] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 208.368891][ T7273] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 208.413040][ T7273] BTRFS info (device loop1): using free space tree [ 208.519479][ T7301] loop2: detected capacity change from 0 to 2048 [ 208.606098][ T7301] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 208.629609][ T7301] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.709509][ T7273] BTRFS info (device loop1): enabling ssd optimizations [ 208.901098][ T4254] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.419797][ T7334] syz.2.772 uses obsolete (PF_INET,SOCK_PACKET) [ 211.168627][ T7352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 211.196587][ T7356] netlink: 'syz.5.777': attribute type 20 has an invalid length. [ 211.216057][ T7352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.251189][ T7352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.278103][ T7352] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 211.320757][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 211.331271][ T7360] loop3: detected capacity change from 0 to 1024 [ 211.365239][ T7360] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 211.386744][ T7360] EXT4-fs (loop3): unmounting filesystem. [ 211.391384][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.410116][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.429529][ T7357] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 211.458736][ T7363] IPv6: syztnl0: Disabled Multicast RS [ 211.645198][ T7369] netlink: 'syz.3.783': attribute type 10 has an invalid length. [ 211.658997][ T7369] netlink: 2 bytes leftover after parsing attributes in process `syz.3.783'. [ 211.691219][ T7369] device team0 entered promiscuous mode [ 211.699068][ T7369] device team_slave_0 entered promiscuous mode [ 211.708612][ T7369] device team_slave_1 entered promiscuous mode [ 211.722241][ T7369] bridge0: port 3(team0) entered blocking state [ 211.729273][ T7369] bridge0: port 3(team0) entered disabled state [ 211.757127][ T7369] bridge0: port 3(team0) entered blocking state [ 211.763798][ T7369] bridge0: port 3(team0) entered forwarding state [ 211.852532][ T7373] loop1: detected capacity change from 0 to 1024 [ 212.029510][ T7378] loop3: detected capacity change from 0 to 256 [ 212.067738][ T7378] exfat: Deprecated parameter 'utf8' [ 212.088891][ T7378] exfat: Deprecated parameter 'utf8' [ 212.106833][ T7378] exfat: Deprecated parameter 'utf8' [ 212.137676][ T7373] syz.1.784: attempt to access beyond end of device [ 212.137676][ T7373] loop1: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 212.162366][ T7378] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e8072e, utbl_chksum : 0xe619d30d) [ 212.174586][ T7373] Buffer I/O error on dev loop1, logical block 2889, lost async page write [ 212.194657][ T7376] syz.1.784: attempt to access beyond end of device [ 212.194657][ T7376] loop1: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 212.311412][ T7376] Buffer I/O error on dev loop1, logical block 2889, lost async page write [ 212.481125][ T7375] loop5: detected capacity change from 0 to 32768 [ 212.534005][ T7384] netlink: 144 bytes leftover after parsing attributes in process `syz.3.788'. [ 212.551208][ T7375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.785 (7375) [ 212.608698][ T7375] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.668463][ T7375] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 212.680861][ T7388] loop6: detected capacity change from 0 to 64 [ 212.712955][ T7375] BTRFS info (device loop5): use no compression [ 212.719255][ T7375] BTRFS info (device loop5): turning on sync discard [ 212.782982][ T7375] BTRFS info (device loop5): force clearing of disk cache [ 212.790162][ T7375] BTRFS info (device loop5): enabling auto defrag [ 212.828781][ T7375] BTRFS info (device loop5): turning off discard [ 212.869105][ T7375] BTRFS info (device loop5): using free space tree [ 213.181726][ T7409] device vlan2 entered promiscuous mode [ 213.197815][ T7409] device wlan0 entered promiscuous mode [ 213.227011][ T7409] device wlan0 left promiscuous mode [ 213.319151][ T7375] BTRFS info (device loop5): enabling ssd optimizations [ 213.331603][ T7375] BTRFS info (device loop5): rebuilding free space tree [ 213.428699][ T7386] loop2: detected capacity change from 0 to 32768 [ 213.453410][ T7386] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.789 (7386) [ 213.510486][ T4246] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4246) [ 213.710160][ T7428] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 213.984743][ T4747] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.044529][ T7288] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 214.064581][ T7436] loop3: detected capacity change from 0 to 512 [ 214.099513][ T7436] EXT4-fs: Ignoring removed orlov option [ 214.149964][ T7436] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.202270][ T7440] loop6: detected capacity change from 0 to 512 [ 214.233373][ T7436] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.805: Attempting to read directory block (0) that is past i_size (256) [ 214.252961][ T7288] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.267968][ T7288] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 214.282679][ T7288] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 214.301789][ T7436] EXT4-fs (loop3): Remounting filesystem read-only [ 214.309032][ T7436] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 214.311327][ T7440] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.806: casefold flag without casefold feature [ 214.318653][ T7436] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 214.356009][ T7288] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 214.358376][ T7436] EXT4-fs (loop3): shut down requested (2) [ 214.390601][ T7288] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 214.414727][ T7440] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.806: couldn't read orphan inode 15 (err -117) [ 214.432822][ T7440] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 214.449232][ T7288] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 214.482303][ T7288] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 214.491345][ T7288] usb 3-1: Product: syz [ 214.495664][ T7288] usb 3-1: Manufacturer: syz [ 214.517464][ T7288] cdc_wdm 3-1:1.0: skipping garbage [ 214.522707][ T7288] cdc_wdm 3-1:1.0: skipping garbage [ 214.538837][ T7288] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 214.544863][ T7288] cdc_wdm 3-1:1.0: Unknown control protocol [ 214.604561][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 214.644286][ T5239] EXT4-fs (loop6): unmounting filesystem. [ 214.729897][ C1] cdc_wdm 3-1:1.0: unknown notification 100 received: index 27439 len 28022 [ 214.753093][ T5906] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 214.935379][ T5971] usb 3-1: USB disconnect, device number 8 [ 214.963129][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 214.971192][ T5906] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 214.982786][ T7454] netlink: 'syz.5.810': attribute type 177 has an invalid length. [ 214.989980][ T5906] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 215.012190][ T5906] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 215.043412][ T5906] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 215.066959][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 215.082210][ T5906] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 215.120506][ T5906] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 215.143647][ T5906] usb 2-1: Product: syz [ 215.147859][ T5906] usb 2-1: Manufacturer: syz [ 215.173003][ T5906] usb 2-1: SerialNumber: syz [ 215.179806][ T5906] usb 2-1: config 0 descriptor?? [ 215.195602][ T5906] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 215.238225][ T5906] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 215.405768][ T5906] usb 2-1: USB disconnect, device number 6 [ 215.411689][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 215.445599][ T5906] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 215.511392][ T7464] tipc: Started in network mode [ 215.521930][ T7464] tipc: Node identity ac14140f, cluster identity 4711 [ 215.554099][ T7464] tipc: New replicast peer: 255.255.255.255 [ 215.587064][ T7464] tipc: Enabled bearer , priority 10 [ 215.603386][ T7467] tipc: Cannot configure node identity twice [ 215.613486][ T7467] tipc: Cannot configure node identity twice [ 215.629259][ T7438] ldusb: No device or device unplugged -19 [ 215.694420][ T7452] loop3: detected capacity change from 0 to 40427 [ 215.728770][ T7471] loop6: detected capacity change from 0 to 512 [ 215.749900][ T7452] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 215.773274][ T7452] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 215.777712][ T7471] EXT4-fs: Ignoring removed orlov option [ 215.817247][ T7471] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.840659][ T7474] loop5: detected capacity change from 0 to 256 [ 215.856129][ T7452] F2FS-fs (loop3): Found nat_bits in checkpoint [ 215.920463][ T7471] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.818: Attempting to read directory block (0) that is past i_size (256) [ 216.026217][ T7483] loop2: detected capacity change from 0 to 256 [ 216.033294][ T7483] exfat: Deprecated parameter 'utf8' [ 216.038700][ T7483] exfat: Deprecated parameter 'utf8' [ 216.044204][ T7483] exfat: Deprecated parameter 'utf8' [ 216.055989][ T7483] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e8072e, utbl_chksum : 0xe619d30d) [ 216.078824][ T7471] EXT4-fs (loop6): Remounting filesystem read-only [ 216.086335][ T7471] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 216.095148][ T7471] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 216.117257][ T7471] EXT4-fs (loop6): shut down requested (2) [ 216.198813][ T7452] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 216.218932][ T7452] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 216.237639][ T7486] xt_hashlimit: max too large, truncated to 1048576 [ 216.251827][ T5239] EXT4-fs (loop6): unmounting filesystem. [ 216.252759][ T7486] xt_hashlimit: overflow, rate too high: 0 [ 216.437418][ T7490] ================================================================== [ 216.445533][ T7490] BUG: KASAN: use-after-free in cpu_map_generic_redirect+0x1c7/0x650 [ 216.453638][ T7490] Read of size 8 at addr ffff888077a5e618 by task syz.1.826/7490 [ 216.461386][ T7490] [ 216.463745][ T7490] CPU: 1 PID: 7490 Comm: syz.1.826 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 216.475049][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.485143][ T7490] Call Trace: [ 216.488443][ T7490] [ 216.491393][ T7490] dump_stack_lvl+0x1e3/0x2cb [ 216.496190][ T7490] ? nf_tcp_handle_invalid+0x642/0x642 [ 216.501681][ T7490] ? panic+0x764/0x764 [ 216.505779][ T7490] ? _printk+0xd1/0x111 [ 216.509961][ T7490] ? __virt_addr_valid+0x17f/0x530 [ 216.515104][ T7490] ? __virt_addr_valid+0x17f/0x530 [ 216.520250][ T7490] print_report+0x15f/0x4f0 [ 216.524791][ T7490] ? __virt_addr_valid+0x17f/0x530 [ 216.529934][ T7490] ? __virt_addr_valid+0x17f/0x530 [ 216.535079][ T7490] ? __virt_addr_valid+0x45b/0x530 [ 216.540206][ T7490] ? __phys_addr+0xb6/0x170 [ 216.544729][ T7490] ? cpu_map_generic_redirect+0x1c7/0x650 [ 216.550453][ T7490] kasan_report+0x136/0x160 [ 216.554959][ T7490] ? cpu_map_generic_redirect+0x1c7/0x650 [ 216.560683][ T7490] cpu_map_generic_redirect+0x1c7/0x650 [ 216.566236][ T7490] ? cpu_map_enqueue+0x370/0x370 [ 216.571181][ T7490] xdp_do_generic_redirect+0x401/0x850 [ 216.576654][ T7490] do_xdp_generic+0x50b/0x6d0 [ 216.581335][ T7490] ? trace_xdp_exception+0x280/0x280 [ 216.586622][ T7490] ? tun_get_user+0x24ee/0x42d0 [ 216.591484][ T7490] ? tun_get_user+0x24ee/0x42d0 [ 216.596341][ T7490] tun_get_user+0x261e/0x42d0 [ 216.601036][ T7490] ? rcu_read_unlock+0xa0/0xa0 [ 216.605825][ T7490] ? tun_get+0x1e/0x2f0 [ 216.609989][ T7490] ? __lock_acquire+0x1f80/0x1f80 [ 216.615029][ T7490] ? tun_get+0x1e/0x2f0 [ 216.619189][ T7490] ? tun_get+0x27d/0x2f0 [ 216.623437][ T7490] tun_chr_write_iter+0x10c/0x1f0 [ 216.628470][ T7490] vfs_write+0x857/0xbc0 [ 216.632803][ T7490] ? file_end_write+0x250/0x250 [ 216.637656][ T7490] ? __fget_files+0x28/0x4a0 [ 216.642244][ T7490] ? __fget_files+0x435/0x4a0 [ 216.646926][ T7490] ? __fdget_pos+0x1db/0x360 [ 216.651514][ T7490] ? ksys_write+0x77/0x2c0 [ 216.655929][ T7490] ksys_write+0x19c/0x2c0 [ 216.660346][ T7490] ? print_irqtrace_events+0x210/0x210 [ 216.665816][ T7490] ? __ia32_sys_read+0x80/0x80 [ 216.670586][ T7490] ? syscall_enter_from_user_mode+0x2e/0x230 [ 216.676587][ T7490] ? lockdep_hardirqs_on+0x94/0x130 [ 216.681799][ T7490] ? syscall_enter_from_user_mode+0x2e/0x230 [ 216.687782][ T7490] do_syscall_64+0x3b/0xb0 [ 216.692210][ T7490] ? clear_bhb_loop+0x45/0xa0 [ 216.696885][ T7490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.702786][ T7490] RIP: 0033:0x7f02c5b847cf [ 216.707212][ T7490] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 216.726827][ T7490] RSP: 002b:00007f02c69cd000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 216.735263][ T7490] RAX: ffffffffffffffda RBX: 00007f02c5d75fa0 RCX: 00007f02c5b847cf [ 216.743236][ T7490] RDX: 0000000000000d86 RSI: 0000000020002340 RDI: 00000000000000c8 [ 216.751207][ T7490] RBP: 00007f02c5c01a20 R08: 0000000000000000 R09: 0000000000000000 [ 216.759198][ T7490] R10: 0000000000000d86 R11: 0000000000000293 R12: 0000000000000000 [ 216.767168][ T7490] R13: 0000000000000000 R14: 00007f02c5d75fa0 R15: 00007ffc0be67cf8 [ 216.775148][ T7490] [ 216.778165][ T7490] [ 216.780483][ T7490] Allocated by task 5034: [ 216.784803][ T7490] kasan_set_track+0x4b/0x70 [ 216.789407][ T7490] __kasan_kmalloc+0x97/0xb0 [ 216.793994][ T7490] alloc_mnt_ns+0xaf/0x3b0 [ 216.798416][ T7490] mount_subtree+0x98/0x4f0 [ 216.802928][ T7490] btrfs_mount+0x479/0xb40 [ 216.807345][ T7490] legacy_get_tree+0xeb/0x180 [ 216.812027][ T7490] vfs_get_tree+0x88/0x270 [ 216.816453][ T7490] do_new_mount+0x2ba/0xb40 [ 216.820961][ T7490] __se_sys_mount+0x2d5/0x3c0 [ 216.825643][ T7490] do_syscall_64+0x3b/0xb0 [ 216.830069][ T7490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.835970][ T7490] [ 216.838288][ T7490] Last potentially related work creation: [ 216.843999][ T7490] kasan_save_stack+0x3b/0x60 [ 216.848685][ T7490] __kasan_record_aux_stack+0xb0/0xc0 [ 216.854056][ T7490] insert_work+0x54/0x3d0 [ 216.858385][ T7490] __queue_work+0xb4b/0xf90 [ 216.862886][ T7490] queue_work_on+0x14b/0x250 [ 216.867477][ T7490] cpu_map_free+0xd7/0x1b0 [ 216.871896][ T7490] process_one_work+0x8a9/0x11d0 [ 216.876837][ T7490] worker_thread+0xa47/0x1200 [ 216.881513][ T7490] kthread+0x28d/0x320 [ 216.885581][ T7490] ret_from_fork+0x1f/0x30 [ 216.890003][ T7490] [ 216.892319][ T7490] Second to last potentially related work creation: [ 216.898894][ T7490] kasan_save_stack+0x3b/0x60 [ 216.903591][ T7490] __kasan_record_aux_stack+0xb0/0xc0 [ 216.908964][ T7490] call_rcu+0x163/0xa10 [ 216.913132][ T7490] __cpu_map_entry_replace+0x74/0x170 [ 216.918504][ T7490] cpu_map_free+0xd7/0x1b0 [ 216.922929][ T7490] process_one_work+0x8a9/0x11d0 [ 216.927887][ T7490] worker_thread+0xa47/0x1200 [ 216.932572][ T7490] kthread+0x28d/0x320 [ 216.936636][ T7490] ret_from_fork+0x1f/0x30 [ 216.941069][ T7490] [ 216.943392][ T7490] The buggy address belongs to the object at ffff888077a5e600 [ 216.943392][ T7490] which belongs to the cache kmalloc-cg-256 of size 256 [ 216.957796][ T7490] The buggy address is located 24 bytes inside of [ 216.957796][ T7490] 256-byte region [ffff888077a5e600, ffff888077a5e700) [ 216.970985][ T7490] [ 216.973312][ T7490] The buggy address belongs to the physical page: [ 216.979725][ T7490] page:ffffea0001de9780 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77a5e [ 216.989873][ T7490] head:ffffea0001de9780 order:1 compound_mapcount:0 compound_pincount:0 [ 216.998192][ T7490] memcg:ffff88807d9e9901 [ 217.002422][ T7490] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 217.010415][ T7490] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017c42c80 [ 217.018998][ T7490] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88807d9e9901 [ 217.027571][ T7490] page dumped because: kasan: bad access detected [ 217.033982][ T7490] page_owner tracks the page as allocated [ 217.039691][ T7490] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4442, tgid 4440 (syz.3.34), ts 72281656565, free_ts 72274170030 [ 217.062092][ T7490] post_alloc_hook+0x18d/0x1b0 [ 217.066856][ T7490] get_page_from_freelist+0x3731/0x38d0 [ 217.072405][ T7490] __alloc_pages+0x28d/0x770 [ 217.076996][ T7490] alloc_slab_page+0x6a/0x150 [ 217.081676][ T7490] new_slab+0x84/0x2d0 [ 217.085769][ T7490] ___slab_alloc+0xc20/0x1270 [ 217.090459][ T7490] __kmem_cache_alloc_node+0x19f/0x260 [ 217.095925][ T7490] __kmalloc+0xa1/0x230 [ 217.100082][ T7490] __register_sysctl_table+0xdc/0x11e0 [ 217.105550][ T7490] setup_mq_sysctls+0x513/0x590 [ 217.110410][ T7490] copy_ipcs+0x321/0x530 [ 217.114662][ T7490] create_new_namespaces+0x221/0x7a0 [ 217.119960][ T7490] unshare_nsproxy_namespaces+0x11e/0x170 [ 217.125701][ T7490] ksys_unshare+0x531/0xa40 [ 217.130213][ T7490] __x64_sys_unshare+0x34/0x40 [ 217.134980][ T7490] do_syscall_64+0x3b/0xb0 [ 217.139408][ T7490] page last free stack trace: [ 217.144076][ T7490] free_unref_page_prepare+0x12a6/0x15b0 [ 217.149714][ T7490] free_unref_page+0x33/0x3e0 [ 217.154398][ T7490] qlist_free_all+0x76/0xe0 [ 217.158920][ T7490] kasan_quarantine_reduce+0x156/0x170 [ 217.164400][ T7490] __kasan_slab_alloc+0x1f/0x70 [ 217.169259][ T7490] slab_post_alloc_hook+0x52/0x3a0 [ 217.174383][ T7490] kmem_cache_alloc+0x10c/0x2d0 [ 217.179241][ T7490] getname_flags+0xb8/0x4f0 [ 217.183754][ T7490] __x64_sys_symlinkat+0x78/0xa0 [ 217.188712][ T7490] do_syscall_64+0x3b/0xb0 [ 217.193150][ T7490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.199065][ T7490] [ 217.201391][ T7490] Memory state around the buggy address: [ 217.207021][ T7490] ffff888077a5e500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 217.215086][ T7490] ffff888077a5e580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 217.223147][ T7490] >ffff888077a5e600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.231222][ T7490] ^ [ 217.236080][ T7490] ffff888077a5e680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.244145][ T7490] ffff888077a5e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 217.252203][ T7490] ================================================================== [ 217.260369][ T7490] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 217.263511][ T4414] tipc: Node number set to 2886997007 [ 217.272950][ T7490] CPU: 1 PID: 7490 Comm: syz.1.826 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 217.284161][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 217.294238][ T7490] Call Trace: [ 217.297559][ T7490] [ 217.300503][ T7490] dump_stack_lvl+0x1e3/0x2cb [ 217.305218][ T7490] ? nf_tcp_handle_invalid+0x642/0x642 [ 217.310713][ T7490] ? panic+0x764/0x764 [ 217.314810][ T7490] ? vscnprintf+0x59/0x80 [ 217.319166][ T7490] panic+0x318/0x764 [ 217.323080][ T7490] ? check_panic_on_warn+0x1d/0xa0 [ 217.328200][ T7490] ? memcpy_page_flushcache+0xfc/0xfc [ 217.333579][ T7490] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 217.339481][ T7490] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 217.345393][ T7490] ? _raw_spin_unlock+0x40/0x40 [ 217.350265][ T7490] ? print_report+0x4a3/0x4f0 [ 217.354949][ T7490] check_panic_on_warn+0x7e/0xa0 [ 217.359892][ T7490] ? cpu_map_generic_redirect+0x1c7/0x650 [ 217.365620][ T7490] end_report+0x66/0x110 [ 217.369867][ T7490] kasan_report+0x143/0x160 [ 217.374380][ T7490] ? cpu_map_generic_redirect+0x1c7/0x650 [ 217.380108][ T7490] cpu_map_generic_redirect+0x1c7/0x650 [ 217.385659][ T7490] ? cpu_map_enqueue+0x370/0x370 [ 217.390699][ T7490] xdp_do_generic_redirect+0x401/0x850 [ 217.396167][ T7490] do_xdp_generic+0x50b/0x6d0 [ 217.400844][ T7490] ? trace_xdp_exception+0x280/0x280 [ 217.406127][ T7490] ? tun_get_user+0x24ee/0x42d0 [ 217.411005][ T7490] ? tun_get_user+0x24ee/0x42d0 [ 217.415861][ T7490] tun_get_user+0x261e/0x42d0 [ 217.420549][ T7490] ? rcu_read_unlock+0xa0/0xa0 [ 217.425323][ T7490] ? tun_get+0x1e/0x2f0 [ 217.429480][ T7490] ? __lock_acquire+0x1f80/0x1f80 [ 217.434522][ T7490] ? tun_get+0x1e/0x2f0 [ 217.438680][ T7490] ? tun_get+0x27d/0x2f0 [ 217.442930][ T7490] tun_chr_write_iter+0x10c/0x1f0 [ 217.447964][ T7490] vfs_write+0x857/0xbc0 [ 217.452210][ T7490] ? file_end_write+0x250/0x250 [ 217.457067][ T7490] ? __fget_files+0x28/0x4a0 [ 217.461655][ T7490] ? __fget_files+0x435/0x4a0 [ 217.466334][ T7490] ? __fdget_pos+0x1db/0x360 [ 217.470920][ T7490] ? ksys_write+0x77/0x2c0 [ 217.475333][ T7490] ksys_write+0x19c/0x2c0 [ 217.479664][ T7490] ? print_irqtrace_events+0x210/0x210 [ 217.485131][ T7490] ? __ia32_sys_read+0x80/0x80 [ 217.489893][ T7490] ? syscall_enter_from_user_mode+0x2e/0x230 [ 217.495960][ T7490] ? lockdep_hardirqs_on+0x94/0x130 [ 217.501161][ T7490] ? syscall_enter_from_user_mode+0x2e/0x230 [ 217.507147][ T7490] do_syscall_64+0x3b/0xb0 [ 217.511572][ T7490] ? clear_bhb_loop+0x45/0xa0 [ 217.516252][ T7490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.522153][ T7490] RIP: 0033:0x7f02c5b847cf [ 217.526567][ T7490] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 217.546172][ T7490] RSP: 002b:00007f02c69cd000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 217.554584][ T7490] RAX: ffffffffffffffda RBX: 00007f02c5d75fa0 RCX: 00007f02c5b847cf [ 217.562552][ T7490] RDX: 0000000000000d86 RSI: 0000000020002340 RDI: 00000000000000c8 [ 217.570520][ T7490] RBP: 00007f02c5c01a20 R08: 0000000000000000 R09: 0000000000000000 [ 217.578492][ T7490] R10: 0000000000000d86 R11: 0000000000000293 R12: 0000000000000000 [ 217.586460][ T7490] R13: 0000000000000000 R14: 00007f02c5d75fa0 R15: 00007ffc0be67cf8 [ 217.594439][ T7490] [ 217.597768][ T7490] Kernel Offset: disabled [ 217.602089][ T7490] Rebooting in 86400 seconds..