last executing test programs: 15.574050004s ago: executing program 0 (id=616): r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r0, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) 14.87238621s ago: executing program 0 (id=617): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x2001142, &(0x7f0000000180)={[{@qnoenforce}, {@bsdgroups}, {@quota}, {@filestreams}, {@nogrpid}, {@allocsize={'allocsize', 0x3d, [0x30, 0x37, 0x6d]}}, {@largeio}]}, 0x4, 0x9706, &(0x7f0000012d80)="$eJzs3Am4pnMBuP/3zBj7MoZKSk1FtMiaJcrMYIZCskQ7spalpKJVi5Q2StoXyZqtLKFsrSR7CyWESpZIi22Y/3VmzjDGTfz6/f7Kfd/Xdc77vs/7PM/5vt/Ps5yjudpy8qaTBoO5BzMaP5i9M6+YMnXsZRvdfOg2Cx+xwgm3H/DAFZecMPI4ceRx0mAwGDXy9tCMZeMGJ540ajDH9OX3N9888w4tMBisOPJyZD+DVWc8LHDxzPWmzdbsAx26/9t+M76mt9Dwjxh+8s0D9jlkMBiMnWX7ocFgaO8HfVBpW06cMvl+q/vchq3GjDyf9WvOGV8LnDcYLHDKgI+PWdcdegw+0vDP3Pu5Z4zZ6DH42f9zbTlxyvqz+Q+fi6NHlq06fI7Pfg4am/04v3GprVYfmcLpx9tgMHyJe8C58j/RlhMnbzB46Ov84NA1ztlv2ozr5lyDGTeKeQaDwbwj19f5H2uX+s+aOGml6ffsma9H2Gcey3vTcXH064+7d/gmPRgMFhkMxq03815QVVVV/xtNnLTS2nD/n/vh7v/HH7/4Kd3/q6qq/ndbf+KklYbv9bPd/+d/uPv/7ouf+8EZ/+1/wqoztrr3sf0QVVVV9aiavD7e/8c+3P1/1bUv3KD7f1VV1f9um2w4/f4//2z3/0Uf7v7/muPWWGJkvZm/N9wzyy6HZvnfE+6eZfnoWZbfNcvyMbPsZ9b155xl+R2zLJ9r+D1Yf/xgMG7mvxecev/iceOH3xtZfucsyyfc/+90llxnluUTZ1k+eZblk0bGOrx8yizLp8yy/noPM9VVVVX/NW2y0uS1B7P8O/uRxYvNfJ/u/2efeuWyj9V4q6qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq6n+ze28+7YzBYDA0GAxGDQZTByPPZ30cTJs2bdrw6+PPuuiix2yg/x0NnXnFlKljL9vo5kO3WfiIFU64/YD7Z+l/tv/9T1D/ScP+cx81fjDYdfPHeij1GNT57y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uLuvfm0M0aOgVGDwdTByPO9Zz6euv+rXzuy6upbnHDrQfdvueSEnUaenXnFlKk7PQZjfwwaGv6sYy/b6OZDt1n4iBVOuP2Ax8HZ87//Ceo/abr/TkODwcj5PXb4XN5o4iabLTMYDA669YQtVhnc995qw++tMW70YPT0TZeZ/n3dJXnHe68343HC8LdF79vH8dP3v/60g0cPzTaIWXrxmdccuuOWt688++PSD/05Rs18cshVJ982bdq0aQ9YONLcD7HxzP3P/Cyzn+cjY19meOzL7bHLW5Z7217vWnanXbbeYbsdttt1hZVWW3mVFVdYZfUXLrf9Tjtvt/yM7w8xZ+Onf1/7kczZ/LPP2c0TZ52z2T/bQ83Z+Iefs+l7nPquoc1mztkcj3LO1n74ORu/08gPWnLCmMFW06dmaDBYcp0xgz2HX6ww12Cw5Loj6y42vO6a40YNBvvf/0GHn8113zE4tPfwOltO3nTS/SN78Cd80HX6ASsuOWHkceLI46QZQxw/uP9QHDc48aRRw3PxgGmeb555hxYYDFYceTmyn8HqI+9+Y+Z602Zr9oEO3f9tvxlf01toeCfDT960/GmXD5+Ls23//6L/o+v/g7xWG7pvooZGvkbWmeE1ccr69/+s6dMwPHejR5atOmwy+5z93+xB4x0/x2Dsw4x38vqTVhpePNv8z9wEj69bljrn3TOOrQmrztjq3v9jFBrv/A8z3vUn4njnf7jxHvWeC06asav/a+Od7Vq3wfTvEx7JtW7w8Ne60bSD7c5fYvZr3cseeogPOI9nztFcs630UNe6PT+/4t7D+5/w8Ne6DYbHPuYB17pRg8GSa8+81g1f+CaPGew//GLF4RdTxgyOGH6x0vQX8wzOGn7xgjfutvO2wwvWmzknyw/vd8K4oenu56x6w9LTPjtt2jojY5kw7oFjHTk+xs96P584bsZkztx25n6HV5253+ufNOO9ySP7nfgo9jtzWxrvrQvNeG/KyH4nzbbfMQ+z35nbPuh8WGbovgvXQ1xvJs92vRn5G2fmj3vA15wzvhY4bzBY4BTynW3df3vNpPN37ocZ78RJK609PL7Zzt/7Dkc6fy+YctnwvWKBwWCwyGAwbr2ZY3+UDT3UeOd4+PFOgvHO8XDjveTIXTb8vzDewSzjfcBxtuUmM46V9UaOsymP4vidue3s17Ex09+dcdlf75Fcx8Y/6Dr2gdGjZpvsWXqo39m2hfVnPF/s/t9zrzj28JlzP2a2/f6739lm+SxDcB0bO9vf86PWu3owRHO+91FrXjh04MPP+ZjBA/+2mDnnM7d9uDmf8kjm/KkPP+eP9PfkZZ414/0xs41/1jnf+BNP+fjMOZ9ztv3+uzmf8vD3jgfP+YTBGJrz5e+aMW8Pdz19qDmfue3MOR/+iGuMm2Ow7vA9a2TOJz+SOV/s/85xPi+sP+P5dvctOv3QE145c85nn+N/N+eTH+2cj7/vOF9y+nvPHDWYc87BnlvvscfuK8z4PvPlijO+87XojitmzPPD3Usfymjmtg93XqzzSIzGPiKjoX9ntPgcD2V0/6n1rd12f+L/6bVonUdrNOBr0WWHz5i3h/u96KHmfOa2dB9cdJbtZ/87dJMNp//ePf9s98GZm+B98PRTN9h35i5HNrtntmHOvK/ePcvy0bMsv2uW5WNm2c+s6885y/I7Zlk+/BHmnGX9mazjh//mHVk+9f7Vxw3/8jR+ZPmdsyyfcP+2S64zy/KJsyyfPMvySfcfGktOmWX5lFnWX2/wKJv536R3mv0iX4+0/vuvu/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cffefNoZI8fAqMFg6mDG86GRx8HeQxvftNbw42AwGLPqMdM2fqzH+xg3dOYVU6aOvWyjmw/dZuEjVjjh9gMeB2fP//4nqP+k6f47DQ0GI+f32J0Gg8FGEzfZbJnBYLDxtGNWHTW4773Fht9bc9yowWD/oQfsYK771hnae3idLSdvOmkwmHtkjfEP+qEPOo8esOKSE0YeJ448TppxfRp/4nvvO17HDU48adRgjunL72++eeYdWmAwWHHk5ch+BqvOeFjg4pnrTZut2Qc6dP+3/WZ8TW+h4R8x/GTPHaY8bXiuZtv+v6aZ1+qdRv3bVTv/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u4enX9Hy+OtRN3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y9/do/ef5//JOOqxqfPfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yu79+bTzhg5BkYNBlMHM54P7T3yOBg67sTnjBwiY/a69LCDH+vxPsYNnXnFlKljL9vo5kO3WfiIFU64/YDHwdnzv/8J6j9puv9OQ4PByPk9dqfBYLDRxE02W2YwGBx82KV7jRrc995iw++tOW7UYLD/0AN2MNd96wztPbzOlpM3nTQYzD2yxvgH/dAHnUcPWHHJCSOPE0ceJ824Po0f3H+8jhuceNKowRzTl9/ffPPMO7TAYLDiyMuR/QxWnfGwwMUz15s2W7MPdOj+b/vN+JreQsM/YvjJPvNfcdzwXM22/X9NM6/VO436t6t2/rvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL390j8R/9/8M46rGp899d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uLuvfm0M0aOgVGDwdTBjOejRh6H9r7u2vdtNvw4/Hrh9fa94rEe72Pc0JlXTJk69rKNbj50m4WPWOGE2w94HJw9//ufoP6Thv3nPmr8YLDr5o/1UOoxqPPfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8nf3KPyH9v5/OZB6TOr8d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yF3fvzaedMfJ01P1LR+3dcYENnXnFlKljL9vo5kO3WfiIFU64/YDHekD/aQ/h/4H8MYv/B/PHLP4fyh+z+H84f+wB/qMHj1v/ffLHLOf/R/LHLP775o9Z/D+aP2bx/1j+mMV/v/wxi//H88cs/p/IH7P4fzJ/zOL/qfwxi/+n88cs/vvnj1n8D8gfs/h/Jn/M4v/Z/DGL/4H5Yxb/z+WPWfwPyh+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/wfljFv9v5o9Z/A/JH7P4fyt/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4fzt/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/L+TP2bx/27+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/lz9m8T8lf8zif2r+mMX/tPwxi//388cs/j/IH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv+f5o9Z/H+WP2bxPyd/zOJ/bv6Yxf/n+WMW//Pyxyz+v8gfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfx/mT9m8f9V/pjF/9f5Yxb/3+SPWfwvyx+z+F+eP2bx/23+mMX/d/ljFv8r8scs/r/PH7P4X5k/ZvG/Kn/M4n91/pjF/w/5Yxb/a/LHLP7X5o9Z/K/LH7P4/zF/zOL/p/wxi/+f88cs/tfnj1n8/5I/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv+/5o9Z/G/JH7P435o/ZvH/W/6Yxf+2/DGL/9/zxyz+/8gfs/j/M3/M4v+v/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvGfmj9m8b8nf8zif2/+mMV/Wv6YxH/0IH/M4j+UP2bxH5U/ZvEfnT9m8Z8jf8ziPyZ/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/2Pwxi//C+WMW/3H5Yxb/RfLHLP6L5o9Z/J+QP2bxf2L+mMX/SfljFv/F8scs/k/OH7P4L54/ZvF/Sv6Yxf+p+WMW/yXyxyz+T8sfs/g/PX/M4j8+f8zi/4z8MYv/M/N/UHOMPBr8n5U/Nuv5P/Zx7L9k/pjl+r9U/pjF/9n5Yxb/pfPHLP7L5I9Z/J+TP2bxf27+mMX/efljFv/n549Z/JfNH7P4vyB/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4vzB/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP4vyh+z+K+RP2bxXzN/zOL/4vwxi/9L8scs/mvlj1n8J+SPWfwn5o9Z/Cflj1n8184fs/ivkz9m8V83f8ziPzl/zOI/ReU/+hGvafFfT+X/yLP4r58/ZvF/af6Yxf9l+WMW/w3yxyz+G+aPWfw3yh+z+L88f8ziv3H+mMX/FfljFv9N8scs/pvmj1n8N8sfs/hvnj9m8X9l/pjFf4v8MYv/lvljFv9X5Y9Z/F+dP2bxf03+mMX/tfljFv/X5Y9Z/F+fP2bxf0P+mMV/q/wxi//W+WMW/23yxyz+b8wfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+b8ofs/i/OX/M4r9z/pjFf5f8MYv/rvljFv/d8scs/m/JH7P4vzV/zOK/e/6Yxf9t+WMW/z3yxyz+b88fs/i/I3/M4v/O/DGL/575Yxb/vfLHLP7vyh+z+L87f8zi/578MYv/e/PHLP7vyx+z+L8/f8ziv3f+mMX/A/ljFv8P5o9Z/D+UP2bx/3D+mMV/n/wxi/9H8scs/vvmj1n8P5o/ZvH/WP6YxX+//DGL/8fzxyz+n8gfs/h/Mn/M4v+p/DGL/6fzxyz+++ePWfwPyB+z+H8mf8zi/9n8MYv/gfljFv/P5Y9Z/A/KH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi//B+WMW/2/mj1n8D8kfs/h/K3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/h/O3/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8v5M/ZvH/bv6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/L+XP2bxPyV/zOJ/av6Yxf+0/DGL//fzxyz+P8gfs/ifnj9m8T8j/+kdOPqBry3+Z+aPWfzPyh+z+J+dP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bx/2n+mMX/Z/ljFv9z8scs/ufmj1n8f54/ZvE/L3/M4v+L/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/5f5Yxb/X+WPWfx/nT9m8f9N/pjF/7L8MYv/5fljFv/f5o9Z/H+XP2bxvyJ/zOL/+/wxi/+V+WMW/6vyxyz+V+ePWfz/kD9m8b8mf8zif23+mMX/uvwxi/8f88cs/n/KH7P4/zl/zOJ/ff6Yxf8v+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bx/2v+mMX/lvwxi/+t+WMW/7/lj1n8b8sfs/j/PX/M4v+P/DGL/z/zxyz+/8ofs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/6n5Yxb/e/LHLP735o9Z/Kflj0n85xjkj1n8h/LHLP6j8scs/qPzxyz+c+SPWfzH5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8R+bP2bxXzh/zOI/Ln/M4r9I/pjFf9H8MYv/E/LHLP5PzB+z+D8pf8ziv1j+mMX/yfljFv/F88cs/k/JH7P4PzV/zOK/RP6Yxf9p+WMW/6fnj1n8x+ePWfyfkT9m8X9m/pjF/1n5Yxb/JfPHLP5L5Y9Z/J+dP2bxXzp/zOK/TP6Yxf85+WMW/+fmj1n8n5c/ZvF/fv6YxX/Z/DGL/wvyxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/wvzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/ovwxi/8a+WMW/zXzxyz+L84fs/i/JH/M4r9W/pjFf0L+mMV/Yv6YxX9S/pjFf+38MYv/OvljFv9188cs/pPzxyz+U/LHLP7r5Y9Z/NfPH7P4vzR/zOL/svwxi/8GQv+1HsE6Fv8Nhf6PJIv/RvljFv+X549Z/DfOH7P4v2JwUf6QxX+Tzn/M4r9p/pjFf7P8MYv/5vljFv9X5o9Z/LfIH7P4b5k/ZvF/Vf6Yxf/V+WMW/9fkj1n8X5s/ZvF/Xf6Yxf/1+WMW/zfkj1n8t8ofs/hvnT9m8d8mf8zi/8b8MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/6b8MYv/m/PHLP47549Z/HfJH7P475o/ZvHfLX/M4v+W/DGL/1vzxyz+u+ePWfzflj9m8d8jf8zi//b8MYv/O/LHLP7vzB+z+O+ZP2bx3yt/zOL/rvwxi/+788cs/u/JH7P4vzd/zOL/vvwxi//788cs/nvnj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n898kfs/h/JH/M4r9v/pjF/6P5Yxb/j+WPWfz3yx+z+H88f8zi/4n8MYv/J/PHLP6fyh+z+H86f8ziv3/+mMX/gPwxi/9n8scs/p/NH7P4H5g/ZvH/XP6Yxf+g/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/gfnD9m8f9m/pjF/5D8MYv/t/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/t/PHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/zv5Yxb/7+aPWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf97+WMW/1Pyxyz+p+aPWfxPyx+z+H8/f8zi/4P8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8f9p/pjF/2f5Yxb/c/LHLP7n5o9Z/H+eP2bxPy9/zOL/i/wxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+X+WMW/1/lj1n8f50/ZvH/Tf6Yxf+y/DGL/+X5Yxb/3+aPWfx/lz9m8b8if8zi//v8MYv/lfljFv+r8scs/lfnj1n8/5A/ZvG/Jn/M4n9t/pjF/7r8MYv/H/PHLP5/yh+z+P85f8zif33+mMX/L/ljFv8b8scs/jfmj1n8b8ofs/jfnD9m8f9r/pjF/5b8MYv/rfljFv+/5Y9Z/G/LH7P4/z1/zOL/j/wxi/8/88cs/v/KH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv+p+WMW/3vyxyz+9+aPWfyn5Y9J/McM8scs/kP5Yxb/UfljFv/R+WMW/znyxyz+Y/LHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/iPzR+z+C+cP2bxH5c/ZvFfJH/M4r9o/pjF/wn5Yxb/J+aPWfyflD9m8V8sf8zi/+T8MYv/4vljFv+n5I9Z/J+aP2bxXyJ/zOL/tPwxi//T88cs/uPzxyz+z8gfs/g/M3/M4v+s/DGL/5L5Yxb/pfLHLP7Pzh+z+C+dP2bxXyZ/zOL/nPwxi/9z88cs/s/LH7P4Pz9/zOK/bP6Yxf8F+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6Yxf+F+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxf1H+mMV/jfwxi/+a+WMW/xfnj1n8X5I/ZvFfK3/M4j8hf8ziPzF/zOI/KX/M4r92/pjFf538MYv/uvljFv/J+WMW/yn5Yxb/9fLHLP7r549Z/F+aP2bxf1n+mMV/g/wxi/+G+WMW/43yxyz+L88fs/hvnD9m8X9F/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8X5k/ZvHfIn/M4r9l/pjF/1X5Yxb/V+ePWfxfkz9m8X9t/pjF/3X5Yxb/1+ePWfzfkD9m8d8qf8ziv3X+mMV/m/wxi/8b88cs/tvmj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/+b8scs/m/OH7P475w/ZvHfJX/M4r9r/pjFf7f8MYv/W/LHLP5vzR+z+O+eP2bxf1v+mMV/j/wxi//b88cs/u/IH7P4vzN/zOK/Z/6YxX+v/DGL/7vyxyz+784fs/i/J3/M4v/e/DGL//vyxyz+788fs/jvnT9m8f9A/pjF/4P5Yxb/D+WPWfw/nD9m8d8nf8zi/5H8MYv/vvljFv+P5o9Z/D+WP2bx3y9/zOL/8fwxi/8n8scs/p/MH7P4fyp/zOL/6fwxi//++WMW/wPyxyz+n8kfs/h/Nn/M4n9g/pjF/3P5Yxb/g/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif3D+mMX/m/ljFv9D8scs/t/KH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/t+W+z/UZ7f4Hy33f6gs/sfkj1n8j80fs/gflz9m8T8+f8zi/538MYv/d/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4v+9/DGL/yn5Yxb/U/PHLP6n5Y9Z/L+fP2bx/0H+mMX/9IfyH/X/07j+S7P4n9H5j1n8z8wfs/iflT9m8T87f8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zi/9P8MYv/z/LHLP7n5I9Z/M/NH7P4/zx/zOJ/Xv6Yxf8X+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/y8f0t/9D8At/r/q/Mcs/r/OH7P4/yZ/zOJ/Wf6Yxf/y/DGL/2/zxyz+v8sfs/hfkT9m8f99/pjF/8r8MYv/VfljFv+r88cs/n/IH7P4X5M/ZvG/Nn/M4n9d/pjF/4/5Yxb/P+WPWfz/nD9m8b8+f8zi/5f8MYv/DfljFv8b88cs/jflj1n8b84fs/j/NX/M4n9L/pjF/9b8MYv/3/LHLP635Y9Z/P+eP2bx/0f+mMX/n/ljFv9/5Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/1Pwxi/89+WMW/3vzxyz+0/LHJP5zDvLHLP5D+WMW/1H5Yxb/0fljFv858scs/mPyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4j80fs/gvnD9m8R+XP2bxXyR/zOK/aP6Yxf8J+WMW/yfmj1n8n5Q/ZvFfLH/M4v/k/DGL/+L5Yxb/p+SPWfyfmj9m8V8if8zi/7T8MYv/0/PHLP7j88cs/s/IH7P4PzN/zOL/rPwxi/+S+WMW/6Xyxyz+z84fs/gvnT9m8V8mf8zi/5z8MYv/c/PHLP7Pyx+z+D8/f8ziv2z+mMX/BfljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMX/hfljFv9V8scs/qvmj1n8V8sfs/ivnj9m8X9R/pjFf438MYv/mvljFv8X549Z/F+SP2bxXyt/zOI/IX/M4j8xf8ziPyl/zOK/dv6YxX+d/DGL/7r5Yxb/yfljFv8p+WMW//Xyxyz+6+ePWfxfmj9m8X9Z/pjFf4P8MYv/hvljFv+N8scs/i/PH7P4b5w/ZvF/Rf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/F+ZP2bx3yJ/zOK/Zf6Yxf9V+WMW/1fnj1n8X5M/ZvF/bf6Yxf91+WMW/9fnj1n835A/ZvHfKn/M4r91/pjFf5v8MYv/G/PHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjFf6f8MYv/m/LHLP5vzh+z+O+cP2bx3yV/zOK/a/6YxX+3/DGL/1vyxyz+b80fs/jvnj9m8X9b/pjFf4/8MYv/2/PHLP7vyB+z+L8zf8ziv2f+mMV/r/wxi/+78scs/u/OH7P4vyd/zOL/3vwxi//78scs/u/PH7P4750/ZvH/QP6Yxf+D+WMW/w/lj1n8P5w/ZvHfJ3/M4v+R/DGL/775Yxb/j+aPWfw/lj9m8d8vf8zi//H8MYv/J/LHLP6fzB+z+H8qf8zi/+n8MYv//vljFv8D8scs/p/JH7P4fzZ/zOJ/YP6Yxf9z+WMW/4Pyxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9w/pjF/5v5Yxb/Q/LHLP7fyh+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP7fzh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/7+SPWfy/mz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/+/lj1n8T8kfs/ifmj9m8T8tf8zi//38MYv/D/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/4f5Yxb/H+WPWfx/nD9m8f9J/pjF/6f5Yxb/n+WPWfzPyR+z+J+bP2bx/3n+mMX/vPwxi/8v8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/1/mj1n8f5U/ZvH/df6Yxf83j9V4/suz+F/W+Y9Z/C/PH7P4/zZ/zOL/u/wxi/8V+WMW/9/nj1n8r8wfs/hflT9m8b86f8zi/4f8MYv/NfljFv9r88cs/tflj1n8/5g/ZvH/U/6Yxf/P+WMW/+vzxyz+f8kfs/jfkD9m8b8xf8zif1P+mMX/5vwxi/9f88cs/rfkj1n8b7X6z/Pwb1v8/2b1/zdZ/G/LH7P4/z1/zOL/j/wxi/8/88cs/v/KH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv+p+WMW/3vyxyz+9+aPWfyn5Y9J/Oca5I9Z/Ifyxyz+o/LHLP6j88cs/nPkj1n8x+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvEfmz9m8V84f8ziPy5/zOK/SP6YxX/R/DGL/xPyxyz+T8wfs/g/KX/M4r9Y/pjF/8n5Yxb/xfPHLP5PyR+z+D81f8ziv0T+mMX/afljFv+n549Z/Mfnj1n8n5E/ZvF/Zv6Yxf9Z+WMW/yXzxyz+S+WPWfyfnT9m8V86f8ziv0z+mMX/OfljFv/n5o9Z/J+XP2bxf37+mMV/2fwxi/8L8scs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8L88cs/qvkj1n8V80fs/ivlj9m8V89f8zi/6L8MYv/GvljFv8188cs/i/OH7P4vyR/zOK/Vv6YxX9C/pjFf2L+mMV/Uv6YxX/t/DGL/zr5Yxb/dfPHLP6T88cs/lPyxyz+6+WPWfzXzx+z+L80f8zi/7L8MYv/BvljFv8N88cs/hvlj1n8X54/ZvHfOH/M4v+K/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4vzJ/zOK/Rf6YxX/L/DGL/6vyxyz+r84fs/i/Jn/M4v/a/DGL/+vyxyz+r88fs/i/IX/M4r9V/pjFf+v8MYv/NvljFv835o9Z/LfNH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv835Y9Z/N+cP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/t+SPWfzfmj9m8d89f8zi/7b8MYv/HvljFv+3549Z/N+RP2bxf2f+mMV/z/wxi/9e+WMW/3flj1n8350/ZvF/T/6Yxf+9+WMW//flj1n8358/ZvHfO3/M4v+B/DGL/wfzxyz+H8ofs/h/OH/M4r9P/pjF/yP5Yxb/ffPHLP4fzR+z+H8sf8ziv1/+mMX/4/ljFv9P5I9Z/D+ZP2bx/1T+mMX/0/ljFv/988cs/gfkj1n8P5M/ZvH/bP6Yxf/A/DGL/+fyxyz+B+WPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjF/+D8MYv/N/PHLP6H5I9Z/L+VP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/L+dP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fyR+z+H83f8zif0L+mMX/xPwxi/9J+WMW/5Nn+O/4WA3rvzWL//c6/zGL/yn5Yxb/U/PHLP6n5Y9Z/L+fP2bx/0H+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+P80f8zi/7P8MYv/OfljFv9z88cs/j/PH7P4n5c/ZvH/Rf6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4v/L/DGL/6/yxyz+v84fs/j/Jn/M4n9Z/pjF//L8MYv/b/PHLP6/yx+z+F+RP2bx/33+mMX/yvwxi/9V+WMW/6vzxyz+f8gfs/hfkz9m8b82f8zif13+mMX/j/ljFv8/5Y9Z/P+cP2bxvz5/zOL/l/wxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+P81f8zif0v+mMX/1vwxi//f8scs/rflj1n8/54/ZvH/R/6Yxf+f+WMW/3/lj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi//U/DGL/z35Yxb/e/PHLP7T8sck/nMP8scs/kP5Yxb/UfljFv/R+WMW/znyxyz+Y/LHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/iPzR+z+C+cP2bxH5c/ZvFfJH/M4r9o/pjF/wn5Yxb/J+aPWfyflD9m8V8sf8zi/+T8MYv/4vljFv+n5I9Z/J+aP2bxXyJ/zOL/tPwxi//T88cs/uPzxyz+z8gfs/g/M3/M4v+s/DGL/5L5Yxb/pfLHLP7Pzh+z+C+dP2bxXyZ/zOL/nPwxi/9z88cs/s/LH7P4Pz9/zOK/bP6Yxf8F+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6Yxf+F+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxf1H+mMV/jfwxi/+a+WMW/xfnj1n8X5I/ZvFfK3/M4j8hf8ziPzF/zOI/KX/M4r92/pjFf538MYv/uvljFv/J+WMW/yn5Yxb/9fLHLP7r549Z/F+aP2bxf1n+mMV/g/wxi/+G+WMW/43yxyz+L88fs/hvnD9m8X9F/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8X5k/ZvHfIn/M4r9l/pjF/1X5Yxb/V+ePWfxfkz9m8X9t/pjF/3X5Yxb/1+ePWfzfkD9m8d8qf8ziv3X+mMV/m/wxi/8b88cs/tvmj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/+b8scs/m/OH7P475w/ZvHfJX/M4r9r/pjFf7f8MYv/W/LHLP5vzR+z+O+eP2bxf1v+mMV/j/wxi//b88cs/u/IH7P4vzN/zOK/Z/6YxX+v/DGL/7vyxyz+784fs/i/J3/M4v/e/DGL//s8/gs+mpUt/u/3+D+qLP57549Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/PfJH7P4fyR/zOK/b/6Yxf+j+WMW/4/lj1n898sfs/h/PH/M4v+J/DGL/yfzxyz+n8ofs/h/On/M4r9//pjF/4D8MYv/Z/LHLP6fzR+z+B+YP2bx/1z+mMX/oPwxi//n88cs/l/IH7P4fzF/zOL/pfynN3q21xb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8T84f8zi/838MYv/IfljFv9v5Y9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv9v549Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/d/LHLP7fzR+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL//fyxyz+p+SPWfxPzR+z+J+WP2bx/37+mMX/B/ljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zi/9P8MYv/z/LHLP7n5I9Z/M/NH7P4/zx/zOJ/Xv6Yxf8X+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/y/zxyz+v8ofs/j/On/M4v+b/DGL/2X5Yxb/y/PHLP6/zR+z+P8uf8zif0X+mMX/9/ljFv8r88cs/lflj1n8r84fs/j/IX/M4n9N/pjF/9r8MYv/dfljFv8/5o9Z/P+UP2bx/3P+mMX/+vwxi/9f8scs/jfkj1n8b8wfs/jflD9m8b85f8zi/9f8MYv/LfljFv9b88cs/n/LH7P435Y/ZvH/e/6Yxf8f+WMW/3/mj1n8/5U/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+7Z/iPeayG9d+axX9q5z9m8b8nf8zif2/+mMV/Wv6YxH+eQf6YxX8of8ziPyp/zOI/On/M4j9H/ths/kuPeqwH9J/2EP5j8scs5/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP5j88cs/gvnj1n8x+WPWfwXyR+z+C+aP2bxf0L+mMX/ifljFv8n5Y9Z/BfLH7P4Pzl/zOK/eP6Yxf8p+WMW/6fmj1n8l8gfs/g/LX/M4v/0/DGL//j8MYv/M/LHLP7PzB+z+D8rf8ziv2T+mMV/qfwxi/+z88cs/kvnj1n8l8kfs/g/J3/M4v/c/DGL//Pyxyz+z88fs/gvmz9m8X9B/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8X9h/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8X5Q/ZvFfI3/M4r9m/pjF/8X5Yxb/l+SPWfzXyh+z+E/IH7P4T8wfs/hPyh+z+K+dP2bxXyd/zOK/bv6YxX9y/pjFf0r+mMV/vfwxi//6+WMW/5fmj1n8X5Y/ZvHfIH/M4r9h/pjFf6P8MYv/y/PHLP4b549Z/F+RP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/V+aPWfy3yB+z+G+ZP2bxf1X+mMX/1fljFv/X5I9Z/F+bP2bxf13+mMX/9fljFv835I9Z/LfKH7P4b50/ZvHfJn/M4v/G/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvHfKX/M4v+m/DGL/5vzxyz+O+ePWfx3yR+z+O+aP2bx3y1/zOL/lvwxi/9b88cs/rvnj1n835Y/ZvHfI3/M4v/2/DGL/zvyxyz+78wfs/jvmT9m8d8rf8zi/678MYv/u/PHLP7vyR+z+L83f8zi/778MYv/+/PHLP57549Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/PfJH7P4fyR/zOK/b/6Yxf+j+WMW/4/lj1n898sfs/h/PH/M4v+J/DGL/yfzxyz+n8ofs/h/On/M4r9//pjF/4D8MYv/Z/LHLP6fzR+z+B+YP2bx/1z+mMX/oPwxi//n88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4H5w/ZvH/Zv6Yxf+Q/DGL/7fyxyz+h+aPWfwPyx+z+B+ePzar/2mPY/8j8scs5/+R+WMW/6Pyxyz+384fs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/+/kj1n8v5s/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv/v5Y9Z/E/JH7P4n5o/ZvE/LX/M4v/9/DGL/w/yxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6Yxf+n+WMW/5/lj1n8z8kfs/ifmz9m8f95/pjF/7z8MYv/L/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv9f5o9Z/H+VP2bx/3X+mMX/N/ljFv/L8scs/pfnj1n8f5s/ZvH/Xf6Yxf+K/DGL/+/zxx7oP+axHs5/3kP4X5k/Zjn/r8ofs/hfnT9m8f9D/pjF/5r8MYv/tfljFv/r8scs/n/MH7P4/yl/zOL/5/wxi//1+WMW/7/kj1n8b8gfs/jfmD9m8b8pf2yG/6jHvf/N+WOW8/+v+WMW/1vyxyz+t+aPWfz/lj9m8b8tf8zi//f8MYv/P/LHLP7/zB+z+P8rf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfyn5o9Z/O/JH7P435s/ZvGflj8m8Z93kD9m8R/KH7P4j8ofs/iPzh+z+M+RP2bxH5M/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588ce//5z3/dW/g/u8e8/vXnnzx+z+C+QP2bxXzB/zOK/UP6YxX9s/pjFf+H8MYv/uPwxi/8i+WMW/0Xzxyz+T8gfs/g/MX/M4v+k/DGL/2L5Yxb/J+ePWfwXzx+z+D8lf8zi/9T8MYv/EvljFv+n5Y9Z/J+eP2bxH58/ZvF/Rv6Yxf+Z+WMW/2flj1n8l8wfs/gvlT9m8X92/pjFf+n8MYv/MvljFv/n5I9Z/J+bP2bxf17+mMX/+fljFv9l88cs/i/IH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/i/MH7P4r6L0n/b+f7eGxX9Vpf+/z+K/Wv6YxX/1/DGL/4vyxyz+a+SPWfzXzB+z+L84f8zi/5L8MYv/WvljFv8J+WMW/4n5Yxb/SfljFv+188cs/uvkj1n8180fs/hPzh+z+E/JH7P4r5c/ZvFfP3/M4v/S/DGL/8vyxyz+G+SPWfw3zB+z+G+UP2bxf3n+mMV/4/wxi/8r8scs/pvkj1n8N80fs/hvlj9m8d88f8zi/8r8MYv/FvljFv8t88cs/q/KH7P4vzp/zOL/mvwxi/9r88cs/q/LH7P4vz5/zOL/hvwxi/9W+WMW/63zxyz+2+SPWfzfmD9m8d82f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+O+WPWfzflD9m8X9z/pjFf+f8MYv/LvljFv9d88cs/rvlj1n835I/ZvF/a/6YxX/3/DGL/9vyxyz+e+SPWfzfnj9m8X9H/pjF/535Yxb/PfPHLP575Y9Z/N+VP2bxf3f+mMX/PfljFv/35o9Z/N+XP2bxf3/+mMV/7/wxi/8H8scs/h/MH7P4fyh/zOL/4fwxi/8++WMW/4/kj1n8980fs/h/NH/M4v+x/DGL/375Yxb/j+ePWfw/kT9m8f9k/pjF/1P5Yxb/T+ePWfz3zx+z+B+QP2bx/0z+mMX/s/ljFv8D88cs/p/LH7P4H5Q/ZvH/fP6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/4Pzxyz+38wfs/gfkj9m8f9W/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8f92/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/J3/M4v/d/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4fy9/zOJ/Sv6Yxf/U/DGL/2n5Yxb/7+ePWfx/kD9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+P80fs/j/LH/M4n9O/pjF/9z8MYv/z/PHLP7n5Y9Z/H+RP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4/zJ/zOL/q/wxi/+v88cs/r/JH7P4X5Y/ZvG/PH/M4v/bWf2HOhhmZvH/XeSYxf+K/DGL/+/zxyz+V+aPWfyvyh+z+F+dP2bx/0P+mMX/mvwxi/+1+WMW/+vyxyz+f8wfs/j/KX/M4v/n/DGL//X5Yxb/v+SPWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+v+WMW/1vyxyz+t+aPWfz/lj9m8b8tf8zi//f8MYv/P/LHLP7/zB+z+P8rf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfyn5o9Z/O/JH7P435s/ZvGflj8m8Z9vkD9m8e//8o2z+I/KH7P4j84fs/jPkT9m8R+TP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjFf2z+mMV/4fwxi/+4/DGL/yL5Yxb/RfPHLP5PyB+z+D8xf8zi/6T8MYv/YvljFv8n549Z/BfPH7P4PyV/zOL/1Pwxi/8S+WMW/6flj1n8n54/ZvEfnz9m8X9G/pjF/5n5Yxb/Z+WPWfyXzB+z+C+VP2bxf3b+mMV/6fwxi/8y+WMW/+fkj1n8n5s/ZvF/Xv6Yxf/5+WMW/2Xzxyz+L8gfs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+L8wfs/ivkj9m8V81f8ziv1r+mMV/9fwxi/+L8scs/mvkj1n818wfs/i/OH/M4v+S/DGL/1r5Yxb/CfljFv+J+WMW/0n5Yxb/tfPHLP7r5I9Z/NfNH7P4T84fs/hPyR+z+K+XP2bxXz9/zOL/0vwxi//L8scs/hvkj1n8N8wfs/hvlD9m8X95/pjFf+P8MYv/K/LHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/s8ew/7f33LZ3vlfljj2f/Wc//LfLHLP5b5o9Z/F+VP2bxf3X+mMX/NfljFv/X5o9Z/F+XP2bxf33+mMX/DfljFv+t8scs/lvnj1n8t8kfs/i/MX/M4r9t/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/i/KX/M4v/m/DGL/875Yxb/XfLHLP675o9Z/HfLH7P4vyV/zOL/1vwxi//u+WMW/7flj1n898gfs/i/PX/M4v+O/DGL/zvzxyz+e+aPWfz3yh+z+L8rf8zi/+78MYv/e/LHLP7vzR+z+L8vf8zi//78MYv/3vljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv998scs/h/JH7P475s/ZvH/aP6Yxf9j+WMW//3yxyz+H88fs/h/In/M4v/J/DGL/6fyxyz+n84fs/jvnz9m8T8gf8zi/5n8MYv/Z/PHLP4H5o9Z/D+XP2bxPyh/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/gfnj1n8v5k/ZvE/JH/M4v+t/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4v/t/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvH/Tv6Yxf+7+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bx/17+mMX/lPwxi/+p+WMW/9Pyxyz+388fs/j/IH/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8f5o/ZvH/Wf6Yxf+c/DGL/7n5Yxb/n+ePWfzPyx+z+P8if8zif37+mMX/gvwxi/+F+WMW/4t8/vM8kpUs/hf7/B9RFv9L8scs/pfmj1n8f5k/ZvH/Vf6Yxf/X+WMW/9/kj1n8L8sfs/hfnj9m8f9t/pjF/3f5Yxb/K/LHLP6/zx+z+F+ZP2bxvyp/zOJ/df6Yxf8P+WMW/2vyxyz+1+aPWfyvyx+z+P8xf8zi/6f8MYv/n/PHLP7X549Z/P+SP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/v+aPWfxvyR+z+N+aP2bx/1v+mMX/tvwxi//f88cs/v/IH7P4/zN/zOL/r/wxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxn5o/ZvG/J3/M4n9v/pjFf1r+mMR//kH+mMV/KH/M4j8qf8ziPzp/zOI/R/6YxX9M/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/7H5Yxb/hfPHLP7j8scs/ovkj1n8F80fs/g/IX/M4v/E/DGL/5Pyxyz+i+WPWfyfnD9m8V88f8zi/5T8MYv/U/PHLP5L5I9Z/J+WP2bxf3r+mMV/fP6Yxf8Z+WMW/2fmj1n8n5U/ZvFfMn/M4r9U/pjF/9n5Yxb/pfPHLP7L5I9Z/J+TP2bxf27+mMX/efljFv/n549Z/JfNH7P4vyB/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4vzB/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP4vyh+z+K+RP2bxXzN/zOL/4vwxi/9L8scs/mvlj1n8J+SPWfwn5o9Z/Cflj1n8184fs/ivkz9m8V83f8ziPzl/zOI/JX/M4r9e/pjFf/38MYv/S/PHLP4vyx+z+G+QP2bx3zB/zOK/Uf6Yxf/l+WMW/43zxyz+r8gfs/hvkj9m8d80f8ziv1n+mMV/8/wxi/8r88cs/lvkj1n8t8wfs/i/Kn/M4v/q/DGL/2vyxyz+r80fs/i/Ln/M4v/6/DGL/xvyxyz+W+WPWfy3zh+z+G+TP2bxf2P+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bxf1P+mMX/zfljFv+d88cs/rvkj1n8d80fs/jvlj92n//2xz2u/d+SP2Y5/9+aP2bx3z1/zOL/tvwxi/8e+WMW/7fnj1n835E/ZvF/Z/6YxX/P/DGL/175Yxb/d+WPWfzfnT9m8X9P/pjF/735Yxb/9+WPWfzfnz9m8d87f8zi/4H8MYv/B/PHLP4fyh+z+H84f8ziv0/+mMX/I/ljFv9988cs/h/NH7P4fyx/zOK/X/6Yxf/j+WMW/0/kj1n8P5k/ZvH/VP6Yxf/T+WMW//3zxyz+B+SPWfw/kz9m8f9s/pjF/8D8MYv/5/LHLP4H5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/4Pwxi/8388cs/ofkj1n8v5U/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8v50/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/t/JH7P4fzd/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP7fyx+z+J+SP2bxPzV/zOJ/Wv6Yxf/7+WMW/x/kj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/j/LH7P4n5M/ZvE/N3/M4v/z/DGL/3n5Yxb/X+SPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6/zB+z+P8qf8zi/+v8MYv/b/LHLP6X5Y9Z/C/PH7P4/zZ/zOL/u/wxi/8V+WMW/9/nj1n8r8wfs/hflT9m8b86f8zi/4f8MYv/NfljFv9r88cs/tflj1n8/5g/ZvH/U/6Yxf/P+WMW/+vzxyz+f8kfs/jfkD9m8b8xf8zif1P+mMX/5vwxi/9f88cs/rfkj1n8b80fs/j/LX/M4n9b/pjF/+/5Yxb/f+SPWfz/mT9m8f9X/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/hPzR+z+N+TP2bxvzd/zOI/LX9M4r/AIH/M4j+UP2bxH5U/ZvEfnT9m8Z8jf8ziPyZ/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/2Pwxi//C+WMW/3H5Yxb/RfLHLP6L5o9Z/J+QP2bxf2L+mMX/SfljFv/F8scs/k/Of/a2Goj8F88fs/g/JX/M4v/U/DGL/xL5Yxb/p+WPWfyfnj9m8R+fP2bxf0b+mMX/mfljFv9n5Y9Z/JfMH7P4L5U/ZvF/dv6YxX/p/DGL/zL5Yxb/5+SPWfyfmz9m8X9e/pjF//n5Yxb/ZfPHLP4vyB+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP4vzB+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/4vyxyz+a+SPWfzXzB+z+L84f8zi/5L8MYv/WvljFv8J+WMW/4n5Yxb/SfljFv+188cs/uvkj1n8180fs/hPzh+z+E/JH7P4r5c/ZvFfP3/M4v/S/DGL/8vyxyz+G+SPWfw3zB+z+G+UP2bxf3n+mMV/4/wxi/8r8scs/pvkj1n8N80fs/hvlj9m8d88f8zi/8r8MYv/FvljFv8t88cs/q/KH7P4vzp/zOL/mvwxi/9r88cs/q/LH7P4vz5/zOL/hvwxi/9W+WMW/63zxyz+2+SPWfzfmD9m8d82f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+O+WPWfzflD9m8X9z/pjFf+f8MYv/LvljFv9d88cs/rvlj1n835I/ZvF/a/6YxX/3/DGL/9vyxyz+e+SPWfzfnj9m8X9H/pjF/535Yxb/PfPHLP575Y9Z/N+VP2bxf3f+mMX/PfljFv/35o9Z/N+XP2bxf3/+mMV/7/wxi/8H8scs/h/MH7P4fyh/zOL/4fwxi/8++WMW/4/kj1n8980fs/h/NH/M4v+x/DGL/375Yxb/j+ePWfw/kT9m8f9k/pjF/1P5Yxb/T+ePWfz3V/vP9ZDvWPwPUPs/dBb/z+SPWfw/mz9m8T8wf8zi/7n8MYv/QfljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxPzh/zOL/zfwxi/8h+WMW/2/lj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/2/nj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/938scs/t/NH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/9/LHLP6n5I9Z/E/NH7P4n5Y/ZvH/fv6Yxf8H+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOL/0/wxi//P8scs/ufkj1n8z80fs/j/PH/M4n9e/pjF/xf5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/L/PHLP6/yh+z+P86f8zi/5v8MYv/ZfljFv/L88cs/r/NH7P4/y5/zOJ/Rf6Yxf/3+WMW/yvzxyz+V+WPWfyvzh+z+P8hf8zif03+mMX/2vwxi/91+WMW/z/mj1n8/5Q/ZvH/c/6Yxf/6/DGL/1/yxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOL/1/wxi/8t+WMW/1vzxyz+f8sfs/jflj9m8f97/pjF/x/5Yxb/f+aPWfz/lT9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+U/PHLP735I9Z/O/NH7P4T8sfk/gvOMgfs/gP5Y9Z/Eflj1n8R+ePWfznyB+z+I/JH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziPzZ/zOK/cP6YxX9c/pjFf5H8MYv/ovljFv8n5I9Z/J+YP2bxf1L+mMV/sfwxi/+T88cs/ovnj1n8n5I/ZvF/av6YxX+J/DGL/9Pyxyz+T88fs/iPzx+z+D8jf8zi/8z8MYv/s/LHLP5L5o9Z/JfKH7P4Pzt/zOK/dP6YxX+Z/DGL/3Pyxyz+z80fs/g/L3/M4v/8/DGL/7L5Yxb/F+SPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/F+aPWfxXyR+z+K+aP2bxXy1/zOK/ev6Yxf9F+WMW/zXyxyz+a+aPWfxfnD9m8X9J/pjFf638MYv/hPwxi//E/DGL/6T8MYv/2vljFv91RP5zP4p1Lf7rivwfTRb/yfljFv8p+WMW//Xyxyz+6+ePWfxfmj9m8X9Z/pjFf4P8MYv/hvljFv+N8scs/i/PH7P4b5w/ZvF/Rf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/F+ZP2bx3yJ/zOK/Zf6Yxf9V+WMW/1fnj1n8X5M/ZvF/bf6Yxf91+WMW/9fnj1n835A/ZvHfKn/M4r91/pjFf5v8MYv/G/PHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjFf6f8MYv/m/LHLP5vzh+z+O+cP2bx3yV/zOK/a/6YxX+3/DGL/1vyxyz+b80fs/jvnj9m8X9b/pjFf4/8MYv/2/PHLP7vyB+z+L8zf8ziv2f+mMV/r/wxi/+78scs/u/OH7P4vyd/zOL/3vwxi//78scs/u/PH7P4750/ZvH/QP6Yxf+D+WMW/w/lj1n8P5w/ZvHfJ3/M4v+R/DGL/775Yxb/j+aPWfw/lj9m8d8vf8zi//H8MYv/J/LHLP6fzB+z+H8qf8zi/+n8MYv//vljFv8D8scs/p/JH7P4fzZ/zOJ/YP6Yxf9z+WMW/4Pyxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9w/pjF/5v5Yxb/Q/LHLP7fyh+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP7fzh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/7+SPWfy/mz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/+/lj1n8T8kfs/ifmj9m8T8tf8zi//38MYv/D/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/4f5Yxb/H+WPWfx/nD9m8f9J/pjF/6f5Yxb/n+WPWfzPyR+z+J+bP2bx/3n+mMX/vPwxi/8v8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/1/mj1n8f5U/ZvH/df6Yxf83+WMW/8vyxyz+l+ePWfx/mz9m8f9d/pjF/4r8MYv/7/PHLP5X5o9Z/K/KH7P4X50/ZvH/Q/6Yxf+a/DGL/7X5Yxb/6/LHLP5/zB+z+P8pf8zi/+f8MYv/9fljFv+/5I9Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/6/5Yxb/W/LHLP635o9Z/P+WP2bxvy1/zOL/9/wxi/8/8scs/v/MH7P4/yt/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/Kfmj1n878kfs/jfmz9m8Z+WPybxX2iQP2bxH8ofs/iPyh+z+I/OH7P4z5H/Axo98mjxH5M/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/bP6YxX/h/DGL/7j8MYv/IvljFv9F88cs/k/IH7P4PzF/zOL/pPwxi/9i+WMW/yfnj1n8F88fs/g/JX/M4v/U/DGL/xL5Yxb/p+WPWfyfnj9m8R+fP2bxf0b+mMX/mfljFv9n5Y9Z/JfMH7P4L5U/ZvF/dv6YxX/p/DGL/zL5Yxb/5+SPWfyfmz9m8X9e/pjF//n5Yxb/ZfPHLP4vyB+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP4vzB+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/4vyxyz+a+SPWfzXzB+z+L84f8zi/5L8MYv/WvljFv8J+WMW/4n5Yxb/SfljFv+188cs/uvkj1n8180fs/hPzh+z+E/JH7P4r5c/ZvFfP3/M4v/S/DGL/8vyxyz+G+SPWfw3zB+z+G+UP2bxf3n+mMV/4/wxi/8r8scs/pvkj1n8N80fs/hvlj9m8d88f8zi/8r8MYv/FvljFv8t88cs/q/KH7P4vzp/zOL/mvwxi/9r88cs/q/LH7P4vz5/zOL/hvwxi/9W+WMW/63zxyz+2+SPWfzfmD9m8d82f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+O+WPWfzflD9m8X9z/pjFf+f8MYv/LvljFv9d88cs/rvlj1n835I/ZvF/a/6YxX/3/DGL/9vyxyz+e+SPWfzfnj9m8X/H/8cePQSBYSBQGF47u1nbqm3btm07TmrbSG3btm3btpseeurMm8m97/tub+bdfv2jlv6D9I9a+g/WP2rpP0T/qKX/UP2jlv7D9I9a+g/XP2rpP0L/qKX/SP2jlv6j9I9a+m+tf9TSfxv9o5b+2+oftfTfTv+opf/2+kct/XfQP2rpv6P+UUv/nfSPWvrvrH/U0n8X/aOW/rvqH7X0303/qKX/7vpHLf336Ow/esBYDi399+zsP1Yt/ffSP2rpv7f+UUv/ffSPWvrvq3/U0n8//aOW/vvrH7X0P0D/qKX/gfpHLf0P0j9q6X+w/lFL/0P0j1r6H6p/1NL/MP2jlv6j9Y9a+h+uf9TS/wj9o5b+R+oftfQ/Sv+opf/R+kct/Y/RP2rpf6z+UUv/4/SPWvofr3/U0v8E/aOW/ifqH7X0P0n/qKX/yfpHLf1P0T9q6X+q/lFL/9P0j1r6n65/1NL/DP2jlv5n6h+19D9L/6il/9n6Ry39z9E/aul/rv5RS//z9I9a+p+vf9TS/wL9o5b+F+oftfS/SP+opf/F+kct/S/RP2rpf6n+UUv/y/SPWvpfrn/U0v8K/aOW/lfqH7X0v0r/qKX/1fpHLf2v0T9q6X+t/lFL/+v0j1r6X69/1NL/Bv2jlv436h+19L9J/6il/836Ry39b9E/aul/q/5RS//b9I9a+t+uf9TS/w79o5b+d+oftfS/S/+opf/d+kct/e/RP2rpf6/+UUv/+/SPWvrfr3/U0v8B/aOW/g/qH7X0f0j/qKX/w/pHLf0f0T9q6f+o/lFL/8f0j1r6P65/1NL/Cf2jlv5P6h+19H9K/6il/9P6Ry39n9E/aun/rP5RS//n9I9a+j+vf9TS/wX9o5b+L+oftfR/Sf+opf/L+kct/V/RP2rp/6r+UUv/1/SPWvq/rn/U0v8N/aOW/m/qH7X0f0v/qKX/2/pHLf3f0T9q6f+u/lFL//f0j1r6v69/1NL/A/2jlv4f6h+19P9I/6il/8f6Ry39P9E/aun/qf5RS//P9I9a+n+uf9TS/wv9o5b+Y/SPSvoP/Jb+UUv/b+sftfT/jv5RS//v6h+19P+e/lFL/+/rH7X0/4H+UUv/H+oftfT/kf5RS/8f6x+19P+J/lFL/5/qH7X0/5n+UUv/AfpHLf1/rn/U0v8X+kct/QfqH7X0/6X+UUv/X+kftfT/tf5RS//f6B+19P+t/lFL/9/pH7X0/73+UUv/P+gftfT/o/5RS/8/6R+19P+z/lFL/7/oH7X0/6v+UUv/v+kftfT/u/5RS/9/6B+19P+n/lFL/3/pH7X0/7f+UUv//+gftfT/r/5RS///6R+19P+//lFL/3H0j1r6j6t/1NJ/PP2jlv7j6x+19J9A/6il/4T6Ry39J9I/auk/sf5RS/9J9I9a+k+qf9TSfzL9o5b+k+sftfSfQv+opf+U+kct/afSP2rpP7X+UUv/afSPWvpPq3/U0n86/aOW/tPrH7X0n0H/qKX/jPpHLf1n0j9q6T+z/lFL/1n0j1r6z6p/1NJ/Nv2jlv6z6x+19J9D/6il/5z6Ry3959I/auk/t/5RS/959I9a+s+rf9TSfz79o5b+8+sftfRfQP+opf+C+kct/RfSP2rpv7D+UUv/RfSPWvovqn/U0n8x/aOW/ovrH7X0X0L/qKX/kvpHLf2X0j9q6b+0/lFL/2X0j1r6L6t/1NJ/Of2jlv7L6x+19F9B/6il/4r6Ry39V9I/aum/sv5RS/9V9I9a+q+qf9TSfzX9o5b+q+sftfRfQ/+opf+a+kct/dfSP2rpv7b+UUv/dfSPWvqvq3/U0n89/aOW/uvrH7X030D/qKX/hvp/ZczXZ0v/jfSPWvpvrH/U0n8T/aOW/pvqH7X030z/qKX/5vpHLf230D9q6b+l/lFL/630j1r6D9I/auk/WP+opf8Q/aOW/kP1j1r6D9M/auk/XP+opf8I/aOW/iP1j1r6j9I/+sb1BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiSffuP8bou4Dj+OeAAyTZczBjWBvm2dEvpjh/DP5yQCFzogb8RNQTuQPAO6DjsODV+/EEunT9yI8dWroRhOWnzlms6uzSzZrFqq9kPNUtX1iLTWbDFuva9+9559+249X2f7zcrH48/7vv9fL68PsBtTz4fpgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/uxoaFxwZWzPk1NjBBx8+3Nz7OvvoipsO/L77gv7X8sdLh7nkmMEHPT09PbOfnbWjfDihKIrSz7azfDyxcly6/s76L3X0HYX53S8uPj75l41HDqw57eG6rqP31faerS1uXLehpfkTY4oiXFRbdJQO6mqKIiyqLe4tHdSXDhbXFg+XDmb1HpxSfLd0cN7azS1NpRNLor9n8P+ioXFnMXZIscWQPw0G97+z/jt39L+OcMn+q40ryv1f3vnDNys+63eC/vuvHxZU9l/1bxA4oer6f35+/+sIl/yP+/+kJ1e+PNxnJ+6///rhk/qHdIZ5/h/SaOVzf8Xz//RhLjmwv7Km83ip/0tufWZG+dS4/+b5/53rh4sq+x8z5Pm/9By/sP/5f0JRhItH+e2A95SGxl1HRrr/j9z/uGkVm5rB/Z/etnl/qf/HFv/g8fKp2ir7XzjC/X/MkopfK1Cdhsav9lTc/6vov/jYMJcc6P+tx3/7UKn/R/94/xmDPqum/4sr+5/Z3rpl5tbtneduaF29vnl986a6WfNmz62vm3v+nJm9jwR9X0f5XYH3htHd/4tJFZuaomge2F/ddeCpUv9zHnhgdvnUxCr7XzTi/X+6+z8M6yNjivHji47V7e1tdX1f+w/r+772/bBh+q/i7/9nnl3+YbXl15qimDqwv/OMu5aX+n/70DO7y6fGV9n/4hH7nz/w8wIRRnn/b6rYDOn/4KEXe5//l95z8PTyqWr//r9kxP5fcf+H0WhorPgfft5lpf53FZdGdhoa/Pc/SCdH/4++fX133Dp8Sv+QTo7+//CFo+fErcNS/UM6Ofoft/H+5+LW4RL9Qzo5+l82Zd7yuHW4VP+QTo7+175yzl/j1qFR/5BOjv7P/srujrh1WKZ/SCdH/w+2zd4Wtw7L9Q/p5Oj/56c++GrcOlymf0gnR//Hjt19Q9w6XK5/SCdH/117zvpR3DpcoX9IJ0f/l61bEOLW4Ur9Qzo5+p829c+Pxa3DVfqHdHL0P/cv/zw1bh2u1j+kk6P/27+4fF/cOlyjf0gnR/9jr3v5hbh1WKF/SCdH/0vO2rYgbh2u1T+kk6P/pp819cStw8py/xMK/cO7Lkf/M7/5kw1x63Cd+z+kk6P/w8se2RO3DtfrH9LJ0f+eumJy3DrcoH9IJ0f/3/j+aYfi1uHT+od0cvT/uyefmBe3Dqv0D+nk6P/ZD932rbh1uFH/kE6O/u9Z88KZceuwWv+QTo7+H9r73Jfj1mGN/iGdHP2//nrr++LWYa3+IZ0c/U+aeMprcevQpH9IJ0f/C275WlvcOjTrH9LJ0X/r7q4fx63DOv1DOjn6/+jxqSvj1mG9/iGdHP2vmLP3g3HrcJP+IZ0c/X9g6QW74tZhg/4hnRz9X9j98Qvj1mGj/iGdHP23P/35r8etw836h3Ry9L93xquL4tahRf+QTo7+X1q15Kdx69Cqf0gnR/9vPnLtprh12KR/SCdH/0/84q1jceuwWf+QTo7+33/+wr/HrcMW/UM6OfpftPiNtXHr8Bn9Qzo5+t/Y9a+X4tahTf+QTo7+Zxy+amncOmzVP6STo//vnVu3P24d2vUP6eTo/44r9tXHrcM2/UM6Ofrff/DOu+LW4Rb9Qzo5+n/jV9Onxa3DZ/UP6eTo/77Jh66JW4cO/UM6Ofr/9abap+PWYbv+IZ0c/f9j35QdcevQqX9IJ0f/T73W/ae4dbhV/5BOjv5XjfvN+Lh1uE3/kE6O/qd0brk3bh1u1z+kk6P/eXevPi9uHT6nf0gnR/9b//b8t+PWYYf+IZ2t2ztvXt3S0tzmjTfeeDPw5mT/yQSk9k70J/tXAgAAAAAAAAAAAAAAnEiOf050sn+PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87cOoncDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArwAAAP//9vvjVA==") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x2}}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='file0', 0x5) 12.709338408s ago: executing program 0 (id=625): r0 = io_uring_setup(0x68f7, &(0x7f00000002c0)={0x0, 0x48c7, 0x80, 0x0, 0x8100016b}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) sendmsg$inet(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f00000008c0)='G', 0x1}], 0x1}, 0x8000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) write$9p(r2, &(0x7f0000000500)="c6", 0x1) readv(r1, &(0x7f0000000cc0)=[{&(0x7f0000000b40)=""/195, 0xc3}], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000004, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 12.368085789s ago: executing program 0 (id=626): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x161a82, 0x149) syz_create_resource$binfmt(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4020744f, &(0x7f0000000040)=0x80) write(r1, &(0x7f0000000280)='{*', 0x2) 12.300073335s ago: executing program 0 (id=627): open(0x0, 0x80ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x20, 0x8000000, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8842}, 0x24000041) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 5.408390327s ago: executing program 2 (id=638): add_key$keyring(0x0, &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) chdir(0x0) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xd22) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r0, &(0x7f0000000000)='3', 0x4e) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe010300010009"], 0x0) 5.241116237s ago: executing program 3 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r3, 0x6a, 0x4, 0x0, 0x0) 4.186189825s ago: executing program 3 (id=643): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) getegid() 3.153524348s ago: executing program 2 (id=644): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@usrquota}, {@errors_remount}]}, 0x2, 0x5b9, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, 0x0, 0x84042, 0x1fa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000440)='g', 0x1, 0x4fed3) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000780)={[{@orlov}, {@inlinecrypt}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@mb_optimize_scan}, {@data_writeback}, {@nomblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0x7}}]}, 0x26, 0x764, &(0x7f0000000a40)="$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") truncate(&(0x7f00000001c0)='./file1\x00', 0x4fed4) write$P9_RUNLINKAT(r1, 0x0, 0x0) 3.152766678s ago: executing program 1 (id=645): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 3.099642751s ago: executing program 3 (id=646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000fddbdf250c00000018000580080001007564700f"], 0x2c}, 0x1, 0x0, 0x0, 0x60d8}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x2, 0x12) read(r2, &(0x7f00000091c0)=""/16384, 0x4000) 2.84792418s ago: executing program 1 (id=647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffe, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 2.315963815s ago: executing program 2 (id=648): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000240)={0xe9, [[0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0x400006, 0xffffffff, 0x5, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x4, 0xb, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x100, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x7, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0xfffffffe}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x50a2}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000140)=0x8) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f00000004c0)=0x671) sendto$inet6(r2, &(0x7f0000000500)='trigger_nfqueue', 0xf, 0x0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 2.108660594s ago: executing program 3 (id=649): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 2.048892928s ago: executing program 1 (id=650): socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) pipe2(&(0x7f00000003c0), 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0018001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.515033743s ago: executing program 2 (id=651): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x1) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) 1.06280381s ago: executing program 3 (id=652): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x0, 0xc9, 0x1, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x10, 0x0, 0x64}}}}, 0x16) nanosleep(&(0x7f00000000c0)={0x0, 0x5f5e100}, 0x0) r1 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x3e8}, 0x10) connect(r1, &(0x7f0000000180)=@generic={0x1f, "0000000000000100"}, 0xa) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x15}}}, 0x18) nanosleep(&(0x7f0000000240)={0x0, 0x5f5e100}, 0x0) bind(r1, &(0x7f0000000300)=@generic={0x1f, "0000000000000100aaaaaaaaaa110101010100"}, 0x32) nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0) close(r1) 820.623047ms ago: executing program 1 (id=653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x3c, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4841}, 0x24000004) 634.229101ms ago: executing program 1 (id=654): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0xfffffffe) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="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", 0x485, 0x4008841, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 463.789091ms ago: executing program 2 (id=655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x9, 0x403, 0x8, 0x6, 0xffff8000, 0x2, 0x80, 0x8, 0x7, 0x35, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 463.548401ms ago: executing program 1 (id=656): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x7f, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 246.108342ms ago: executing program 2 (id=657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000b00)={'syz1\x00', {0x5, 0x7, 0xffff, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x5, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x10000007, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0xf, 0x8, 0x800, 0x6, 0x401, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x8000001, 0x5, 0x1, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x3, 0x9, 0x2, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xffffffff, 0x9, 0x2a, 0x1, 0x23], [0x9, 0x3, 0x7, 0x39b7c38a, 0x80000015, 0x12, 0x802, 0xc, 0x0, 0x2329, 0x9, 0x3, 0x7, 0x6, 0x8, 0x24a, 0x2, 0xfffffff7, 0xfffffffb, 0x3, 0x5, 0x5, 0x80, 0x6, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x2, 0x200, 0x9a, 0xffffff00, 0x100007ff, 0x6, 0x1, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x5, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x1, 0x3, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0xd, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x4, 0x1a9e1bfd, 0xfffffffc, 0x5, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b5, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x3, 0x6, 0x8007c12, 0x5, 0x1, 0x0, 0x5, 0xe, 0x3, 0x4, 0x8, 0xfff, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x10008, 0xdd, 0x1, 0x9, 0xc3, 0x7, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0xc, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfffffffd, 0x2, 0x66608000, 0x7, 0x7fb, 0x8, 0x0, 0x8, 0x9, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x11, 0x1000, 0x2, 0x100, 0x3, 0x20000000, 0x8, 0x15, 0xffff, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x2]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 190.052546ms ago: executing program 3 (id=658): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) syz_io_uring_setup(0x1cfd, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04060308c90078750be805e64d8cfc407a648d85fbebcdffde2e0c19b88ef5db9621e715cdafa627869082d7a3de39a05685b4610ab154fba0b2ef18aa8f51841f"], 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffe, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 67.137054][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.166618][ T5435] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. syzkaller login: [ 88.759900][ T5762] cgroup: Unknown subsys name 'net' [ 88.897844][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.391621][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.994143][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.004749][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.013991][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.022826][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.041751][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.046357][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.050573][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.066075][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.067005][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.074945][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.090628][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.098828][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.106592][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.107606][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.115997][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.123551][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.131629][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.137727][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.144530][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.161546][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.161921][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.181695][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.191151][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.216417][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.659163][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 92.676968][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 92.839118][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 92.902751][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.911105][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.919317][ T5775] bridge_slave_0: entered allmulticast mode [ 92.927020][ T5775] bridge_slave_0: entered promiscuous mode [ 92.937547][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.945125][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.953249][ T5775] bridge_slave_1: entered allmulticast mode [ 92.961258][ T5775] bridge_slave_1: entered promiscuous mode [ 92.970087][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 92.983167][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.990823][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.999532][ T5776] bridge_slave_0: entered allmulticast mode [ 93.007708][ T5776] bridge_slave_0: entered promiscuous mode [ 93.018001][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.025777][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.033768][ T5776] bridge_slave_1: entered allmulticast mode [ 93.042898][ T5776] bridge_slave_1: entered promiscuous mode [ 93.087122][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.106585][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.170128][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.212470][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.264067][ T5775] team0: Port device team_slave_0 added [ 93.291065][ T5776] team0: Port device team_slave_0 added [ 93.300582][ T5775] team0: Port device team_slave_1 added [ 93.316672][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.324502][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.334636][ T5774] bridge_slave_0: entered allmulticast mode [ 93.342074][ T5774] bridge_slave_0: entered promiscuous mode [ 93.351613][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.359679][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.367478][ T5774] bridge_slave_1: entered allmulticast mode [ 93.374983][ T5774] bridge_slave_1: entered promiscuous mode [ 93.398228][ T5776] team0: Port device team_slave_1 added [ 93.452648][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.464724][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.501813][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.517140][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.524661][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.554653][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.578737][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.586596][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.596245][ T5777] bridge_slave_0: entered allmulticast mode [ 93.603014][ T5777] bridge_slave_0: entered promiscuous mode [ 93.621273][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.628493][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.635771][ T5777] bridge_slave_1: entered allmulticast mode [ 93.642982][ T5777] bridge_slave_1: entered promiscuous mode [ 93.671352][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.702675][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.710355][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.743650][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.761779][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.782760][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.795187][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.806547][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.813897][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.845817][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.899836][ T5775] hsr_slave_0: entered promiscuous mode [ 93.907293][ T5775] hsr_slave_1: entered promiscuous mode [ 93.938423][ T5774] team0: Port device team_slave_0 added [ 93.951723][ T5777] team0: Port device team_slave_0 added [ 93.961475][ T5774] team0: Port device team_slave_1 added [ 94.004106][ T5777] team0: Port device team_slave_1 added [ 94.062204][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.073423][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.103887][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.118815][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.126766][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.157901][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.158007][ T5781] Bluetooth: hci0: command tx timeout [ 94.186974][ T5776] hsr_slave_0: entered promiscuous mode [ 94.194518][ T5776] hsr_slave_1: entered promiscuous mode [ 94.204295][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.213868][ T5776] Cannot create hsr debugfs directory [ 94.235511][ T5781] Bluetooth: hci3: command tx timeout [ 94.282432][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.293165][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.324152][ T5781] Bluetooth: hci2: command tx timeout [ 94.324365][ T5781] Bluetooth: hci1: command tx timeout [ 94.331093][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.350872][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.359330][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.393431][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.500036][ T5774] hsr_slave_0: entered promiscuous mode [ 94.511375][ T5774] hsr_slave_1: entered promiscuous mode [ 94.520917][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.532690][ T5774] Cannot create hsr debugfs directory [ 94.602448][ T5777] hsr_slave_0: entered promiscuous mode [ 94.609479][ T5777] hsr_slave_1: entered promiscuous mode [ 94.615869][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.623534][ T5777] Cannot create hsr debugfs directory [ 94.909003][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.946016][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.962413][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.973447][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.057987][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.072417][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.085394][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.102765][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.184834][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.219745][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.271229][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.286770][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.348339][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.362951][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.380763][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.393871][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.430249][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.497156][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.540701][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.550223][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.563795][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.571666][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.650988][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.721477][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.768899][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.784582][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.817749][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.842733][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.850791][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.882752][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.890470][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.912299][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.919786][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.940556][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.980155][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.990004][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.039594][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.113245][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.142428][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.151886][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.169171][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.177147][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.236777][ T5781] Bluetooth: hci0: command tx timeout [ 96.261015][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.315639][ T5789] Bluetooth: hci3: command tx timeout [ 96.396127][ T5789] Bluetooth: hci2: command tx timeout [ 96.397520][ T5781] Bluetooth: hci1: command tx timeout [ 96.544901][ T5776] veth0_vlan: entered promiscuous mode [ 96.578665][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.612589][ T5776] veth1_vlan: entered promiscuous mode [ 96.727009][ T5776] veth0_macvtap: entered promiscuous mode [ 96.751021][ T5776] veth1_macvtap: entered promiscuous mode [ 96.763738][ T5774] veth0_vlan: entered promiscuous mode [ 96.824098][ T5774] veth1_vlan: entered promiscuous mode [ 96.874787][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.909807][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.926516][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.947794][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.964017][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.976027][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.990075][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.020912][ T5774] veth0_macvtap: entered promiscuous mode [ 97.071898][ T5774] veth1_macvtap: entered promiscuous mode [ 97.093860][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.124876][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.140004][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.159099][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.199747][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.218376][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.237246][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.250873][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.264521][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.283975][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.299730][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.491621][ T5775] veth0_vlan: entered promiscuous mode [ 97.536677][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.536677][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.536737][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.579680][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.602596][ T5777] veth0_vlan: entered promiscuous mode [ 97.632296][ T5777] veth1_vlan: entered promiscuous mode [ 97.707599][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.717948][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.740215][ T5775] veth1_vlan: entered promiscuous mode [ 97.805394][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.813718][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.869604][ T5777] veth0_macvtap: entered promiscuous mode [ 97.882775][ T5775] veth0_macvtap: entered promiscuous mode [ 97.901596][ T5777] veth1_macvtap: entered promiscuous mode [ 97.943219][ T5775] veth1_macvtap: entered promiscuous mode [ 98.044517][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.064054][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.082360][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.094405][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.107859][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.189477][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.245390][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.286301][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.316378][ T5781] Bluetooth: hci0: command tx timeout [ 98.331061][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.345014][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.358200][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.374363][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.391538][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.407542][ T5781] Bluetooth: hci3: command tx timeout [ 98.427822][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.440897][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.470188][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.501313][ T5781] Bluetooth: hci1: command tx timeout [ 98.507562][ T5789] Bluetooth: hci2: command tx timeout [ 98.536938][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.708543][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.747553][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.774337][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.853245][ T5844] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 99.901923][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.949196][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.990718][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.030473][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.042245][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.066378][ T5854] syz.0.5[5854]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 100.068539][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.093241][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.103088][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.123489][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.130156][ T5854] loop0: detected capacity change from 0 to 1024 [ 100.143176][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.154000][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.165034][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.197801][ T5854] ======================================================= [ 100.197801][ T5854] WARNING: The mand mount option has been deprecated and [ 100.197801][ T5854] and is ignored by this kernel. Remove the mand [ 100.197801][ T5854] option from the mount to silence this warning. [ 100.197801][ T5854] ======================================================= [ 100.252678][ T5854] EXT4-fs: Ignoring removed bh option [ 100.376877][ T5854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.395972][ T5789] Bluetooth: hci0: command tx timeout [ 100.421373][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.432174][ T5854] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.442225][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.475393][ T5789] Bluetooth: hci3: command tx timeout [ 100.556001][ T5781] Bluetooth: hci1: command tx timeout [ 100.561863][ T5789] Bluetooth: hci2: command tx timeout [ 100.570403][ T5856] UDC core: g1: couldn't find an available UDC or it's busy [ 100.608163][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.621038][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.025144][ T5861] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 3: comm syz.0.5: lblock 3 mapped to illegal pblock 3 (length 3) [ 101.063219][ T5861] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 101.076928][ T5861] EXT4-fs (loop0): This should not happen!! Data will be lost [ 101.076928][ T5861] [ 101.476361][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.506029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 102.760799][ T27] cfg80211: failed to load regulatory.db [ 102.789299][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.813471][ T33] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 102.833645][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.866139][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.889568][ T33] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 102.949238][ T33] EXT4-fs (loop0): This should not happen!! Data will be lost [ 102.949238][ T33] [ 103.001092][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.115391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 104.670200][ T5870] loop2: detected capacity change from 0 to 128 [ 104.680137][ T5876] nvmet: adding nsid 1 to subsystem testsubsys [ 104.696586][ T5870] EXT4-fs (loop2): Test dummy encryption mode enabled [ 104.769298][ T5870] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.830693][ T5867] nvmet: failed to open file ./0©ïßÔ˜ *Ñx¡³8: (-2) [ 104.867684][ T5870] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.361688][ T5870] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 105.537079][ T5888] loop1: detected capacity change from 0 to 1024 [ 105.610838][ T5888] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 105.704690][ T5888] JBD2: no valid journal superblock found [ 105.753987][ T5888] EXT4-fs (loop1): Could not load journal inode [ 106.522879][ T5891] loop0: detected capacity change from 0 to 1024 [ 106.638226][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.872243][ T5901] loop2: detected capacity change from 0 to 16 [ 107.898515][ T5901] erofs: (device loop2): mounted with root inode @ nid 36. [ 110.024677][ T5911] Zero length message leads to an empty skb [ 110.708111][ T5907] syz.1.15 (5907): drop_caches: 2 [ 110.796674][ T5908] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 111.266120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.336003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.365822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.424818][ T5925] loop1: detected capacity change from 0 to 8 [ 111.456293][ T5925] squashfs: Unknown parameter 'Ž_Y¦…' [ 113.346051][ T5922] sched: RT throttling activated [ 114.235924][ T5930] Bluetooth: MGMT ver 1.22 [ 114.355469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 116.095966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 116.505569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 116.955570][ T5781] Bluetooth: hci2: command 0x0401 tx timeout [ 116.962220][ T5789] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 119.475416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 120.128760][ T5951] 9pnet_fd: Insufficient options for proto=fd [ 121.625638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 121.914383][ T5956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.28'. [ 121.944561][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 122.252272][ T5957] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 124.924028][ T28] audit: type=1800 audit(1790325298.245:2): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.24" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 125.054772][ T5972] loop1: detected capacity change from 0 to 512 [ 125.120351][ T5973] jffs2: notice: (5973) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 126.939799][ T5973] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 129.516037][ T5987] loop3: detected capacity change from 0 to 512 [ 130.008781][ T5987] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 130.024785][ T5987] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.035277][ T5987] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 130.060893][ T5987] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 130.075469][ T5987] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 130.083762][ T5987] System zones: 0-2, 18-18, 34-35 [ 130.099842][ T5987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.129454][ T5987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.399349][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.425552][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.460157][ T6044] loop1: detected capacity change from 0 to 1024 [ 141.483130][ T6044] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 141.546459][ T6044] JBD2: no valid journal superblock found [ 141.583693][ T6044] EXT4-fs (loop1): Could not load journal inode [ 143.709367][ T6059] mmap: syz.0.50 (6059) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 144.158008][ T6066] loop3: detected capacity change from 0 to 512 [ 150.711476][ T6092] Bluetooth: MGMT ver 1.22 [ 151.991747][ T6098] sctp: [Deprecated]: syz.2.58 (pid 6098) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.991747][ T6098] Use struct sctp_sack_info instead [ 152.527421][ T6101] loop0: detected capacity change from 0 to 8 [ 152.867777][ T6101] SQUASHFS error: Failed to read block 0x6de: -5 [ 152.874797][ T6101] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 152.882770][ T6101] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 153.615362][ T6109] configfs-gadget.g1 gadget.0: HOST MAC 42:bd:f5:56:b7:e7 [ 153.633913][ T6109] configfs-gadget.g1 gadget.0: MAC 7e:23:8e:f6:72:39 [ 153.671074][ T6109] configfs-gadget.g1 gadget.0: HOST MAC 1e:16:10:0b:c2:ac [ 153.726578][ T6109] configfs-gadget.g1 gadget.0: MAC ee:07:5f:b6:24:26 [ 154.489957][ T6118] tipc: MTU too low for tipc bearer [ 154.808355][ T5839] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 155.647997][ T5839] usb 1-1: Dual-Role OTG device on HNP port [ 155.673996][ T5839] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 155.695284][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.807206][ T5839] cdc_ncm 1-1:1.0: MAC-Address: 42:bd:f5:56:b7:e7 [ 155.930025][ T5839] cdc_ncm 1-1:1.0 usb2: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:bd:f5:56:b7:e7 [ 155.985095][ T6129] netlink: 68 bytes leftover after parsing attributes in process `syz.2.63'. [ 156.025097][ T5839] usb 1-1: bad CDC descriptors [ 157.365437][ T6127] x86/PAT: syz.0.62:6127 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 157.374727][ T6127] x86/PAT: syz.0.62:6127 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 159.601396][ T6141] UBIFS error (pid: 6141): cannot open "", error -22 [ 159.632108][ T6141] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 162.919801][ T6151] rtc_cmos 00:00: Alarms can be up to one day in the future [ 164.176473][ T6160] overlayfs: missing 'lowerdir' [ 164.562433][ T6166] capability: warning: `syz.3.71' uses 32-bit capabilities (legacy support in use) [ 166.397419][ T6175] loop1: detected capacity change from 0 to 1024 [ 166.903824][ T28] audit: type=1326 audit(1790325341.375:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.2.67" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f434939e159 code=0x0 [ 166.996575][ T6175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.093636][ T6175] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.693868][ T6175] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.66: lblock 3 mapped to illegal pblock 3 (length 3) [ 167.721113][ T6175] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 168.901677][ T6175] EXT4-fs (loop1): This should not happen!! Data will be lost [ 168.901677][ T6175] [ 168.992740][ T6191] loop2: detected capacity change from 0 to 2048 [ 169.103731][ T6191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.216306][ T6191] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.177417][ T6184] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 170.312237][ T1112] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 170.405803][ T1112] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 170.456274][ T1112] EXT4-fs (loop1): This should not happen!! Data will be lost [ 170.456274][ T1112] [ 170.567924][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 171.031714][ T6214] loop1: detected capacity change from 0 to 32768 [ 171.042860][ T6214] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.74 (6214) [ 171.069944][ T6214] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.080520][ T6214] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 171.090239][ T6214] BTRFS info (device loop1): use zlib compression, level 3 [ 171.097557][ T6214] BTRFS info (device loop1): turning on sync discard [ 171.104252][ T6214] BTRFS info (device loop1): using free space tree [ 171.273901][ T6214] BTRFS info (device loop1): enabling ssd optimizations [ 171.788497][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.353860][ T6236] Cannot find set identified by id 0 to match [ 175.287430][ T5777] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.670930][ T28] audit: type=1800 audit(1790325350.325:4): pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.76" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 176.439008][ T6249] use of bytesused == 0 is deprecated and will be removed in the future, [ 176.448110][ T6249] use the actual size instead. [ 176.696818][ T6243] loop3: detected capacity change from 0 to 4096 [ 180.090591][ T6264] syz.2.83 uses obsolete (PF_INET,SOCK_PACKET) [ 180.378019][ T6273] file system registered [ 180.531959][ T6273] loop2: detected capacity change from 0 to 512 [ 180.605676][ T6144] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.723447][ T5775] ffs_data_put(): freeing [ 180.873369][ T6283] loop2: detected capacity change from 0 to 512 [ 181.004378][ T6150] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 182.730681][ T6289] loop2: detected capacity change from 0 to 256 [ 183.673607][ T6289] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 185.553396][ T6297] netlink: 'syz.3.89': attribute type 1 has an invalid length. [ 186.241692][ T6297] netlink: 'syz.3.89': attribute type 2 has an invalid length. [ 186.456739][ T6307] Bluetooth: ISO socket layer initialized [ 186.489270][ T5789] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 189.692761][ T6315] futex_wake_op: syz.1.91 tries to shift op by 144; fix this program [ 197.058744][ T6378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 197.825433][ T6378] syz.3.104 (6378) used greatest stack depth: 17896 bytes left [ 199.919532][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.926766][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.040992][ T6395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.105'. [ 201.241664][ T6144] udevd[6144]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 201.329009][ T6150] udevd[6150]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 206.581972][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 206.602394][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 206.612529][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 206.623591][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 209.540986][ T6453] loop6: detected capacity change from 0 to 6 [ 211.480771][ T6453] Dev loop6: unable to read RDB block 6 [ 211.489678][ T6453] loop6: unable to read partition table [ 211.495862][ T6453] loop6: partition table beyond EOD, truncated [ 211.502203][ T6453] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 216.950992][ T6521] overlayfs: failed to clone upperpath [ 217.669927][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 217.677492][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 217.684971][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 220.563865][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 228.690162][ T5781] Bluetooth: hci2: command 0x0401 tx timeout [ 229.934117][ T6600] 0x7073726500000000-0x7073726500306e61 : "" [ 229.940807][ T6600] mtd: partition "" is out of reach -- disabled [ 229.994103][ T6600] ftl_cs: FTL header not found. [ 234.285378][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 234.295146][ T6618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.472570][ T6618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.677755][ T6626] tipc: Started in network mode [ 235.682745][ T6626] tipc: Node identity c2cf39692967, cluster identity 4711 [ 235.691241][ T6626] tipc: Enabled bearer , priority 0 [ 235.701560][ T6626] syzkaller0: entered promiscuous mode [ 235.717831][ T6626] syzkaller0: entered allmulticast mode [ 235.796881][ T6626] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 235.896554][ T6626] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 235.944072][ T6626] tipc: Resetting bearer [ 236.945964][ T5779] tipc: Node number set to 3953670505 [ 237.009234][ T6625] tipc: Resetting bearer [ 237.096097][ T6625] tipc: Disabling bearer [ 241.684096][ T6659] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0) [ 241.700494][ T6659] Bluetooth: MGMT ver 1.22 [ 243.860002][ T6674] /dev/sg0: Can't lookup blockdev [ 244.369586][ T6682] loop3: detected capacity change from 0 to 256 [ 245.579811][ T6681] futex_wake_op: syz.3.149 tries to shift op by 144; fix this program [ 245.644114][ T6682] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 245.700392][ T28] audit: type=1800 audit(1790325420.505:5): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.149" name="file1" dev="loop3" ino=1048605 res=0 errno=0 [ 245.827009][ T6680] syz.3.149: attempt to access beyond end of device [ 245.827009][ T6680] loop3: rw=0, sector=256, nr_sectors = 8 limit=256 [ 251.113234][ T6711] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 251.140043][ T6711] CIFS mount error: No usable UNC path provided in device string! [ 251.140043][ T6711] [ 251.150953][ T6711] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 252.199140][ T6714] loop1: detected capacity change from 0 to 128 [ 252.305262][ T6714] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 256.504111][ T6737] block device autoloading is deprecated and will be removed. [ 256.521240][ T6737] syz.1.161: attempt to access beyond end of device [ 256.521240][ T6737] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 260.782960][ T6764] 9pnet_virtio: no channels available for device syz [ 261.216593][ T6772] loop2: detected capacity change from 0 to 8 [ 261.286360][ T6772] SQUASHFS error: zlib decompression failed, data probably corrupt [ 261.330926][ T6772] SQUASHFS error: Failed to read block 0x9b: -5 [ 261.353746][ T6772] SQUASHFS error: Unable to read metadata cache entry [99] [ 261.369497][ T6772] SQUASHFS error: Unable to read inode 0x127 [ 261.376523][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.384257][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.884855][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 263.529179][ T6796] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 264.556977][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 264.628085][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 264.826402][ T6787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.987155][ T5789] Bluetooth: hci0: unexpected event for opcode 0x041c [ 265.302843][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 266.723997][ T6816] loop2: detected capacity change from 0 to 8192 [ 266.778696][ T6816] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 266.839979][ T6816] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 266.903941][ T6816] REISERFS warning (device loop2): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 267.023477][ T6816] REISERFS warning (device loop2): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 267.125427][ T6816] REISERFS warning (device loop2): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 269.155577][ T5789] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 269.164378][ T5789] Bluetooth: hci0: Injecting HCI hardware error event [ 269.174990][ T5781] Bluetooth: hci0: hardware error 0x00 [ 270.279760][ T5789] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 271.591893][ T6851] loop1: detected capacity change from 0 to 256 [ 271.797075][ T5781] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 272.031181][ T6851] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 272.044098][ T6851] exFAT-fs (loop1): failed to load alloc-bitmap [ 272.051777][ T6851] exFAT-fs (loop1): failed to recognize exfat type [ 272.616880][ T6858] loop1: detected capacity change from 0 to 4096 [ 272.749605][ T6858] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 272.820809][ T6858] ntfs3: loop1: mft corrupted [ 272.829046][ T6858] ntfs3: loop1: Failed to load $Extend (-22). [ 272.845262][ T6858] ntfs3: loop1: Failed to initialize $Extend. [ 273.038899][ T6867] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 275.447583][ T6875] loop2: detected capacity change from 0 to 256 [ 275.724478][ T6875] FAT-fs (loop2): Directory bread(block 64) failed [ 275.735354][ T6875] FAT-fs (loop2): Directory bread(block 65) failed [ 275.752655][ T6875] FAT-fs (loop2): Directory bread(block 66) failed [ 275.782108][ T6875] FAT-fs (loop2): Directory bread(block 67) failed [ 276.356154][ T6875] FAT-fs (loop2): Directory bread(block 68) failed [ 276.477210][ T6875] FAT-fs (loop2): Directory bread(block 69) failed [ 276.616724][ T6875] FAT-fs (loop2): Directory bread(block 70) failed [ 276.623493][ T6875] FAT-fs (loop2): Directory bread(block 71) failed [ 276.680049][ T6875] FAT-fs (loop2): Directory bread(block 72) failed [ 276.696903][ T6875] FAT-fs (loop2): Directory bread(block 73) failed [ 277.405428][ T6891] loop2: detected capacity change from 0 to 256 [ 277.501110][ T6891] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 277.785359][ T6888] loop3: detected capacity change from 0 to 512 [ 278.246545][ T6888] EXT4-fs (loop3): Test dummy encryption mode enabled [ 278.253613][ T6888] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 278.274982][ T6888] EXT4-fs (loop3): 1 truncate cleaned up [ 278.282145][ T6888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.755813][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.814284][ T5781] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 280.216929][ T28] audit: type=1800 audit(1790325454.915:6): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.197" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 287.148627][ T28] audit: type=1800 audit(1790325461.895:7): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.207" name="idVendor" dev="configfs" ino=11470 res=0 errno=0 [ 287.513397][ T28] audit: type=1800 audit(1790325462.015:8): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.207" name="idProduct" dev="configfs" ino=11471 res=0 errno=0 [ 287.686900][ T6937] usb 1-1: usbfs: process 6937 (syz.3.207) did not claim interface 0 before use [ 287.701968][ T6939] loop2: detected capacity change from 0 to 8 [ 287.714954][ T28] audit: type=1800 audit(1790325462.135:9): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.207" name="max_speed" dev="configfs" ino=11473 res=0 errno=0 [ 287.788408][ T28] audit: type=1800 audit(1790325462.285:10): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.207" name="c_sync" dev="configfs" ino=11475 res=0 errno=0 [ 287.879726][ T6939] SQUASHFS error: xz decompression failed, data probably corrupt [ 287.893193][ T6939] SQUASHFS error: Failed to read block 0x108: -5 [ 287.901241][ T6939] SQUASHFS error: Unable to read metadata cache entry [106] [ 287.909826][ T6939] SQUASHFS error: Unable to read inode 0x11f [ 291.503390][ T6953] null_blk: disk nullb1 created [ 291.724490][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 291.761671][ T6954] macsec0: entered promiscuous mode [ 297.963708][ T6972] gadgetfs: bound to dummy_udc driver [ 298.267293][ T6975] gadgetfs: suspended from state 2 [ 298.285749][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 299.968613][ T6983] netlink: 'syz.2.220': attribute type 10 has an invalid length. [ 300.014101][ T6983] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 300.044357][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'. [ 304.229929][ T7008] loop3: detected capacity change from 0 to 4096 [ 304.322168][ T7008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.536148][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.306006][ T7015] loop1: detected capacity change from 0 to 32768 [ 307.362992][ T7022] loop3: detected capacity change from 0 to 32768 [ 307.415558][ T7015] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 307.481829][ T7015] JBD2: Ignoring recovery information on journal [ 307.550755][ T7022] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 307.585082][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 307.598225][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 307.607976][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 307.649210][ T7015] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 307.660842][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 307.787067][ T7022] XFS (loop3): Ending clean mount [ 308.058996][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 308.202346][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 308.502210][ T7053] loop2: detected capacity change from 0 to 4096 [ 308.533538][ T7053] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 308.697551][ T7053] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 308.755299][ T5839] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 311.755359][ T5839] usb 4-1: device not accepting address 2, error -71 [ 313.539017][ T7099] ªªªªªª: renamed from vlan0 (while UP) [ 313.840142][ T7103] overlayfs: failed to clone upperpath [ 314.550674][ T7092] loop2: detected capacity change from 0 to 32768 [ 314.712918][ T7092] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 314.910202][ T7092] XFS (loop2): Ending clean mount [ 314.954136][ T7092] XFS (loop2): Quotacheck needed: Please wait. [ 315.036808][ T5834] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 315.077752][ T7092] XFS (loop2): Quotacheck: Done. [ 315.080509][ T7128] ip_tables: iptables: counters copy to user failed while replacing table [ 315.251613][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 315.295936][ T5834] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 315.332385][ T5834] usb 2-1: config 127 has no interface number 0 [ 315.373261][ T5834] usb 2-1: config 127 interface 124 has no altsetting 0 [ 315.393256][ T5834] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 315.408861][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.419284][ T5834] usb 2-1: Product: syz [ 315.423631][ T5834] usb 2-1: Manufacturer: syz [ 315.439848][ T5834] usb 2-1: SerialNumber: syz [ 315.535417][ T5839] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 315.552861][ T7138] process 'syz.0.270' launched './file1' with NULL argv: empty string added [ 315.612309][ T5775] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 315.755756][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 315.765516][ T5839] usb 4-1: config 0 interface 0 altsetting 192 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.805550][ T5839] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.831091][ T5839] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 315.855255][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.889850][ T5839] usb 4-1: config 0 descriptor?? [ 316.391453][ T5834] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 316.392240][ T5839] playstation 0003:054C:0CE6.0001: hidraw0: USB HID v80.04 Joystick [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 316.539832][ T5839] playstation 0003:054C:0CE6.0001: Failed to retrieve feature with reportID 9: -71 [ 316.553552][ T5839] playstation 0003:054C:0CE6.0001: Failed to retrieve DualSense pairing info: -71 [ 316.604009][ T5839] playstation 0003:054C:0CE6.0001: Failed to get MAC address from DualSense [ 316.635976][ T5839] playstation 0003:054C:0CE6.0001: Failed to create dualsense. [ 316.670161][ T5839] playstation: probe of 0003:054C:0CE6.0001 failed with error -71 [ 316.722951][ T5839] usb 4-1: USB disconnect, device number 4 [ 316.886717][ T7151] syzkaller1: entered promiscuous mode [ 316.892650][ T7151] syzkaller1: entered allmulticast mode [ 316.919109][ T5834] usb 2-1: failed to restore interface 124 altsetting 11 (error=-71) [ 316.953394][ T5834] usb 2-1: USB disconnect, device number 3 [ 317.044907][ T7155] netlink: 'syz.0.277': attribute type 29 has an invalid length. [ 317.055043][ T7155] netlink: 'syz.0.277': attribute type 29 has an invalid length. [ 317.069463][ T7155] netlink: 'syz.0.277': attribute type 29 has an invalid length. [ 317.086004][ T7155] netlink: 'syz.0.277': attribute type 29 has an invalid length. [ 317.103149][ T7155] netlink: 'syz.0.277': attribute type 29 has an invalid length. [ 317.180246][ T7159] warning: `syz.0.279' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 317.701558][ T7174] loop2: detected capacity change from 0 to 2048 [ 317.766155][ T7174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.860139][ T7178] bridge0: port 3(syz_tun) entered blocking state [ 317.883852][ T7178] bridge0: port 3(syz_tun) entered disabled state [ 317.945306][ T7178] syz_tun: entered allmulticast mode [ 317.981567][ T7178] syz_tun: entered promiscuous mode [ 318.023066][ T7178] bridge0: port 3(syz_tun) entered blocking state [ 318.031261][ T7178] bridge0: port 3(syz_tun) entered forwarding state [ 318.041242][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.248465][ T7181] FAULT_INJECTION: forcing a failure. [ 318.248465][ T7181] name failslab, interval 1, probability 0, space 0, times 1 [ 318.265325][ T7181] CPU: 1 PID: 7181 Comm: syz.2.288 Not tainted syzkaller #0 [ 318.272678][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.282875][ T7181] Call Trace: [ 318.286185][ T7181] [ 318.289149][ T7181] dump_stack_lvl+0x18c/0x250 [ 318.293906][ T7181] ? show_regs_print_info+0x20/0x20 [ 318.299147][ T7181] ? load_image+0x420/0x420 [ 318.303773][ T7181] ? __lock_acquire+0x7d80/0x7d80 [ 318.308836][ T7181] should_fail_ex+0x394/0x4c0 [ 318.313587][ T7181] should_failslab+0x9/0x20 [ 318.318143][ T7181] slab_pre_alloc_hook+0x59/0x300 [ 318.323217][ T7181] ? alloc_fdtable+0xca/0x2c0 [ 318.327934][ T7181] __kmem_cache_alloc_node+0x53/0x250 [ 318.333451][ T7181] ? alloc_fdtable+0xca/0x2c0 [ 318.338187][ T7181] kmalloc_trace+0x2a/0xe0 [ 318.342908][ T7181] alloc_fdtable+0xca/0x2c0 [ 318.347449][ T7181] dup_fd+0x747/0xa20 [ 318.351446][ T7181] ? apparmor_task_alloc+0x1bd/0x230 [ 318.356908][ T7181] copy_files+0xaf/0x110 [ 318.361156][ T7181] copy_process+0x157d/0x3da0 [ 318.365940][ T7181] ? copy_process+0x98e/0x3da0 [ 318.370720][ T7181] ? __pidfd_prepare+0x140/0x140 [ 318.375672][ T7181] ? __might_fault+0xaa/0x120 [ 318.380357][ T7181] ? __asan_memset+0x22/0x40 [ 318.385126][ T7181] kernel_clone+0x24b/0x8a0 [ 318.389645][ T7181] ? create_io_thread+0x190/0x190 [ 318.394775][ T7181] ? futex_wake+0x42a/0x4f0 [ 318.399470][ T7181] __se_sys_clone3+0x334/0x350 [ 318.404241][ T7181] ? __x64_sys_clone3+0x60/0x60 [ 318.409108][ T7181] ? do_futex+0x35d/0x3e0 [ 318.413553][ T7181] ? lockdep_hardirqs_on+0x98/0x150 [ 318.418760][ T7181] do_syscall_64+0x55/0xb0 [ 318.423185][ T7181] ? clear_bhb_loop+0x40/0x90 [ 318.427876][ T7181] ? clear_bhb_loop+0x40/0x90 [ 318.432645][ T7181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.438561][ T7181] RIP: 0033:0x7f434939e159 [ 318.443083][ T7181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.462872][ T7181] RSP: 002b:00007f434a288ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 318.471565][ T7181] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f434939e159 [ 318.479627][ T7181] RDX: 00007f434a288f10 RSI: 0000000000000058 RDI: 00007f434a288f10 [ 318.487772][ T7181] RBP: 00007f434943506b R08: 0000000000000000 R09: 0000000000000058 [ 318.496009][ T7181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.504255][ T7181] R13: 00007f4349626038 R14: 00007f4349625fa0 R15: 00007ffe254a7498 [ 318.512246][ T7181] [ 319.069086][ T28] audit: type=1326 audit(1790325493.875:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.3.293" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f730b79e159 code=0x0 [ 319.195362][ T5834] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 319.392598][ T5834] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.407884][ T5834] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 319.419435][ T5834] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 319.434314][ T5834] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 319.465287][ T5834] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 319.499515][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.511190][ T7195] loop1: detected capacity change from 0 to 1024 [ 319.528885][ T7188] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 319.538665][ T7188] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 319.550636][ T5834] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 319.562491][ T5834] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 319.586836][ T7195] hfsplus: failed to load catalog file [ 319.596169][ T5834] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 319.644583][ T5834] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 319.678745][ T5834] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 319.718577][ T5834] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 319.768106][ T5834] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 320.219506][ T6926] usb 3-1: USB disconnect, device number 2 [ 320.254592][ T6926] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 320.294209][ T6926] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 320.325961][ T6926] keyspan 3-1:1.0: device disconnected [ 320.585364][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 320.642928][ T7222] ip_tables: iptables: counters copy to user failed while replacing table [ 320.913335][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 320.970073][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.983208][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.993806][ T8] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 321.542810][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.567607][ T8] usb 2-1: config 0 descriptor?? [ 321.689002][ T6926] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 321.822832][ T7238] loop3: detected capacity change from 0 to 256 [ 321.832975][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 321.846042][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 321.858647][ T8] usb 2-1: USB disconnect, device number 4 [ 321.907626][ T6926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 321.933328][ T6926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.949450][ T6926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.964709][ T6926] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.982347][ T6926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.005350][ T6926] usb 3-1: config 0 descriptor?? [ 322.136105][ T7244] input: syz0 as /devices/virtual/input/input6 [ 322.430395][ T6926] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 322.452691][ T6926] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 322.798064][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.805547][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.915241][ T6926] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 323.237472][ T6926] usb 2-1: Using ep0 maxpacket: 8 [ 323.245727][ T6926] usb 2-1: config index 0 descriptor too short (expected 292, got 36) [ 323.256375][ T6926] usb 2-1: config 0 has an invalid interface number: 65 but max is -1 [ 323.264874][ T6926] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 323.273950][ T6926] usb 2-1: config 0 has no interface number 0 [ 323.280544][ T6926] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 323.291702][ T6926] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 323.303026][ T6926] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 324.100663][ T6926] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 324.112486][ T6926] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 324.126592][ T6926] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=7c.eb [ 324.135984][ T6926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.152175][ T6926] usb 2-1: config 0 descriptor?? [ 324.163841][ T7255] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 324.176560][ T6926] hub 2-1:0.65: bad descriptor, ignoring hub [ 324.182658][ T6926] hub: probe of 2-1:0.65 failed with error -5 [ 324.299555][ T7269] netlink: 'syz.0.324': attribute type 4 has an invalid length. [ 324.340869][ T7269] netlink: 'syz.0.324': attribute type 4 has an invalid length. [ 324.451304][ T5781] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 324.451457][ T5839] usb 2-1: USB disconnect, device number 5 [ 324.458571][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 324.473937][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 325.863844][ T5814] usb 3-1: USB disconnect, device number 3 [ 326.172556][ T7284] loop3: detected capacity change from 0 to 512 [ 326.193615][ T7284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.231119][ T7284] ext4: Unknown parameter 'fsname' [ 326.726344][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 326.957657][ T7280] loop2: detected capacity change from 0 to 32768 [ 326.974621][ T7280] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.328 (7280) [ 327.107728][ T7280] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 327.129320][ T7280] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 327.145561][ T7280] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 327.168990][ T7280] BTRFS info (device loop2): use zstd compression, level 3 [ 327.222023][ T7280] BTRFS info (device loop2): using free space tree [ 327.379995][ T7312] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 327.441929][ T7280] BTRFS info (device loop2): enabling ssd optimizations [ 327.465298][ T7280] BTRFS info (device loop2): auto enabling async discard [ 328.907418][ T5775] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 329.225824][ T28] audit: type=1326 audit(1790325504.025:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856cb9e159 code=0x7ffc0000 [ 329.329815][ T28] audit: type=1326 audit(1790325504.025:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856cb9e159 code=0x7ffc0000 [ 329.442459][ T28] audit: type=1326 audit(1790325504.025:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856cb9e159 code=0x7ffc0000 [ 329.532470][ T28] audit: type=1326 audit(1790325504.025:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f856cb9e159 code=0x7ffc0000 [ 329.651294][ T28] audit: type=1326 audit(1790325504.065:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856cb9e159 code=0x7ffc0000 [ 329.760811][ T28] audit: type=1326 audit(1790325504.125:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f856cb5e98e code=0x7ffc0000 [ 329.858738][ T28] audit: type=1326 audit(1790325504.125:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f856cb5e98e code=0x7ffc0000 [ 329.896014][ T7338] loop1: detected capacity change from 0 to 512 [ 329.953526][ T28] audit: type=1326 audit(1790325504.135:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f856cb5e98e code=0x7ffc0000 [ 330.023619][ T7338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.038703][ T28] audit: type=1326 audit(1790325504.155:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f856cb5e98e code=0x7ffc0000 [ 330.063408][ T28] audit: type=1326 audit(1790325504.165:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f856cb5e98e code=0x7ffc0000 [ 330.324150][ T7330] loop2: detected capacity change from 0 to 32768 [ 330.344295][ T7330] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.340 (7330) [ 330.388946][ T7330] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.412314][ T7330] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 330.430372][ T7330] BTRFS info (device loop2): setting nodatasum [ 330.440811][ T7330] BTRFS info (device loop2): force zlib compression, level 3 [ 330.449273][ T7330] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 330.460011][ T7330] BTRFS info (device loop2): use lzo compression, level 0 [ 330.467648][ T7330] BTRFS info (device loop2): turning on flush-on-commit [ 330.474793][ T7330] BTRFS info (device loop2): enabling auto defrag [ 330.482217][ T7330] BTRFS info (device loop2): max_inline at 4096 [ 330.489114][ T7330] BTRFS info (device loop2): using free space tree [ 330.530250][ T7330] BTRFS info (device loop2): enabling ssd optimizations [ 330.737471][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.015331][ T7377] FAULT_INJECTION: forcing a failure. [ 331.015331][ T7377] name failslab, interval 1, probability 0, space 0, times 0 [ 331.031542][ T7377] CPU: 1 PID: 7377 Comm: syz.1.348 Not tainted syzkaller #0 [ 331.039164][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.049881][ T7377] Call Trace: [ 331.053442][ T7377] [ 331.056463][ T7377] dump_stack_lvl+0x18c/0x250 [ 331.061291][ T7377] ? show_regs_print_info+0x20/0x20 [ 331.066889][ T7377] ? load_image+0x420/0x420 [ 331.071703][ T7377] ? __might_sleep+0xe0/0xe0 [ 331.076349][ T7377] ? __lock_acquire+0x7d80/0x7d80 [ 331.081522][ T7377] should_fail_ex+0x394/0x4c0 [ 331.086355][ T7377] should_failslab+0x9/0x20 [ 331.090910][ T7377] slab_pre_alloc_hook+0x59/0x300 [ 331.096376][ T7377] ? futex_unqueue+0xcb/0xf0 [ 331.101183][ T7377] ? syslog_print_all+0xf9/0x470 [ 331.106258][ T7377] __kmem_cache_alloc_node+0x53/0x250 [ 331.111772][ T7377] ? syslog_print_all+0xf9/0x470 [ 331.116770][ T7377] kmalloc_trace+0x2a/0xe0 [ 331.121432][ T7377] syslog_print_all+0xf9/0x470 [ 331.126355][ T7377] ? aa_get_newest_label+0xfd/0x5c0 [ 331.127293][ T5775] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 331.131590][ T7377] ? syslog_print+0x630/0x630 [ 331.146911][ T7377] ? apparmor_capable+0x137/0x1a0 [ 331.152042][ T7377] ? bpf_lsm_capable+0x9/0x10 [ 331.156724][ T7377] ? security_capable+0x89/0xb0 [ 331.161630][ T7377] do_syslog+0x3d7/0x820 [ 331.165885][ T7377] ? log_buf_vmcoreinfo_setup+0x450/0x450 [ 331.171629][ T7377] ? lock_chain_count+0x20/0x20 [ 331.176578][ T7377] __x64_sys_syslog+0x7c/0x90 [ 331.181371][ T7377] do_syscall_64+0x55/0xb0 [ 331.185799][ T7377] ? clear_bhb_loop+0x40/0x90 [ 331.190575][ T7377] ? clear_bhb_loop+0x40/0x90 [ 331.195278][ T7377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.201298][ T7377] RIP: 0033:0x7f856cb9e159 [ 331.205843][ T7377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.225832][ T7377] RSP: 002b:00007f856d9a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 331.234261][ T7377] RAX: ffffffffffffffda RBX: 00007f856ce25fa0 RCX: 00007f856cb9e159 [ 331.242294][ T7377] RDX: 000000000000004c RSI: 0000200000000180 RDI: 0000000000000004 [ 331.250452][ T7377] RBP: 00007f856cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 331.258426][ T7377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.266671][ T7377] R13: 00007f856ce26038 R14: 00007f856ce25fa0 R15: 00007ffd6d37c218 [ 331.275185][ T7377] [ 331.378277][ T7001] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (7001) [ 331.761271][ T7392] printk: console [ttyS0] disabled [ 331.854403][ T7397] printk: console [ttyS0] enabled [ 332.020466][ T7400] loop1: detected capacity change from 0 to 1024 [ 332.226644][ T7407] netlink: 'syz.0.358': attribute type 8 has an invalid length. [ 332.250921][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 332.252316][ T43] hfsplus: b-tree write err: -5, ino 25 [ 332.296935][ T43] hfsplus: b-tree write err: -5, ino 4 [ 332.328961][ T43] hfsplus: b-tree write err: -5, ino 2 [ 332.334740][ T43] hfsplus: b-tree write err: -5, ino 17 [ 332.339304][ T7407] veth1_to_team: entered promiscuous mode [ 332.396606][ T7407] gretap0: entered promiscuous mode [ 332.416678][ T7407] veth1_to_team: left promiscuous mode [ 332.437953][ T7407] gretap0: left promiscuous mode [ 333.078566][ T7429] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 334.557601][ T7444] syz.1.370 (7444): drop_caches: 2 [ 334.874918][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 335.306762][ T7474] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 336.007008][ T7479] loop1: detected capacity change from 0 to 32768 [ 336.035841][ T7479] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 336.141104][ T7139] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 336.711068][ T7515] netlink: 'syz.0.396': attribute type 4 has an invalid length. [ 336.739770][ T7515] netlink: 'syz.0.396': attribute type 4 has an invalid length. [ 337.173390][ T7520] syz.2.394 (7520): drop_caches: 2 [ 339.251288][ T7540] FAULT_INJECTION: forcing a failure. [ 339.251288][ T7540] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 339.264933][ T7540] CPU: 0 PID: 7540 Comm: syz.3.401 Not tainted syzkaller #0 [ 339.272443][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.282645][ T7540] Call Trace: [ 339.285955][ T7540] [ 339.288969][ T7540] dump_stack_lvl+0x18c/0x250 [ 339.293712][ T7540] ? show_regs_print_info+0x20/0x20 [ 339.298957][ T7540] ? load_image+0x420/0x420 [ 339.303516][ T7540] ? __might_fault+0xaa/0x120 [ 339.308226][ T7540] ? __lock_acquire+0x7d80/0x7d80 [ 339.313546][ T7540] ? __virt_addr_valid+0x10c/0x380 [ 339.318787][ T7540] should_fail_ex+0x394/0x4c0 [ 339.323504][ T7540] _copy_to_user+0x2f/0xa0 [ 339.327960][ T7540] bpf_verifier_vlog+0x5ac/0x840 [ 339.333202][ T7540] btf_verifier_log+0x11e/0x1a0 [ 339.338114][ T7540] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.344235][ T7540] ? btf_parse_graph_root+0xb00/0xb00 [ 339.349906][ T7540] ? mark_lock+0x94/0x320 [ 339.354386][ T7540] __btf_verifier_log_type+0x457/0x690 [ 339.359888][ T7540] ? sort_r+0x17f5/0x1810 [ 339.364489][ T7540] ? btf_int_show+0x2810/0x2810 [ 339.369594][ T7540] btf_datasec_check_meta+0x444/0xb50 [ 339.375028][ T7540] btf_check_all_metas+0x371/0xaf0 [ 339.380320][ T7540] btf_parse_type_sec+0xfc/0x1960 [ 339.385508][ T7540] ? btf_check_sec_info+0x350/0x350 [ 339.390926][ T7540] ? __virt_addr_valid+0x10c/0x380 [ 339.396272][ T7540] ? btf_verifier_log+0x1a0/0x1a0 [ 339.401482][ T7540] ? btf_parse_hdr+0x545/0x700 [ 339.406375][ T7540] ? btf_parse_str_sec+0x20d/0x2a0 [ 339.411527][ T7540] btf_new_fd+0x440/0x9e0 [ 339.415901][ T7540] ? bpf_btf_show_fdinfo+0x80/0x80 [ 339.421062][ T7540] ? capable+0x88/0xe0 [ 339.425345][ T7540] __sys_bpf+0x670/0x890 [ 339.429720][ T7540] ? bpf_link_show_fdinfo+0x560/0x560 [ 339.435138][ T7540] ? lock_chain_count+0x20/0x20 [ 339.440026][ T7540] __x64_sys_bpf+0x7c/0x90 [ 339.444479][ T7540] do_syscall_64+0x55/0xb0 [ 339.449104][ T7540] ? clear_bhb_loop+0x40/0x90 [ 339.453825][ T7540] ? clear_bhb_loop+0x40/0x90 [ 339.458547][ T7540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.464652][ T7540] RIP: 0033:0x7f730b79e159 [ 339.469522][ T7540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.489677][ T7540] RSP: 002b:00007f730c73e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 339.498253][ T7540] RAX: ffffffffffffffda RBX: 00007f730ba25fa0 RCX: 00007f730b79e159 [ 339.506241][ T7540] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 339.514217][ T7540] RBP: 00007f730b83506b R08: 0000000000000000 R09: 0000000000000000 [ 339.522461][ T7540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.530455][ T7540] R13: 00007f730ba26038 R14: 00007f730ba25fa0 R15: 00007ffc8698af08 [ 339.538447][ T7540] [ 339.549844][ T7502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.849581][ T7552] loop1: detected capacity change from 0 to 512 [ 339.934873][ T7552] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.407: missing EA_INODE flag [ 339.955712][ T7558] loop3: detected capacity change from 0 to 128 [ 339.987263][ T7552] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.407: error while reading EA inode 12 err=-117 [ 340.010491][ T7552] EXT4-fs (loop1): 1 orphan inode deleted [ 340.045760][ T7552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.107873][ T7559] syz.3.410: attempt to access beyond end of device [ 340.107873][ T7559] loop3: rw=2049, sector=145, nr_sectors = 328 limit=128 [ 340.186325][ T7552] EXT4-fs error (device loop1): __ext4_get_inode_loc:4509: comm syz.1.407: Invalid inode table block 538976288 in block_group 0 [ 340.210121][ T7552] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 340.255298][ T7552] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #15: comm syz.1.407: mark_inode_dirty error [ 340.308001][ T7552] EXT4-fs error (device loop1): __ext4_get_inode_loc:4509: comm syz.1.407: Invalid inode table block 538976288 in block_group 0 [ 340.356890][ T7552] EXT4-fs error (device loop1): ext4_get_max_inline_size:116: inode #15: comm syz.1.407: can't get inode location 15 [ 340.390643][ T7558] syz.3.410: attempt to access beyond end of device [ 340.390643][ T7558] loop3: rw=524288, sector=153, nr_sectors = 216 limit=128 [ 340.417537][ T7552] EXT4-fs error (device loop1): __ext4_get_inode_loc:4509: comm syz.1.407: Invalid inode table block 538976288 in block_group 0 [ 340.433586][ T7558] syz.3.410: attempt to access beyond end of device [ 340.433586][ T7558] loop3: rw=524288, sector=369, nr_sectors = 104 limit=128 [ 340.459813][ T7552] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 340.499252][ T7552] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #15: comm syz.1.407: mark_inode_dirty error [ 340.532066][ T7552] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.407: Invalid block bitmap block 1258963563 in block_group 0 [ 340.560297][ T12] kworker/u4:1: attempt to access beyond end of device [ 340.560297][ T12] loop3: rw=1, sector=145, nr_sectors = 6 limit=128 [ 340.578942][ T7552] EXT4-fs error (device loop1): __ext4_get_inode_loc:4509: comm syz.1.407: Invalid inode table block 538976288 in block_group 0 [ 340.786194][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.065919][ T7576] syz.1.416 (7576): drop_caches: 2 [ 341.139655][ T7561] loop2: detected capacity change from 0 to 736 [ 341.735234][ T5839] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 341.921603][ T5839] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 341.940152][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.949272][ T5839] usb 2-1: Product: syz [ 341.963884][ T5839] usb 2-1: Manufacturer: syz [ 341.972315][ T5839] usb 2-1: SerialNumber: syz [ 342.063043][ T5814] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 342.208702][ T7593] loop2: detected capacity change from 0 to 512 [ 342.301520][ T7593] EXT4-fs error (device loop2): ext4_quota_enable:7140: comm syz.2.422: Bad quota inum: 1, type: 2 [ 342.337434][ T7593] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 342.408152][ T7593] EXT4-fs (loop2): mount failed [ 342.538880][ T6926] usb 2-1: USB disconnect, device number 6 [ 342.640882][ T7605] FAULT_INJECTION: forcing a failure. [ 342.640882][ T7605] name failslab, interval 1, probability 0, space 0, times 0 [ 342.653775][ T7605] CPU: 0 PID: 7605 Comm: syz.3.426 Not tainted syzkaller #0 [ 342.661107][ T7605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.667236][ T7593] loop2: detected capacity change from 0 to 1024 [ 342.671176][ T7605] Call Trace: [ 342.680893][ T7605] [ 342.683844][ T7605] dump_stack_lvl+0x18c/0x250 [ 342.688655][ T7605] ? show_regs_print_info+0x20/0x20 [ 342.693987][ T7605] ? load_image+0x420/0x420 [ 342.698558][ T7605] ? __might_sleep+0xe0/0xe0 [ 342.703264][ T7605] ? __lock_acquire+0x7d80/0x7d80 [ 342.708474][ T7605] ? tcp_current_mss+0x6e0/0x6e0 [ 342.710516][ T7593] EXT4-fs: Ignoring removed orlov option [ 342.713706][ T7605] should_fail_ex+0x394/0x4c0 [ 342.724347][ T7605] should_failslab+0x9/0x20 [ 342.728929][ T7605] slab_pre_alloc_hook+0x59/0x300 [ 342.734035][ T7605] kmem_cache_alloc_node+0x5e/0x310 [ 342.739442][ T7605] ? __alloc_skb+0x103/0x2c0 [ 342.741565][ T7593] EXT4-fs: Invalid want_extra_isize 5 [ 342.744281][ T7605] __alloc_skb+0x103/0x2c0 [ 342.744316][ T7605] tcp_stream_alloc_skb+0x3d/0x330 [ 342.744341][ T7605] tcp_sendmsg_locked+0xcf0/0x4ab0 [ 342.764448][ T7605] ? mark_lock+0x94/0x320 [ 342.768823][ T7605] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 342.775029][ T7605] ? tcp_set_state+0x6c0/0x6c0 [ 342.779943][ T7605] tcp_sendmsg+0x2f/0x50 [ 342.784227][ T7605] __sys_sendto+0x4a9/0x6b0 [ 342.788855][ T7605] ? __ia32_sys_getpeername+0x90/0x90 [ 342.794504][ T7605] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 342.800535][ T7605] ? lock_chain_count+0x20/0x20 [ 342.805618][ T7605] __x64_sys_sendto+0xde/0xf0 [ 342.810439][ T7605] do_syscall_64+0x55/0xb0 [ 342.814976][ T7605] ? clear_bhb_loop+0x40/0x90 [ 342.819979][ T7605] ? clear_bhb_loop+0x40/0x90 [ 342.825132][ T7605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.831065][ T7605] RIP: 0033:0x7f730b79e159 [ 342.835519][ T7605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.855338][ T7605] RSP: 002b:00007f730c73e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 342.863841][ T7605] RAX: ffffffffffffffda RBX: 00007f730ba25fa0 RCX: 00007f730b79e159 [ 342.871849][ T7605] RDX: ffffffffffffff50 RSI: 0000200000000080 RDI: 0000000000000003 [ 342.879855][ T7605] RBP: 00007f730b83506b R08: 0000000000000000 R09: 0000000000000000 [ 342.887860][ T7605] R10: 0000000000000054 R11: 0000000000000246 R12: 0000000000000000 [ 342.895860][ T7605] R13: 00007f730ba26038 R14: 00007f730ba25fa0 R15: 00007ffc8698af08 [ 342.903966][ T7605] [ 342.938965][ T7001] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 343.119408][ T5814] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 343.145297][ T5814] ath9k_htc: Failed to initialize the device [ 343.176333][ T6926] usb 2-1: ath9k_htc: USB layer deinitialized [ 343.413385][ T7615] syz.1.428 (7615): drop_caches: 2 [ 343.994588][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 344.080414][ T7620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.416117][ T7642] lo: entered allmulticast mode [ 345.457539][ T7641] lo: left allmulticast mode [ 345.743215][ T5839] IPVS: starting estimator thread 0... [ 345.835605][ T7651] IPVS: using max 21 ests per chain, 50400 per kthread [ 346.075517][ T5839] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 346.123904][ T7666] loop1: detected capacity change from 0 to 512 [ 346.140849][ T7666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 346.148623][ T7666] ext4: Unknown parameter 'fsname' [ 346.418465][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 346.426630][ T5839] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 346.436582][ T5839] usb 4-1: config 0 has no interface number 0 [ 346.442860][ T5839] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 346.457857][ T5839] usb 4-1: config 0 interface 85 has no altsetting 0 [ 346.468595][ T5839] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 346.478915][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.487039][ T5839] usb 4-1: Product: syz [ 346.491308][ T5839] usb 4-1: Manufacturer: syz [ 346.496426][ T5839] usb 4-1: SerialNumber: syz [ 346.503695][ T5839] usb 4-1: config 0 descriptor?? [ 347.122029][ T5839] appletouch 4-1:0.85: Geyser mode initialized. [ 347.132082][ T5839] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input7 [ 347.374475][ T7675] loop1: detected capacity change from 0 to 128 [ 348.749495][ T5839] usb 4-1: USB disconnect, device number 5 [ 348.812022][ T7654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.832736][ T5839] appletouch 4-1:0.85: input: appletouch disconnected [ 349.213039][ T7735] binder: 7731:7735 ioctl c0306201 200000000080 returned -14 [ 349.272525][ T7735] binder: 7731:7735 ioctl c0306201 2000000003c0 returned -14 [ 349.472941][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 349.505469][ T7742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.468'. [ 350.720488][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 352.578296][ T7780] loop3: detected capacity change from 0 to 256 [ 352.627657][ T7780] FAT-fs (loop3): Unrecognized mount option "0+d>’ô|þº1ÂÑ26"¬Û=Þ" or missing value [ 352.948007][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.483'. [ 353.247455][ T7799] syz.2.488 (7799): drop_caches: 2 [ 353.908410][ T7819] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes»G [ 353.941538][ T7819] Error parsing options; rc = [-22] [ 355.485844][ T7882] netlink: 164 bytes leftover after parsing attributes in process `syz.0.515'. [ 356.039692][ T7874] loop3: detected capacity change from 0 to 32768 [ 356.094589][ T7874] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 356.212407][ T7874] XFS (loop3): Ending clean mount [ 356.255394][ T5839] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 356.310181][ T7874] XFS (loop3): Quotacheck needed: Please wait. [ 356.450985][ T5839] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 356.477327][ T5839] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 356.499924][ T7874] XFS (loop3): Quotacheck: Done. [ 356.516518][ T5839] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 356.536352][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.549875][ T5839] usb 3-1: Product: syz [ 356.574244][ T5839] usb 3-1: Manufacturer: syz [ 356.587711][ T5839] usb 3-1: SerialNumber: syz [ 356.607104][ T5839] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 356.664089][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 356.664106][ T28] audit: type=1804 audit(1790325537.462:61): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.514" name="/newroot/115/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 356.668384][ T5839] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 356.668384][ T5839] Please send a copy of this message to and [ 356.684949][ T7906] overlayfs: failed to clone upperpath [ 356.728379][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.738347][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.781714][ T28] audit: type=1804 audit(1790325537.582:62): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.514" name="/newroot/115/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 356.951874][ T5776] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 357.303347][ T5839] ums-sddr09: probe of 3-1:1.0 failed with error -32 [ 357.343017][ T5839] usb 3-1: USB disconnect, device number 4 [ 357.471378][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.498793][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.898824][ T7891] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.908487][ T7891] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.917946][ T7891] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.927320][ T7891] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.450198][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'. [ 358.459722][ T7924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.556223][ T7924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.574564][ T28] audit: type=1326 audit(1790325539.372:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.0.528" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce8a59e159 code=0x0 [ 358.695544][ T5833] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 358.907255][ T5833] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 358.916373][ T5833] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.941079][ T5833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 358.964214][ T5833] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.997469][ T5833] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 359.007396][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 359.025219][ T5833] usb 4-1: Product: syz [ 359.035474][ T5833] usb 4-1: Manufacturer: syz [ 359.066152][ T5833] cdc_wdm 4-1:1.0: skipping garbage [ 359.071421][ T5833] cdc_wdm 4-1:1.0: skipping garbage [ 359.117727][ T5833] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 359.134218][ T5833] cdc_wdm 4-1:1.0: Unknown control protocol [ 359.347387][ T5833] usb 4-1: USB disconnect, device number 6 [ 359.965435][ T5833] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 360.177385][ T5833] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 360.191189][ T5833] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.211061][ T5833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 360.221461][ T5833] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.240093][ T5833] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 360.251622][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 360.263123][ T5833] usb 4-1: Product: syz [ 360.270051][ T5833] usb 4-1: Manufacturer: syz [ 360.290240][ T5833] cdc_wdm 4-1:1.0: skipping garbage [ 360.301743][ T5833] cdc_wdm 4-1:1.0: skipping garbage [ 360.311962][ T5833] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 360.323084][ T5833] cdc_wdm 4-1:1.0: Unknown control protocol [ 360.338426][ T7945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.168706][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 361.212903][ T5814] usb 4-1: USB disconnect, device number 7 [ 361.738372][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c0d [ 362.625253][ T5814] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 362.839546][ T5814] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 362.865271][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.873635][ T5814] usb 4-1: Product: syz [ 362.896951][ T5814] usb 4-1: Manufacturer: syz [ 362.901640][ T5814] usb 4-1: SerialNumber: syz [ 363.054947][ T7997] loop2: detected capacity change from 0 to 32768 [ 363.097322][ T7997] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.552 (7997) [ 363.162458][ T7997] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 363.181531][ T7997] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 363.205089][ T7997] BTRFS info (device loop2): disabling tree log [ 363.212968][ T7997] BTRFS info (device loop2): using free space tree [ 363.331355][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 363.349768][ T5814] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 363.395492][ T7997] BTRFS info (device loop2): enabling ssd optimizations [ 363.429684][ T7997] BTRFS info (device loop2): auto enabling async discard [ 363.819236][ T33] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 364.149688][ T8026] BTRFS info (device loop2): balance: start -d -m [ 364.267276][ T8026] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 364.519785][ T8026] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 364.639277][ T8043] overlayfs: failed to clone upperpath [ 365.050996][ T8026] BTRFS info (device loop2): found 9 extents, stage: move data extents [ 365.147712][ T8026] BTRFS info (device loop2): balance: canceled [ 365.428455][ T5775] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 365.471961][ T5814] usb 4-1: USB disconnect, device number 8 [ 365.497372][ T5814] usblp0: removed [ 365.507205][ T8058] overlayfs: failed to clone upperpath [ 366.175331][ T8070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.566'. [ 366.250774][ T8070] bond1: entered promiscuous mode [ 366.257039][ T8070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.306065][ T8075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.313233][ T8075] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 366.357451][ T8075] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 366.669717][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'. [ 367.006929][ T28] audit: type=1326 audit(1790325547.812:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.2.576" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434939e159 code=0x7ffc0000 [ 367.035249][ T28] audit: type=1326 audit(1790325547.812:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.2.576" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434939e159 code=0x7ffc0000 [ 367.091498][ T28] audit: type=1326 audit(1790325547.832:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.2.576" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f434939e159 code=0x7ffc0000 [ 367.138414][ T28] audit: type=1326 audit(1790325547.832:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.2.576" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434939e159 code=0x7ffc0000 [ 367.202593][ T28] audit: type=1326 audit(1790325547.832:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.2.576" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434939e159 code=0x7ffc0000 [ 367.227577][ T28] audit: type=1326 audit(1790325547.862:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.2.576" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f434935e98e code=0x7ffc0000 [ 367.307781][ T28] audit: type=1326 audit(1790325547.862:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.2.576" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434939e159 code=0x7ffc0000 [ 367.407609][ T28] audit: type=1326 audit(1790325547.862:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.2.576" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434939e159 code=0x7ffc0000 [ 367.437957][ T28] audit: type=1326 audit(1790325547.862:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.2.576" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f434939e159 code=0x7ffc0000 [ 367.533386][ T28] audit: type=1326 audit(1790325547.862:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.2.576" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434939e159 code=0x7ffc0000 [ 367.952809][ T5789] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 368.569236][ T8148] FAULT_INJECTION: forcing a failure. [ 368.569236][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 368.600567][ T8148] CPU: 0 PID: 8148 Comm: syz.3.590 Not tainted syzkaller #0 [ 368.607928][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 368.615894][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c23 [ 368.618006][ T8148] Call Trace: [ 368.628224][ T8148] [ 368.631287][ T8148] dump_stack_lvl+0x18c/0x250 [ 368.636054][ T8148] ? show_regs_print_info+0x20/0x20 [ 368.641302][ T8148] ? load_image+0x420/0x420 [ 368.645875][ T8148] ? __might_sleep+0xe0/0xe0 [ 368.650534][ T8148] ? __lock_acquire+0x7d80/0x7d80 [ 368.655697][ T8148] should_fail_ex+0x394/0x4c0 [ 368.660429][ T8148] should_failslab+0x9/0x20 [ 368.664990][ T8148] slab_pre_alloc_hook+0x59/0x300 [ 368.670092][ T8148] kmem_cache_alloc_lru+0x4d/0x2b0 [ 368.675260][ T8148] ? proc_alloc_inode+0x2a/0xb0 [ 368.680193][ T8148] proc_alloc_inode+0x2a/0xb0 [ 368.684918][ T8148] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 368.691304][ T8148] new_inode_pseudo+0x63/0x1d0 [ 368.696156][ T8148] new_inode+0x22/0x1d0 [ 368.700357][ T8148] ? __rwlock_init+0x150/0x150 [ 368.705160][ T8148] proc_get_inode+0x22/0x730 [ 368.709802][ T8148] proc_lookup_de+0x248/0x2f0 [ 368.714570][ T8148] proc_tgid_net_lookup+0x63/0xf0 [ 368.719731][ T8148] ? proc_create_net_single_write+0x190/0x190 [ 368.725837][ T8148] path_openat+0x1110/0x3270 [ 368.730590][ T8148] ? do_filp_open+0x430/0x430 [ 368.735324][ T8148] do_filp_open+0x1f2/0x430 [ 368.739998][ T8148] ? vfs_tmpfile+0x620/0x620 [ 368.744723][ T8148] ? noop_direct_IO+0x20/0x20 [ 368.749445][ T8148] ? _raw_spin_unlock+0x28/0x40 [ 368.754467][ T8148] ? alloc_fd+0x590/0x640 [ 368.758866][ T8148] do_sys_openat2+0x134/0x1d0 [ 368.763602][ T8148] ? do_sys_open+0xe0/0xe0 [ 368.768077][ T8148] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 368.774122][ T8148] ? lock_chain_count+0x20/0x20 [ 368.779023][ T8148] __x64_sys_openat+0x139/0x160 [ 368.783933][ T8148] do_syscall_64+0x55/0xb0 [ 368.788480][ T8148] ? clear_bhb_loop+0x40/0x90 [ 368.793299][ T8148] ? clear_bhb_loop+0x40/0x90 [ 368.798029][ T8148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.804060][ T8148] RIP: 0033:0x7f730b75e98e [ 368.808704][ T8148] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 368.828439][ T8148] RSP: 002b:00007f730c73dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 368.836899][ T8148] RAX: ffffffffffffffda RBX: 00007f730c73e6c0 RCX: 00007f730b75e98e [ 368.844909][ T8148] RDX: 0000000000000002 RSI: 00007f730c73df90 RDI: ffffffffffffff9c [ 368.852921][ T8148] RBP: 00007f730b83506b R08: 0000000000000000 R09: 0000000000000000 [ 368.860926][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.869017][ T8148] R13: 00007f730ba26038 R14: 00007f730ba25fa0 R15: 00007ffc8698af08 [ 368.877216][ T8148] [ 369.134393][ T8161] syzkaller0: entered promiscuous mode [ 369.151798][ T8161] syzkaller0: entered allmulticast mode [ 372.506781][ T8211] netlink: 'syz.3.603': attribute type 1 has an invalid length. [ 374.521611][ T8239] netlink: 'syz.2.609': attribute type 1 has an invalid length. [ 374.731510][ T8246] wireguard0: entered promiscuous mode [ 374.798334][ T8246] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 374.810209][ T8246] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 374.825636][ T8246] bond2: (slave wireguard0): making interface the new active one [ 374.837190][ T8246] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 374.861248][ T8242] wireguard1: entered promiscuous mode [ 374.867521][ T8242] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 374.908254][ T8242] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 375.938656][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 375.975293][ T8259] bridge_slave_1: left allmulticast mode [ 375.981013][ T8259] bridge_slave_1: left promiscuous mode [ 376.009570][ T8259] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.038297][ T8259] bridge_slave_0: left allmulticast mode [ 376.068756][ T8259] bridge_slave_0: left promiscuous mode [ 376.084326][ T8259] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.400528][ T8291] futex_wake_op: syz.3.620 tries to shift op by 144; fix this program [ 378.419396][ T8291] trusted_key: syz.3.620 sent an empty control message without MSG_MORE. [ 380.340117][ T8334] loop3: detected capacity change from 0 to 128 [ 381.985010][ T5776] ffs_data_put(): freeing [ 382.174269][ T8340] loop3: detected capacity change from 0 to 512 [ 382.252771][ T8340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.290035][ T8340] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.533948][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.240170][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.309589][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.625934][ T8362] syz.3.636 (8362): drop_caches: 2 [ 387.565215][ T5833] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 387.795255][ T5833] usb 3-1: Using ep0 maxpacket: 8 [ 387.826185][ T5833] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.849363][ T5833] usb 3-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 387.876841][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.883717][ T5833] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 387.904609][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.920561][ T5833] usb 3-1: config 0 descriptor?? [ 388.461974][ T5833] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 388.477892][ T5833] usb 3-1: USB disconnect, device number 5 [ 388.951689][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.646'. [ 388.963359][ T8402] loop2: detected capacity change from 0 to 512 [ 389.004273][ T8402] EXT4-fs (loop2): Test dummy encryption mode enabled [ 389.066993][ T8402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.434448][ T8402] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.644: Invalid block bitmap block 808464504 in block_group 0 [ 389.462931][ T7001] udevd[7001]: incorrect ext4 checksum on /dev/loop2 [ 389.524634][ T8402] EXT4-fs (loop2): Remounting filesystem read-only [ 389.694201][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.992154][ T8422] netlink: 'syz.3.649': attribute type 1 has an invalid length. [ 390.084986][ T8422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.281482][ T8427] bond1: (slave veth3): Enslaving as an active interface with a down link [ 390.323144][ T8426] bond_slave_0: entered promiscuous mode [ 390.329641][ T8426] bond_slave_1: entered promiscuous mode [ 390.345554][ T8426] vlan0: entered promiscuous mode [ 390.356619][ T8426] bond0: entered promiscuous mode [ 390.449248][ T8422] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 390.483367][ T8422] bond1: (slave batadv1): making interface the new active one [ 390.511450][ T8422] batadv1: entered promiscuous mode [ 390.520003][ T8422] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 390.590883][ T8430] loop2: detected capacity change from 0 to 1024 [ 390.622114][ T8430] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 390.648820][ T8427] veth5: entered allmulticast mode [ 390.665374][ T8430] JBD2: no valid journal superblock found [ 390.690836][ T8427] bond1: (slave veth5): Enslaving as an active interface with a down link [ 390.700380][ T8430] EXT4-fs (loop2): Could not load journal inode [ 391.002172][ T5789] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 391.009607][ T5789] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 391.724841][ T8326] Set syz1 is full, maxelem 65536 reached [ 392.067905][ T5789] [ 392.070289][ T5789] ====================================================== [ 392.077525][ T5789] WARNING: possible circular locking dependency detected [ 392.084762][ T5789] syzkaller #0 Not tainted [ 392.089192][ T5789] ------------------------------------------------------ [ 392.096420][ T5789] kworker/u5:8/5789 is trying to acquire lock: [ 392.102678][ T5789] ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x41/0x550 [ 392.112306][ T5789] [ 392.112306][ T5789] but task is already holding lock: [ 392.119771][ T5789] ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x2e1/0xba0 [ 392.129723][ T5789] [ 392.129723][ T5789] which lock already depends on the new lock. [ 392.129723][ T5789] [ 392.140245][ T5789] [ 392.140245][ T5789] the existing dependency chain (in reverse order) is: [ 392.149889][ T5789] [ 392.149889][ T5789] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 392.157915][ T5789] __mutex_lock+0x135/0xc80 [ 392.163060][ T5789] hci_remote_features_evt+0x535/0x900 [ 392.169154][ T5789] hci_event_packet+0x807/0x1280 [ 392.174647][ T5789] hci_rx_work+0x43a/0xd60 [ 392.179701][ T5789] process_scheduled_works+0xa60/0x1600 [ 392.185804][ T5789] worker_thread+0xa5e/0xfe0 [ 392.190947][ T5789] kthread+0x2fa/0x390 [ 392.195569][ T5789] ret_from_fork+0x48/0x80 [ 392.200674][ T5789] ret_from_fork_asm+0x11/0x20 [ 392.206021][ T5789] [ 392.206021][ T5789] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 392.213526][ T5789] __mutex_lock+0x135/0xc80 [ 392.218677][ T5789] l2cap_chan_connect+0xfc/0xe30 [ 392.224355][ T5789] l2cap_sock_connect+0x586/0x760 [ 392.230107][ T5789] kernel_connect+0x142/0x1c0 [ 392.235338][ T5789] rfcomm_dlc_open+0xa1f/0xec0 [ 392.240716][ T5789] rfcomm_sock_connect+0x2ed/0x600 [ 392.246476][ T5789] __sys_connect+0x3da/0x470 [ 392.251630][ T5789] __x64_sys_connect+0x7a/0x90 [ 392.256970][ T5789] do_syscall_64+0x55/0xb0 [ 392.261952][ T5789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.268595][ T5789] [ 392.268595][ T5789] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 392.276281][ T5789] __lock_acquire+0x37ef/0x7d80 [ 392.281718][ T5789] lock_acquire+0x19e/0x420 [ 392.286859][ T5789] __mutex_lock+0x135/0xc80 [ 392.291922][ T5789] rfcomm_security_cfm+0x41/0x550 [ 392.297615][ T5789] hci_auth_complete_evt+0x366/0xba0 [ 392.303455][ T5789] hci_event_packet+0x807/0x1280 [ 392.308945][ T5789] hci_rx_work+0x43a/0xd60 [ 392.313919][ T5789] process_scheduled_works+0xa60/0x1600 [ 392.320021][ T5789] worker_thread+0xa5e/0xfe0 [ 392.325164][ T5789] kthread+0x2fa/0x390 [ 392.330045][ T5789] ret_from_fork+0x48/0x80 [ 392.335019][ T5789] ret_from_fork_asm+0x11/0x20 [ 392.340435][ T5789] [ 392.340435][ T5789] other info that might help us debug this: [ 392.340435][ T5789] [ 392.350682][ T5789] Chain exists of: [ 392.350682][ T5789] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 392.350682][ T5789] [ 392.363358][ T5789] Possible unsafe locking scenario: [ 392.363358][ T5789] [ 392.370831][ T5789] CPU0 CPU1 [ 392.376303][ T5789] ---- ---- [ 392.381954][ T5789] lock(hci_cb_list_lock); [ 392.386492][ T5789] lock(&hdev->lock); [ 392.393107][ T5789] lock(hci_cb_list_lock); [ 392.400245][ T5789] lock(rfcomm_mutex); [ 392.404456][ T5789] [ 392.404456][ T5789] *** DEADLOCK *** [ 392.404456][ T5789] [ 392.412630][ T5789] 4 locks held by kworker/u5:8/5789: [ 392.417933][ T5789] #0: ffff88814827e938 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 392.428962][ T5789] #1: ffffc9000484fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 392.441799][ T5789] #2: ffff88807cee00b8 (&hdev->lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x98/0xba0 [ 392.451759][ T5789] #3: ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x2e1/0xba0 [ 392.462243][ T5789] [ 392.462243][ T5789] stack backtrace: [ 392.468167][ T5789] CPU: 1 PID: 5789 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 392.476057][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.486105][ T5789] Workqueue: hci1 hci_rx_work [ 392.490793][ T5789] Call Trace: [ 392.494073][ T5789] [ 392.497084][ T5789] dump_stack_lvl+0x18c/0x250 [ 392.501766][ T5789] ? load_image+0x420/0x420 [ 392.506264][ T5789] ? show_regs_print_info+0x20/0x20 [ 392.511461][ T5789] ? print_circular_bug+0x12b/0x1a0 [ 392.516657][ T5789] check_noncircular+0x2fc/0x400 [ 392.521622][ T5789] ? print_deadlock_bug+0x5d0/0x5d0 [ 392.526823][ T5789] ? lockdep_lock+0xf5/0x230 [ 392.531416][ T5789] ? _find_first_zero_bit+0xd6/0x100 [ 392.536866][ T5789] __lock_acquire+0x37ef/0x7d80 [ 392.541720][ T5789] ? verify_lock_unused+0x140/0x140 [ 392.546913][ T5789] ? l2cap_security_cfm+0x1277/0x1300 [ 392.552389][ T5789] ? __lock_acquire+0x7d80/0x7d80 [ 392.557445][ T5789] lock_acquire+0x19e/0x420 [ 392.561953][ T5789] ? rfcomm_security_cfm+0x41/0x550 [ 392.567151][ T5789] ? __might_sleep+0xe0/0xe0 [ 392.571757][ T5789] ? read_lock_is_recursive+0x20/0x20 [ 392.577127][ T5789] ? __mutex_trylock_common+0x160/0x270 [ 392.582674][ T5789] __mutex_lock+0x135/0xc80 [ 392.587198][ T5789] ? rfcomm_security_cfm+0x41/0x550 [ 392.592396][ T5789] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 392.598478][ T5789] ? rfcomm_security_cfm+0x41/0x550 [ 392.603687][ T5789] ? lock_chain_count+0x20/0x20 [ 392.608625][ T5789] ? mutex_lock_nested+0x20/0x20 [ 392.613649][ T5789] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 392.619802][ T5789] ? lockdep_hardirqs_on+0x98/0x150 [ 392.625150][ T5789] ? l2cap_disconn_cfm+0xc0/0xc0 [ 392.630181][ T5789] rfcomm_security_cfm+0x41/0x550 [ 392.635204][ T5789] ? rfcomm_send_msc+0x360/0x360 [ 392.640205][ T5789] hci_auth_complete_evt+0x366/0xba0 [ 392.645491][ T5789] ? hci_disconn_complete_evt+0x900/0x900 [ 392.651902][ T5789] ? hci_event_packet+0x7f9/0x1280 [ 392.657050][ T5789] ? hci_disconn_complete_evt+0x900/0x900 [ 392.662760][ T5789] hci_event_packet+0x807/0x1280 [ 392.667711][ T5789] ? __lock_acquire+0x7d80/0x7d80 [ 392.673085][ T5789] ? lock_chain_count+0x20/0x20 [ 392.677936][ T5789] ? bis_list+0x290/0x290 [ 392.682268][ T5789] ? kcov_remote_start+0x513/0x810 [ 392.687404][ T5789] ? lockdep_hardirqs_on+0x98/0x150 [ 392.692711][ T5789] ? hci_send_to_monitor+0xd7/0x4f0 [ 392.697927][ T5789] hci_rx_work+0x43a/0xd60 [ 392.702440][ T5789] ? process_scheduled_works+0x975/0x1600 [ 392.708333][ T5789] process_scheduled_works+0xa60/0x1600 [ 392.714062][ T5789] ? worker_attach_to_pool+0x370/0x370 [ 392.719524][ T5789] ? assign_work+0x3cc/0x5d0 [ 392.724116][ T5789] worker_thread+0xa5e/0xfe0 [ 392.728801][ T5789] ? _raw_spin_unlock+0x40/0x40 [ 392.733732][ T5789] ? __kthread_parkme+0x71/0x1c0 [ 392.738763][ T5789] kthread+0x2fa/0x390 [ 392.742930][ T5789] ? pr_cont_work+0x550/0x550 [ 392.747625][ T5789] ? kthread_blkcg+0xd0/0xd0 [ 392.752280][ T5789] ret_from_fork+0x48/0x80 [ 392.756904][ T5789] ? kthread_blkcg+0xd0/0xd0 [ 392.761513][ T5789] ret_from_fork_asm+0x11/0x20 [ 392.766307][ T5789] [ 398.955257][ T5781] Bluetooth: hci1: command 0x0406 tx timeout