last executing test programs: 14.161262056s ago: executing program 5 (id=1448): r0 = mq_open(&(0x7f0000000400)='!d|\x00\x00\x8d\x00)|T\r\x1a\x10\xa9\x9b\xb8\xc2V\xc9\xa2>UgY\x94y\x00\x15H\xc3\xbc\xb2]\x1e\xf81.\x9e\x92h\xbe#U\x02', 0x0, 0x0, &(0x7f0000000300)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000000)={@ifindex, 0x0, 0x0, 0x0, 0x0, 0x51b3171e3183d77e, 0x0, 0x0, 0x0, 0x0}, 0x40) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) io_setup(0xfeed, &(0x7f0000000000)) syz_open_dev$mouse(0x0, 0xfffffffa, 0x30141) open(&(0x7f0000000340)='./file0\x00', 0x101080, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000004000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900010073797a3000000000080007006e6174000900030073797a32000000001400048008000240"], 0x90}}, 0x0) eventfd2(0x80, 0x80000) 13.342047225s ago: executing program 5 (id=1454): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000003c0)={@remote, 0x1d, r3}) sendmmsg$inet6(r1, &(0x7f0000000680), 0x0, 0x4004000) 12.985637258s ago: executing program 5 (id=1456): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x380}]}, 0x34}}, 0x0) 11.830631632s ago: executing program 5 (id=1459): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0xfffffffffffffc01, 0x0) splice(r2, 0x0, r5, 0x0, 0x9aa7, 0x0) read$FUSE(r4, &(0x7f0000001c40)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x10000000, 0x1, {0x0}}) 10.497336823s ago: executing program 5 (id=1462): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x0, 0xfffffffe}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000973f00010000000000000000001c00000000000000000000000800010000000000"], 0x24}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000500)=0x6, 0x4) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000500)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x5, 0x5, 0x0, @mcast1, @remote, 0x1, 0x80, 0x6, 0x5}}) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0x2000011a) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(&(0x7f0000000000)='./file0\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x282603, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x282603, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x3, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x3, 0x1}) 9.864156949s ago: executing program 5 (id=1467): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1}}) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) r1 = io_uring_setup(0x104c, &(0x7f0000001440)) close(r1) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) 9.206112945s ago: executing program 3 (id=1469): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x5609, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x218880, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) timer_create(0x2, &(0x7f00000001c0)={0x0, 0xc, 0x4, @tid=r5}, &(0x7f00000002c0)) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) 8.806089886s ago: executing program 1 (id=1470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getchain={0x34, 0x66, 0x20, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x0, 0x6}, {0x0, 0x10}}, [{0x8, 0xb, 0x182e}, {0x8, 0xb, 0x8}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000019080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0179e1d}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000019100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000fd70f1e5000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000009500"/76], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f00000190c0)=0x2) symlink(&(0x7f0000000500)='./file0\x00', 0x0) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000004040)=""/4092, 0xffc) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x8108551b, &(0x7f0000002a40)) 7.864896297s ago: executing program 3 (id=1471): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x380}]}, 0x34}}, 0x0) 7.552170122s ago: executing program 3 (id=1473): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00', 0xffffffff}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000000000000500000018f2fc6b8077753d0f41be230f690001681400020062"], 0x34}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000000)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffff34, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000240)=0x3, 0x4) 6.666268705s ago: executing program 1 (id=1475): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x1d, 0x0, [{0x0, 0x8, "34a6caf58db7"}, {0x0, 0x2}, {0x0, 0xd, "4f1347dfaaca82c253d084"}]}]}}}}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.418112553s ago: executing program 3 (id=1476): io_setup(0x1, &(0x7f00000000c0)) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000009780), 0x1, 0x96d4, &(0x7f00000097c0)="$eJzs/QW8bXWhcH/vA4fuUGkpBaVBykC6RERCQpAuSQEpRUAsQBQDpbu7u7u7u7u7eT8HDqjcAdf7vPf/cO8zxvh49tprrbnn/q3fd87pXntu1lpuwaXmHRgYc+CDPrz8R7uvNtYR2wwsft4hmz907+pvTnvO0JuH/+BirLmHXs4z9HLegYGBQUPXM+iD2wbPdfIpwwwMHhjyv3806kgjDzPqwMDIQ68OXc/A7B9cjHLoh8u997F4oJMO+XY7ffDv/UYbspL3B7rKPOMNDAyM+E9fP2RcM/6HByptuXkWWvAfVh+5DTP07kH/uO/9y8Ef/BvlwIGBUfYf+OTtY8iyw/3T1/7fbMj3HPPuLVZ7/DP43v/rWm6ehRb5mP+QfXHYobfNPmQf//g+aOzj2/lal9+9ytApHDR04gb/0/7yWWz3/0ctN8+Ciw188n48cPRDs53z3vvHzcHzDwwMXmBgYPCCAwODF/qsPeq/p89046uqqqrPpHnmnWXIc/ZhPvbzwIgf/lxLPxde9vxLdw4MDF78g+eJg1f58LlgVVVVVVVVVf3PbJ55Z5kPnv+P+WnP/2c4bcEZev5fVVVVVVVV9b+nReaZd5Yhz/U/9vx/vE97/v/eoxvt9cHf/s89+wdf9e5n+yCqqqqqqqqq6lNbcBF8/j/ppz3/v+T0B5/v+X9VVVVVVVXV/56WnGXB+Qb+6XX2ht489Yf30/P/E5+aaPXParxVVVVVVVVV9V/v3WfOPPcfr/k+ycDHXu/9/Yb+XmDQ8edff/1nNtD/GQ36j78P2e6zHtP/vw1xHvHISQcGNlzmsx5KfQb9r3mt+vr/pPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wnnP//6PX/x197zMeGLjrV6bs+t8E/vvL99/4fvPgiz2z/GQ39s+j/1fP/A+sOGhgY6jvmugMDA4vPs+TSUw8MDGzw3K6nTznw0X1zDLnvG2MP+/4bxH/4n4ksMBaveLvJP7gcsqEMjPvROo5/f/2LvHfAsIM+Noh/aqxTDzlkneVe+9rHL6f65McxzIefLHvBLvt9+N+yDPOxhUb8hC/+cP0fPpaPOw8d+9RDxj7DZhtsPMOmW2093bobrLr2mmuvueEsM88604yzzTTnjLPOsNa666854wcfP2HOJn3/43z/zpyN+vE5e2aef56zjz+2T5qzST99zt5f47CXnTbWh3M2+L84Z/N9+pxNuu7QbzTW3MMNrPL+1AwaGBhr/uEGthxyZaYRBgbGWmDosuMNWfabYw8zMLDrPx7okM9G+GgbHLTdkGWWW3CpeT84TA0M/OPyH33C+9kPP3Tkcw+9nGfo5bwffJsxB/6xKQ6e6+RThhkyF/8yHaOONPIwow4MjDz06tD1DMz5wcXIZ3243Ce8z/rHBvr+y6zs9MG/9xttYGBglCGfzL/qoJeGTP3/hfdp/z/6////4DXHoI+2x0FD/w1d5gOveRZa5B/f6/1pGDJ3ww69bfYhJv/Nb23/L/2H8U464sCknzLeT3ldnPej7Wv1U287+7/rdXFovON9yng/5XV8P3G8yz++wm0frOq/bbwfO9Yt9v7Huf+dY93Apx/rhqUVrHnNxB8/1n3nk4f4L4fLD+dohI8t9EnHuiVmv3a7Ieuf+9OPdYsNGftw/3KsG2ZgYKz5PjzWDTnwLTjcwK5Drsw85MpCww0cPuTKLO9fGWng/CFXpl99o/XXGHLDwv9xO5h60L/8gSbsZwt+bD8b9E+PfdDH/r5z8AeXoxz44Xs4fcJxc9DQh/WfHitoux3zU8b7Ke8/hfM85Lb1zrlymv+u95+i8Y746eP9pPfL/sTx7vDmtvf+N4/3o/1suH+aroX/nf1s0n/dz4Y8xGH/ac/4d38OWwOW/+Dz8T5a2x5jHP/RzxTDfWy9/9nPFAt/+n425rof+7od9x8Y9Glzs9C/MzcT/Ydj0Pb/PDf/7s9bU0/xwf3DfsrcXD+w0rYfzs3w/8W5Wei/OjdzDwz7r3MzeGCBgYGBKYceHxb8d+ZmvE+fm393uxkZlv/g8zU/umn+ia6e7MO5+fhc/Gdzs+B/dW4m/Wi7mfL9+yYfZmD44Qe2XHWzzTaZ6YOPH16d+YOPn74Pzv/vzOWY/z1zOcHgT5rLf2yquy280o7/yT74H47pH65//v/qXA58NJcD6358Z6n/qfX7P3f5u8vfXf7u8neXv7v8xX3C+f+PXv9/iT3On23oLzeGm/C+68b5rMf7Gff/9Pn/ob7/cv5/nOvum3CYgY/u+9Tzsx8s8z/y/OzsH1yMcuiHy338/CAP9JPPz745584v/l86P/t/1If76r/xe7iO/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xn3D+f8YP/w7gsqtPXHHoidDh3rvjqkU/6/F+xv0/ff5/qO+/nP9f9Ko73htm4KP7PvX8/wfLOM7/n/7Wm2/+Tz7//+G+2vn/+k/K313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFfcL5/7k//DuAOS+5bOUP/x7ginufmuizHu9n3P+r5/97/39vHf/d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4oae/x/42NtbLtF2gcH5///dfYL/9/PHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4v+D/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4/zB/zOK/Yv6YxX+l/DGL/4/yxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvH/cf6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvH/Sf6YxX+T/DGL/6b5Yxb/zfLHLP4/zR+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/n+WPWfx/nj9m8d8mf8zi/4v8MYv/tvljFv/t8scs/tvnj1n8f5k/ZvHfIX/M4v+r/DGL/6/zxyz+v8kfs/j/Nn/M4v+7/DGL/475Yxb/nfLHLP47549Z/H+fP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvH/c/6Yxf8v+WMW/7/mj1n8d8sfs/j/LX/M4v/3/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J3/M4v9u/pjF/738MYn/oIH8MYv/oPwxi/8w+WMW/2Hzxyz+g/PHLP7D5Y9Z/IfPH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+n8sfs/h/Pn/M4v+F/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjF/4v5Yxb/SfPHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4v+l/DGL/5fzxyz+U+WPWfynzh+z+H8lf8zi/9X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/lj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi//X88cs/t/IH7P4fzN/zOL/rfwxi/9c+WMW/2/nj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOL/nfwxi/9i+WMW/+/mj1n8F88fs/h/L3/M4r9E/pjF//v5Yxb/JfPHLP5L5Y9Z/JfOH7P4L5M/ZvH/Qf6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/H+YP2bxXzF/zOK/Uv6Yxf9H+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4/zh/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4/yR/zOK/Sf6YxX/T/DGL/2b5Yxb/n+aPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/8/yxyz+P88fs/hvkz9m8f9F/pjFf9v8MYv/dvljFv/t88cs/r/MH7P475A/ZvH/Vf6Yxf/X+WMW/9/kj1n8f5s/ZvH/Xf6YxX/H/DGL/075Yxb/nfPHLP6/zx+z+O+SP2bx/0P+mMX/j/ljFv9d88cs/n/KH7P4/zl/zOL/l/wxi/9f88cs/rvlj1n8/5Y/ZvH/e/6YxX/3/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/ZvF/N3/M4v9e/pjE//1P8/+PWfwH5Y9Z/IfJH7P4D5s/ZvEfnD9m8R8uf8ziP3z+mMV/hPwxi/+I+WMW/5Hyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvH/XP6Yxf/z+WMW/y/kj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+X8wfs/hPmj9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/y/lj1n8v5w/ZvGfKn/M4j91/pjF/yv5Yxb/r+aPWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fy1/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/L+eP2bx/0b+mMX/m/ljFv9v5Y9Z/OfKH7P4fzt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv/v5I9Z/BfLH7P4fzd/zOK/eP6Yxf97+WMW/yXyxyz+388fs/gvmT9m8V8qf8ziv3T+mMV/mfwxi/8P8scs/svmj1n8l8sfs/gvnz9m8V8hf8zi/8P8MYv/ivljFv+V8scs/j/KH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/x/ljFv/18scs/uvnj1n8N8gfs/hvmD9m8d8of8ziv3H+mMX/J/ljFv9N8scs/pvmj1n8N8sfs/j/NH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8f5Y/ZvH/ef6YxX+b/DGL/y/yxyz+2+aPWfy3yx+z+G+fP2bx/2X+mMV/h/wxi/+v8scs/r/OH7P4/yZ/zOL/2/wxi//v8scs/jvmj1n8d8ofs/jvnD9m8f99/pjFf5f8MYv/H/LHLP5/zB+z+O+aP2bx/1P+mMX/z/ljFv+/5I9Z/P+aP2bx3y1/zOL/t/wxi//f88cs/rvnj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxi/+7+WMW//fyxyT+ww7kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bx/1z+mMX/8/ljFv8v5I9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/l/MH7P4T5o/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv8v5Y9Z/L+cP2bxnyp/zOI/df6Yxf8r+WMW/6/mj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+H8tf8ziP2v+mMV/tvwxi//s+WMW/znyxyz+c+aPWfy/nj9m8f9G/pjF/5v5Yxb/b+WPWfznyh+z+H87f8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/7+SPWfwXyx+z+H83f8ziv3j+mMX/e/ljFv8l8scs/t/PH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/D/LHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4v/D/DGL/4r5Yxb/lfLHLP4/yh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjF/8f5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4r9x/pjF/yf5Yxb/TfLHLP6b5o9Z/DfLH7P4/zR/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/H+WP2bx/3n+mMV/m/wxi/8v8scs/tvmj1n8t8sfs/hvnz9m8f9l/pjFf4f8MYv/r/LHLP6/zh+z+P8mf8zi/9v8MYv/7/LHLP475o9Z/HfKH7P475w/ZvH/ff6YxX+X/DGL/x/yxyz+f8wfs/jvmj9m8f9T/pjF/8/5Yxb/v+SPWfz/mj9m8d8tf8zi/7f8MYv/3/PHLP67549Z/PfIH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K3/M4v92/pjF/538MYv/u/ljFv/38sck/oMH8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+H8uf8zi//n8MYv/F/LHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv8v5o9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/l/LHLP5fzh+z+E+VP2bxnzp/zOL/lfwxi/9X88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+X88fs/h/I3/M4v/N/DGL/7fyxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/3fyxyz+i+WPWfy/mz9m8V88f8zi/738MYv/EvljFv/v549Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/wf5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvH/Yf6YxX/F/DGL/0r5Yxb/H+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4v/j/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4v+T/DGL/yb5Yxb/TfPHLP6b5Y9Z/H+aP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP4/yx+z+P88f8ziv03+mMX/F/ljFv9t88cs/tvlj1n8t88fs/j/Mn/M4r9D/pjF/1f5Yxb/X+ePWfx/kz9m8f9t/pjF/3f5Yxb/HfPHLP475Y9Z/HfOH7P4/z5/zOK/S/6Yxf8P+WMW/z/mj1n8d80fs/j/KX/M4v/n/DGL/1/yxyz+f80fs/jvlj9m8f9b/pjF/+/5Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljEv/hBvLHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/h/Ln/M4v/5/DGL/xfyxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/L+aPWfwnzR+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/5fyxyz+X84fs/hPlT9m8Z86f8zi/5X8MYv/V/PHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v5Y/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/l/PH7P4fyN/zOL/zfwxi/+38scs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/938scs/ovlj1n8v5s/ZvFfPH/M4v+9/DGL/xL5Yxb/7+ePWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf8H+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bx/2H+mMV/xfwxi/9K+WMW/x/lj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/4/wxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOL/k/wxi/8m+WMW/03zxyz+m+WPWfx/mj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+P8sfs/j/PH/M4r9N/pjF/xf5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zJ/zOK/Q/6Yxf9X+WMW/1/nj1n8f5M/ZvH/bf6Yxf93+WMW/x3zxyz+O+WPWfx3zh+z+P8+f8ziv0v+mMX/D/ljFv8/5o9Z/HfNH7P4/yl/zOL/5/wxi/9f8scs/n/NH7P475Y/ZvH/W/6Yxf/v+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5YxL/4Qfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4fy5/zOL/+fwxi/8X8scs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/y/mj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/+X8scs/l/OH7P4T5U/ZvGfOn/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+WP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5fzx+z+H8jf8zi/838MYv/t/LHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/d/LHLP6L5Y9Z/L+bP2bxXzx/zOL/vfwxi/8S+WMW/+/nj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/B/ljFv9l88cs/svlj1n8l88fs/ivkD9m8f9h/pjFf8X8MYv/SvljFv8f5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/+P8MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi/5P8MYv/JvljFv9N88cs/pvlj1n8f5o/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/j/LH7P4/zx/zOK/Tf6Yxf8X+WMW/23zxyz+2+WPWfy3zx+z+P8yf8ziv0P+mMX/V/ljFv9f549Z/H+TP2bx/23+mMX/d/ljFv8d88cs/jvlj1n8d84fs/j/Pn/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8zi/+f8MYv/X/LHLP5/zR+z+O+WP2bx/1v+mMX/7/ljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMS/xEG8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+H8uf8zi//n8MYv/F/LHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv8v5o9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/l/LHLP5fzh+z+E+VP2bxnzp/zOL/lfwxi/9X88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+X88fs/h/I3/M4v/N/DGL/7fyxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/3fyxyz+i+WPWfy/mz9m8V88f8zi/738MYv/EvljFv/v549Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/wf5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvH/Yf6YxX/F/DGL/0r5Yxb/H+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4v/j/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4v+T/DGL/yb5Yxb/TfPHLP6b5Y9Z/H+aP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP4/yx+z+P88f8ziv03+mMX/F/ljFv9t88cs/tvlj1n8t88fs/j/Mn/M4r9D/pjF/1f5Yxb/X+ePWfx/kz9m8f9t/pjF/3f5Yxb/HfPHLP475Y9Z/HfOH7P4/z5/zOK/S/6Yxf8P+WMW/z/mj1n8d80fs/j/KX/M4v/n/DGL/1/yxyz+f80fs/jvlj9m8f9b/pjF/+/5Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljEv8RB/LHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/h/Ln/M4v/5/DGL/xfyxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/L+aPWfwnzR+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/5fyxyz+X84fs/hPlT9m8Z86f8zi/5X8MYv/V/PHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v5Y/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/l/PH7P4fyN/zOL/zfwxi/+38scs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/938scs/ovlj1n8v5s/ZvFfPH/M4v+9/DGL/xL5Yxb/7+ePWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf8H+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bx/2H+mMV/xfwxi/9K+WMW/x/lj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/4/wxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOL/k/wxi/8m+WMW/03zxyz+m+WPWfx/mj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+P8sfs/j/PH/M4r9N/pjF/xf5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zJ/zOK/Q/6Yxf9X+WMW/1/nj1n8f5M/ZvH/bf6Yxf93+WMW/x3zxyz+O+WPWfx3zh+z+P8+f8ziv0v+mMX/D/ljFv8/5o9Z/HfNH7P4/yl/zOL/5/wxi/9f8scs/n/NH7P475Y/ZvH/W/6Yxf/v+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5YxL/kQbyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4fy5/zOL/+fwxi/8X8scs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/y/mj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/+X8scs/l/OH7P4T5U/ZvGfOn/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+WP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5fzx+z+H8jf8zi/838MYv/t/LHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/d/LHLP6L5Y9Z/L+bP2bxXzx/zOL/vfwxi/8S+WMW/+/nj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/B/ljFv9l88cs/svlj1n8l88fs/ivkD9m8f9h/pjFf8X8MYv/SvljFv8f5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/+P8MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi/5P8MYv/JvljFv9N88cs/pvlj1n8f5o/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/j/LH7P4/zx/zOK/Tf6Yxf8X+WMW/23zxyz+2+WPWfy3zx+z+P8yf8ziv0P+mMX/V/ljFv9f549Z/H+TP2bx/23+mMX/d/ljFv8d88cs/jvlj1n8d84fs/j/Pn/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8zi/+f8MYv/X/LHLP5/zR+z+O+WP2bx/1v+mMX/7/ljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMS/5EH8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+H8uf8zi//n8MYv/F/LHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv8v5o9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/l/LHLP5fzh+z+E+VP2bxnzp/zOL/lfwxi/9X88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+X88fs/h/I3/M4v/N/DGL/7fyxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/3fyxyz+i+WPWfy/mz9m8V88f8zi/738MYv/EvljFv/v549Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/wf5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvH/Yf6YxX/F/DGL/0r5Yxb/H+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4v/j/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4v+T/DGL/yb5Yxb/TfPHLP6b5Y9Z/H+aP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP4/yx+z+P88f8ziv03+mMX/F/ljFv9t88cs/tvlj1n8t88fs/j/Mn/M4r9D/pjF/1f5Yxb/X+ePWfx/kz9m8f9t/pjF/3f5Yxb/HfPHLP475Y9Z/HfOH7P4/z5/zOK/S/6Yxf8P+WMW/z/mj1n8d80fs/j/KX/M4v/n/DGL/1/yxyz+f80fs/jvlj9m8f9b/pjF/+/5Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljEv9RBvLHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/h/Ln/M4v/5/DGL/xfyxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/L+aPWfwnzR+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/5fyxyz+X84fs/hPlT9m8Z86f8zi/5X8MYv/V/PHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v5Y/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/l/PH7P4fyN/zOL/zfwxi/+38scs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/938scs/ovlj1n8v5s/ZvFfPH/M4v+9/DGL/xL5Yxb/7+ePWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf8H+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bx/2H+mMV/xfwxi/9K+WMW/x/lj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/4/wxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOL/k/wxi/8m+WMW/03zxyz+m+WPWfx/mj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+P8sfs/j/PH/M4r9N/pjF/xf5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zJ/zOK/Q/6Yxf9X+WMW/1/nj1n8f5M/ZvH/bf6Yxf93+WMW/x3zxyz+O+WPWfx3zh+z+P8+f8ziv0v+mMX/D/ljFv8/5o9Z/HfNH7P4/yl/zOL/5/wxi/9f8scs/n/NH7P475Y/ZvH/W/6Yxf/v+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5YxL/UQfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4fy5/zOL/+fwxi/8X8scs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/y/mj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/+X8scs/l/OH7P4T5U/ZvGfOn/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+WP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5fzx+z+H8jf8zi/838MYv/t/LHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/d/LHLP6L5Y9Z/L+bP2bxXzx/zOL/vfwxi/8S+WMW/+/nj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/B/ljFv9l88cs/svlj1n8l88fs/ivkD9m8f9h/pjFf8X8MYv/SvljFv8f5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/+P8MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi/5P8MYv/JvljFv9N88cs/pvlj1n8f5o/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/j/LH7P4/zx/zOK/Tf6Yxf8X+WMW/23zxyz+2+WPWfy3zx+z+P8yf8ziv0P+mMX/V/ljFv9f549Z/H+TP2bx/23+mMX/d/ljFv8d88cs/jvlj1n8d84fs/j/Pn/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8zi/+f8MYv/X/LHLP5/zR+z+O+WP2bx/1v+mMX/7/ljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMS/9EG8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+H8uf8zi//n8MYv/F/LHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv8v5o9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/l/LHLP5fzh+z+E+VP2bxnzp/zOL/lfwxi/9X88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+X88fs/h/I3/M4v/N/DGL/7fyxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/3fyxyz+i+WPWfy/mz9m8V88f8zi/738MYv/EvljFv/v549Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/wf5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvH/Yf6YxX/F/DGL/0r5Yxb/H+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4v/j/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4v+T/DGL/yb5Yxb/TfPHLP6b5Y9Z/H+aP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP4/yx+z+P88f8ziv03+mMX/F/ljFv9t88cs/tvlj1n8t88fs/j/Mn/M4r9D/pjF/1f5Yxb/X+ePWfx/kz9m8f9t/pjF/3f5Yxb/HfPHLP475Y9Z/HfOH7P4/z5/zOK/S/6Yxf8P+WMW/z/mj1n8d80fs/j/KX/M4v/n/DGL/1/yxyz+f80fs/jvlj9m8f9b/pjF/+/5Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljEv/RB/LHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/h/Ln/M4v/5/DGL/xfyxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/L+aPWfwnzR+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/5fyxyz+X84fs/hPlT9m8Z86f8zi/5X8MYv/V/PHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v5Y/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/l/PH7P4fyN/zOL/zfwxi/+38scs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/938scs/ovlj1n8v5s/ZvFfPH/M4v+9/DGL/xL5Yxb/7+ePWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf8H+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bx/2H+mMV/xfwxi/9K+WMW/x/lj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/4/wxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOL/k/wxi/8m+WMW/03zxyz+m+WPWfx/mj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+P8sfs/j/PH/M4r9N/pjF/xf5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zJ/zOK/Q/6Yxf9X+WMW/1/nj1n8f5M/ZvH/bf6Yxf93+WMW/x3zxyz+O+WPWfx3zh+z+P8+f8ziv0v+mMX/D/ljFv8/5o9Z/HfNH7P4/yl/zOL/5/wxi/9f8scs/n/NH7P475Y/ZvH/W/6Yxf/v+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5YxL/MQbyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4fy5/zOL/+fwxi/8X8scs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/y/mj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/+X8scs/l/OH7P4T5U/ZvGfOn/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz7//x87dx5lZ13fcfwmYdip/nq0p4u0qa1HPMeaBVDTWkwgOzIGkYSEJJJlspiExCyQxZCobdOUglgqiNpG06aCWLRVYkUDUbBYNoFSu5BSkQJiG3FtikrSc5OZmEy/zOk86fPQ+n29/sjMvcP3CnmfD/dyco6hLP2H6B/K0n+o/qEs/YfpH8rSf7j+oSz9T9U/lKX/afqHsvQ/Xf9Qlv6v1j+Upf9r9A9l6f9a/UNZ+o/QP5Sl/6/rH8rS/zf0D2Xp/zr9Q1n6/6b+oSz9z9A/lKX/6/UPZek/Uv9Qlv6j9A9l6X+m/qEs/c/SP5Sl/2j9Q1n6j9E/lKX/WP1DWfqP0z+Upf94/UNZ+k/QP5Sl/0T9Q1n6n61/KEv/N+gfytL/HP1DWfp36h/K0v+N+oey9J+kfyhL/3P1D2Xp/yb9Q1n6n6d/KEv/N+sfytL/fP1DWfpP1j+Upf8U/UNZ+l+gfyhL/6n6h7L0n6Z/KEv/C/UPZek/Xf9Qlv4z9A9l6T9T/1CW/m/RP5Sl/0X6h7L0n6V/KEv/2fqHsvSfo38oS/+5+oey9O/SP5Sl/zz9Q1n6z9c/lKX/Av1DWfov1D+Upf9b9Q9l6b9I/1CW/ov1D2Xpv0T/UJb+F+sfytJ/qf6hLP2X6R/K0v9t+oey9F+ufyhL/xX6h7L0X6l/KEv/VfqHsvS/RP9Qlv6X6h/K0n+1/qEs/dfoH8rSf63+oSz91+kfytL/7fqHsvRfr38oS//L9A9l6b9B/1CW/hv1D2Xp/w79Q1n6v1P/UJb+79I/lKX/b+kfytL/t/UPZen/O/qHsvTfpH8oS//f1T+Upf9m/UNZ+v+e/qEs/S/XP5Sl/+/rH8rS/wr9Q1n6X6l/KEv/d+sfytL/Kv1DWfq/R/9Qlv5/oH8oS/+r9Q9l6f+H+oey9H+v/qEs/a/RP5Sl/7X6h7L0f5/+oSz9r9M/lKX/+/UPZen/Af1DWfp/UP9Qlv5/pH8oS/8/1j+Upf8W/UNZ+n9I/1CW/h/WP5Sl/1b9Q1n6/4n+oSz9/1T/UJb+2/QPZen/Z/qHsvT/iP6hLP2v1z+Upf8N+oey9P+o/qEs/W/UP5Sl/8f0D2Xp/+f6h7L0v0n/UJb+H9c/lKX/J/QPZen/F/qHsvT/S/1DWfp/Uv9Qlv6f0j+Upf/N+oey9N+ufyhL/0/rH8rS/6/0D2Xp/xn9Q1n636J/KEv/z+ofytL/c/qHsvTfoX8oS/9b9Q9l6X+b/qEs/XfqH8rS//P6h7L0/4L+oSz9b9c/lKX/HfqHsvT/ov6hLP3/Wv9Qlv536h/K0v9L+oey9P8b/UNZ+t+lfyhL/7v1D2Xpf4/+oSz979U/lKX/ffqHsvT/sv6hLP3v1z+Upf8D+oey9H9Q/1CW/n+rfyhL/4f0D2Xp/3f6h7L0/4r+oSz9/17/UJb+/6B/KEv/f9Q/lKX/P+kfytL/Yf1DWfrv0j+Upf8/6x/K0v8R/UNZ+v+L/qEs/b+qfyhL/0f1D2Xp/zX9Q1n6P6Z/KEv/f9U/lKX/4/qHsvR/Qv9Qlv5P6h/K0v/r+oey9H9K/1CW/t/QP5Sl/7/pH8rS/9/1D2Xpv1v/UJb+39Q/lKX/0/qHsvT/lv6hLP2/rX8oS//v6B/K0v+7+oey9P+e/qEs/b+vfyhL///QP5Sl/x79Q1n6/6f+oSz9n9E/lKX/D/QPZen/Q/1DWfr/SP9Qlv7P6h/K0n+v/qEs/ffpH0rS/4Ut/UNZ+g/QP5Sl/0D9Q1n6D9I/lKX/UfqHsvTv0D+Upf/R+oey9D9G/1CW/sfqH8rS/zj9Q1n6H69/KEv/E/QPZel/ov6hLP1P0j+Upf9P6R/K0v8F+od+4voDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8X7NizdpFsxYv7lruG9/4xjcHv3m+/80EAAD8b/vxh/7n++8EAAAAAAAAAAAAAAAAAAAA8mri/07s+f5nBAAAAAAAAAAAAACA/+8mdI7aPWjAYU8NOvTByfd27f962p4LFmzbtr30fO3+8dnBSw489MG+ffv2nbdix5juh8e0Wq32/9oLux8f2/u4/fob73vNpAOPysj3zS43rG913rbtkscemfODV+7o2P9sR+uieQsXdw0d2GqVszpaq9sPhg1otcrYjtZV7QfD2w/GdbSubz84df+D41o72w9eNWfp4rntJ8ZX/j2DnxQTOje2Bh222NZh/zY4dP8b75u2uudrHy/Z82pHtbr3v+XZSQ/1+lmP59h/z+uXUb333+9/QOA59W//84b2fO3jJf/b+//YHw3bEf3sufff8/rlTPuH+gSf/w/baO/P/b0+/w8OXvLgffn0nYPa+x9+/HfndT911P/k8/+PX7+c1Xv/Aw/7/N/+HD+65/P/Ma1WGXOEvx2QyoTOd+zu6/2/7/0f9fO9bgYcuv/NM8a/t73/X7r90Rd1P9XRz/2P7uv9f3Ovv1egfyZ0fnhfr/f/fuy/9fLgJQ/uf8sVn5/S3v/6cTffcMjP+rP/Mb33P2TlkmVDVqxZ+2sLl8ya3zW/6+JTh58+bOirh40YevqQ/R8JDvx6hL8rkMORvf+3ju91M6DV6jp4/8v3vGR0e/93bH1iYvdTx/Zz/2P7fP8f7P0fQi8d2Dr66NbqWStXLh924Neeh8MP/HrgLwv234///v+VU7r/sp4/MxzQav3swfsNM1r3t/f/i08+8Prup47u5/7H9bn/kYf/WSXQP0f4/j+3181h+y+feMF17f2PO2H43d1P9fe//8f3uf8Pef+HIzGhs1Xrm2h7/wMfv+aaatdlgj//g/o0sf9XlU2nVLsuE+0f6tPE/ruWvvLWatflbPuH+jSx/03vHn9utevyBvuH+jSx/3u+/did1a7LOfYP9Wli/1/t+M6aatel0/6hPk3s/8Z1U5+udl3eaP9Qnyb2/5Jrn/5atesyyf6hPk3sf8pTo1dWuy7n2j/Up4n9rzv5/LuqXZc32T/Up4n9D52zd3q163Ke/UN9mtj/g+96/yerXZc32z/Up4n9X/fssJdVuy7n2z/Up4n933zc4A9Uuy6T7R/q08T+9156+UnVrssU+4f6NLH/jbd2jKx2XS6wf6hPE/u/e+dNX6l2XabaP9Snif0/edptC6pdl2n2D/VpYv8fm/iivdWuy4X2D/VpYv+dH11Wql2X6fYP9Wli/x0PPbyp2nWZYf9Qnyb2/4rBd42odl1m2j/Up4n9z5456+PVrstb7B/q08T+xz3zkZdWuy4X2T/Up4n9n7jpxE9Vuy6z7B/q08T+B684+fhq12W2/UN9mtj/opO2f7DadZlj/1CfJva/efeDK6pdl7n2D/VpYv9fuHrN49WuS5f9Q32a2P835y+4sNp1mWf/UJ8m9r/t526/t9p1mW//UJ8m9v/w/edsrHZdFtg/1KeJ/V910xM/U+26LLR/qE8T+//ctD3XV7sub7V/qE8T+9/zq9PPqHZdFtk/1KeJ/b/4jtc+UO26LLZ/qE8T+595y9Xjql2XJfYP9Wli/8s73/lMtetysf1DfZrY/4ihr1ha7bostX+oTxP7v3LXltnVrssy+4f6NLH/L2497XvVrsvb7B/q08T+n5r8sonVrsty+4f6NLH/radcuavadVlh/1CfJvY/8kvfOLXadVlp/1CfJvZ/wvZR26pdl1X2D/VpYv8vP3PSL1S7LpfYP9Snif0vft0Pr6h2XS61f6hPE/v/6e+v2lntuqy2f6hPE/ufevkjk6tdlzX2D/VpYv+rNnz569Wuy1r7h/o0sf8zBsy9rNp1WWf/UJ8m9r/r0dZ7ql2Xt9s/1KeJ/V+75cZjql2X9fYP9Wli/59ddMtnql2Xy+wf6tPE/r/14jKk2nXZYP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/sQMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCxAAAAAIAwf+sgejcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKAAD//yMwiMk=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001140)=ANY=[@ANYBLOB="0000000000003900008fdfe40675f950ae000000000000000000000000002bc3f37310e941c74028a091000066f3138f5353545f15dd44590629052681968c21063be8794f069596367f37748cf4"]) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x80000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, 0x1c) syz_open_dev$ttys(0xc, 0x2, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000ec0), 0x100, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00'}, 0x90) syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x3118, 0x10100, 0x0, 0x32a}, &(0x7f0000000e40), &(0x7f00000011c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x7c, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60b80b0000262f00fc000000000000000000000000000000fe8000000000000000000000000000aa0420810000100000000008000000000086dd"], 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001040)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d312c6e6f7374726963742c6c617374626c6f636b3d30303030303030303030303030303030303534362c6769643d666f726765742c6c6f6e6761642c6c6f6e6761642c756e64656c6574652c6d6f64653d30303030303030303030303030303030303030303030352c66696c657365743d30303030303030303030303030303030303030352c00dec7384d8361a83b0c62d0234b0736200709c52d3e3f9a6b8c5dc6bb7c76b4915fba54683d202192d9190f2b60a16fc088c41f1a3eb4a78b4ac61f8bee04ae1cf7901c792b3a8eff396e2065bc6c5f90f860a13e0bd7a8f1ff"], 0x1, 0xc43, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xrl46nTaZsOhh9AYAOCBuDz21VNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+9ILQ+e7eak98wH199pn4rWxKxcbL8/enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvn5r8vr1hcaZ589u2nx74P3+J44PXBh69uQz3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORornvvfT1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnzn2Fq6mt/6UZ2HL1YDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/iji1Ujxs3dOxLV8n6nuNV+IeLXMH0S8VeZLEan8YpyLeG+b7xGPploU8efl9b+wliar+0H3vnLpa42vzFyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcSnI8Ur//ZH1bjiqMalH7sw9PsDv9w7ZvzpD9lPWfb5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsWL755Iy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaERPRyZX+h906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4fqRo/EHzzrpaRKTq344T5S/nonm4zE9Gc6jMl6J5MWerylrzWw+h/exOXyrix5Giv/72nQuer39f59Odr0G89c2NT5+pdfJQd+PA+/1PHD92YWjkc0/vtJy2a8DgpfbMrduN8eGRkbGe1bV89E/2rBvIxy32putExMIbb77emp6emr//hfIrsIvqj9BCqn1cemqhWojagWjGw+n7JvWHdYNiX5XP//cixW+/++/dB37n+V+PX+p8uvOEj5//ycbz/8WtO7rH539ta738/C+f6ds9/5/sWfdi/t1IXy2ivnhzru94RH3hjTdPtm+2bkzdmJo5d+rUl4eGvnz2VN/hiPr19vRUz9KenC4AAAAAAAAAAAAAAACABycV8buRovXjtdSIiNvVeK2BC0PPnnzmUByqxlttGrf92tiVi42XZ2/OzU8tLExNNsZn2tdmJ6fu9XD1arjX+PDIvnTmQx3Z5/Yfqb88O/fGfPvGHy5uu/1o/eLVhcX51rXtN8eRKCKavWsGqwaPD49UjZ5ut2aqqqPbDqb/6PpSEf8RKa6da6TP53V5/P/WEf6bxv8vbd3RHo7//9zRjfF/n+gpWh4zpSJ+Hil+6y+ejs9X7Twad52zXO5vIsXg+c/mcnG4LNdtQ+e9Ap2RgWXZ/4kU//CLzWW74yGf3Ch7+iOd3EdAef2PRYrv/9l349fzus3vf9j++h/duqN9ev/DUz3rjm56X8Guu06+/icjxUtPvh2/Ua35vw98/0f33RsnOoU33s+xT9f/V3vWDeTj/uZedR4AAAAAAAAAAOAR1peK+NtI8cORWnohr7uXv/83uXVH+/T3vz7Vs25yb+Yr+tCFXZ9UAAAAADgg+lIRP4kUNxbfvjOGevP4757xn7+zMf5zOG3ZWv05369U7w3Yyz//6zWQjzux+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dQnqvH8kzvOp74SKV75r+dyuXS8LNedB36g+rV+eXbm5MXp6dl6LLauTk81xuZa16bKuk9FirW//myuW1Tzq3fnm+/M8b4xF/t8pBj5u27Zzlzs3bnJn9ooe7os+4lI8Z9/v7lsnpo6zx1dlT1Tlv2rSPH1f9q+7PGNsmfLst+NFD/6eqNb9mhZtvt+1E9tlH3+2myxD1cFAAAAAAAAAAAAAAAAAACAj5u+VMSfRor/vrl8Zyx/nv+/r+dj5a1v9sz3v8Xtap7/gWr+/52W72f+/+q9Aks7HRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4M1LMXV5LK/3l5476pfbMrdvjwyPbVzuSqpqHqvLlT/30mbPnvvTC0PlufnD9vfbpeG3sysXGy7M35+anFhamJhvjM+1rs5NT97yH3dbfarA6AY2br9+avH59oXHm+bObNt8eeL//ieMDF4aePflMt+z48MjIWE+ZWt99H/0uaYf1h6OIv4wUz33vp+mH/RFF7P5cfMh3Z78dqToxWHVifHik6sh0uzWzWG4c7Z6IIqLRU6nZPUcP4FrsSjNiqWx+2eDBsntjc6351tXpqcZoa36xvdienRlNndaW/WlEEedTxHJErPbfvbu+KOL1SPGdY2vpn/sjDnXPwxcvj3311Jmd21HsYx/vQdnORl/EcvEIXLMDrD+K+MdI8bN3TsS/9EfUovMTX4h4tcwfRLwVneudyi/GuYj3tvke8WiqRRH/W17/C2vpnf7yftC9r1z6WuMrM9dne8p27yuP/PPhQTrg96Z6FPGj6o6/lv7Vf9cAAAAAAAAAAAAAAAAAB0gRvxYpXnz3RKrGB98ZU9yeudG40ro63RnW1x371x0zvb6+vt5InWzmnMi5lHM550rO1ZxR5Po5m2XW19cn8uelnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ2DwAAAAAAAAAAAAAAAAAAeLwU1T8pvv2NtbTe35lfeiI6uWI+0Mfe/wcAAP//dsP5HA==") open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 6.383234518s ago: executing program 0 (id=1477): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x2d0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x13d, 0xe, {{{}, {0x1}, @device_b, @device_b, @from_mac=@device_b, {0x0, 0x3}}, 0x9af0, @random=0x4, 0x0, @void, @void, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x60, {0x0, 0x0, 0x0, "46817996ca022d7bf13902496381b60f78f286115c74b9049e2d7e2d8a19f8024a988dedd6491787141396764122315b30c6dec1f7f0db00231596aeeb40cd39deca15cfb2e32e082b84f9da71dcf77fd45be8ae34a0e609769107506e"}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x3, 0x95}}, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x61}}, @void, [{0xdd, 0x9c, "9dd762d902fae2152c49617600fb82c63b1f7cea9b7ba501cf32d62c559646457821083fac8667b8baa2e232556c7f52c9a8e38ba1e9a5bb15d9ce98d497e23a6c9693cd08c6ce15f442331a3135f83aa38ea839e04aa344bd1bf6184aabb837557ba513e31f265ccb034501840e2146b3dc6b8e6b9473b8ab35ab2dd42e44f97e69caefbbe1320b3a3befdc3540d5686ee17411191885464fb1ba95"}]}}, @NL80211_ATTR_BEACON_HEAD={0x15e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {}, @device_a, @device_b, @from_mac, {0x9, 0x2}}, 0x0, @random=0x9, 0x20, @void, @val={0x1, 0x5, [{0x9, 0x1}, {}, {}, {0x2, 0x1}, {0x12, 0x1}]}, @val={0x3, 0x1, 0xae}, @val={0x4, 0x6, {0x0, 0x9, 0x0, 0x6}}, @val={0x6, 0x2, 0x1}, @val={0x5, 0x93, {0x0, 0xc6, 0x85, "c881f66d3aaaa0a458b45421ba4c1a91fdd030d522f70733242554412dffb36d442e31f820e87a09ba4da84c4bdd36f73e873e613579724c79d6859aeaaaf017b08d7caf9bab6b048b4118e3a0757ed3f305aced4352d0dff70ee222d956e19f2b509b78df7ef30cb8affc9dae2b99211ada11a47d83629f8ba3aec1bed95eb7ee22b8b1c8384f3c10824e055b799e25"}}, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x84, "74e68b8ff47ca795f2dd717feb2f8cf8dde0c5c0ef006fde6449ac4fc78b17e0442516814f24b7391773cf0b436e59b966411c886f8223ba2cb2e238cfc33b6f555df5013b75fe4e735079b06f7289c2bf3f86f032a3caf00463a9e295daaeccd02eee000e5e06dcce5b9d4a41b2aa0a78a502db662bdcbaf9eee46c801f2998ab632c84"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2d0}}, 0x0) 6.093299538s ago: executing program 0 (id=1478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001740)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$qrtr(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000010c0)=""/221, 0xdd}], 0x1}, 0x38, 0x0) sendmsg$unix(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000100)="02", 0x1}], 0x1}, 0x0) mlockall(0x3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bd9000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f00000000c0), 0x0) 4.819841234s ago: executing program 4 (id=1481): r0 = mq_open(&(0x7f0000000400)='!d|\x00\x00\x8d\x00)|T\r\x1a\x10\xa9\x9b\xb8\xc2V\xc9\xa2>UgY\x94y\x00\x15H\xc3\xbc\xb2]\x1e\xf81.\x9e\x92h\xbe#U\x02', 0x0, 0x0, &(0x7f0000000300)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000000)={@ifindex, 0x0, 0x0, 0x0, 0x0, 0x51b3171e3183d77e, 0x0, 0x0, 0x0, 0x0}, 0x40) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) io_setup(0xfeed, &(0x7f0000000000)) syz_open_dev$mouse(0x0, 0xfffffffa, 0x30141) open(&(0x7f0000000340)='./file0\x00', 0x101080, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000004000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900010073797a3000000000080007006e6174000900030073797a32000000001400048008000240ffffff9c"], 0x90}}, 0x0) eventfd2(0x80, 0x80000) 4.635655429s ago: executing program 2 (id=1482): r0 = socket(0x10, 0x3, 0x1) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYRES64]) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000001c40)=@raw={'raw\x00', 0xc01, 0x3, 0x1230, 0x10e8, 0x5002004a, 0x0, 0x10e8, 0x0, 0x1198, 0x3c8, 0x3c8, 0x1198, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x3, './cgroup.cpu/syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'wg2\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a723acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1290) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000500)={0x5, "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"}) socket$packet(0x11, 0x0, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 4.320113896s ago: executing program 4 (id=1483): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x5609, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x218880, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) timer_create(0x2, &(0x7f00000001c0)={0x0, 0xc, 0x4, @tid=r5}, &(0x7f00000002c0)) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) 4.299188518s ago: executing program 2 (id=1484): write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x0, {0x2b, [{{0x8, 0x1, 0x8}, 0x0, 0x60, 0x7, './file1'}, {{0x0, 0x3}, 0x5, 0x0, 0x7, './file0'}, {{0x20, 0x3, 0x1}, 0x0, 0x99, 0x7, './file0'}, {{0x10}, 0xffffffffffff1544, 0x81, 0x7, './file0'}, {{0x2, 0x1, 0x6}, 0x839, 0x40, 0x7, './file0'}, {{0x4, 0x3, 0x5}, 0x0, 0x0, 0x7, './file0'}]}}, 0xc5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x28, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@dstopts={0x0, 0x1, '\x00', [@enc_lim, @generic={0x7f}, @ra]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000002030500000000081325a2e7608ceb0882996133000000"], 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8000003}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000044015f00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) utimensat(r4, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20, 0x0, 0x0, 0x8000}) write$cgroup_int(r1, &(0x7f0000000040), 0xfea0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000300)={0x0, r8, 0x0, 0x0, 0x0, 0x8001}) 2.999264748s ago: executing program 4 (id=1485): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x380}]}, 0x34}}, 0x0) 2.744577826s ago: executing program 4 (id=1486): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 2.653295511s ago: executing program 3 (id=1487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getchain={0x34, 0x66, 0x20, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x0, 0x6}, {0x0, 0x10}}, [{0x8, 0xb, 0x182e}, {0x8, 0xb, 0x8}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000019080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0179e1d}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000019100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000fd70f1e5000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000009500"/76], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f00000190c0)=0x2) symlink(&(0x7f0000000500)='./file0\x00', 0x0) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000004040)=""/4092, 0xffc) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x8108551b, &(0x7f0000002a40)) 2.531672362s ago: executing program 0 (id=1488): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00', 0xffffffff}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000000000000500000018f2fc6b8077753d0f41be230f690001681400020062"], 0x34}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000000)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffff34, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000240)=0x3, 0x4) 2.506858937s ago: executing program 1 (id=1489): bpf$MAP_CREATE(0x0, &(0x7f00000004c0), 0x48) socket$kcm(0x10, 0x400000002, 0x0) r0 = msgget$private(0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0xac56ab5a59439adc, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x1145d10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x81185a, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x25]}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000600)={0x2020}, 0xffffffb5) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4000}, 0x0, 0x0, 0xbf, 0x1000, 0x0, 0x0, 0x8000, 0x0, 0x1}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0xa, &(0x7f0000000340)=0x80000005, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x30, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}]}, 0x30}}, 0x0) 2.456537301s ago: executing program 2 (id=1490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.375109546s ago: executing program 3 (id=1491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) shutdown(r5, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) accept4$packet(r6, 0x0, 0x0, 0x0) 1.193454551s ago: executing program 4 (id=1492): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb, &(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], 0x0, 0x1, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}]}, 0x2c}}, 0x0) 1.193275629s ago: executing program 2 (id=1493): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xffe6) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x54}}, 0x0) 1.080244495s ago: executing program 1 (id=1494): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'syzkaller1\x00', {}, 0x2}) connect$vsock_stream(r0, &(0x7f0000000300), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x18, 0xf, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}}, &(0x7f0000000940)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x0, 0x0, 0xf34}, 0x10}, 0x90) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000004c0)=""/88) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x182d510, 0x0) open(&(0x7f00000011c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(r3, &(0x7f0000000480)='./file1/file4\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x6480, r0}, 0x0) landlock_restrict_self(r4, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r5) close(r5) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240)={0x98000, 0x2, 0x30}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) openat(r6, &(0x7f0000000900)='./file0\x00', 0x127c2, 0x64) 1.030589363s ago: executing program 0 (id=1495): r0 = mq_open(&(0x7f0000000400)='!d|\x00\x00\x8d\x00)|T\r\x1a\x10\xa9\x9b\xb8\xc2V\xc9\xa2>UgY\x94y\x00\x15H\xc3\xbc\xb2]\x1e\xf81.\x9e\x92h\xbe#U\x02', 0x0, 0x0, &(0x7f0000000300)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000000)={@ifindex, 0x0, 0x0, 0x0, 0x0, 0x51b3171e3183d77e, 0x0, 0x0, 0x0, 0x0}, 0x40) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) io_setup(0xfeed, &(0x7f0000000000)) syz_open_dev$mouse(0x0, 0xfffffffa, 0x30141) open(&(0x7f0000000340)='./file0\x00', 0x101080, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000004000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900010073797a3000000000080007006e6174000900030073797a32000000001400048008000240ffffff9c"], 0x90}}, 0x0) eventfd2(0x80, 0x80000) 921.646179ms ago: executing program 2 (id=1496): r0 = socket(0x10, 0x3, 0x1) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYRES64]) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000001c40)=@raw={'raw\x00', 0xc01, 0x3, 0x1230, 0x10e8, 0x5002004a, 0x0, 0x10e8, 0x0, 0x1198, 0x3c8, 0x3c8, 0x1198, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x3, './cgroup.cpu/syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'wg2\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a723acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1290) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000500)={0x5, "7302eaa061eac476f6a5771eb8cf439b6f90a1c17a1ed469b90354fb2e3a1057f4f83206063b74f39aa2b02a3ee2fd816fca0645682daec47e89a8a8a0ce65ecc8bf140030a098163b15333497547dd136bb84781007683eade1a8a04bdfec8173c20f85f30ce8e9519035169ce1e39f461f6e439e50cc64b548f1936304545c19b16856d211d1f246353ec053bb435dd7762c4c87b53625a805145083c374e848e4cac3ad5b870f733455a2749f677902bd6760cbcd2859bf9f3789d1e70ae20e67d1d4c64047d4415abfd9da17f7a7d19e7c154e0d6a4af078a5d5cc8b10f33a2f91ec6b95635ae87b97b543a73f4343cc74ddad306f284fee1e0f9c5c3eca"}) socket$packet(0x11, 0x0, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 721.250664ms ago: executing program 1 (id=1497): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x5609, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x218880, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) timer_create(0x2, &(0x7f00000001c0)={0x0, 0xc, 0x4, @tid=r5}, &(0x7f00000002c0)) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) 439.458517ms ago: executing program 0 (id=1498): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 421.00577ms ago: executing program 2 (id=1499): write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0x122, 0x29, 0x0, {0x2b, [{{0x80, 0x2, 0x5}, 0x2, 0x4, 0x7, './file0'}, {{0x8, 0x1, 0x8}, 0x0, 0x60, 0x7, './file1'}, {{0x0, 0x3, 0x8}, 0x5, 0x0, 0x7, './file0'}, {{0x2, 0x0, 0x2}, 0x5, 0x3f, 0x7, './file0'}, {{0x2, 0x1, 0x8}, 0xfffffffffffffffe, 0x20, 0x7, './file0'}, {{0x20, 0x3, 0x1}, 0x8, 0x99, 0x7, './file0'}, {{}, 0xffffffffffff1544, 0x81, 0x7, './file0'}, {{0x2, 0x1, 0x6}, 0x839, 0x40, 0x7, './file0'}, {{0x4, 0x3, 0x5}, 0x0, 0x0, 0x7, './file0'}]}}, 0x122) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000002030500000000081325a2e7608ceb0882996133000000"], 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8000003}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000044015f00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) utimensat(r4, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20, 0x0, 0x0, 0x8000}) write$cgroup_int(r1, &(0x7f0000000040), 0xfea0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000300)={0x0, r8, 0x0, 0x0, 0x0, 0x8001}) 21.084655ms ago: executing program 4 (id=1500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001740)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$qrtr(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000010c0)=""/221, 0xdd}], 0x1}, 0x38, 0x0) sendmsg$unix(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000100)="02", 0x1}], 0x1}, 0x0) mlockall(0x3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bd9000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f00000000c0), 0x0) 14.971289ms ago: executing program 0 (id=1501): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x4, 0x2b4, &(0x7f00000002c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) unshare(0x2040400) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000100)={0x20}, 0xfdef) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) io_setup(0x22, &(0x7f00000003c0)=0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r5, 0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x400000000812d000, 0x9, 0x3, 0x8, 0x0, r5, 0x0}]) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) setreuid(0x0, 0x0) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="03"], 0x401, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0xee00, 0xee01, 0x0, 0x280}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x2102010, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75a02856d5d4", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,default_permissions,allow_other,max_read=0x0000000000000001,max_read=0x0000000000000001,blksize=0x0000000000000000,euid>', @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x0, &(0x7f00000007c0)="a85563e2c87a607a400ccfe94eb6b4cd6fa19adfe675bab14415ac64440f764f0f888f442732fda4208741b46e3545764cff3c269e48cf235bc8963f66b4cbcab9a43f881e73dcfd0707372b67b9ea2c5d78e7fe39b695eb06782b4bf90652fb58a0f592f1d9489b86beaebfc2b482df812b01863e49c2863b219b3134ed13d757d02f20a619abe48ad270072791df082ad1af057dac4e8e834b219f6d5d13fc1a0a47740838db5f47ac7ce5bea4ea60e7ef7c75550d7e8169b73802501c57055778ce19db4eac44494656063ea9341876") connect(r6, &(0x7f0000000080)=@nl=@proc, 0x80) r7 = open$dir(&(0x7f0000000600)='./bus\x00', 0x2, 0xa0) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r7, r8, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x800, &(0x7f0000000640)=ANY=[], 0xfd, 0x1524, &(0x7f0000002280)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x4842, 0x0) fstat(r9, &(0x7f00000001c0)) 0s ago: executing program 1 (id=1502): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x5609, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='tlb_flush\x00', r0}, 0x10) openat$audio(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) timer_gettime(0x0, &(0x7f0000000300)) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) kernel console output (not intermixed with test programs): [ 440.101557][ T12] bond0 (unregistering): Released all slaves [ 440.347086][ T9329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.499612][ T9057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.683446][ T9329] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.930963][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.938208][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.164689][ T9057] veth0_vlan: entered promiscuous mode [ 441.231851][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.239097][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.396045][ T12] hsr_slave_0: left promiscuous mode [ 441.410755][ T12] hsr_slave_1: left promiscuous mode [ 441.439856][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.476171][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.495043][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.503041][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.549877][ T12] hsr_slave_0: left promiscuous mode [ 441.560988][ T12] hsr_slave_1: left promiscuous mode [ 441.590054][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.611655][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.661043][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.668520][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.753788][ T12] veth1_macvtap: left promiscuous mode [ 441.759741][ T12] veth0_macvtap: left promiscuous mode [ 441.765702][ T12] veth1_vlan: left promiscuous mode [ 441.776221][ T12] veth0_vlan: left promiscuous mode [ 441.837268][ T12] veth1_macvtap: left promiscuous mode [ 441.842883][ T12] veth0_macvtap: left promiscuous mode [ 441.858732][ T12] veth1_vlan: left promiscuous mode [ 441.867955][ T12] veth0_vlan: left promiscuous mode [ 441.902424][ T9517] Bluetooth: MGMT ver 1.22 [ 443.405136][ T58] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 443.498790][ T12] team0 (unregistering): Port device team_slave_1 removed [ 443.559612][ T12] team0 (unregistering): Port device team_slave_0 removed [ 443.629418][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 443.648587][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x71 has an invalid bInterval 0, changing to 7 [ 443.660938][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x71 has invalid wMaxPacketSize 0 [ 443.693873][ T58] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 443.720088][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.728136][ T58] usb 4-1: Product: syz [ 443.749866][ T58] usb 4-1: Manufacturer: syz [ 443.765818][ T58] usb 4-1: SerialNumber: syz [ 443.781318][ T58] usb 4-1: config 0 descriptor?? [ 443.789935][ T58] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 444.029710][ T5141] usb 4-1: USB disconnect, device number 13 [ 444.972418][ T12] team0 (unregistering): Port device team_slave_1 removed [ 445.047177][ T12] team0 (unregistering): Port device team_slave_0 removed [ 445.723555][ T9057] veth1_vlan: entered promiscuous mode [ 445.847197][ T9389] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 445.880881][ T9389] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 445.933910][ T9287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.964132][ T9389] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 446.055864][ T9389] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 446.224372][ T9329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 446.236816][ T9329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.443114][ T9373] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 446.506265][ T9057] veth0_macvtap: entered promiscuous mode [ 446.539669][ T9373] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 446.583512][ T9373] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 446.637749][ T9057] veth1_macvtap: entered promiscuous mode [ 446.656242][ T9373] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 446.741537][ T9287] veth0_vlan: entered promiscuous mode [ 446.797873][ T9057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.808815][ T9057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.821365][ T9057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.898495][ T9057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.912110][ T9057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.930326][ T9057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.953490][ T9329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.023332][ T9057] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.032112][ T9057] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.054063][ T9057] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.064756][ T9057] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.096812][ T9287] veth1_vlan: entered promiscuous mode [ 447.192497][ T9389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.333650][ T9389] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.452185][ T8663] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.459457][ T8663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.475512][ T9287] veth0_macvtap: entered promiscuous mode [ 447.515213][ T9287] veth1_macvtap: entered promiscuous mode [ 447.545422][ T8663] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.552645][ T8663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.647657][ T9373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.706793][ T2448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.727663][ T2448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.761781][ T9373] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.814287][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.825755][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.838001][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.853058][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.869002][ T9287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.891965][ T9389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 447.902779][ T9389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.949637][ T8663] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.956923][ T8663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.982142][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.993387][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.003950][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.014826][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.027044][ T9287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.083249][ T9287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.103763][ T9287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.115533][ T9287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.133255][ T9287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.160253][ T1560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.162149][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.168098][ T1560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.182690][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.457660][ T9329] veth0_vlan: entered promiscuous mode [ 448.559869][ T9329] veth1_vlan: entered promiscuous mode [ 448.874188][ T9389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.456881][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.563994][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.809882][ T9329] veth0_macvtap: entered promiscuous mode [ 449.839041][ T2448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.846935][ T2448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.861914][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.871532][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.913765][ T9329] veth1_macvtap: entered promiscuous mode [ 449.971964][ T9389] veth0_vlan: entered promiscuous mode [ 450.065175][ T9373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.069657][ T9622] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 450.090471][ T9389] veth1_vlan: entered promiscuous mode [ 450.217207][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.231042][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.278393][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.296031][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.317362][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.336357][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.382136][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.419810][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.438557][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.454423][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.483366][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.694864][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.705483][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.719536][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.033781][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 451.701573][ T9329] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.724072][ T9329] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.767228][ T9329] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.795636][ T9329] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.796150][ T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 451.850519][ T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 12335, setting to 1024 [ 451.872488][ T25] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 451.900775][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 451.961087][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.991205][ T9389] veth0_macvtap: entered promiscuous mode [ 452.039377][ T9622] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 452.097017][ T9389] veth1_macvtap: entered promiscuous mode [ 452.372556][ T9389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.393402][ T9389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.415733][ T9389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.445950][ T9389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.461303][ T9389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.485488][ T9389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.508280][ T9389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.548551][ T9389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.593081][ T9389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.621327][ T9389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.671434][ T9389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.693528][ T9389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.729430][ T9389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.751516][ T9389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.763239][ T9389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.779959][ T9389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.806429][ T9389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.831525][ T9389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.904818][ T9389] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.919676][ T9389] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.932394][ T9389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.943369][ T9389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.009938][ T7191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.040247][ T7191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.173627][ T7191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.194771][ T7191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.253525][ T9373] veth0_vlan: entered promiscuous mode [ 453.410838][ T9373] veth1_vlan: entered promiscuous mode [ 453.532957][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.541646][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.710527][ T7191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.725831][ T9373] veth0_macvtap: entered promiscuous mode [ 453.743012][ T7191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.778249][ T9373] veth1_macvtap: entered promiscuous mode [ 453.897833][ T9373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.929376][ T9373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.977716][ T9373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.990007][ T9373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.016158][ T9373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.224948][ T58] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 454.242839][ T9373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.246811][ T25] usb 4-1: USB disconnect, device number 14 [ 454.258965][ T9373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.273385][ T9373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.115196][ T9373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.171284][ T9373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.199853][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 455.235692][ T9373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.236090][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 455.317934][ T58] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 455.346491][ T9373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.586217][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.657118][ T29] audit: type=1800 audit(2000000076.221:50): pid=9678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.923" name="file0" dev="sda1" ino=2021 res=0 errno=0 [ 455.677859][ T9373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.711427][ T58] usb 6-1: config 0 descriptor?? [ 455.822064][ T9373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.850590][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 455.873574][ T9373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.894102][ T9373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.915392][ T9373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.951701][ T9373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.003400][ T9373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.062339][ T9373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.110401][ T9373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.161161][ T9373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.358802][ T9373] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.415247][ T9373] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.450762][ T9373] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.491346][ T9660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.497766][ T9373] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.536362][ T9660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.604037][ T58] usbhid 6-1:0.0: can't add hid device: -71 [ 456.621470][ T58] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 456.662778][ T58] usb 6-1: USB disconnect, device number 22 [ 457.079417][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.138457][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.274620][ T2448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.305910][ T2448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.886602][ T5154] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 462.337121][ T5154] usb 3-1: Using ep0 maxpacket: 8 [ 463.198361][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.944'. [ 463.219242][ T5154] usb 3-1: device descriptor read/all, error -71 [ 465.166572][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 465.182103][ T58] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 465.439901][ T58] usb 2-1: config 0 has no interfaces? [ 465.477295][ T58] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 465.514349][ T58] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 465.555851][ T58] usb 2-1: Manufacturer: syz [ 465.616600][ T58] usb 2-1: config 0 descriptor?? [ 468.507448][ T9805] mmap: syz.5.965 (9805) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 468.532146][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.882387][ T5154] usb 2-1: USB disconnect, device number 16 [ 468.941983][ T5102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 468.969220][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 468.979840][ T5102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 468.988912][ T5102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 469.008062][ T5102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 469.017603][ T5102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 469.025173][ T5102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 469.253852][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 469.278509][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 469.313860][ T25] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 469.589048][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.601385][ T25] usb 3-1: config 0 descriptor?? [ 470.014689][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.610188][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.767908][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.769855][ T925] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 470.841055][ T9796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.911920][ T9796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.942854][ T25] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1 [ 470.961893][ T25] hid-generic 0003:0158:0100.0006: unexpected long global item [ 470.988032][ T25] hid-generic 0003:0158:0100.0006: probe with driver hid-generic failed with error -22 [ 471.087160][ T925] usb 6-1: Using ep0 maxpacket: 16 [ 471.109539][ T925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 471.170252][ T25] usb 3-1: USB disconnect, device number 14 [ 471.172099][ T925] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 471.258957][ T925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.260460][ T5102] Bluetooth: hci1: command tx timeout [ 471.324662][ T925] usb 6-1: config 0 descriptor?? [ 471.401303][ T5107] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 471.416821][ T5107] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 471.433265][ T5107] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 471.447958][ T5107] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 471.457062][ T9835] block nbd3: not configured, cannot reconfigure [ 471.463810][ T5107] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 471.479342][ T5107] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 471.653375][ T9808] chnl_net:caif_netlink_parms(): no params data found [ 471.747145][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 471.816443][ T51] bridge_slave_1: left allmulticast mode [ 471.834988][ T51] bridge_slave_1: left promiscuous mode [ 471.841762][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.866932][ T51] bridge_slave_0: left allmulticast mode [ 471.872665][ T51] bridge_slave_0: left promiscuous mode [ 471.880283][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.913416][ T9819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.954587][ T9819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.004295][ T925] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1 [ 472.036806][ T925] hid-generic 0003:0158:0100.0007: unexpected long global item [ 472.079492][ T925] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 472.225895][ T9] usb 6-1: USB disconnect, device number 23 [ 473.522604][ T5102] Bluetooth: hci1: command tx timeout [ 473.770778][ T29] audit: type=1800 audit(2000000092.964:51): pid=9846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.977" name="bus" dev="sda1" ino=2023 res=0 errno=0 [ 473.802553][ T5102] Bluetooth: hci5: command tx timeout [ 474.320124][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.986'. [ 474.442188][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.552701][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.612221][ T51] bond0 (unregistering): Released all slaves [ 475.613729][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 475.765576][ T5102] Bluetooth: hci1: command tx timeout [ 476.025669][ T5102] Bluetooth: hci5: command tx timeout [ 477.244351][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.279777][ T9808] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.299653][ T9808] bridge_slave_0: entered allmulticast mode [ 477.322685][ T9808] bridge_slave_0: entered promiscuous mode [ 477.342414][ T9808] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.357920][ T9808] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.365187][ T9808] bridge_slave_1: entered allmulticast mode [ 477.392282][ T9808] bridge_slave_1: entered promiscuous mode [ 477.484403][ T51] hsr_slave_0: left promiscuous mode [ 477.499481][ T51] hsr_slave_1: left promiscuous mode [ 477.552270][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.575127][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.611996][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.639027][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.788386][ T51] veth1_macvtap: left promiscuous mode [ 477.792025][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.994'. [ 477.815185][ T51] veth0_macvtap: left promiscuous mode [ 477.843130][ T51] veth1_vlan: left promiscuous mode [ 477.854132][ T51] veth0_vlan: left promiscuous mode [ 478.019066][ T5102] Bluetooth: hci1: command tx timeout [ 478.097271][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.996'. [ 478.282337][ T5102] Bluetooth: hci5: command tx timeout [ 479.412601][ T51] team0 (unregistering): Port device team_slave_1 removed [ 479.515832][ T51] team0 (unregistering): Port device team_slave_0 removed [ 480.512613][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'. [ 480.533562][ T5102] Bluetooth: hci5: command tx timeout [ 480.746095][ T9808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.821151][ T9808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.815085][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1003'. [ 481.874402][ T9808] team0: Port device team_slave_0 added [ 481.906936][ T9808] team0: Port device team_slave_1 added [ 482.094875][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 482.129623][ T9808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.142409][ T9808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.172906][ T9808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.308541][ T9808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.356098][ T9808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.446113][ T9808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.110308][ T9808] hsr_slave_0: entered promiscuous mode [ 483.160683][ T9808] hsr_slave_1: entered promiscuous mode [ 483.245662][ T9836] chnl_net:caif_netlink_parms(): no params data found [ 483.619354][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.000344][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.061183][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 485.345316][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.703876][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.769533][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.830638][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.837979][ T9836] bridge_slave_0: entered allmulticast mode [ 485.867970][ T9836] bridge_slave_0: entered promiscuous mode [ 485.896983][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.925390][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.966018][ T9836] bridge_slave_1: entered allmulticast mode [ 486.023644][ T9836] bridge_slave_1: entered promiscuous mode [ 487.035191][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 487.084959][ T9836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.311153][ T9836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.926076][ T9836] team0: Port device team_slave_0 added [ 487.972756][ T9836] team0: Port device team_slave_1 added [ 488.071238][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 488.487325][ T51] bridge_slave_1: left allmulticast mode [ 488.515875][ T51] bridge_slave_1: left promiscuous mode [ 488.536133][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.580359][ T51] bridge_slave_0: left allmulticast mode [ 488.603303][ T51] bridge_slave_0: left promiscuous mode [ 488.609381][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.766737][ T5152] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 489.018266][ T5152] usb 4-1: Using ep0 maxpacket: 16 [ 489.037246][ T5152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 489.049266][ T5152] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 489.058495][ T5152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.894730][ T5152] usb 4-1: config 0 descriptor?? [ 490.212202][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.236411][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.266664][ T51] bond0 (unregistering): Released all slaves [ 490.536366][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.581019][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.666192][T10057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.708554][ T9836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.715333][T10057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.726704][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.734158][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.767003][ T9836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.806180][ T5152] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 490.846895][ T5152] hid-generic 0003:0158:0100.0008: unexpected long global item [ 490.879972][ T5152] hid-generic 0003:0158:0100.0008: probe with driver hid-generic failed with error -22 [ 490.992818][ T25] usb 4-1: USB disconnect, device number 15 [ 491.143633][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1031'. [ 491.517368][ T9836] hsr_slave_0: entered promiscuous mode [ 491.559159][ T9836] hsr_slave_1: entered promiscuous mode [ 491.579607][ T9836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.597666][ T9836] Cannot create hsr debugfs directory [ 491.765813][ T51] hsr_slave_0: left promiscuous mode [ 491.795969][ T51] hsr_slave_1: left promiscuous mode [ 491.822440][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.853263][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.884808][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 491.901591][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.923995][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.041762][ T51] veth1_macvtap: left promiscuous mode [ 492.067517][ T51] veth0_macvtap: left promiscuous mode [ 492.082380][ T51] veth1_vlan: left promiscuous mode [ 492.111661][ T51] veth0_vlan: left promiscuous mode [ 495.933887][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1047'. [ 495.960248][ T925] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 496.213992][ T925] usb 2-1: Using ep0 maxpacket: 16 [ 496.228865][ T925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 496.242936][ T925] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 496.312968][ T925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.347106][ T925] usb 2-1: config 0 descriptor?? [ 496.820292][ T51] team0 (unregistering): Port device team_slave_1 removed [ 496.907632][T10149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.931360][ T51] team0 (unregistering): Port device team_slave_0 removed [ 496.941620][T10149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.971586][ T925] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1 [ 496.979262][ T925] hid-generic 0003:0158:0100.0009: unexpected long global item [ 497.000740][ T925] hid-generic 0003:0158:0100.0009: probe with driver hid-generic failed with error -22 [ 497.180440][ T5154] usb 2-1: USB disconnect, device number 17 [ 498.580729][T10191] loop1: detected capacity change from 0 to 256 [ 498.605049][T10191] ======================================================= [ 498.605049][T10191] WARNING: The mand mount option has been deprecated and [ 498.605049][T10191] and is ignored by this kernel. Remove the mand [ 498.605049][T10191] option from the mount to silence this warning. [ 498.605049][T10191] ======================================================= [ 498.658036][T10191] exfat: Deprecated parameter 'codepage' [ 498.663766][T10191] exfat: Bad value for 'codepage' [ 499.082973][ T9808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 499.128122][ T9808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 499.240983][ T9808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 499.288326][ T9808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 500.498411][T10223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1070'. [ 500.510205][ T29] audit: type=1800 audit(2000000117.645:52): pid=10224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1067" name="file0" dev="sda1" ino=2023 res=0 errno=0 [ 500.518395][T10224] overlay: Unknown parameter 'reiser\s\' [ 500.548010][T10223] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1070'. [ 500.734728][T10224] binder: BINDER_SET_CONTEXT_MGR already set [ 500.758038][T10224] binder: 10220:10224 ioctl 4018620d 20000040 returned -16 [ 500.768931][ T5152] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 500.998267][ T5152] usb 6-1: Using ep0 maxpacket: 16 [ 501.011470][ T5152] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 501.111517][ T5152] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 501.262553][ T5152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.443570][ T5152] usb 6-1: config 0 descriptor?? [ 501.808629][ T9808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.954772][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.002741][ T9808] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.012897][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.059201][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.066495][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.090877][ T5152] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1 [ 502.160480][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.167713][ T9603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.185481][ T5152] hid-generic 0003:0158:0100.000A: unexpected long global item [ 502.215609][ T9836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 502.265834][ T5152] hid-generic 0003:0158:0100.000A: probe with driver hid-generic failed with error -22 [ 502.278922][ T9836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 502.334569][ T9836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 502.373654][ T5152] usb 6-1: USB disconnect, device number 24 [ 502.425971][ T9836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 502.617063][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 503.065067][ T9836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.203562][ T9836] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.284837][ T9603] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.291984][ T9603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.334977][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.342196][ T9603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.680351][ T9808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.805537][ T9603] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 504.022411][ T9603] usb 3-1: Using ep0 maxpacket: 16 [ 504.044829][ T9603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 504.080730][ T9603] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 504.107124][T10287] loop1: detected capacity change from 0 to 4096 [ 504.129305][ T9603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.140289][ T9603] usb 3-1: config 0 descriptor?? [ 504.159148][T10287] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 504.297604][T10287] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 504.349843][ T9836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.492714][ T9057] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 504.636708][ T9836] veth0_vlan: entered promiscuous mode [ 504.701465][ T9836] veth1_vlan: entered promiscuous mode [ 504.743889][T10275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.783878][T10275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.853060][ T9603] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1 [ 504.865336][ T9808] veth0_vlan: entered promiscuous mode [ 504.955231][ T9808] veth1_vlan: entered promiscuous mode [ 504.963891][ T9836] veth0_macvtap: entered promiscuous mode [ 505.059784][ T9836] veth1_macvtap: entered promiscuous mode [ 505.154583][ T9603] hid-generic 0003:0158:0100.000B: unexpected long global item [ 505.170305][ T9603] hid-generic 0003:0158:0100.000B: probe with driver hid-generic failed with error -22 [ 505.192834][ T9603] usb 3-1: USB disconnect, device number 15 [ 505.603841][ T9808] veth0_macvtap: entered promiscuous mode [ 505.955521][ T9808] veth1_macvtap: entered promiscuous mode [ 506.082455][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.153205][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.164797][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.176461][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.187062][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.198053][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.208646][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.219721][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.234339][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.251225][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.262251][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.306940][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.317447][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.366755][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.411466][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.437034][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.459842][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.492147][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.459759][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 507.468941][ T9836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.537537][ T9836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.572425][ T9836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.582878][ T9836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.752753][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.792869][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.821271][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.880516][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.931269][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.967166][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.022349][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.052442][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.077924][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.110887][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.158065][ T9808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.229538][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.302082][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.339050][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.368076][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.407662][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.432816][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.448720][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.464551][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.484983][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.506313][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.548737][ T9808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.699851][ T9808] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.729367][ T9808] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.752767][ T9808] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.775962][ T9808] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.030875][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.065673][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.131513][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.160701][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.429177][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.508071][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.600061][ T2448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.623713][ T2448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.847647][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1098'. [ 512.207786][T10410] 9pnet_fd: Insufficient options for proto=fd [ 512.230902][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 515.009310][T10454] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 516.430833][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 516.444217][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.609955][ T29] audit: type=1804 audit(2000000132.441:53): pid=10482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1118" name="/root/syzkaller.GZUIZp/4/bus" dev="sda1" ino=2025 res=1 errno=0 [ 516.679780][ T5102] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 516.835843][ T5102] Bluetooth: hci5: Injecting HCI hardware error event [ 516.858296][ T5107] Bluetooth: hci5: hardware error 0x00 [ 517.208615][T10498] loop1: detected capacity change from 0 to 256 [ 519.276850][ T5107] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 519.550543][T10531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1131'. [ 520.954576][T10550] loop0: detected capacity change from 0 to 40427 [ 521.047394][T10550] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 521.055375][T10550] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 521.176619][T10550] F2FS-fs (loop0): Found nat_bits in checkpoint [ 521.250605][T10550] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 521.259773][T10550] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 521.556146][ T5107] Bluetooth: hci5: Opcode 0x2046 failed: -110 [ 521.800139][ T29] audit: type=1804 audit(2000000137.287:54): pid=10565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1136" name="/root/syzkaller.EOpUjc/57/bus" dev="sda1" ino=2031 res=1 errno=0 [ 521.986594][T10562] syz.0.1135: attempt to access beyond end of device [ 521.986594][T10562] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 522.271674][ T29] audit: type=1804 audit(2000000137.490:55): pid=10562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1135" name="/root/syzkaller.GZUIZp/8/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 522.294061][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.676266][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1144'. [ 525.998579][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1146'. [ 527.065553][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 527.639885][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 527.663160][ T9] usb 1-1: config 0 has no interfaces? [ 527.678255][ T9] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 527.710684][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.732418][ T29] audit: type=1804 audit(2000000142.778:56): pid=10627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1152" name="/root/syzkaller.slKUEN/49/bus" dev="sda1" ino=2033 res=1 errno=0 [ 527.765004][ T9] usb 1-1: Product: syz [ 527.777230][ T9] usb 1-1: Manufacturer: syz [ 527.788461][ T9] usb 1-1: SerialNumber: syz [ 527.824438][ T9] usb 1-1: config 0 descriptor?? [ 528.152982][ T9] usb 1-1: USB disconnect, device number 8 [ 528.375472][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 528.394668][ T5102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 528.403128][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 528.412569][ T5102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 528.424389][ T5102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 528.433544][ T5102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 529.892742][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.510738][ T50] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 530.718012][ T5107] Bluetooth: hci0: command tx timeout [ 531.210666][ T50] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.373237][ T50] usb 3-1: language id specifier not provided by device, defaulting to English [ 531.595148][ T50] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 531.614734][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.261176][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.283387][ T50] usb 3-1: Product: syz [ 532.309675][ T50] usb 3-1: Manufacturer: 󛪒 [ 532.314440][ T50] usb 3-1: SerialNumber: syz [ 532.382503][ T50] usb 3-1: bad CDC descriptors [ 533.316781][ T5107] Bluetooth: hci0: command tx timeout [ 533.569476][ T9603] usb 3-1: USB disconnect, device number 16 [ 533.830866][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.390636][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.079043][ T29] audit: type=1804 audit(2000000149.562:57): pid=10689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1166" name="/root/syzkaller.slKUEN/55/bus" dev="sda1" ino=2036 res=1 errno=0 [ 535.577262][ T5107] Bluetooth: hci0: command tx timeout [ 536.667990][ T5141] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 536.913708][ T5141] usb 1-1: Using ep0 maxpacket: 16 [ 536.932260][ T5141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 536.946530][T10633] chnl_net:caif_netlink_parms(): no params data found [ 536.978154][ T5141] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 536.993047][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.094007][ T5141] usb 1-1: config 0 descriptor?? [ 537.126174][ T51] bridge_slave_1: left allmulticast mode [ 537.187109][ T51] bridge_slave_1: left promiscuous mode [ 537.238037][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.288444][ T51] bridge_slave_0: left allmulticast mode [ 537.315870][ T51] bridge_slave_0: left promiscuous mode [ 537.332632][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.912640][ T5107] Bluetooth: hci0: command tx timeout [ 538.733836][ T25] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 538.900386][T10695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.984747][T10695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.102608][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 539.117824][ T25] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 539.144241][ T5141] hid-generic 0003:0158:0100.000C: unknown main item tag 0x1 [ 539.156325][ T25] usb 6-1: config 0 has no interface number 0 [ 539.189372][ T25] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 539.205642][ T5141] hid-generic 0003:0158:0100.000C: unexpected long global item [ 539.244407][ T5141] hid-generic 0003:0158:0100.000C: probe with driver hid-generic failed with error -22 [ 539.266438][ T25] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 539.330826][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.374295][ T5141] usb 1-1: USB disconnect, device number 9 [ 539.397974][ T25] usb 6-1: config 0 descriptor?? [ 539.448231][ T25] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 540.923460][ T5141] usb 6-1: USB disconnect, device number 25 [ 541.009227][ T58] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 541.551731][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.994992][ T58] usb 5-1: language id specifier not provided by device, defaulting to English [ 542.050525][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 542.059702][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.180474][ T58] usb 5-1: Product: syz [ 542.198381][ T58] usb 5-1: Manufacturer: 󛪒 [ 542.231835][ T58] usb 5-1: SerialNumber: syz [ 542.259359][ T58] usb 5-1: bad CDC descriptors [ 542.341035][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'. [ 543.414470][ T925] usb 5-1: USB disconnect, device number 12 [ 544.637103][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.676335][ T51] bond0 (unregistering): Released all slaves [ 544.739334][ T51] bond1 (unregistering): Released all slaves [ 544.769429][ T51] bond2 (unregistering): Released all slaves [ 545.603329][T10633] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.681648][T10633] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.709503][T10633] bridge_slave_0: entered allmulticast mode [ 545.746035][T10633] bridge_slave_0: entered promiscuous mode [ 545.928905][ T58] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 545.936915][T10633] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.965730][T10633] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.995083][T10633] bridge_slave_1: entered allmulticast mode [ 546.019771][T10633] bridge_slave_1: entered promiscuous mode [ 546.125503][ T51] hsr_slave_0: left promiscuous mode [ 546.156286][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 546.170919][ T51] hsr_slave_1: left promiscuous mode [ 546.181064][ T58] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 546.207242][ T58] usb 5-1: config 0 has no interface number 0 [ 546.232667][ T58] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 546.275003][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.300987][ T58] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 546.327287][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.361121][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.397222][ T58] usb 5-1: config 0 descriptor?? [ 546.431614][ T58] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 546.456460][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.502215][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.667322][ T58] usb 5-1: USB disconnect, device number 13 [ 546.710910][ T51] veth1_macvtap: left promiscuous mode [ 546.745892][ T51] veth0_macvtap: left promiscuous mode [ 546.779545][ T51] veth1_vlan: left promiscuous mode [ 546.795680][ T51] veth0_vlan: left promiscuous mode [ 549.401038][T10825] tty tty1: ldisc open failed (-12), clearing slot 0 [ 549.408617][T10829] tty tty1: ldisc open failed (-12), clearing slot 0 [ 551.055122][ T51] team0 (unregistering): Port device team_slave_1 removed [ 551.202951][ T51] team0 (unregistering): Port device team_slave_0 removed [ 551.297859][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1206'. [ 551.951639][T10839] Bluetooth: hci4: command 0x0406 tx timeout [ 551.958218][T10839] Bluetooth: hci2: command 0x0406 tx timeout [ 553.847078][T10877] mac80211_hwsim hwsim41 veth0‘‹?­ãð: renamed from wlan1 (while UP) [ 553.955436][T10884] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 553.993208][T10633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.049099][T10633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.016469][T10633] team0: Port device team_slave_0 added [ 556.133817][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 556.341610][T10633] team0: Port device team_slave_1 added [ 556.367042][ T58] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 556.491269][T10633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.505412][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.531397][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.639931][T10633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.653904][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 556.677395][ T58] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 556.690654][T10633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.693004][ T58] usb 1-1: config 0 has no interface number 0 [ 556.728505][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.730852][ T58] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 556.833592][T10633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.873685][ T58] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 556.902311][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.948150][ T58] usb 1-1: config 0 descriptor?? [ 556.994318][ T58] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 557.121185][T10633] hsr_slave_0: entered promiscuous mode [ 557.149438][T10633] hsr_slave_1: entered promiscuous mode [ 557.169340][T10633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.186599][T10633] Cannot create hsr debugfs directory [ 557.237804][ T9603] usb 1-1: USB disconnect, device number 10 [ 557.996687][ T29] audit: type=1326 audit(2000000170.708:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824375b99 code=0x7ffc0000 [ 558.108847][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 558.162717][ T29] audit: type=1326 audit(2000000170.745:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824375b99 code=0x7ffc0000 [ 558.187491][ T29] audit: type=1326 audit(2000000170.745:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f7824375b99 code=0x7ffc0000 [ 558.293441][ T29] audit: type=1326 audit(2000000170.745:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824375b99 code=0x7ffc0000 [ 558.384017][ T29] audit: type=1326 audit(2000000170.745:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824375b99 code=0x7ffc0000 [ 558.493018][ T29] audit: type=1326 audit(2000000170.745:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7824375b99 code=0x7ffc0000 [ 558.658658][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'. [ 558.685189][ T29] audit: type=1326 audit(2000000170.745:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824375b99 code=0x7ffc0000 [ 558.782298][ T29] audit: type=1326 audit(2000000170.745:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824375b99 code=0x7ffc0000 [ 558.899536][ T29] audit: type=1326 audit(2000000170.745:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7824375b99 code=0x7ffc0000 [ 559.043299][ T29] audit: type=1326 audit(2000000170.745:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824375b99 code=0x7ffc0000 [ 559.202196][T10944] Bluetooth: MGMT ver 1.22 [ 559.312119][ T5152] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 559.546467][ T5152] usb 5-1: Using ep0 maxpacket: 16 [ 559.572470][ T5152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 559.622888][ T5152] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 559.662160][ T5152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.715599][ T5152] usb 5-1: config 0 descriptor?? [ 559.731874][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'. [ 560.723061][T10633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 560.900774][ C0] hrtimer: interrupt took 349614 ns [ 560.941429][ T5152] usbhid 5-1:0.0: can't add hid device: -71 [ 560.967410][ T5152] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 561.000460][ T5152] usb 5-1: USB disconnect, device number 14 [ 561.057306][T10633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 561.156460][T10633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 561.207828][T10633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 562.366901][T10633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.487457][T10633] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.535806][ T50] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 562.537912][T10990] input: syz0 as /devices/virtual/input/input14 [ 562.593071][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.600384][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.657811][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.665023][ T9603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.799453][ T50] usb 3-1: Using ep0 maxpacket: 8 [ 562.814298][ T50] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 562.871553][ T50] usb 3-1: config 0 has no interface number 0 [ 562.916924][ T50] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 562.944649][ T50] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 562.997528][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.065411][ T50] usb 3-1: config 0 descriptor?? [ 563.124371][ T50] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 563.344005][T11011] netlink: 210620 bytes leftover after parsing attributes in process `syz.0.1239'. [ 563.386888][ T50] usb 3-1: USB disconnect, device number 17 [ 563.395010][ T9603] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 563.396843][T11011] batadv0: entered promiscuous mode [ 563.459822][T11011] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 563.473576][ T9603] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 563.718612][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'. [ 564.042106][T10633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.149735][T10633] veth0_vlan: entered promiscuous mode [ 565.220056][T10633] veth1_vlan: entered promiscuous mode [ 565.353314][T10633] veth0_macvtap: entered promiscuous mode [ 565.986400][T10633] veth1_macvtap: entered promiscuous mode [ 566.127444][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.166617][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.198745][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.209277][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.285227][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.328945][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.373940][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.418898][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.455888][ T50] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 566.458588][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.487374][ T50] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 566.490353][T11031] loop1: detected capacity change from 0 to 32768 [ 566.556107][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.602588][T10633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.649439][T11031] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 566.693617][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.765941][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.841511][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.875361][T11031] XFS (loop1): Ending clean mount [ 566.891765][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.898445][T11091] netlink: 210620 bytes leftover after parsing attributes in process `syz.2.1254'. [ 566.926632][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.958136][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.997781][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.059871][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.097888][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.126849][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.161151][T10633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.240939][T11091] batadv0: entered promiscuous mode [ 567.259350][T11091] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 567.330680][T10633] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.368693][T10633] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.422877][T10633] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.431700][T10633] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.700819][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'. [ 567.916803][ T1560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.950602][ T9057] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 567.962192][ T1560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.011004][ T7191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.022181][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1260'. [ 568.032313][T11111] nbd: must specify at least one socket [ 568.044198][ T7191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.117022][ T9603] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 568.365682][ T9603] usb 3-1: Using ep0 maxpacket: 8 [ 568.382701][ T9603] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 568.414889][ T9603] usb 3-1: config 0 has no interface number 0 [ 568.461247][ T9603] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 568.538879][ T9603] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 568.572705][ T9603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.610877][ T9603] usb 3-1: config 0 descriptor?? [ 568.635470][ T9603] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 568.869254][ T9603] usb 3-1: USB disconnect, device number 18 [ 571.569362][ T50] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 571.679379][ T50] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 572.065239][T11158] netlink: 210620 bytes leftover after parsing attributes in process `syz.0.1268'. [ 572.180681][T11158] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 572.451010][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 572.858235][T11180] netlink: 210620 bytes leftover after parsing attributes in process `syz.0.1273'. [ 572.937170][T11180] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 573.555291][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 573.674264][ T5150] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 575.008483][ T5150] usb 1-1: Using ep0 maxpacket: 8 [ 575.029450][ T5150] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 575.070055][ T5150] usb 1-1: config 0 has no interface number 0 [ 575.109562][ T5150] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 575.149946][ T5150] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 575.171192][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.202736][ T5150] usb 1-1: config 0 descriptor?? [ 575.205452][ T50] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 575.228794][ T5150] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 575.284077][ T50] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 575.450200][ T50] usb 1-1: USB disconnect, device number 11 [ 575.473306][ T5102] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 575.486354][ T5102] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 575.511559][ T5102] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 575.533611][ T5102] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 575.544096][ T5102] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 575.552369][ T5102] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 575.667746][ T5150] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 575.776995][T11211] netlink: 210620 bytes leftover after parsing attributes in process `syz.1.1284'. [ 575.839576][T11211] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 575.906202][ T5150] usb 4-1: Using ep0 maxpacket: 8 [ 575.913911][ T5150] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 575.917960][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 575.942235][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.984522][ T5150] usb 4-1: config 0 descriptor?? [ 576.129254][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 576.155327][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 576.170886][ T5150] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 576.274993][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 576.376993][ T25] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 576.452878][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.516492][ T25] usb 5-1: config 0 descriptor?? [ 576.610280][ T58] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 576.871470][ T8224] udevd[8224]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 577.191548][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 577.345236][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 577.382144][ T58] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 577.398787][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.414311][ T58] usb 1-1: config 0 descriptor?? [ 577.461895][T11204] chnl_net:caif_netlink_parms(): no params data found [ 577.729357][T11204] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.736678][T11204] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.754782][T11204] bridge_slave_0: entered allmulticast mode [ 577.763715][T11204] bridge_slave_0: entered promiscuous mode [ 577.780997][ T5102] Bluetooth: hci6: command tx timeout [ 577.784296][T11204] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.808897][T11204] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.816684][T11204] bridge_slave_1: entered allmulticast mode [ 577.846228][T11204] bridge_slave_1: entered promiscuous mode [ 577.858302][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.869933][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.887886][ T25] hid-generic 0003:0158:0100.0011: unknown main item tag 0x1 [ 577.903274][ T25] hid-generic 0003:0158:0100.0011: unexpected long global item [ 577.928122][ T25] hid-generic 0003:0158:0100.0011: probe with driver hid-generic failed with error -22 [ 577.983951][T11204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.017269][T11222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.029444][T11204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.042440][T11222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.107725][ T25] usb 5-1: USB disconnect, device number 15 [ 578.185235][ T58] hid-generic 0003:0158:0100.0012: unknown main item tag 0x1 [ 578.216966][ T58] hid-generic 0003:0158:0100.0012: unexpected long global item [ 578.237561][T11204] team0: Port device team_slave_0 added [ 578.244011][ T58] hid-generic 0003:0158:0100.0012: probe with driver hid-generic failed with error -22 [ 578.262869][T11204] team0: Port device team_slave_1 added [ 578.463706][T11204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.540667][ T58] usb 1-1: USB disconnect, device number 12 [ 578.558187][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.584121][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.329872][T11204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.432068][T11204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.482264][ T25] usb 4-1: USB disconnect, device number 16 [ 579.498542][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.526475][T11204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.778166][T11251] netlink: 210620 bytes leftover after parsing attributes in process `syz.2.1292'. [ 579.892013][T11251] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 579.900766][T11253] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1293'. [ 580.168152][ T5102] Bluetooth: hci6: command tx timeout [ 580.927959][ T9603] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 580.986033][ T9603] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 581.041190][ T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.475148][T11204] hsr_slave_0: entered promiscuous mode [ 581.497620][T11204] hsr_slave_1: entered promiscuous mode [ 581.525827][T11204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.548468][T11204] Cannot create hsr debugfs directory [ 581.636588][ T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.687511][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'. [ 581.769411][ T5147] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 581.863706][ T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.992902][ T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.995148][ T5147] usb 5-1: Using ep0 maxpacket: 8 [ 582.028174][ T5147] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 582.036230][ T5147] usb 5-1: config 0 has no interface number 0 [ 582.076887][ T5147] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 582.103379][ T5147] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 582.113303][T11265] loop0: detected capacity change from 0 to 32768 [ 582.123209][ T5147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.153607][ T5147] usb 5-1: config 0 descriptor?? [ 582.172549][ T5147] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 582.202083][T11265] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 582.233381][ T925] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 582.281348][T11265] XFS (loop0): Ending clean mount [ 582.367928][ T51] bridge_slave_1: left allmulticast mode [ 582.374706][ T51] bridge_slave_1: left promiscuous mode [ 582.376627][ T5102] Bluetooth: hci6: command tx timeout [ 582.394889][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.411493][ T51] bridge_slave_0: left allmulticast mode [ 582.420989][ T5150] usb 5-1: USB disconnect, device number 16 [ 582.423666][ T51] bridge_slave_0: left promiscuous mode [ 582.437952][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.450240][ T925] usb 4-1: Using ep0 maxpacket: 8 [ 582.516591][ T925] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 582.530755][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 582.530778][ T29] audit: type=1326 audit(2000000193.359:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11296 comm="syz.2.1303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f034b975b99 code=0x0 [ 582.569115][ T925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.609207][ T925] usb 4-1: config 0 descriptor?? [ 582.771309][ T925] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 582.818026][ T9647] udevd[9647]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.053494][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 583.060245][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 583.076508][ T12] sl0: compressed packet ignored [ 584.162778][ T5150] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 584.348612][ T9836] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 584.379615][ T5150] usb 2-1: Using ep0 maxpacket: 16 [ 584.390575][ T5150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 584.416055][ T5150] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 584.437439][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.451004][ T5150] usb 2-1: config 0 descriptor?? [ 584.627745][ T5102] Bluetooth: hci6: command tx timeout [ 585.074834][T11302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.084607][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.102665][T11302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.112174][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.131185][ T51] bond0 (unregistering): Released all slaves [ 585.142096][ T5150] hid-generic 0003:0158:0100.0014: unknown main item tag 0x1 [ 585.186008][ T5150] hid-generic 0003:0158:0100.0014: unexpected long global item [ 585.197695][ T5150] hid-generic 0003:0158:0100.0014: probe with driver hid-generic failed with error -22 [ 585.398393][ T5150] usb 2-1: USB disconnect, device number 18 [ 585.419384][ T50] usb 4-1: USB disconnect, device number 17 [ 586.886581][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1313'. [ 588.430278][ T51] hsr_slave_0: left promiscuous mode [ 588.512080][ T51] hsr_slave_1: left promiscuous mode [ 588.571466][ T9603] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 588.595419][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.613938][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.649749][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.694846][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.775741][ T51] veth1_macvtap: left promiscuous mode [ 588.798908][ T9603] usb 3-1: Using ep0 maxpacket: 8 [ 588.804159][ T51] veth0_macvtap: left promiscuous mode [ 588.828967][ T9603] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 588.838220][ T51] veth1_vlan: left promiscuous mode [ 588.853128][ T51] veth0_vlan: left promiscuous mode [ 588.864078][ T9603] usb 3-1: config 0 has no interface number 0 [ 588.881386][ T9603] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 588.902435][ T9603] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 588.916904][ T9603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.948349][ T9603] usb 3-1: config 0 descriptor?? [ 588.967795][ T9603] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 589.193289][ T9603] usb 3-1: USB disconnect, device number 19 [ 589.382338][T11372] input: syz0 as /devices/virtual/input/input15 [ 589.406919][ T925] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 589.634594][ T925] usb 1-1: Using ep0 maxpacket: 8 [ 589.719384][ T925] usb 1-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 589.762402][ T925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.785016][ T925] usb 1-1: config 0 descriptor?? [ 590.284178][ T925] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 591.710186][ T8143] udevd[8143]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.233244][ T5150] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 592.477301][ T5150] usb 3-1: Using ep0 maxpacket: 16 [ 592.487610][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 592.504108][ T5150] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 592.515867][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.528999][ T5150] usb 3-1: config 0 descriptor?? [ 592.555781][ T51] team0 (unregistering): Port device team_slave_1 removed [ 592.626776][ T51] team0 (unregistering): Port device team_slave_0 removed [ 593.056829][T11383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.113898][T11383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.148555][ T5147] usb 1-1: USB disconnect, device number 13 [ 593.169771][ T5150] hid-generic 0003:0158:0100.0015: unknown main item tag 0x1 [ 593.190508][ T5150] hid-generic 0003:0158:0100.0015: unexpected long global item [ 593.209690][ T5150] hid-generic 0003:0158:0100.0015: probe with driver hid-generic failed with error -22 [ 593.235165][T11390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1327'. [ 593.397890][ T9603] usb 3-1: USB disconnect, device number 20 [ 594.047712][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 594.060050][ T5107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 594.079918][ C1] Illegal XDP return value 691518464 on prog (id 188) dev bond_slave_1, expect packet loss! [ 594.120612][ T5107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 594.130969][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 594.145918][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 594.153575][ T5107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 594.259544][T11395] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 594.300497][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'. [ 594.627733][ T50] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 594.783996][T11204] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 594.829830][T11204] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 594.871641][ T50] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 594.885538][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.947899][T11204] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 594.953662][ T50] ums-cypress 3-1:1.0: USB Mass Storage device detected [ 594.992063][T11405] netlink: 'syz.1.1332': attribute type 5 has an invalid length. [ 595.037509][T11405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1332'. [ 595.092059][T11204] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 595.203124][T11395] netlink: 'syz.2.1329': attribute type 12 has an invalid length. [ 595.283199][ T5154] usb 3-1: USB disconnect, device number 21 [ 595.862789][ T5154] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 595.863525][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.010829][T11392] chnl_net:caif_netlink_parms(): no params data found [ 596.107245][ T5154] usb 4-1: Using ep0 maxpacket: 8 [ 596.135600][ T5154] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 596.145604][ T5154] usb 4-1: config 0 has no interface number 0 [ 596.151757][ T5154] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 596.179961][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.189224][ T5154] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 596.213425][ T5154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.259978][ T5154] usb 4-1: config 0 descriptor?? [ 596.289379][ T5154] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 596.414405][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.415539][ T5107] Bluetooth: hci3: command tx timeout [ 596.518217][ T5154] usb 4-1: USB disconnect, device number 18 [ 596.784491][T11414] loop1: detected capacity change from 0 to 32768 [ 596.934784][T11414] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 596.974578][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.132119][T11414] XFS (loop1): Ending clean mount [ 597.226978][T11392] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.243583][T11392] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.278976][T11392] bridge_slave_0: entered allmulticast mode [ 597.335639][T11392] bridge_slave_0: entered promiscuous mode [ 597.390543][T11392] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.412574][T11392] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.442336][T11392] bridge_slave_1: entered allmulticast mode [ 597.459145][T11392] bridge_slave_1: entered promiscuous mode [ 597.667282][T11392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.884490][T11204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.974202][T11392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.213822][ T5147] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 598.223316][ T9057] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 598.282989][T11392] team0: Port device team_slave_0 added [ 598.431277][ T5147] usb 4-1: Using ep0 maxpacket: 8 [ 598.439948][T11392] team0: Port device team_slave_1 added [ 598.474331][ T5147] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 598.483919][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.550257][ T5147] usb 4-1: config 0 descriptor?? [ 598.669265][ T5107] Bluetooth: hci3: command tx timeout [ 598.721126][T11392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.744658][T11392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.794873][T11392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.821511][ T51] bridge_slave_1: left allmulticast mode [ 598.827217][ T51] bridge_slave_1: left promiscuous mode [ 598.859109][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.895969][ T51] bridge_slave_0: left allmulticast mode [ 598.934588][ T51] bridge_slave_0: left promiscuous mode [ 598.967789][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.027988][ T5147] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 599.906758][ T8224] udevd[8224]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.988359][T11467] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 600.327367][ T5150] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 600.432951][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.451087][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.466285][ T51] bond0 (unregistering): Released all slaves [ 600.486538][T11455] netlink: 'syz.4.1343': attribute type 5 has an invalid length. [ 600.498189][T11455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1343'. [ 600.519382][T11204] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.544088][T11392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.545380][ T5150] usb 2-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 600.551061][T11392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.551103][T11392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.572419][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.601413][T11457] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1344'. [ 600.648402][ T5150] ums-cypress 2-1:1.0: USB Mass Storage device detected [ 600.923028][ T5107] Bluetooth: hci3: command tx timeout [ 600.980465][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.987670][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.015424][T11467] netlink: 'syz.1.1345': attribute type 12 has an invalid length. [ 601.049307][ T25] usb 2-1: USB disconnect, device number 19 [ 601.075383][T11392] hsr_slave_0: entered promiscuous mode [ 601.107383][T11392] hsr_slave_1: entered promiscuous mode [ 601.144470][T11392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 601.170473][T11392] Cannot create hsr debugfs directory [ 601.176298][ T9603] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 601.202250][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.209580][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.248200][ T5150] usb 4-1: USB disconnect, device number 19 [ 601.442504][ T9603] usb 5-1: Using ep0 maxpacket: 8 [ 601.452549][ T9603] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 601.501984][ T9603] usb 5-1: config 0 has no interface number 0 [ 601.530695][ T9603] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 601.570139][ T9603] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 601.585348][ T9603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.638206][ T9603] usb 5-1: config 0 descriptor?? [ 601.651375][ T9603] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 601.839122][ T51] hsr_slave_0: left promiscuous mode [ 601.859828][ T51] hsr_slave_1: left promiscuous mode [ 601.881886][ T5107] Bluetooth: hci1: command 0x0406 tx timeout [ 601.884040][ T9603] usb 5-1: USB disconnect, device number 17 [ 601.931377][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.968348][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.978221][T11499] input: syz0 as /devices/virtual/input/input16 [ 601.998756][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.016594][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.080110][ T51] batadv0: left promiscuous mode [ 602.092519][ T51] veth1_macvtap: left promiscuous mode [ 602.098202][ T51] veth0_macvtap: left promiscuous mode [ 602.121445][ T51] veth1_vlan: left promiscuous mode [ 602.136207][ T51] veth0_vlan: left promiscuous mode [ 603.183521][ T5102] Bluetooth: hci3: command tx timeout [ 603.859743][ T51] team0 (unregistering): Port device team_slave_1 removed [ 603.922424][ T51] team0 (unregistering): Port device team_slave_0 removed [ 604.664174][T11515] netlink: 'syz.2.1356': attribute type 5 has an invalid length. [ 604.675560][T11515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1356'. [ 605.180095][ C0] sl0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20410 ms [ 605.188927][ C0] sl0: transmit timed out, driver error? [ 606.425229][T11204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.512922][ T9603] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 606.730168][ T9603] usb 3-1: Using ep0 maxpacket: 8 [ 606.748861][ T9603] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 606.778865][ T9603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.816346][ T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 606.865547][ T9603] usb 3-1: config 0 descriptor?? [ 607.056274][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 607.072258][ T9603] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 607.351978][ T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 607.391099][ T25] usb 5-1: config 0 has no interface number 0 [ 608.279405][ T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 608.348989][ T25] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 608.435574][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.450731][T11392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 608.549457][ T8143] udevd[8143]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 608.568858][ T25] usb 5-1: config 0 descriptor?? [ 608.599953][T11392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 608.624994][ T25] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 608.644432][T11392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 608.660449][T11392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 608.859277][ T5154] usb 5-1: USB disconnect, device number 18 [ 608.954190][T11392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.068943][T11392] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.196365][ T9603] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.203592][ T9603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.245794][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.252979][ T9603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.449304][T11204] veth0_vlan: entered promiscuous mode [ 609.490061][T11204] veth1_vlan: entered promiscuous mode [ 609.724348][ T25] usb 3-1: USB disconnect, device number 22 [ 609.795036][T11568] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1364'. [ 609.901384][T11204] veth0_macvtap: entered promiscuous mode [ 609.944150][T11204] veth1_macvtap: entered promiscuous mode [ 610.117816][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.150466][ T29] audit: type=1800 audit(2000000218.852:73): pid=11568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1364" name="bus" dev="sda1" ino=2038 res=0 errno=0 [ 610.186023][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.195881][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.300665][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.385704][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.452553][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.522015][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'. [ 610.537149][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.601534][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.668729][T11204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.724167][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.772997][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.855403][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.898456][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.927086][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.975364][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.033547][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.105202][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.165987][T11204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.230950][T11594] netlink: 'syz.3.1368': attribute type 5 has an invalid length. [ 611.265561][T11594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1368'. [ 611.361152][T11597] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1369'. [ 611.486434][T11204] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.504362][T11204] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.515002][T11204] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.533426][T11204] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.580514][T11604] loop1: detected capacity change from 0 to 512 [ 611.682595][T11392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.801841][T11604] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.1369: corrupted in-inode xattr: overlapping e_value [ 611.896646][T11604] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1369: couldn't read orphan inode 15 (err -117) [ 611.925383][T11604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.996593][ T986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.175367][ T986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.365123][ T9057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.401225][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.412857][T11392] veth0_vlan: entered promiscuous mode [ 613.443294][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.519900][T11392] veth1_vlan: entered promiscuous mode [ 613.631091][ T29] audit: type=1804 audit(2000000222.046:74): pid=11625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1376" name="/root/syzkaller.aoiyVY/100/bus" dev="sda1" ino=2008 res=1 errno=0 [ 613.670983][ T58] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 613.721883][T11392] veth0_macvtap: entered promiscuous mode [ 613.738528][T11392] veth1_macvtap: entered promiscuous mode [ 613.795281][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.849991][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.895532][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 613.911710][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.944840][ T50] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 613.956347][ T58] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 613.974839][ T58] usb 5-1: config 0 has no interface number 0 [ 613.980588][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.994661][ T58] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 614.003159][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.131910][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.179099][ T50] usb 4-1: Using ep0 maxpacket: 8 [ 614.488989][ T50] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 614.560725][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.638436][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.657008][ T58] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 614.668116][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.698671][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.716240][ T58] usb 5-1: config 0 descriptor?? [ 614.716867][ T50] usb 4-1: config 0 descriptor?? [ 614.745927][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.772820][ T58] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 614.778956][ T50] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 614.791768][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.834396][T11392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.955788][ T8143] udevd[8143]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 615.183391][ T5150] usb 5-1: USB disconnect, device number 19 [ 615.260865][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.798598][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.078915][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.100497][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.138290][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.173902][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.205380][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.231988][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.260736][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.289254][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.305573][T11392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.361152][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'. [ 616.422101][T11392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.438952][T11392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.450568][T11392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.459690][T11392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.496564][T11659] netlink: 'syz.5.1381': attribute type 5 has an invalid length. [ 616.523353][T11659] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1381'. [ 616.875579][T10774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.911060][T10774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.162455][T10774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.236214][T10774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.151527][ T9603] usb 4-1: USB disconnect, device number 20 [ 619.519004][T11695] loop0: detected capacity change from 0 to 512 [ 619.538334][T11690] overlayfs: overlapping lowerdir path [ 619.739445][T11695] EXT4-fs (loop0): 1 truncate cleaned up [ 619.746543][T11707] 9pnet_fd: Insufficient options for proto=fd [ 619.819230][T11695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.920878][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1394'. [ 620.019539][T11392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.335641][T11715] binder: 11714:11715 ioctl c0306201 20000380 returned -14 [ 620.792426][ T58] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 621.009089][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 621.026022][ T58] usb 5-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 621.053564][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.198600][ T58] usb 5-1: config 0 descriptor?? [ 623.273948][T11748] warn_alloc: 3 callbacks suppressed [ 623.273969][T11748] syz.1.1405: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 623.457861][T11748] CPU: 1 PID: 11748 Comm: syz.1.1405 Not tainted 6.10.0-rc6-syzkaller-00048-g73e931504f8e #0 [ 623.468072][T11748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 623.478144][T11748] Call Trace: [ 623.481437][T11748] [ 623.484381][T11748] dump_stack_lvl+0x241/0x360 [ 623.489104][T11748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.494337][T11748] ? __pfx__printk+0x10/0x10 [ 623.498968][T11748] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 623.505420][T11748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.511076][T11748] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 623.517617][T11748] warn_alloc+0x278/0x410 [ 623.521983][T11748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.527642][T11748] ? stack_depot_save_flags+0x29/0x830 [ 623.533137][T11748] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 623.539230][T11748] ? __pfx_warn_alloc+0x10/0x10 [ 623.544119][T11748] ? kasan_save_track+0x3f/0x80 [ 623.548994][T11748] ? __kasan_kmalloc+0x98/0xb0 [ 623.553793][T11748] ? xsk_setsockopt+0x598/0x950 [ 623.558670][T11748] ? do_sock_setsockopt+0x3b1/0x720 [ 623.563896][T11748] ? __sys_setsockopt+0x1ae/0x250 [ 623.568945][T11748] ? __x64_sys_setsockopt+0xb5/0xd0 [ 623.574168][T11748] ? do_syscall_64+0xf3/0x230 [ 623.578877][T11748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.584991][T11748] __vmalloc_node_range_noprof+0x130/0x1460 [ 623.590955][T11748] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 623.597314][T11748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.602968][T11748] ? __kasan_kmalloc+0x98/0xb0 [ 623.607788][T11748] ? xskq_create+0x54/0x170 [ 623.612349][T11748] vmalloc_user_noprof+0x74/0x80 [ 623.617323][T11748] ? xskq_create+0xb6/0x170 [ 623.621870][T11748] xskq_create+0xb6/0x170 [ 623.626245][T11748] xsk_init_queue+0xa1/0x100 [ 623.630881][T11748] xsk_setsockopt+0x598/0x950 [ 623.635605][T11748] ? __pfx_xsk_setsockopt+0x10/0x10 [ 623.640851][T11748] ? __pfx_lock_acquire+0x10/0x10 [ 623.645912][T11748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.651577][T11748] ? aa_sock_opt_perm+0x79/0x120 [ 623.656565][T11748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.662248][T11748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.667928][T11748] ? security_socket_setsockopt+0x87/0xb0 [ 623.673696][T11748] ? __pfx_xsk_setsockopt+0x10/0x10 [ 623.678938][T11748] do_sock_setsockopt+0x3b1/0x720 [ 623.684023][T11748] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 623.689704][T11748] ? __fget_files+0x29/0x470 [ 623.694347][T11748] ? __fget_files+0x3f6/0x470 [ 623.699087][T11748] __sys_setsockopt+0x1ae/0x250 [ 623.703954][T11748] __x64_sys_setsockopt+0xb5/0xd0 [ 623.708993][T11748] do_syscall_64+0xf3/0x230 [ 623.713519][T11748] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.719158][T11748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.725334][T11748] RIP: 0033:0x7f7824375b99 [ 623.729760][T11748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.749378][T11748] RSP: 002b:00007f7825178048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 623.757828][T11748] RAX: ffffffffffffffda RBX: 00007f7824503fa0 RCX: 00007f7824375b99 [ 623.765811][T11748] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 623.773817][T11748] RBP: 00007f78243f677e R08: 0000000000000004 R09: 0000000000000000 [ 623.781797][T11748] R10: 0000000020000900 R11: 0000000000000246 R12: 0000000000000000 [ 623.789776][T11748] R13: 000000000000000b R14: 00007f7824503fa0 R15: 00007ffd4661c938 [ 623.797776][T11748] [ 623.800924][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.840125][ T58] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 624.167895][ T5102] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 624.199295][ T5102] Bluetooth: hci0: Injecting HCI hardware error event [ 624.212078][ T5102] Bluetooth: hci0: hardware error 0x00 [ 624.652226][T11748] Mem-Info: [ 624.726284][ T5107] Bluetooth: hci6: unknown advertising packet type: 0x63 [ 624.766451][ T8077] udevd[8077]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.822766][T11748] active_anon:11883 inactive_anon:0 isolated_anon:0 [ 624.822766][T11748] active_file:1984 inactive_file:49647 isolated_file:0 [ 624.822766][T11748] unevictable:768 dirty:264 writeback:0 [ 624.822766][T11748] slab_reclaimable:9704 slab_unreclaimable:100251 [ 624.822766][T11748] mapped:20705 shmem:7115 pagetables:964 [ 624.822766][T11748] sec_pagetables:0 bounce:0 [ 624.822766][T11748] kernel_misc_reclaimable:0 [ 624.822766][T11748] free:1368288 free_pcp:5125 free_cma:0 [ 625.027748][T11764] loop3: detected capacity change from 0 to 32768 [ 625.056035][T11764] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1408 (11764) [ 625.064889][T11762] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 625.096556][T11748] Node 0 active_anon:63932kB inactive_anon:0kB active_file:7936kB inactive_file:198520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:82820kB dirty:1056kB writeback:0kB shmem:43224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10596kB pagetables:3856kB sec_pagetables:0kB all_unreclaimable? no [ 625.129015][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.177579][T11764] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 625.188115][T11764] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 625.197739][T11764] BTRFS info (device loop3): using free-space-tree [ 625.267568][T11748] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 625.301492][T11775] loop2: detected capacity change from 0 to 512 [ 625.411986][T11775] EXT4-fs (loop2): 1 truncate cleaned up [ 625.464056][T11775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.554148][T11748] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 625.703916][T11748] lowmem_reserve[]: 0 2571 2571 0 0 [ 625.709319][T11748] Node 0 DMA32 free:1506640kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:50284kB inactive_anon:0kB active_file:7936kB inactive_file:198516kB unevictable:1536kB writepending:1156kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:18480kB local_pcp:15196kB free_cma:0kB [ 625.771013][ T9287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.780879][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'. [ 625.793008][T11748] lowmem_reserve[]: 0 0 0 0 0 [ 625.818412][T11748] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 625.891744][T11748] lowmem_reserve[]: 0 0 0 0 0 [ 625.943271][ T5152] usb 5-1: USB disconnect, device number 20 [ 625.973858][T11748] Node 1 Normal free:3943336kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:4024kB local_pcp:0kB free_cma:0kB [ 626.067178][T11748] lowmem_reserve[]: 0 0 0 0 0 [ 626.112667][T11748] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 626.130750][ T29] audit: type=1800 audit(2000000233.602:75): pid=11791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1412" name="bus" dev="sda1" ino=2040 res=0 errno=0 [ 626.133856][T11748] Node 0 [ 626.248707][T11797] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1411'. [ 626.294494][T11797] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1411'. [ 626.317275][T11748] DMA32: 654*4kB (UME) 265*8kB (UM) 48*16kB (UM) 42*32kB (UME) 178*64kB (UE) 114*128kB (UME) 23*256kB (UME) 67*512kB (UME) 36*1024kB (UME) 9*2048kB (UME) 338*4096kB (UM) = 1512768kB [ 626.448704][T11748] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 626.472267][T11748] Node 1 Normal: 2*4kB (U) 0*8kB 2*16kB (U) 4*32kB (U) 4*64kB (UM) 6*128kB (U) 1*256kB (M) 1*512kB (M) 1*1024kB (U) 2*2048kB (U) 961*4096kB (M) = 3943336kB [ 626.510810][T11748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 626.526060][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 626.531827][T11748] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 626.615889][T11748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 626.672186][T11748] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 626.693886][T11748] 57053 total pagecache pages [ 626.701110][T11748] 0 pages in swap cache [ 626.708373][T11748] Free swap = 124704kB [ 626.715085][T11748] Total swap = 124996kB [ 626.728515][T11748] 2097051 pages RAM [ 626.737428][T11748] 0 pages HighMem/MovableOnly [ 626.772846][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 626.776421][T11748] 400871 pages reserved [ 626.788308][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.794490][T11748] 0 pages cma reserved [ 626.815943][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.841849][ T25] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.91 [ 626.909750][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.957984][ T25] usb 1-1: config 0 descriptor?? [ 627.008097][T10633] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 627.179752][T11812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1419'. [ 627.192092][T11812] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1419'. [ 627.466753][ T5102] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 628.154377][ T25] lenovo 0003:17EF:60EE.0016: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.0-1/input0 [ 628.201840][ T5154] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 628.446503][ T5154] usb 3-1: Using ep0 maxpacket: 16 [ 628.488687][ T5154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 628.522262][ T5154] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 629.318490][ T5154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.352930][ T5154] usb 3-1: config 0 descriptor?? [ 629.568146][ T25] usb 1-1: USB disconnect, device number 14 [ 630.268347][T11808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.345205][T11808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.448272][ T5154] hid-generic 0003:0158:0100.0017: unknown main item tag 0x1 [ 631.335558][ T5154] hid-generic 0003:0158:0100.0017: unexpected long global item [ 631.344414][ T5154] hid-generic 0003:0158:0100.0017: probe with driver hid-generic failed with error -22 [ 631.359119][ T5154] usb 3-1: USB disconnect, device number 23 [ 631.364363][T11851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1427'. [ 631.398750][T11852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1428'. [ 631.432042][T11852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1428'. [ 631.456181][ T29] audit: type=1326 audit(2000000238.521:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11849 comm="syz.3.1427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9587f75b99 code=0x0 [ 631.693273][T11862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1432'. [ 631.793593][T11862] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1432'. [ 631.894304][T11867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1434'. [ 631.929678][T11867] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1434'. [ 632.089557][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 634.679430][T11900] blk-mq: failed to allocate request map [ 635.057685][T11904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1447'. [ 635.079395][T11904] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1447'. [ 636.237192][T11925] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 637.282878][T11928] __nla_validate_parse: 4 callbacks suppressed [ 637.283345][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1455'. [ 637.702889][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1458'. [ 637.793220][T11916] loop1: detected capacity change from 0 to 32768 [ 637.920573][T11916] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 638.649957][T11916] XFS (loop1): Ending clean mount [ 638.976152][ T9057] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 638.998883][T11964] loop0: detected capacity change from 0 to 64 [ 639.584986][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'. [ 639.655183][T11983] input: syz0 as /devices/virtual/input/input20 [ 639.832119][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'. [ 642.693228][T12014] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 643.070237][ T5150] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 643.302018][ T5150] usb 2-1: Using ep0 maxpacket: 16 [ 643.927597][ T5150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 644.008783][ T5150] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 644.044084][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.058934][ T5150] usb 2-1: config 0 descriptor?? [ 644.652358][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1481'. [ 644.794848][T12018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.829669][T12018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.914319][ T5150] hid-generic 0003:0158:0100.0018: unknown main item tag 0x1 [ 644.944110][ T5150] hid-generic 0003:0158:0100.0018: unexpected long global item [ 644.985704][ T5150] hid-generic 0003:0158:0100.0018: probe with driver hid-generic failed with error -22 [ 645.215427][ T5150] usb 2-1: USB disconnect, device number 20 [ 646.109269][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 647.965506][T12068] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 648.456207][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1495'. [ 649.106263][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 649.463082][T12103] loop0: detected capacity change from 0 to 64 [ 650.030075][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 650.039497][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 650.061474][ T1244] ================================================================== [ 650.069607][ T1244] BUG: KASAN: slab-use-after-free in tty_write_room+0x35/0x90 [ 650.077102][ T1244] Read of size 8 at addr ffff88806913e020 by task aoe_tx0/1244 [ 650.084672][ T1244] [ 650.087006][ T1244] CPU: 0 PID: 1244 Comm: aoe_tx0 Not tainted 6.10.0-rc6-syzkaller-00048-g73e931504f8e #0 [ 650.096835][ T1244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 650.106922][ T1244] Call Trace: [ 650.110219][ T1244] [ 650.113159][ T1244] dump_stack_lvl+0x241/0x360 [ 650.117881][ T1244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.123124][ T1244] ? __pfx__printk+0x10/0x10 [ 650.127761][ T1244] ? _printk+0xd5/0x120 [ 650.131957][ T1244] ? __virt_addr_valid+0x183/0x520 [ 650.137112][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.142778][ T1244] print_report+0x169/0x550 [ 650.147328][ T1244] ? __virt_addr_valid+0x183/0x520 [ 650.152480][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.158150][ T1244] ? __virt_addr_valid+0x44e/0x520 [ 650.163300][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.168969][ T1244] ? __phys_addr+0xba/0x170 [ 650.173520][ T1244] ? tty_write_room+0x35/0x90 [ 650.178227][ T1244] kasan_report+0x143/0x180 [ 650.182768][ T1244] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 650.189140][ T1244] ? tty_write_room+0x35/0x90 [ 650.193856][ T1244] tty_write_room+0x35/0x90 [ 650.198483][ T1244] handle_tx+0x164/0x640 [ 650.202780][ T1244] dev_hard_start_xmit+0x27c/0x7e0 [ 650.207946][ T1244] __dev_queue_xmit+0x1b0e/0x3d30 [ 650.213013][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.218685][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.224361][ T1244] ? __dev_queue_xmit+0x2d2/0x3d30 [ 650.229513][ T1244] ? do_raw_spin_lock+0x14f/0x370 [ 650.234583][ T1244] ? __pfx_lock_release+0x10/0x10 [ 650.239642][ T1244] ? __pfx___dev_queue_xmit+0x10/0x10 [ 650.245055][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.250730][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.256399][ T1244] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 650.262410][ T1244] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 650.268772][ T1244] ? _raw_spin_unlock_irq+0x23/0x50 [ 650.273998][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.279655][ T1244] ? lockdep_hardirqs_on+0x99/0x150 [ 650.284890][ T1244] tx+0x6b/0x180 [ 650.288456][ T1244] ? __pfx_tx+0x10/0x10 [ 650.292624][ T1244] kthread+0x23c/0x450 [ 650.296726][ T1244] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 650.302652][ T1244] ? __pfx_kthread+0x10/0x10 [ 650.307283][ T1244] ? __pfx_default_wake_function+0x10/0x10 [ 650.313123][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.318785][ T1244] ? __kthread_parkme+0x169/0x1d0 [ 650.323860][ T1244] ? __pfx_kthread+0x10/0x10 [ 650.328496][ T1244] kthread+0x2f2/0x390 [ 650.331660][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.332570][ T1244] ? __pfx_kthread+0x10/0x10 [ 650.332613][ T1244] ? __pfx_kthread+0x10/0x10 [ 650.352394][ T1244] ret_from_fork+0x4d/0x80 [ 650.356845][ T1244] ? __pfx_kthread+0x10/0x10 [ 650.361468][ T1244] ret_from_fork_asm+0x1a/0x30 [ 650.366286][ T1244] [ 650.369309][ T1244] [ 650.371636][ T1244] Allocated by task 10224: [ 650.376058][ T1244] kasan_save_track+0x3f/0x80 [ 650.380763][ T1244] __kasan_kmalloc+0x98/0xb0 [ 650.385389][ T1244] kmalloc_trace_noprof+0x19c/0x2c0 [ 650.390621][ T1244] alloc_tty_struct+0xa9/0x7d0 [ 650.395402][ T1244] tty_init_dev+0x5b/0x4c0 [ 650.399817][ T1244] ptmx_open+0xda/0x2c0 [ 650.404005][ T1244] chrdev_open+0x5b2/0x630 [ 650.408431][ T1244] do_dentry_open+0x972/0x1450 [ 650.413198][ T1244] vfs_open+0x3e/0x330 [ 650.417268][ T1244] path_openat+0x2c01/0x35f0 [ 650.421848][ T1244] do_filp_open+0x235/0x490 [ 650.426344][ T1244] do_sys_openat2+0x13e/0x1d0 [ 650.431031][ T1244] __x64_sys_openat+0x247/0x2a0 [ 650.435912][ T1244] do_syscall_64+0xf3/0x230 [ 650.440442][ T1244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.446367][ T1244] [ 650.448698][ T1244] Freed by task 50: [ 650.452493][ T1244] kasan_save_track+0x3f/0x80 [ 650.457189][ T1244] kasan_save_free_info+0x40/0x50 [ 650.462218][ T1244] poison_slab_object+0xe0/0x150 [ 650.467160][ T1244] __kasan_slab_free+0x37/0x60 [ 650.471939][ T1244] kfree+0x149/0x360 [ 650.475838][ T1244] process_scheduled_works+0xa2e/0x1830 [ 650.481382][ T1244] worker_thread+0x86d/0xd50 [ 650.485976][ T1244] kthread+0x2f2/0x390 [ 650.490046][ T1244] ret_from_fork+0x4d/0x80 [ 650.494467][ T1244] ret_from_fork_asm+0x1a/0x30 [ 650.499245][ T1244] [ 650.501572][ T1244] Last potentially related work creation: [ 650.507283][ T1244] kasan_save_stack+0x3f/0x60 [ 650.511962][ T1244] __kasan_record_aux_stack+0xac/0xc0 [ 650.517347][ T1244] insert_work+0x3e/0x330 [ 650.521674][ T1244] __queue_work+0xc16/0xee0 [ 650.526170][ T1244] queue_work_on+0x1c2/0x380 [ 650.530755][ T1244] tty_release_struct+0xbc/0xe0 [ 650.535612][ T1244] tty_release+0xd0c/0x12c0 [ 650.540112][ T1244] __fput+0x24c/0x8a0 [ 650.544087][ T1244] task_work_run+0x251/0x310 [ 650.548672][ T1244] do_exit+0xa27/0x27e0 [ 650.552823][ T1244] do_group_exit+0x207/0x2c0 [ 650.557434][ T1244] get_signal+0x16a1/0x1740 [ 650.561936][ T1244] arch_do_signal_or_restart+0x96/0x860 [ 650.567478][ T1244] syscall_exit_to_user_mode+0xc9/0x360 [ 650.573031][ T1244] do_syscall_64+0x100/0x230 [ 650.577627][ T1244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.583525][ T1244] [ 650.585837][ T1244] The buggy address belongs to the object at ffff88806913e000 [ 650.585837][ T1244] which belongs to the cache kmalloc-cg-2k of size 2048 [ 650.600153][ T1244] The buggy address is located 32 bytes inside of [ 650.600153][ T1244] freed 2048-byte region [ffff88806913e000, ffff88806913e800) [ 650.613980][ T1244] [ 650.616316][ T1244] The buggy address belongs to the physical page: [ 650.622716][ T1244] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x69138 [ 650.631505][ T1244] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 650.639992][ T1244] memcg:ffff88802a586981 [ 650.644225][ T1244] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 650.652198][ T1244] page_type: 0xffffefff(slab) [ 650.656871][ T1244] raw: 00fff00000000040 ffff88801504f3c0 0000000000000000 dead000000000001 [ 650.665459][ T1244] raw: 0000000000000000 0000000000080008 00000001ffffefff ffff88802a586981 [ 650.674043][ T1244] head: 00fff00000000040 ffff88801504f3c0 0000000000000000 dead000000000001 [ 650.682807][ T1244] head: 0000000000000000 0000000000080008 00000001ffffefff ffff88802a586981 [ 650.691480][ T1244] head: 00fff00000000003 ffffea0001a44e01 ffffffffffffffff 0000000000000000 [ 650.700154][ T1244] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 650.708821][ T1244] page dumped because: kasan: bad access detected [ 650.715223][ T1244] page_owner tracks the page as allocated [ 650.720938][ T1244] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9373, tgid 9373 (syz-executor), ts 429217660919, free_ts 429214964407 [ 650.743891][ T1244] post_alloc_hook+0x1f3/0x230 [ 650.748685][ T1244] get_page_from_freelist+0x2e4c/0x2f10 [ 650.754272][ T1244] __alloc_pages_noprof+0x256/0x6c0 [ 650.759476][ T1244] alloc_slab_page+0x5f/0x120 [ 650.764156][ T1244] allocate_slab+0x5a/0x2f0 [ 650.768658][ T1244] ___slab_alloc+0xcd1/0x14b0 [ 650.773330][ T1244] __slab_alloc+0x58/0xa0 [ 650.777657][ T1244] kmalloc_node_track_caller_noprof+0x281/0x440 [ 650.783908][ T1244] kmemdup_noprof+0x2a/0x60 [ 650.788416][ T1244] neigh_sysctl_register+0xb4/0x4e0 [ 650.793617][ T1244] addrconf_sysctl_register+0xb2/0x1c0 [ 650.799071][ T1244] ipv6_add_dev+0xcf6/0x1220 [ 650.803663][ T1244] addrconf_notify+0x6a7/0x1020 [ 650.808514][ T1244] notifier_call_chain+0x1a1/0x3e0 [ 650.813623][ T1244] register_netdevice+0x1570/0x19e0 [ 650.818828][ T1244] veth_newlink+0x628/0xcd0 [ 650.823357][ T1244] page last free pid 9373 tgid 9373 stack trace: [ 650.829677][ T1244] free_unref_page+0xd22/0xea0 [ 650.834455][ T1244] __put_partials+0xeb/0x130 [ 650.839054][ T1244] put_cpu_partial+0x17c/0x250 [ 650.843823][ T1244] __slab_free+0x2ea/0x3d0 [ 650.848241][ T1244] qlist_free_all+0x9e/0x140 [ 650.852827][ T1244] kasan_quarantine_reduce+0x14f/0x170 [ 650.858283][ T1244] __kasan_slab_alloc+0x23/0x80 [ 650.863133][ T1244] kmalloc_trace_noprof+0x132/0x2c0 [ 650.868334][ T1244] kset_create_and_add+0x5b/0x170 [ 650.873362][ T1244] netdev_register_kobject+0x1a8/0x320 [ 650.878825][ T1244] register_netdevice+0x11d5/0x19e0 [ 650.884031][ T1244] veth_newlink+0x628/0xcd0 [ 650.888530][ T1244] rtnl_newlink+0x1591/0x20a0 [ 650.893208][ T1244] rtnetlink_rcv_msg+0x89d/0x1180 [ 650.898239][ T1244] netlink_rcv_skb+0x1e5/0x430 [ 650.903005][ T1244] netlink_unicast+0x7ec/0x980 [ 650.907765][ T1244] [ 650.910069][ T1244] Memory state around the buggy address: [ 650.915691][ T1244] ffff88806913df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 650.923745][ T1244] ffff88806913df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 650.931808][ T1244] >ffff88806913e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 650.939869][ T1244] ^ [ 650.944981][ T1244] ffff88806913e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 650.953060][ T1244] ffff88806913e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 650.961122][ T1244] ================================================================== [ 650.969305][ T1244] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 650.976508][ T1244] CPU: 0 PID: 1244 Comm: aoe_tx0 Not tainted 6.10.0-rc6-syzkaller-00048-g73e931504f8e #0 [ 650.986304][ T1244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 650.996381][ T1244] Call Trace: [ 650.999659][ T1244] [ 651.002616][ T1244] dump_stack_lvl+0x241/0x360 [ 651.007322][ T1244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.012530][ T1244] ? __pfx__printk+0x10/0x10 [ 651.017134][ T1244] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.023150][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.028786][ T1244] ? vscnprintf+0x5d/0x90 [ 651.033152][ T1244] panic+0x349/0x860 [ 651.037056][ T1244] ? check_panic_on_warn+0x21/0xb0 [ 651.042173][ T1244] ? __pfx_panic+0x10/0x10 [ 651.046591][ T1244] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 651.052486][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.058128][ T1244] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 651.064027][ T1244] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 651.070352][ T1244] check_panic_on_warn+0x86/0xb0 [ 651.075299][ T1244] ? tty_write_room+0x35/0x90 [ 651.079972][ T1244] end_report+0x77/0x160 [ 651.084218][ T1244] kasan_report+0x154/0x180 [ 651.088732][ T1244] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 651.095089][ T1244] ? tty_write_room+0x35/0x90 [ 651.099777][ T1244] tty_write_room+0x35/0x90 [ 651.104279][ T1244] handle_tx+0x164/0x640 [ 651.108533][ T1244] dev_hard_start_xmit+0x27c/0x7e0 [ 651.113682][ T1244] __dev_queue_xmit+0x1b0e/0x3d30 [ 651.118713][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.124349][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.129987][ T1244] ? __dev_queue_xmit+0x2d2/0x3d30 [ 651.135099][ T1244] ? do_raw_spin_lock+0x14f/0x370 [ 651.140127][ T1244] ? __pfx_lock_release+0x10/0x10 [ 651.145146][ T1244] ? __pfx___dev_queue_xmit+0x10/0x10 [ 651.150522][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.156153][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.161779][ T1244] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.167769][ T1244] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 651.174110][ T1244] ? _raw_spin_unlock_irq+0x23/0x50 [ 651.179301][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.184929][ T1244] ? lockdep_hardirqs_on+0x99/0x150 [ 651.190134][ T1244] tx+0x6b/0x180 [ 651.193681][ T1244] ? __pfx_tx+0x10/0x10 [ 651.197830][ T1244] kthread+0x23c/0x450 [ 651.201901][ T1244] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 651.207804][ T1244] ? __pfx_kthread+0x10/0x10 [ 651.212400][ T1244] ? __pfx_default_wake_function+0x10/0x10 [ 651.218215][ T1244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.223850][ T1244] ? __kthread_parkme+0x169/0x1d0 [ 651.228879][ T1244] ? __pfx_kthread+0x10/0x10 [ 651.233469][ T1244] kthread+0x2f2/0x390 [ 651.237558][ T1244] ? __pfx_kthread+0x10/0x10 [ 651.242162][ T1244] ? __pfx_kthread+0x10/0x10 [ 651.246751][ T1244] ret_from_fork+0x4d/0x80 [ 651.251175][ T1244] ? __pfx_kthread+0x10/0x10 [ 651.255773][ T1244] ret_from_fork_asm+0x1a/0x30 [ 651.260579][ T1244] [ 651.263842][ T1244] Kernel Offset: disabled [ 651.268159][ T1244] Rebooting in 86400 seconds..