last executing test programs: 5m52.805172172s ago: executing program 1 (id=3124): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2a", 0x2c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x15, 0x3, 0x1, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)=""/10, 0xa}, {&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000000740)=""/127, 0x7f}, {&(0x7f00000007c0)=""/2, 0x2}, {&(0x7f0000000800)=""/194, 0xc2}, {0x0}], 0x6, &(0x7f0000000a80)=[@rdma_dest={0x18, 0x114, 0x2, {0x9, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x17, 0x80000000}, &(0x7f0000000a00)=0x7, 0x0, 0x0, 0x7, 0x3, 0x5e13, 0x78, 0x1000000000000}}], 0x70, 0x4000000}, 0x4000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb9", 0x47}], 0x1}, 0x20048050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14"], 0x232) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m52.352880399s ago: executing program 1 (id=3126): syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x1204491, &(0x7f0000000380)=ANY=[], 0x2, 0x835, &(0x7f0000001b00)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5460, &(0x7f0000001cc0)={{}, 0x0, 0x0, @unused, @devid}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x40, 0x0, 0x0) 5m48.111554971s ago: executing program 1 (id=3132): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) timer_delete(0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x76, &(0x7f0000000040)=@string={0x76, 0x3, "74f0047d8ec67a04ebae1242e27a7495411f2115f99b99922caeda376419b529327ba79390347001267b201a1b028dab24fc3726d12cfb8c60da176942145a8de25f6b4c91b878d867bd0eb5e3232f2b4ef4f689cf43a8ecef8cb16726019ae775dea1c849e3de7bb74641ad6fbba75dd6fb85f6"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3801}}]}) 5m42.084355419s ago: executing program 1 (id=3138): bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 5m40.626576946s ago: executing program 1 (id=3141): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000009c0)=ANY=[]) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000080)=@nullb, 0x0, &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r7) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000210400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000b00"], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100)) 5m39.272599846s ago: executing program 1 (id=3143): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x35, 0x2, 0x92, 0x40, 0x7b0, 0x7, 0xba57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0xdd, 0x0, 0x1, 0x6, 0x6f, 0x9, 0x0, [], [{{0x9, 0x5, 0x9, 0x10, 0x10, 0x4, 0x59, 0x9}}]}}]}}]}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00", 0x20}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) 5m22.907383459s ago: executing program 32 (id=3143): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x35, 0x2, 0x92, 0x40, 0x7b0, 0x7, 0xba57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0xdd, 0x0, 0x1, 0x6, 0x6f, 0x9, 0x0, [], [{{0x9, 0x5, 0x9, 0x10, 0x10, 0x4, 0x59, 0x9}}]}}]}}]}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00", 0x20}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) 22.621794531s ago: executing program 4 (id=3793): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r1, 0x0, 0x0) 21.669179738s ago: executing program 4 (id=3796): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) 16.272165154s ago: executing program 2 (id=3809): pipe(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket(0x27, 0x4, 0x80000000) creat(&(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x141) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r1, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n\x00\x00\x00\a\x00\x00'], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x18) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r5) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, 0x0, 0x48044) 16.270903874s ago: executing program 4 (id=3810): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x13b481, 0x16) r1 = userfaultfd(0x80801) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="11ea2cbd7000ffdbdf250b000000180001801400020076657468305f746f5f62726964676500"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x5, 0x1000, 0x7fffffffffffffff, 0x2, 0x5, 0x8000000000000001, 0x2, 0x3}, &(0x7f0000000180)={0xed, 0x5, 0x3, 0xb2ef, 0x4, 0x9, 0x4, 0x7}, &(0x7f0000000280)={0xa, 0x5a13, 0xfff, 0x2, 0x8, 0x7, 0x3ff, 0x1}, &(0x7f0000000300)={r7, r8+10000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0x5]}, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000ac0)={0x0, 0x0, 0x5, 0x0, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 14.59935634s ago: executing program 4 (id=3817): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec+9Nzz0593t6Tk5CAhhaE9mPQsSrEfFtEnG47dho5Acn1s5bfXh9NtuSaDQ++yuJJN/XOj/Jfx/MM69ExG9fR5wsbCy3tryyUCqX08U8P1mvXJmsLa+culQpzafz6eXpmZkz78xMv//eu32r65vn//nh07sfnfnm+Or3v9w/cjuJs3EoP9Zejx240Z6ZiIn8ORmLs0+cONWHwgZJstsXwLaM5HE+FlkfcDhG8qgH/v++iogGMKQS8Q9DqjUOaM3t+zQPfmE8+HBtArSx/qNrr43Evubc6MBq8tjMKJvvjveh/KyMX/+8czvbon+vQwBs6cbNiDg9Orqx/0vy/m/7TvdwzpNl6P/g+bmbjX/e6jT+KayPf6LD+Odgh9jdjq3jv3C/D8V0lY3/Pug4/l1ftBofyXMvNcd8Y8nFS+U069tejogTMbY3y2+2nnNm9V6j27H28V+2ZeW3xoL5ddwf3fv4Y+ZK9dJO6tzuwc2I1zqOf5P19k86tH/2fJzvsYxj6Z3Xux3buv7PVuPniDc6tv+jFa1k8/XJyeb9MNm6Kzb6+9ax37uVv9v1z9r/wOb1H0/a12trT1/GT/v+Tbsd2+79vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr/Kz+J45v3v91uv/3R8QXPdb/1tFbXU8dhPafe6r2f/rEvY+//LFb+b21/9vN1Il8Ty/9X68XuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G5XHgAAAAAAAAAAAAAAAAAAAAbEwS6f/8/8MbLbVwc8c77yG4bXlvHfj296AgaS//8wvMQ/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/AMAAAAAAAAAAAAAAAAAAAAAAAAAAEBfnT93Ltsaqw+vz2b5uavLSwvVq6fm0tpCsbI0W5ytLl4pzler8+W0OFutbPX3ytXqlanpWLo2WU9r9cna8sqFSnXpcv3CpUppPr2Qjj2XWgEAAAAAAAAAAAAAAAAAAMCLpba8slAql9NFCYltJUYH4zIk+pzY7Z4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB75LwAA///MUDi3") setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000540), 0xff57, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) poll(0x0, 0x0, 0x9) unlink(&(0x7f0000000080)='./file0/file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x84, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 14.159838395s ago: executing program 5 (id=3818): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x2b, 0x80801, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x3db}, &(0x7f0000000040), 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) syz_open_procfs(r2, &(0x7f00000001c0)='smaps_rollup\x00') 12.753917538s ago: executing program 2 (id=3819): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r1, 0x0, 0x0) 11.668162826s ago: executing program 4 (id=3822): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d", @ANYRES64], 0xf8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 11.506943059s ago: executing program 2 (id=3824): mknodat(0xffffffffffffffff, 0x0, 0x22f6c0948578f7ce, 0xb1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.474730404s ago: executing program 0 (id=3826): socket$netlink(0x10, 0x3, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x75ba, &(0x7f0000000680)={0x0, 0x7d89, 0x80, 0x3, 0x288}, 0x0, 0x0) io_uring_enter(r1, 0x567, 0x72, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) 9.365245962s ago: executing program 5 (id=3827): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_uring_setup(0x566, &(0x7f00000002c0)={0x0, 0x338c, 0x4000, 0x1, 0x1cd}) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x1, 0x41c}}}, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 7.78299098s ago: executing program 3 (id=3828): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_create_resource$binfmt(0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sync_file_range(r0, 0xffffffffffffa525, 0x7, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.367978484s ago: executing program 0 (id=3829): pipe(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket(0x27, 0x4, 0x80000000) creat(&(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x141) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r1, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n\x00\x00\x00\a\x00\x00'], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x18) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r5) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, 0x0, 0x48044) 7.366266624s ago: executing program 2 (id=3830): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000500)=[0xc, 0x2e3e, 0x2, 0x80], 0x0, 0x77, 0x0, 0x0, &(0x7f0000000380), 0x0}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000080)={0xfa8, 0x1, 0x6, 0x9, 0x2, 0x3, 0x3, 0xae721a9}) r2 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r6) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x31c000}) sendto(r2, 0x0, 0x0, 0x4041, 0x0, 0x0) 6.398397732s ago: executing program 4 (id=3831): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r0, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 6.327095478s ago: executing program 3 (id=3832): mknodat(0xffffffffffffffff, 0x0, 0x22f6c0948578f7ce, 0xb1) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.67583096s ago: executing program 3 (id=3833): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781", 0x1d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x15, 0x3, 0x1, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)=""/10, 0xa}, {&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000000740)=""/127, 0x7f}, {&(0x7f00000007c0)=""/2, 0x2}, {&(0x7f0000000800)=""/194, 0xc2}, {&(0x7f0000000900)=""/124, 0x7c}], 0x6, &(0x7f0000000a80)=[@rdma_dest={0x18, 0x114, 0x2, {0x9, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x17, 0x80000000}, &(0x7f0000000a00)=0x7, 0x0, 0x0, 0x7, 0x3, 0x5e13, 0x78, 0x1000000000000}}], 0x70, 0x4000000}, 0x4000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240b", 0x24}], 0x1}, 0x20048050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14"], 0x232) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.615386666s ago: executing program 2 (id=3834): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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") setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000540), 0xff57, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) poll(0x0, 0x0, 0x9) unlink(&(0x7f0000000080)='./file0/file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x84, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.366410336s ago: executing program 3 (id=3835): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0xc881) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8914, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 5.140632454s ago: executing program 3 (id=3836): syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xbe, 0x9b, 0x2a, 0x20, 0x547, 0x2720, 0xaf55, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x6e, 0x2, 0x1, 0x5d, 0x60, 0x27, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000000)={0xffffffff, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0x6a98047402e98331, 0x70bd21, 0xffa1}, 0x14}, 0x1, 0x0, 0x0, 0x24000044}, 0x4008800) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r4, r4, 0x2) move_mount(r4, 0x0, r4, 0x0, 0x256) r5 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 4.583278919s ago: executing program 0 (id=3837): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x64c02, 0x1d2) fcntl$setlease(r3, 0x400, 0x0) getsockname$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x7, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000640)={[{@noquota}, {@sysvgroups}], [{@uid_eq}, {@fowner_lt}, {@euid_eq}]}, 0x0, 0x98a2, &(0x7f0000009b40)="$eJzs3Qm87WPBuP11nINjHko0IVMajRlSMg+FzJE5c8aQUOahDBUlVBSKpBRCRaSSUGTKPM/zPI/v5ziHOF3k+b898Zzruj7OXtNvr32v+7vuZa/923utVRZbYaHBYNLByF48/GdnHXTDmitOtNRWJx8w7PLD9l3m7lFnjzPyYLIFRh0uOOpwocFgMGTU9QwZed6w+U86eazBsMGI//7ZhOONP9aEg8H4o06Oup7B3CMPJjj6xe2eHy0e6LQjvtw+I/+90EQjrmTEkdXXfnbzwWAw/GWfP2Jcs/7LDZW24EIrLvRPq5fcxhp18ZB/XvbC4bCR/yY4cjCY4PDBq98/Rmw79ss+97/ZiK856fSDlW54A772/7mWXnDZ5UfzH7EWh446b+4Ra3z0NWhs9Pv5vitscueoKRwyauJeXDdD3qD7/f9Tqyy42FKDV1/Hg2UW3fGO51943By2yGAwbNHBYNhig8Gwxd9oj/rP9Ibe+aqqquoNacGF5hjx/G+s0b4fGP7i97X0feE5z8x2y2AwbJmR3+8OW/vF54JVVVVVVVVV9eZswYXmWBie/0/6Ws//pz1tj8l6/l9VVVVVVVX1f6clF1xojhHP9Ud7/j/Vaz3/f+Cu444a+bv/C8w98rOee2NvRFVVVVVVVVW9Zostic//p32t5//nnTTtBT3/r6qqqqqqqvq/0/JzLLbw4GWvszfq7JlfvJye/59++3VrvFHjraqqqqqqqqr/ec/de+oZ/3zt6qkHo73e+wuN+rnAkOPPvPDCN2ygb46G/OvPQ3Z5o8f0/7cRzsOPnXYw2HylN3oo9Qb0f+a16ut/pfzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9yr7P9/6fX/Tz9x3RffC/69M85xxan//MwX3vt/2DJL3rvrGzT0N6Ixdf//YOMhg8Eo30k3HgwGyyy4/IozDwaDU6+YY8YZBi9dNs+Iy+abfOgLbxD/4p+JLDoZX/Eu0408HHFHGbz1pes4/oXrX/L5I4YOGW0QL2uyU446aqNVHp9z9MOZXv12jPXSsYlOvuvFv2UZa7SNhr/KJ794/S/eltGdR4195hFjn2WbzbacZevtd/jQxputs+H6G66/+byzzzXbnPPOO9dcs2yw8abrzzry46vN2bQvfFz49czZhKPP2b0LvnzORr9trzZn0772nL1wjQeeO/wTL87ZsP/hnC382nM27cajvtBkC4w9WPuFuRkyGEy2yNiD7UacmG3cwWCyRUdtO9WIbT82+ViDwf7/vKEjjo370n1wyC4jtlllsRUWGvkwNRj88/Cfvcr72Y8zauQLjDpccNThQiO/zKSDf94Vh81/0sljjZiLV0zHhOONP9aEg8H4o06Oup7BvCMPxj/txe1e5X3WRxvoCy+zss/Ify800WAwmGDEkanXOX3PEVP/X3if9v+n////i9c8Q166Pw4Z9W/UNiO9Flx8yX9+rRemYcTcDR113twjTP7Db23/iv5lvNMOH0z7GuN9jdfFeSG6f2166hS7/adeF4fGO9VrjPc1Xsf3Vce78i2H3Dnyqv5j4x3tsW6pFz4u8Hoe6wav/Vg39F8+e+hgsP757x79se5Trz7EVzxcvjhH44620as91k116DS7jLj+BV77sW6pEWMf+xWPdWMNBpMt/OJj3YgHvsXGHuw/4sTsI04sPvbgmBEn5njhxHiDM0ec+PC6W2y63ogzlvjX+8HMQ17xC5qwzhYbbZ0NedltHzLa73cOG3k4wZEvvofTqzxuDhl1s/7tYwXdbyd9jfG+xvtP4TyPOG+9E4ZP8Z96/yka7/DXHu+rvV/2q453v8dOv+E/PN6X1tnYL5uuJV7POpv2letsxE0c+rKV8Xq/D1sPth95fKqXrm3bne566XuKsUe73n/3PcUSr73OJt14tM/b+/DBkNeam8Vfz9y8618eg3Z9+dy83u+3Zp5+5OVDX2Nuxp13zZlenJtx/odzs/j/dG4WGAx95dwMGyw6GAxmGPX4sNjrmZupXntuXu/9ZnzYfuTx9V86a5F9jz37xbkZfS7+3dws9j+dm2lfut/M8MJl0401GGecwXbrbLPNVrON/PjiydlHfnztNbjI65nLSf8zc/mOYa82l/+8q054ywVH/ps1+C+P6S9e/yL/07kcvDSXg41HXyz1Zq2f/7nL313+7vJ3l7+7/N3lL+5V9v+/9Pr/B0863wGjfrgx9gXTTLnXGz3eN7gxev//KN9X7P/fa8ppLhhr8NJlr7l/duQ2b8r9s3OPPJjg6Be3G33/IA/01ffPHj7v3Hv8l/bP/j/14lp9HT+H6/HfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+5V9v/P+uLvAdw+23IPjdoROvbdu6+23Bs93je4MXr//yjfV+z/X2613e8ea/DSZa+5/3/kNo79/zc9vdh+b+b9/y+u1fb/178pf3foP/prgNQYW+vfXf7uXst/vP/iOOqNqfXvLn93+bvL313+7vJ3l7+7/MW9yv7/BV78PYDjjjtkhxd/H+DSyfY59Y0e7xvcmLr/v/f/99bjv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/cC/v/R/6N8Mv/UnjZ7hcY7P//v92o3/8YjOa/XP6YxX/5/KmxBgOH/wr5Y5b1v2L+mMV/pfwxi//K+WMW/8/kj1n8V8kfs/ivmj9m8f9s/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8zi/7n8MYv/uvljFv/18scs/uvnj1n8N8gfs/hvmD9m8d8of8ziv3H+mMX/8/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/C/ljFv+t8scs/lvnj1n8t8kfs/h/MX/M4r9t/pjF/0v5Yxb/7fLHLP7b549Z/HfIH7P4fzl/zOL/lfwxi/+O+WMW/53yxyz+O+ePWfx3yR+z+O+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP5fzR+z+H8tf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+X88fs/h/I3/M4v/N/DGL//75Yxb/A/LHLP7fyh+z+H87f8zif2D+mMX/O/ljFv+D8scs/gfnj1n8D8kfs/h/N3/M4v+9/DGL//fzxyz+h+aPWfwPyx+z+P8gf8zi/8P8MYv/4fljFv8j8scs/kfmj1n8f5Q/ZvH/cf6Yxf+o/DGL/9H5Yxb/n+SPWfyPyR+z+P80f8zif2z+mMX/Z/ljFv+f549Z/I/LH7P4/yJ/zOL/y/wxi//x+WMW/xPyxyz+J+aPWfx/lT9m8T8pf8zif3L+mMX/lPwxi/+v88cs/r/JH7P4/zZ/zOJ/av6Yxf+0/DGL/+/yxyz+p+ePWfzPyB+z+P8+f8zif2b+mMX/D/ljFv8/5o9Z/P+UP2bxPyt/zOL/5/wxi//Z+WMW/7/kj1n8z8kfs/ifmz9m8T8vf8zi/9f8MYv/3/LHLP7n549Z/C/IH7P4/z1/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/P+RP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMR/yCB/zOI/JH/M4j9W/pjFf2j+mMV/WP6YxX/s/DGL/zj5Yxb/cfPHLP7D88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfwnzx+z+L8lf8zi/9b8MYv/FPljFv+35Y9Z/KfMH7P4T5U/ZvF/e/6Yxf8d+WMW/3fmj1n835U/ZvF/d/6YxX/q/DGL/zT5Yxb/afPHLP7vyR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/9+aPWfxnzh+z+L8vf8zi//78MYv/B/LHLP4fzB+z+H8of8zi/+H8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8zi/5H8MYv/XPljFv+588cs/vPkj1n8580fs/h/NH/M4j9f/pjF/2P5Yxb/j+ePWfznzx+z+H8if8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/yfzxyz+n8ofs/gvlT9m8V86f8ziv0z+mMX/0/ljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/9n8scs/qvkj1n8V80fs/h/Nn/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8f9c/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi//n8MYv/JvljFv9N88cs/pvp/Md7XVtZ/DfX+b++LP5b5I9Z/LfMH7P4fyF/zOK/Vf6YxX/r/DGL/zb5Yxb/L+aPWfy3zR+z+H8pf8ziv13+mMV/+/wxi/8O+WMW/y/nj1n8v5I/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMX/q/ljFv+v5Y9Z/PfOH7P475M/ZvHfN3/M4r9f/pjF/+v5Yxb/b+SPWfy/mT9m8d8/f8zif0D+mMX/W/ljFv9v549Z/A/MH7P4fyd/zOJ/UP6Yxf/g/DGL/yH5Yxb/7+aPWfy/lz9m8f9+/pjF/9D8MYv/YfljFv8f5I9Z/H+YP2bxPzx/zOJ/RP6Yxf/I/DGL/4/yxyz+P84fs/gflT9m8T86f8zi/5NX+t/2Xx/XmzSL/zGtf8zi/9P8MYv/sfljFv+f5Y9Z/H+eP2bxPy5/zOL/i/wxi/8v88cs/sfnj1n8T8gfs/ifmD9m8f9V/pjF/6T8MYv/yfljFv9T8scs/r/OH7P4/yZ/zOL/2/wxi/+p+WMW/9Pyxyz+v8sfs/ifnj9m8T8jf8zi//v8MYv/mfljFv8/5I9Z/P+YP2bx/1P+mMX/rPwxi/+f88cs/mfnj1n8/5I/ZvE/J3/M4n9u/pjF/7z8MYn/C+X/r0n8h/wtf8zif37+mMX/gvwxi//f88cs/hfmj1n8L8ofs/hfnD9m8b8kf2xM9n9ZQy7NHxuT/V++/v+RP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X5z9aw0YdOvyvyR+zrP9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+T+L9wNP9/zeI/JH/M4j9W/pjFf2j+mMV/WP6YxX/s/DGL/zj5Yxb/cfPHLP7D88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfwnzx+z+L8lf8zi/9b8MYv/FPljFv+35Y9Z/KfMH7P4T5U/ZvF/e/6Yxf8d+WMW/3fmj1n835U/ZvF/d/6YxX/q/DGL/zT5Yxb/afPHLP7vyR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/9+aPWfxnzh+z+L8vf8zi//78MYv/B/LHLP4fzB+z+H8of8zi/+H8MYv/LPljFv9Z88eGnHXQ2IPBYIz3ny1/zLL+Z88fs/jPkT9m8Z8zf8zi/5H8MYv/XPljFv+588cs/vPkj1n8580fs/h/NH/M4j9f/pjF/2P5Yxb/j+ePWfznzx+z+H8if8ziv0D+mMV/wcF4b9SI3tRZ/Bdq/WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/yfzxyz+n8ofs/gvlT9m8V86f8ziv0z+mMX/0/ljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/9n8scs/qvkj1n8V80fs/h/Nn/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8f9c/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi//n8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8zi/4X8MYv/VvljFv+t88cs/tvkj1n8v5g/ZvHfNn/M4v+l/DGL/3b5Yxb/7fPHLP475I9Z/L+cP2bx/0r+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/r+aPWfy/lj9m8d87f8ziv0/+mMV/3/wxi/9++WMW/6/nj1n8v5E/ZvH/Zv6YxX///DGL/wH5Yxb/b+WPWfy/nT9m8T8wf8zi/538MYv/QfljFv+D88cs/ofkj1n8v5s/ZvH/Xv6Yxf/7+WMW/0Pzxyz+h+WPWfx/kD9m8f9h/pjF//D8MYv/EfljFv8j88cs/j/KH7P4/zh/zOJ/VP6Yxf/o/DGL/0/yxyz+x+SPWfx/mj9m8T82f8zi/7P8MYv/z/PHLP7H5Y9Z/H+RP2bx/2X+mMX/+Pwxi/8J+WMW/xPzxyz+v8ofs/iflD9m8T85f8zif0r+mMX/1/ljFv/f5I9Z/H+bP2bxPzV/zOJ/Wv6Yxf93+WMW/9Pzxyz+Z+SPWfx/nz9m8T8zf8zi/4f8MYv/H/PHLP5/yh+z+J+VP2bx/3P+mMX/7Pwxi/9f8scs/ufkj1n8z80fs/iflz9m8f9r/pjF/2/5Yxb/8/PHLP4X5I9Z/P+eP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP7/yB+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5b/yIa98qTF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxif/QQf6YxX9I/pjFf6z8MYv/0Pwxi/+w/DGL/9j5Yxb/cfLHLP7j5o9Z/Ifnj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+E+eP2bxf0v+mMX/rfljFv8p8scs/m/LH7P4T5k/ZvGfKn/M4v/2/DGL/zvyxyz+78wfs/i/K3/M4v/u/DGL/9T5Yxb/afLHLP7T5o9Z/N+TP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP7vzR+z+M+cP2bxf1/+mMX//fljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv9Z8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMX/I6/tP+7/+rjepFn852r9Yxb/ufPHLP7z5I9Z/OfNH7P4fzR/zOI/X/6Yxf9j+WMW/4/nj1n8588fs/h/In/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/8n88cs/p/KH3u5/9Jv9GD+E72K/1L5Y5b1v3T+mMV/mfwxi/+n88cs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/8/kj1n8V8kfs/ivmj9m8f9s/pjFf7X8MYv/6vljFv819P78EocW/zX1/pzFf638MYv/2vljFv918scs/p/LH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv+N8scs/hvnj1n8P58/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8v5A/ZvHfKn/M4r91/pjFf5v8MYv/F/PHLP7b5o9Z/L+UP2bx3y5/zOK/ff6YxX+H/DGL/5fzxyz+X8kfs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx3yt/zOL/1fwxi//X8scs/nvnj1n898kfs/jvmz9m8d8vf8zi//X8MYv/N/LHLP7fzB+z+O+fP2bxPyB/zOL/rfwxi/+388cs/gfmj1n8v5M/ZvE/KH/M4n9w/pjF/5D8MYv/d/PHLP7fyx+z+H8/f8zif2j+mMX/sPwxi/8P8scs/j/MH7P4H54/ZvE/In/M4n9k/pjF/0f5Yxb/H+ePWfyPyh+z+B+dP2bx/0n+mMX/mPwxi/9P88cs/sfmj1n8f5Y/ZvH/ef6Yxf+4/DGL/y/yx8Z4/+EvHB36y/yxMd5/ZEOPzx+z+J+QP2bxPzF/zOL/q/wxi/9J+WMW/5Pzxyz+p+SPWfx/nT9m8f9N/pjF/7f5Yxb/U/PHLP6n5Y9Z/H+XP2bxPz1/zOJ/Rv6Yxf/3+WMW/zPzxyz+f8gfs/j/MX/M4v+n/DGL/1n5Yxb/P+ePWfzPzh+z+P8lf8zif07+mMX/3Pwxi/95+WMW/7/mj1n8/5Y/ZvE/P3/M4n9B/pjF/+/5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4v+P/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyT+wwb5Yxb/IfljFv+x8scs/kPzxyz+w/LHLP5j549Z/MfJH7P4j5s/ZvEfnj9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOI/ef6Yxf8t+WMW/7fmj1n8p8gfs/i/LX/M4j9l/pjFf6r8MYv/2/PHLP7vyB+z+L8zf8zi/678MYv/u/PHLP5T549Z/KfJH7P4T5s/ZvF/T/6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4vzd/zOI/c/6Yxf99+WMW//fnj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/4/kj1n858ofs/jPnT9m8Z8nf8ziP2/+mMX/o/ljFv/58scs/h/LH7P4fzx/zOI/f/6Yxf8T+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/D+ZP2bx/9Rr+JvvFxb/peTOr5bFf+n8MYv/MvljFv9P549Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/p/JH7P4r5I/ZvFfNX/M4v/Z/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/3P5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjFf+P8MYv/5/PHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/F/LHLP5b5Y9Z/LfOH7P4b5M/ZvH/Yv6YxX/b/DGL/5fyxyz+2+WPWfy3zx+z+O+QP2bx/3L+mMX/K/ljFv8d88cs/jvlj1n8d84fs/jvkj9m8d81f8ziv1v+mMV/9/wxi/8e+WMW/z3zxyz+e+WPWfy/mj9m8f9a/pjFf+/8MYv/PvljFv9988cs/vvlj1n8v54/ZvH/Rv6Yxf+b+WMW//3zxyz+B+SPWfy/lT9m8f92/pjF/8D8MYv/d/LHLP4H5Y9Z/A/OH7P4H5I/ZvH/bv6Yxf97+WMW/+/nj1n8D80fs/gflj9m8f9B/pjF/4f5Yxb/w/PHLP5H5I9Z/I/MH7P4/yh/zOL/4/wxi/9R+WMW/6Pzxyz+P8kfs/gfkz9m8f9p/pjF/9j8MYv/z/LHLP4/zx+z+B+XP2bx/0X+mMX/l/ljFv/j88cs/ifkj1n8T8wfs/j/Kn/M4n9S/pjF/+T8MYv/KfljFv9f549Z/H+TP2bx/23+mMX/1Pwxi/9p+WMW/9/lj1n8T88fs/ifkT9m8f99/pjF/8z8MYv/H/LHLP5/zB+z+P8pf8zif1b+mMX/z/ljFv+z88cs/n/JH7P4n5M/ZvE/N3/M4n9e/pjF/6/5Yxb/v+WPWfzPzx+z+F+QP2bx/3v+mMX/wvwxi/9F+WMW/4vzxyz+lwwGg+eff37nN2pYb9Ys/pe2/jGL/z/yxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n3f7jvtoFFv/n3P6vmsX/+fwxif/Yg/wxi/+Q/DGL/1j5Yxb/ofljFv9h+WMW/7Hzxyz+4+SPWfzHzR+z+A/PH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8Z88f8zi/5b8MYv/W/PHLP5T5I9Z/N+WP2bxnzJ/zOI/Vf6Yxf/t+WMW/3fkj1n835k/ZvF/V/6Yxf/d+WMW/6nzxyz+0+SPWfynzR+z+L8nf8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfzfmz9m8Z85f8zi/778MYv/+/PHLP4fyB+z+H8wf8zi/6H8MYv/h/PHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/R/LHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4v/R/DGL/3z5Yxb/j+WPWfw/nj9m8Z8/f8zi/4n8MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8SI27rVG/UoN68WfyXbP1jFv9P5o9Z/D+VP2bxXyp/zOK/dP6YxX+Z/DGL/6fzxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/z+SPWfxXyR+z+K+aP2bx/2z+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOL/ufwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOK/cf6Yxf/z+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf8L+WMW/63yxyz+W+ePWfy3yR+z+H8xf8ziv23+mMX/S/ljFv/t8scs/tvnj1n8d8gfs/h/OX/M4v+V/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvHfLX/M4r97/pjFf4/8MYv/nvljFv+98scs/l/NH7P4fy1/zOK/d/6YxX+f/DGL/775Yxb//fLHLP5fzx+z+H8jf8zi/838MYv//vljFv8D8scs/t/KH7P4fzt/zOJ/YP6Yxf87+WMW/4Pyxyz+B+ePWfwPyR+z+H83f8zi/738MYv/9/PHLP6H5o9Z/A/LH7P4/yB/zOL/w/wxi//h+WMW/yPyxyz+R+aPWfx/lD9m8f9x/pjF/6j8MYv/0fljFv+f5I9Z/I/JH7P4/zR/zOJ/bP6Yxf9n+WMW/5/nj1n8j8sfs/j/In/M4v/L/DGL//H5Yxb/E/LHLP4n5o9Z/H+VP2bxPyl/zOJ/cv6Yxf+U/DGL/6/zxyz+v8kfs/j/Nn/M4n9q/pjF/7T8MYv/7/LHLP6n549Z/M/IH7P4/z5/zOJ/Zv6Yxf8P+WMW/z/mj1n8/5Q/ZvE/K3/M4v/n/DGL/9n5Yxb/v+SPWfzPyR+z+J+bP2bxPy9/zOL/1/wxi//f8scs/ufnj1n8L8gfs/j/PX/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8/5E/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6YxH+cQf6YxX9I/pjFf6z8MYv/0Pwxi/+w/DGL/9j5Yxb/cfLHLP7j5o9Z/Ifnj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+E+eP2bxf0v+mMX/rfljFv8p8scs/m/LH7P4T5k/ZvGfKn/M4v/21+E/7H9zXG/SLP7vaP1jFv935o9Z/N+VP2bxf3f+mMV/6vwxi/80+WMW/2nzxyz+78kfs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW//fmj1n8Z84fs/i/L3/M4v/+/DGL/wfyxyz+H8wfs/h/KH/M4v/h/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4v+R/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4fzR/zOI/X/6Yxf9j+WMW/4/nj1n8588fs/h/In/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/8n88cs/p/KH7P4L5U/ZvFfOn/M4r9M/pjF/9P5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/Z/LHLP6r5I9Z/FfNH7P4fzZ/zOK/Wv7YGOo/ZDTrcVbPHxtD/V/o5et/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+H8uf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+G+cP2bx/3z+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/0L+mMV/q/wxi//W+WMW/23yxyz+X8wfs/hvmz9m8f9S/pjFf7v8MYv/9vljFv8d8scs/l/OH7P4fyV/zOK/Y/6YxX+n/DGL/87/xn/X/+1xvUmz+O/S+scs/rvmj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi/9X88cs/l/LH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv/1/PHLP7fyB+z+H8zf8ziv3/+mMX/gPwxi/+38scs/t/OH7P4H5g/ZvH/Tv6Yxf+g/DGL/8H5Yxb/Q/LHLP7fzR+z+H8vf8zi//38MYv/ofljFv/D8scs/j/IH7P4/zB/zOJ/eP6Yxf+I/DGL/5H5Yxb/H+WPWfx/nD9m8T8qf8zif3T+mMX/J/ljFv9j8scs/j/NH7P4H5s/ZvH/Wf6Yxf/n+WMW/+Pyxyz+v8gfs/j/Mn/M4n98/pjF/4T8MYv/ifljFv9f5Y9Z/E/KH7P4n5w/ZvE/JX/M4v/r/DGL/298/ju/no0s/r/1+b+uLP6n5o9Z/E/LH7P4/87pf/+/28Dif7rT/99m8T8jf8zi//v8MYv/mfljFv8/5I9Z/P+YP2bx/1P+mMX/rPwxi/+f88cs/mfnj1n8/5I/ZvE/J3/M4n9u/pjF/7z8MYv/X/PHLP5/yx+z+J+fP2bxvyB/zOL/9/wxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bx/0f+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP/aC/2Awxvs/kv9gPDjPsv4fzR+z+D+WP2bxfzx/zOL/RP7Yy/yHjMn+T+aPWdb/U/ljQ8YZDAYC/6fzxyzr/5n8MYv/s/ljFv/n8scs/s/nj0n8xx3kj1n8h+SPWfzHyh+z+A/NH7P4D8sfs/iPnT9m8R8nf8ziP27+mMV/eP6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjFf7L8RzX8Facs/pPnj1n835I/ZvF/a/6YxX+K/DGL/9vyxyz+U+aPWfynyh+z+L89f8zi/478MYv/O/PHLP7vyh+z+L87f8ziP3X+mMV/mvwxi/+0+WMW//fkj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMV/pvwxi/9788cs/jPnj1n835c/ZvF/f/6Yxf8D+WMW/w/mj1n8P5Q/ZvH/cP6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvH/SP6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/D+aP2bxny9/zOL/sfwxi//H88cs/vPnj1n8P5E/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMX/k/ljFv9P5Y9Z/JfKH7P4L50/ZvFfJn/M4v/p/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjF/zP5Yxb/VfLHLP6r5o9Z/D+bP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4fy5/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvH/fP6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvH/Qv6YxX+r/DGL/9b5Yxb/bfLHLP5fzB+z+G+bP2bx/1L+mMV/u/wxi//2+WMW/x3yxyz+X84fs/h/JX/M4r9j/pjFf6f8MYv/zvljFv9d8scs/rvmj1n8d8sfs/jvnj9m8d8jf8zivyf6d4+w+O+VNmbx/2r+mMX/a/ljFv+988cs/vvkj1n8980fs/jvlz9m8f96/pjF/xv5Yxb/b+aPWfz3N/qP++83sfgfYPR/HVn8v5U/ZvH/dv6Yxf/A/DGL/3fyxyz+B+WPWfwPzh+z+B+SP2bx/27+mMX/e/ljFv/v549Z/A/NH7P4H5Y/ZvH/Qf6Yxf+H+WMW/8Pzxyz+R+SPWfyPzB+z+P8of8zi/+P8MYv/UfljFv+j88cs/j/JH7P4H5M/ZvH/af6Yxf/Y/DGL/8/yxyz+P88fs/gflz9m8f9F/pjF/5f5Yxb/4/PHLP4n5I9Z/E/MH7P4/yp/zOJ/Uv6Yxf/k/DGL/yn5Yxb/X+ePWfx/kz9m8f9t/pjF/9T8MYv/afljFv/f5Y9Z/E/PH7P4n5E/ZvH/ff6Yxf/M/DGL/x/yxyz+f8wfs/j/KX/M4n9W/pjF/8/5Yxb/s/PHLP5/yR+z+J+TP2bxPzd/zOJ/Xv6Yxf+v+WMW/7/lj1n8z88fs/hfkD9m8f97/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/j/I3/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGJ//BB/pjFf0j+mMV/rPwxi//Q/DGL/7D8MYv/2PljFv9x8scs/uPmj1n8h+ePWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4T54/ZvF/S/6Yxf+t+WMW/ynyxyz+b8sfs/hPmT9m8Z8qf8zi//b8MYv/O/LHLP7vzB+z+L8rf8zi/+78MYv/1PljFv9p8scs/tPmj1n835M/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv+Z8scs/u/NH7P4z5w/ZvF/X/6Yxf/9+WMW/w/kj1n8P5g/ZvH/UP6Yxf/D+WMW/1nyxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6Yxf8j+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bx/2j+mMV/vvwxi//H8scs/h/PH7P4z58/ZvH/RP6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv9Pvpb/FM89//x/YWhvxiz+n2r9Yxb/pfLHLP5L549Z/JfJH7P4fzp/zOK/bP6YxX+5/DGL//L5Yxb/FfLHLP4r5o+N8h86pvuvlD9mWf8r549Z/D+TP2bxXyV/zOK/av6Yxf+z+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/+fyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/z+ePWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/L+SPWfy3yh+z+G+dP2bx3yZ/zOL/xfwxi/+2+WMW/y/lj1n8t8sfs/hvnz9m8d8hf8zi/+X8MYv/V/LHLP475o9Z/HfKH7P475w/ZvHfJX/M4r9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/h/NX/M4v+1/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4fz1/zOL/jfwxi/8388cs/vvnj1n8D8gfs/h/K3/M4v/t/DGL/4H5Yxb/7+SPWfwPyh+z+B+cP2bxPyR/zOL/3fwxi//38scs/t/PH7P4H5o/ZvE/LH/M4v+D/DGL/w/zxyz+h+ePWfyPyB+z+B+ZP2bx/1H+mMX/x/ljFv+j8scs/kfnj1n8f5I/ZvE/Jn/M4v/T/DGL/7H5Yxb/n+WPWfx/nj9m8T8uf8zi/4v8MYv/L/PHLP7H549Z/E/IH7P4n5g/ZvH/Vf6Yxf+k/DGL/8n5Yxb/U/LHLP6/zh+z+P8mf8zi/9v8MYv/qfljFv/T8scs/r/LH7P4n54/ZvE/I3/M4v/7/DGL/5n5Yxb/P+SPWfz/mD9m8f9T/pjF/6z8MYv/n/PHLP5n549Z/P+SP2bxPyd/zOJ/bv6Yxf+8/DGL/1/zxyz+f8sfs/ifnz9m8b8gf8zi//f8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8f9H/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535j+y4a88afG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549J/Mcb5I9Z/Ifkj1n8x8ofs/gPzR+z+A/LH7P4j50/ZvEfJ3/M4j9u/pjFf3j+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOI/af6YxX+y/DGL/+T5Yxb/t+SPWfzfmj9m8Z8if8zi/7b8MYv/lPljFv+p8scs/m/PH7P4vyN/zOL/zvwxi/+78scs/u/OH7P4T50/ZvGfJn/M4j9t/pjF/z35Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvGfKX/M4v/e/DGL/8z5Yxb/9+WPWfzfnz9m8f9A/pjF/4P5Yxb/D+WPWfw/nD9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/znyx17wn2YwGIzh/nPmj1nW/0fyxyz+c+WPWfznzh+z+M+TP2bxnzd/zOL/0fwxi/98+WMW/4/lj1n8P54/ZvGfP3/M4v+J/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/p/MH7P4fyp/zOK/VP6YxX/p/DGL/zL5Yxb/T+ePWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6fyR+z+K+SP2bxXzV/zOL/2fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf9z+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/+fzxyz+m+SPWfw3zR+z+G+WP2bxHyd/zOK/Rf6YxX/L/DGL/xfyxyz+W+WPWfy3zh+z+G+TP2bx/2L+mMV/2/wxi/+X8scs/tvlj1n8t88fs/jvkD9m8f9y/pjF/yv5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvHfNX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8v5o/ZvH/Wv6YxX/v/LEhZx302KijY7T/PvljlvW/b/6YxX+//DGL/9fzxyz+38gfs/h/M3/M4r9//pjF/4D8MYv/t/LHLP7fzh+z+B+YP2bx/07+mMX/oPwxi//B+WMW/0Pyxyz+380fs/h/L3/M4v/9/DGL/6H5Yxb/w/LHLP4/yB+z+P8wf8zif3j+mMX/iPwxi/+R+WMW/x/lj1n8fyzyH/d/sK3F/yiR//8ki//R+WMW/5/kj1n8j8kfs/j/NH/M4n9s/pjF/2f5Yxb/n+ePWfyPyx+z+P8if8zi/8v8MYv/8fljFv8T8scs/ifmj1n8f5U/ZvE/KX/M4n9y/pjF/5T8MYv/r/PHLP6/yR+z+P82f8zif2r+mMX/tPwxi//v8scs/qfnj1n8z8gfs/j/Pn/M4n9m/pjF/w/5Yxb/P+aPWfz/lD9m8T8rf8zi/+f8MYv/2fljFv+/5I9Z/M/JH7P4n5s/ZvE/L3/M4v/X/DGL/9/yxyz+5+ePWfwvyB+z+P89f8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfz/kT9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjEf/xB/pjFf0j+mMV/rPwxi//Q/DGL/7D8MYv/2PljFv9x8scs/uPmj1n8h+ePWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4T54/ZvF/S/6Yxf+to/mP/d8e15s0i/8UrX/M4v+2/DGL/5T5Yxb/qfLHLP5vzx+z+L8jf8zi/878MYv/u/LHLP7vzh+z+E+dP2bxnyZ/zOI/bf6Yxf89+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOL/3vwxi//M+WMW//flj1n8358/ZvH/QP6Yxf+D+WMW/w/lj1n8P5w/ZvGfJX/M4j9r/pjFf7b8MYv/7PljFv858scs/nPmj1n8P5I/ZvGfK3/M4j93/pjFf578MYv/vPljFv+P5o9Z/OfLH7P4fyx/zOL/8fwxi//8+WMW/0/kj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bx/2T+mMX/U/ljFv+l8scs/kvnj1n8l8kfs/h/On/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8f9M/pjFf5X8MYv/qvljFv/P5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/p/LH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv+N8scs/hvnj1n8P58/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8v5A/ZvHfKn/M4r91/pjFf5v8MYv/F/PHLP7b5o9Z/L+UP2bx3y5/zOK/ff6YxX+H/DGL/5fzxyz+X8kfs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx3yt/zOL/1fwxi//X8scs/nvnj1n898kfs/jvmz9m8d8vf8zi//X8MYv/N/LHLP7fzB+z+O+fP2bxPyB/zOL/rfwxi/+388cs/gfmj1n8v5M/ZvE/KH/M4n9w/pjF/5D8MYv/d/PHLP7fyx+z+H8/f8zif2j+mMX/sPwxi/8P8scs/j/MH7P4H54/ZvE/In/M4n9k/pjF/0f5Yxb/H+ePWfyPyh+z+B+dP2bx/0n+mMX/mPwxi/9P88cs/sfmj1n8f5Y/ZvH/ef6Yxf+4/DGL/9j5Yxb/X+aPWfyPzx+z+J+QP2bxPzF/zOL/q/wxi/9J+WMW/5Pzxyz+p+SPWfx/nT9m8f9N/pjF/7f5Yxb/U/PHLP6n5Y9Z/H+XP2bxPz1/zOJ/Rv6Yxf/3+WMW/zPzxyz+f8gfs/j/MX/M4v+n/DGL/1n5Yxb/P+ePWfzPzh+z+P8lf8zif07+mMX/3Pwxi/95+WMW/7/mj1n8/5Y/ZvE/P3/M4n9B/pjF/+/5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4v+P/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+g8HQfz3L4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+2Jjuv9bIo+Pflz82pvuPavz788cs/g/kj1n8H8wfG5P9x/3nueM/lD82Jvu/fP0/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5YxL/CQb5Yxb/IfljFv+x8scs/kPzxyz+w/LHLP5j549Z/MfJH7P4j5s/ZvEfnj9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOI/ef6Yxf8t+WMW/7fmj1n8p8gfs/i/LX/M4j9l/pjFf6r8MYv/2/PHLP7vyB+z+L8zf8zi/678MYv/u/PHLP5T549Z/KfJH7P4T5s/ZvF/T/6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4vzd/zOI/c/6Yxf99+WMW//fnj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/4/kj1n858ofs/jPnT9m8Z8nf8ziP2/+mMX/o/ljFv/58scs/h/LH7P4fzx/zOI/f/6Yxf8T+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/D+ZP2bx/1T+mMV/qfwxi//S+WMW/2Xyxyz+n84fs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfw/kz9m8V8lf8ziv2r+mMX/s/ljFv/V8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi//n8scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/8/nj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/y/kj1n8t8ofs/hvnT9m8d8mf8zi/8X8MYv/tvljFv8v5Y9Z/LfLH7P4b58/Nub6X/L8y/13yB8bc/1fuf6/nD9m8f9K/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8d80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/6/mj1n8v5Y/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv+v549Z/L+RP2bx/2b+mMV///wxi/8B+WMW/2/lj1n8v50/ZvE/MH/M4v+d/DGL/0H5Yxb/g/PHLP6H5I9Z/L+bP2bx/17+mMX/+/ljFv9D88cs/oflj1n8f5A/ZvH/Yf6Yxf/w/DGL/xH5Yxb/I/PHLP4/yh+z+P84f8zif1T+mMX/6Pwxi/9P8scs/sfkj1n8f5o/ZvE/Nn/M4v+z/DGL/8/zxyz+x+WPWfx/kT9m8f9l/pjF//j8MYv/CfljFv8T88cs/r/KH7P4n5Q/ZvE/OX/M4n9K/pjF/9f5Yxb/3+SPWfx/mz9m8T81f8zif1r+2Iv+g+GDwZjs/7v8Mcv6Pz1/zOJ/Rv6Yxf/3+WMW/zPzxyz+f8gfs/j/MX/M4v+n/DGL/1n5Yxb/P+ePWfzPzh+z+P8lf8zif07+mMX/3Pwxi/95+WMW/7/mj1n8/5Y/ZvE/P3/M4n9B/pjF/+/5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4v+Pf/Xv7iDyvyxwzOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj430HwwGu4zZ/rfkj1nW/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549J/Ccc5I9Z/Ifkj1n8x8ofs/gPzR+z+A/LH7P4j/0q/pdfMXSt/9bQ3oxZ/Mdp/WMW/3Hzxyz+w/PHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/v/SLiL/ifPHLP6T5I9Z/CfNH7P4T5Y/ZvGfPH/M4v+W/DGL/1vzxyz+U+SPWfzflj9m8Z8yf8ziP1X+mMX/7fljFv935I9Z/N+ZP2bxf1f+mMX/3Vr/p1/zUov/1Fr/187iP03+mMV/2vwxi/978scs/tPlj1n8p88fs/jPkD9m8Z8xf8ziP1P+mMX/vfljFv+Z88cs/u/LH7P4vz9/zOL/gfwxi/8H88cs/h/KH7P4fzh/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4fyR/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP4fzR+z+M+XP2bx/1j+mMX/4/ljFv/588fGTP+R0i/3/0T+2JjpP7KX+y+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4v/J/DGL/6fyxyz+S+WPWfyXzh+z+C+TP2bx/3T+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOL/mfwxi/8q+WMW/1Xzxyz+n80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfw/lz9m8V83f8ziv57R/3XcYIv/+kb/15HFf4P8MYv/hvljFv+N8scs/hvnj1n8P58/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8v5A/ZvHfKn/M4r91/pjFf5v8MYv/F/PHLP7b5o9Z/L+UP2bx3y5/zOK/ff6YxX+H/DGL/5fzxyz+X8kfs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx3yt/zOL/1fwxi//X8scs/nvnj1n898kfs/jvmz9m8d8vf8zi//X8MYv/N/LHLP7fzB+z+O+fP2bxPyB/zOL/rfwxi/+388cs/gfmj1n8v5M/ZvE/KH/M4n9w/pjF/5D8MYv/d/PHLP7fyx+z+H8/f8zif2j+mMX/sPwxi/8P8scs/j/MH7P4H54/ZvE/In/M4n9k/pjF/0f5Yxb/H+ePWfyPyh+z+B+dP2bx/0n+mMX/mPwxi/9P88cs/sfmj1n8f5Y/ZvH/ef6Yxf+4/DGL/y/yxyz+v8wfs/gfnz9m8T8hf8zif2L+mMX/V/ljFv+T8scs/ifnj1n8T8kfs/j/On/M4v+b/DGL/2/zxyz+p+aPWfxPyx+z+P8uf8zif3r+mMX/jPwxi//v88cs/mfmj1n8/5A/ZvH/Y/7YaP7jvdHj+f/dq/j/KX/Msv7Pyh+z+P85f8zif3b+mMX/L/ljFv9z8scs/ufmj1n8z8sfs/j/NX/M4v+3/DGL//n5Yxb/C/LHLP5/zx+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/f+SPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz8m8Z9okD9m8R+SP2bxHyt/zOI/NH/M4j8sf8ziP3b+mMV/nPwxi/+4+WMW/+H5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/J8scs/pPnj1n835I/ZvF/a/6YxX+K/DGL/9vyxyz+U+aPWfynyh+z+L89f8zi/478MYv/O/PHLP7vyh+z+L87f8ziP3X+mMV/mvwxi/+0+WMW//fkj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMV/pvwxi/9788cs/jPnj1n835c/ZvF/f/6Yxf8D+WMW/w/mj1n8P5Q/ZvH/cP6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvH/SP6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/D+aP2bxny9/zOL/sfwxi//H88cs/vPnj1n8P5E/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMX/k/ljFv9P5Y9Z/JfKH7P4L50/ZvFfJn/M4v/p/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjF/zP5Yxb/VfLHLP6r5o9Z/D+bP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4fy5/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvH/fP6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvH/Qv6YxX+r/DGL/9b5Yxb/bfLHLP5fzB+z+G+bP2bx/1L+mMV/u/wxi//2+WMW/x2s/sNf+2KL/5et/v8mi/9X8scs/jvmj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+H81f8zi/7X8MYv/3vljFv998scs/vvmj1n898sfs/h/PX/M4v+N/DGL/zfzxyz+++ePWfwPyB8bU/2Hj+b/rfyxMdV/MJr/t/PHLP4H5o9Z/L+TP2bxPyh/zOJ/cP6Yxf+Q/DGL/3fzxyz+38sfs/h/P3/M4n9o/pjF/7D8MYv/D/LHLP4/zB+z+B+eP2bxPyJ/zOJ/ZP6Yxf9H+WMW/x/nj1n8j8ofs/gfnT9m8f9J/pjF/5j8MYv/T/PHLP7H5o9Z/H+WP2bx/3n+mMX/uPwxi/8v8scs/r/MH7P4H58/ZvE/IX/M4n9i/pjF/1f5Yxb/k/LHLP4n549Z/E/JH7P4/zp/zOL/m/wxi/9v88cs/qfmj1n8T8sfs/j/Tuk//N9uYfE/Xen/77P4n5E/ZvH/ff6Yxf/M/DGL/x/yxyz+f8wfs/j/KX/M4n9W/pjF/8/5Yxb/s/PHLP5/yR+z+J+TP2bxPzd/zOJ/Xv6Yxf+v+WMW/7/lj1n8z88fs/hfkD9m8f97/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/j/I3/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535f9C04522uJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePSfwnHuSPWfyH5I9Z/MfKH7P4D80fs/gPyx+z+I+dP2bxHyd/zOI/bv6YxX94/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi//k+WMW/7fkj1n835o/ZvGfIn/M4v+2/DGL/5T5Yxb/qfLHLP5vzx+z+L8jf8zi/878MYv/u/LHLP7vzh+z+E+dP2bxnyZ/zOI/bf6Yxf89+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOL/3vwxi//Mr/R/fuh/fWBvziz+72v9Yxb/9+ePWfw/kD9m8f9g/pjF/0P5Yxb/D+ePWfxnyR+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/j+SPWfznyh+z+M+dP2bxnyd/zOI/b/6Yxf+j+WMW//nyxyz+H3vRvzvBK7L4fzx6zOI/f/6Yxf8T+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/D+ZP2bx/1T+mMV/qfwxi//S+WMW/2Xyxyz+n84fs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfw/kz9m8V8lf8ziv2r+mMX/s/ljFv/V8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi//n8scs/uvmj1n818sfs/ivnz9m8d8gf2zIWQetOsnIo2O0/4b5Y5b1v1H+mMV/4/wxi//n88cs/pvkj1n8N80fs/hvlj9m8d9c778znmvx30Lvz1n8t8wfs/h/IX/M4r9V/pjFf+v8MYv/NvljFv8v5o9Z/LfNH7P4fyl/zOK/Xf6YxX/7/DGL/w75Yxb/L+ePWfy/kj9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6Yxf+r+WMW/6/lj1n8984fs/jvkz9m8d83f8ziv1/+mMX/6/ljFv9v5I9Z/L+ZP2bx3z9/zOJ/QP6Yxf9b+WMW/2/nj1n8D8wfs/h/J3/M4n9Q/pjF/+D8MYv/IfljFv/v5o9Z/L+XP2bx/37+mMX/0Pwxi/9h+WMW/x/kj1n8f5g/ZvE/PH/M4n9E/pjF/8j8MYv/j/LHLP4/zh+z+B+VP2bxPzp/zOL/k/wxi/8x+WMW/5/mj1n8j80fs/j/LH/M4v/z/DGL/3H5Yxb/X+SPWfx/mT9m8T8+f8zif0L+mMX/xPwxi/+v8scs/iflj1n8T84fs/ifkj9m8f91/pjF/zf5Yxb/3+aPWfxPzR+z+J+WP2bx/53af9xXvcTif7ra/9Wz+J+RP2bx/33+mMX/zPwxi/8f8scs/n/MH7P4/yl/zOJ/Vv6Yxf/P+WMW/7Pzxyz+f8kfs/ifkz9m8T83f8zif17+mMX/r/ljFv+/5Y9Z/M/PH7P4X5A/ZvH/e/6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH5P4DxkMdskfkvhPfFnrH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fPybxn2SQP2bxH5I/ZvEfK3/M4j80f8ziPyx/zOI/9v/Hzv2Ha13Xdxy/+Y0o6cc2dWnDoTHXZiQyGrUQFcXjj1Mmmvkb9QgkiPyQBFNxo5U6Nl3qZsmmlo45W7XU4eb6taJhWbM1YmuVU1wLY8zBQnPGrgPnEOfs7bk6X/b92no/Hn/Aue/j+w55Xi/vm4vrSv9Qlv5D9Q9l6T9M/1CW/sP1D2Xpv4f+oSz9R+gfytJ/T/1DWfrvpX8oS/+R+oey9H+F/qEs/ffWP5Sl/z76h7L0L/qHsvTfV/9Qlv6v1D+Upf/P6B/K0v9n9Q9l6b+f/qEs/ffXP5Sl/wH6h7L0/zn9Q1n6v0r/UJb+B+ofytL/IP1DWfq/Wv9Qlv4/r38oS/9R+oey9D9Y/1CW/r+gfyhL/9H6h7L0P0T/UJb+h+ofytL/NfqHsvQfo38oS/9f1D+Upf9h+oey9P8l/UNZ+r9W/1CW/r+sfyhL/1/RP5Sl/+H6h7L0f53+oSz9x+ofytL/9fqHsvQ/Qv9Qlv7j9A9l6X+k/qEs/cfrH8rS/1f1D2XpP0H/UJb+b9A/lKX/r+kfytJ/ov6hLP3fqH8oS/836R/K0v/X9Q9l6f9m/UNZ+k/SP5Sl/1H6h7L0n6x/KEv/o/UPZel/jP6hLP2P1T+Upf8U/UNZ+h+nfyhL/+P1D2XpP1X/UJb+J+gfytK/Tf9Qlv4n6h/K0v8k/UNZ+p+sfyhL/1P0D2Xp365/KEv/t+gfytL/rfqHsvQ/Vf9Qlv5v0z+Upf9p+oey9J+mfyhL/9P1D2Xpf4b+oSz9365/KEv/M/UPZen/Dv1DWfqfpX8oS/+z9Q9l6X+O/qEs/c/VP5Sl/3n6h7L0P1//UJb+F+gfytJ/uv6hLP0v1D+Upf9F+oey9L9Y/1CW/h36h7L0v0T/UJb+M/QPZek/U/9Qlv6z9A9l6f9O/UNZ+l+qfyhL/9n6h7L0n6N/KEv/y/QPZek/V/9Qlv6X6x/K0n+e/qEs/efrH8rSf4H+oSz9F+ofytL/Cv1DWfov0j+Upf+79A9l6X+l/qEs/RfrH8rSf4n+oSz9r9I/lKX/u/UPZel/tf6hLP2v0T+Upf+1+oey9F+qfyhL/+v0D2Xp/xv6h7L0/039Q1n6L9M/lKX/e/QPZen/W/qHsvR/r/6hLP3fp38oS//r9Q9l6X+D/qEs/W/UP5Sl/2/rH8rSf7n+oSz9f0f/UJb+v6t/KEv/m/QPZel/s/6hLP1/T/9Qlv7v1z+Upf8t+oey9L9V/1CW/rfpH8rS//f1D2Xp/wf6h7L0v13/UJb+H9A/lKX/B/UPZel/h/6hLP1X6B/K0v8P9Q9l6f9H+oey9L9T/1CW/nfpH8rS/279Q1n6f0j/UJb+H9Y/lKX/Pb37j2r41/UTKkv/e+0/lKX/H+sfytJ/pf6hLP3/RP9Qlv736R/K0v9P9Q9l6X+//qEs/T+ifyhL/z/TP5Sl/0f1D2Xp/zH9Q1n6f1z/UJb+f65/KEv/T+gfytL/Af1DWfo/qH8oS/+H9A9l6f8X+oey9F+lfyhL/4f1D2Xp/5f6h7L0/yv9Q1n6P6J/KEv/v9Y/lKX/J/UPZen/Kf1DWfp/Wv9Qlv6f0T+Upf9n9Q9l6f83+oey9P+c/qEs/T+vfyhL/9X6h7L0/4L+oSz9/1b/UJb+a/QPZen/qP6hLP2/qH8oS/8v6R/K0v8x/UNZ+n9Z/1CW/l/RP5Sl/9/pH8rS/3H9Q1n6f1X/UJb+f69/KEv/r+kfytL/H/QPZem/Vv9Qlv5f1z+Upf86/UNZ+v+j/qEs/f9J/1CW/t/QP5Sl/z/rH8rS/5v6h7L0/5b+oSz9v61/KEv/J/QPZen/L/qHsvR/Uv9Qlv5P6R/K0n+9/qEs/Z/WP5Sl/7/qH8rS/zv6h7L0/zf9Q1n6f1f/UJb+G/QPZen/jP6hLP2/p38oS/+N+oey9P93/UNZ+m/SP5Sl/3/oH8rS/1n9Q1n6/6f+oSz9N+sfytJ/i/6hLP3/S/9Qlv7f1z+Upf9W/UNZ+j+nfyhL/+f1D2Xp/wP9Q1n6v6B/KEv//9Y/lKX/i/qHsvT/of6hLP236R9K0n+flv6hLP0H6B/K0n+g/qEs/QfpH8rSf7D+oSz9h+gfytJ/qP6hLP2H6R/K0n+4/qEs/ffQP5Sl/wj9Q1n676l/KEv/vfQPZek/Uv9Qlv6v0D+Upf/e+od+6voDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8pFmweMml02fP7pjvC1/4whc7v3i5/8sEAAD8X/vRh/6X+1cCAAAAAAAAAAAAAAAAAAAAeTXxfyf2cv87AgAAAAAAAAAAAADA/3dt7UdvHDSgx1ODdn3w6sc6tv88fuuZM++556HS/XPXt08KXnLgrg+2bdu2bcWzk6Z0PRzWarU6/9f26Xo8vPdx5+svHXXHATselcmfu+2J86aNPHn+gzcP/vqKG9ufGbL92SGtCy6ZNbvj9QNbrXLskNaVnQ+OGNBqleOHtG7qfDCu88HUIa2VnQ+O3P5gj9anOx+87qK5sy/ufOKEyr9n8NOirX1pa1CPxbZ6/Ndg1/0vHfXkzO6f+3jJ7lcb3Ora/+gHv7h/r+91e4n9d79+Obr3/vv9Lwi8pP7t//l13T/38ZL/6/3/Q2u2Lom+99L77379coz9Q32Cz/89Ntr7c3+vz/8HBy+58/6o4Wtu6dx/2+n3HdT11OAf5/P/j16/HNt7/wN7fP7v/Bw/pfvz/7BWqxy3m78dkEpb+3Ub+3r/73v/g1/V62bArvu/+8vr9+rc/70vtJZ1PTWkn/uf0tf7//W9fq1A/7S137Wt1/t/P/bfGhO85M79b3hw5PbP/+vvv2i/Xb7Xn/0f13v/YxfOuXzsgsVLDp81Z/qMjhkdl00cN+GI8RMnTpgwdvsngh0/7uZvCiSxe+//rRG9bga0Wh0771ffd+OUzv1venjZh7ueGt7P/R/f5/v/wd7/ITR6YGvo0NaV0xcunH/Ejh+7H47b8eOOfyzYfz/+/H/IYV3/WPffGQ5otQ7YeT/mvInDOvd/1byyquupof3c/9Q+9z+5599VAv2zm+//F/e66bH/ozZcs6hz/4d+f9/1XU/198//J/S5/zu9/8PuaGtv1fom2rn/I4ddd2K169Lm7/+gPk3sf9Tmm7ZUuy4n2j/Up4n9T1v+pgurXZeT7B/q08T+H5pz/vJq1+Vk+4f6NLH/F1+55cBq1+UU+4f6NLH/x7/z9D3Vrku7/UN9mtj/B25vP7LadXmL/UN9mtj/4Vc8N6nadXmr/UN9mtj/JXuetrLadTnV/qE+Tez/xG3H7FfturzN/qE+Tex/wHXfXVrtupxm/1CfJvb/1PTlc6tdl2n2D/VpYv8rR415vtp1Od3+oT5N7H/ZM2+YWu26nGH/UJ8m9v+VW+94vNp1ebv9Q32a2P/Hz9n3jmrX5Uz7h/o0sf8fjH54RLXr8g77h/o0sf+1a1c+UO26nGX/UJ8m9r9i5aDR1a7L2fYP9Wli/9eeMOOxatflHPuH+jSx//ETvnR2tetyrv1DfZrY/wGf/ebT1a7LefYP9Wli/6c9smhBtetyvv1DfZrY/6IDP/bDatflAvuH+jSx/zd3HDiz2nWZbv9Qnyb2X24esbbadbnQ/qE+Tez/rE13Ta52XS6yf6hPE/tftffnP1rtulxs/1CfJva/ed5lE6tdlw77h/o0sf9vv+fa91a7LpfYP9Snif3f8sLXSrXrMsP+oT5N7H/DuLPOqXZdZto/1KeJ/d918rOPVrsus+wf6tPE/pevemJhtevyTvuH+jSx/9WrT3qy2nW51P6hPk3s/9AxY0f2fPa5H/O6zLZ/qE8T+5975rIPVrsuc+wf6tPE/o+9/9bXVLsul9k/1KeJ/Q//6qRPVLsuc+0f6tPE/j816X2frHZdLrd/qE8T+98y+ZDDql2XefYP9Wli/+seGHdbtesy3/6hPk3s//2P3l7xuiywf6hPE/uf99oXN1W7LgvtH+rTxP7fOO2MxdWuyxX2D/VpYv/73Tn1C9WuyyL7h/o0sf9zv/W9U6tdl3fZP9Snif0fsv+FB1W7LlfaP9Snif3PnLXmhmrXZbH9Q32a2P+UFevGV7suS+wf6tPE/vd+asHd1a7LVfYP9Wli/xsH7X9KtevybvuH+jSx/3uvfuQb1a7L1fYP9Wli/zdc/5GOatflGvuH+jSx/89sHbq52nW51v4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRO8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAUAAD///+s6TU=") 4.563750331s ago: executing program 5 (id=3838): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@bridge_getlink={0x20, 0x12, 0x1, 0x20, 0x0, {0x7, 0x0, 0x0, 0x0, 0x8000, 0x8400}}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000009c0)=ANY=[]) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000080)=@nullb, 0x0, &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r7) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000210400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000b00"], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100)) 3.005841466s ago: executing program 0 (id=3839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x83c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffffffffffdeb, 0x2, [@TCA_U32_SEL={0x804, 0x5, {0x4, 0x6, 0x7f, 0x8, 0x9, 0x4, 0x3, 0xe0000000, [{0x8001, 0x9094, 0x180000, 0xa}, {0xfbab, 0x7, 0x10, 0x65d1}, {0x0, 0xf30, 0x5, 0x7f7}, {0x2, 0x6, 0x7ff, 0x5}, {0x3, 0x2, 0xd7, 0x8001}, {0x9a73, 0xfffffff7, 0x0, 0x3}, {0x2, 0x0, 0x5, 0xd8}, {0x800, 0xff0c, 0x200, 0x4}, {0x11d, 0xffffffff, 0x3, 0x3}, {0x7, 0x0, 0x7ea3, 0x44}, {0xf2b9, 0x5, 0x8, 0x9}, {0x0, 0x10, 0x2, 0x1}, {0x4, 0x0, 0x200, 0x40}, {0x0, 0x4, 0xf055, 0x4}, {0x3, 0x6, 0x4, 0xfffffffc}, {0x200, 0x4, 0x1, 0x5}, {0x0, 0x3, 0xfffffffe, 0x8}, {0x7, 0x3, 0x5, 0x9}, {0x10, 0xc6c, 0xd7d4, 0x583}, {0x40, 0xfff, 0x8, 0x1}, {0x0, 0x7fffffff, 0xffffe42a, 0x7fffffff}, {0x9, 0x400000, 0x200, 0x6}, {0x5, 0xd159, 0x3, 0x1}, {0x7, 0xfffffff9, 0x1, 0x6}, {0x8000, 0x3, 0x6, 0x9}, {0x4, 0x9, 0xb, 0x8}, {0x2851, 0xba92, 0x4, 0x8}, {0x0, 0xfffff000, 0x2}, {0x2, 0x43, 0x5, 0x100}, {0xfff, 0xfffffffe, 0x3}, {0x4, 0x1, 0x1, 0x9}, {0x7e, 0x7ff, 0x9, 0x2}, {0x8000000, 0x8, 0x3, 0x7}, {0x1ff, 0xa, 0x2, 0x7fa19284}, {0xfffff4c7, 0x8000, 0xffffffff, 0xed9c}, {0xc, 0x8, 0x81, 0x8}, {0x76, 0xac9, 0xffffffff}, {0xfffffff8, 0x0, 0x400, 0x920b209}, {0x401, 0xfffffc00, 0x8}, {0x4, 0x6, 0x9, 0x2}, {0x5, 0x1, 0x1e, 0x401}, {0x9e0, 0x3000, 0xd, 0x7ff}, {0x6f, 0xfffffffe, 0x401, 0x8}, {0x0, 0x0, 0x400, 0x1000}, {0x101, 0xe, 0xfffffff7}, {0x4, 0xfffffff8, 0x9, 0x9}, {0xffff798d, 0x9, 0x401, 0x1ff}, {0x1, 0x1, 0x123e, 0x2}, {0x6d1b, 0x1, 0x16, 0xf}, {0x7, 0x7, 0x2, 0x6}, {0x6fe, 0x4, 0x6, 0x1}, {0x41, 0x9, 0x8, 0x2}, {0xda, 0x5}, {0x38, 0x1ff, 0x64500, 0x9}, {0x101, 0xffffc514, 0x2, 0x7}, {0x7fffffff, 0x9, 0x7, 0x3}, {0x7, 0x200, 0x6, 0x5}, {0x6, 0xffffffff, 0x6, 0x3f03}, {0x1000, 0x8, 0x9, 0x24e}, {0x6, 0x3, 0x6, 0x6677}, {0x1, 0xffffff87, 0x6, 0x7}, {0xdac, 0x0, 0xffffffd2, 0x3}, {0x4, 0x5, 0x10000, 0x5}, {0x2, 0x4, 0x38, 0x5}, {0x0, 0x3, 0x2, 0x1}, {0x1, 0x3, 0x1, 0x100}, {0x6, 0x1ff, 0xd744, 0x1}, {0x7ff, 0x2, 0x7}, {0xa0000, 0xfffffffd, 0x2, 0x8000}, {0x4, 0x101, 0x3, 0x40}, {0xc, 0x2, 0xffffffff}, {0x3, 0x3, 0xffffffff, 0x6}, {0xa9e1, 0x4, 0x3, 0xffff335c}, {0xb1, 0x3, 0xdd, 0x1000}, {0x7, 0xea6, 0x2000, 0x1}, {0x7, 0xfffffffa, 0x7fff, 0x50000000}, {0x0, 0x1ff, 0x400}, {0x9, 0x200, 0x200008, 0x1}, {0x0, 0x76, 0xfff, 0x5}, {0x8001, 0x9, 0x3, 0x4}, {0x5, 0x4, 0x5a8, 0x9}, {0x2, 0x9, 0xffffffff, 0x6}, {0x9, 0x6, 0x6, 0x5}, {0xffffffff, 0x4, 0x8, 0x8}, {0x8000, 0x5, 0x4}, {0xfffff1a0, 0x80000001, 0x3, 0x7f}, {0x7, 0x4, 0xfff, 0x5}, {0xa, 0x0, 0x3, 0x12000}, {0x1, 0x563, 0x1000, 0x5}, {0x7, 0x8, 0x8001, 0xb}, {0x4, 0x94b4c656, 0x0, 0x1}, {0x401, 0x61d0, 0x7, 0x401}, {0xd, 0x7, 0x2, 0x7fff8}, {0x2, 0xfffffffa, 0xfffffffd, 0x3}, {0x6, 0x1, 0x3, 0x4}, {0x4307, 0x0, 0xec, 0x257b}, {0x9, 0x1, 0x101, 0x3}, {0x5, 0x138, 0x0, 0x401}, {0x5, 0x9, 0x80000000, 0xffffff07}, {0x6, 0x1200000, 0x3ff, 0x2}, {0x81, 0x8106, 0x5, 0x80000000}, {0x10000, 0x4, 0x4, 0x5}, {0x8, 0x200, 0x5, 0x7c0}, {0x1, 0x5, 0x2, 0x5}, {0x7, 0x15949c17, 0x2, 0x80}, {0x8, 0x6, 0x2}, {0xb9, 0x9, 0x4, 0x74f}, {0x4, 0xffff267c, 0x2, 0x8}, {0x3, 0xfffffff8, 0x1, 0x100002}, {0x7, 0x9040, 0x2, 0x8}, {0x8000, 0xff, 0xc7, 0x401}, {0x9, 0xcf84, 0x2, 0x8}, {0x7, 0x80000001, 0xb79, 0xc}, {0xbb55, 0x53dbf73a, 0x9, 0x8}, {0x9, 0xd0, 0x8, 0x4}, {0xb6d, 0x7, 0xea, 0x3}, {0xb7b, 0x7, 0x800, 0x1}, {0x5, 0x7d9, 0xff, 0x5}, {0x3, 0x2, 0xa458, 0x7}, {0x4, 0x2, 0xf9, 0x6}, {0x5, 0xfff, 0x0, 0x9d5}, {0x677, 0x4, 0x9, 0x5}, {0xaa1, 0x8, 0x401}, {0x0, 0x401, 0xfffffffe, 0x2}, {0x4, 0x0, 0x6, 0x1}, {0x5, 0x9, 0x9, 0xd}, {0x8, 0x9a, 0x6, 0x972}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xe, 0xa}}]}}]}, 0x83c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 2.734964168s ago: executing program 5 (id=3840): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0xc881) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r2, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 1.912631995s ago: executing program 0 (id=3841): socket$kcm(0x10, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d7cfa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6c4, &(0x7f0000001500)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6", 0x3) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) 1.884313597s ago: executing program 5 (id=3842): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x10, 0x2, 0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 907.159336ms ago: executing program 2 (id=3843): mknodat(0xffffffffffffffff, 0x0, 0x22f6c0948578f7ce, 0xb1) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 108.50373ms ago: executing program 3 (id=3844): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000500)=[0xc, 0x2e3e, 0x2, 0x80], 0x0, 0x77, 0x0, 0x0, &(0x7f0000000380), 0x0}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000080)={0xfa8, 0x1, 0x6, 0x9, 0x2, 0x3, 0x3, 0xae721a9}) r2 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r6) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x31c000}) sendto(r2, 0x0, 0x0, 0x4041, 0x0, 0x0) 105.016821ms ago: executing program 0 (id=3845): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781", 0x1d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x15, 0x3, 0x1, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)=""/10, 0xa}, {&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000000740)=""/127, 0x7f}, {&(0x7f00000007c0)=""/2, 0x2}, {&(0x7f0000000800)=""/194, 0xc2}, {&(0x7f0000000900)=""/124, 0x7c}], 0x6, &(0x7f0000000a80)=[@rdma_dest={0x18, 0x114, 0x2, {0x9, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x17, 0x80000000}, &(0x7f0000000a00)=0x7, 0x0, 0x0, 0x7, 0x3, 0x5e13, 0x78, 0x1000000000000}}], 0x70, 0x4000000}, 0x4000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240b", 0x24}], 0x1}, 0x20048050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14"], 0x232) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 5 (id=3846): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0xc881) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8914, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) kernel console output (not intermixed with test programs): vxcan0: link becomes ready [ 1099.518956][T14532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.920697][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1100.032482][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1100.116023][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1100.126379][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1100.179285][T14532] device veth0_vlan entered promiscuous mode [ 1100.197750][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1100.222185][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1100.269400][T14532] device veth1_vlan entered promiscuous mode [ 1100.290495][T14906] loop2: detected capacity change from 0 to 64 [ 1100.296952][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1100.338193][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1100.406961][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1100.434956][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1100.541373][T14532] device veth0_macvtap entered promiscuous mode [ 1100.557793][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 1101.175006][T14532] device veth1_macvtap entered promiscuous mode [ 1101.339118][T14532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.355702][T14532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.400044][T14532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.445428][T14912] loop0: detected capacity change from 0 to 1024 [ 1101.458308][T14532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.476773][T14532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.524633][T14912] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1101.532576][T14532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.544440][T14532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.555299][T14532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.567426][T14532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.579337][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1101.588668][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1101.597430][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1101.611015][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1101.623808][T14532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.635279][T14532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.645939][T14532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.657474][T14532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.667916][T14532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.680510][T14532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.691644][T14532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.702679][T14532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.723075][T14532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.731304][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1101.777327][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1101.894871][T14532] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.029471][T14532] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.043036][T14532] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.052454][T14532] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.485162][ T8556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.509759][ T8556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.559105][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1102.571091][T11788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.392871][T11788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.070584][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1104.089879][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 1104.369735][T14932] loop4: detected capacity change from 0 to 512 [ 1104.442903][T14932] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1104.488680][T14932] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1104.581250][T14932] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.2923: bad orphan inode 131083 [ 1104.608374][T14932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1104.752881][ T9857] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1104.825275][T14946] loop0: detected capacity change from 0 to 1024 [ 1104.915453][T14946] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1104.967971][ T9857] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1104.980807][ T9857] usb 3-1: config 0 has no interface number 0 [ 1105.003455][ T9857] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1105.146249][ T9857] usb 3-1: config 0 interface 110 has no altsetting 0 [ 1105.214511][ T9857] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1105.241352][ T9857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.251672][ T9857] usb 3-1: Product: syz [ 1105.261889][ T9857] usb 3-1: Manufacturer: syz [ 1105.268301][ T9857] usb 3-1: SerialNumber: syz [ 1105.325723][ T9857] usb 3-1: config 0 descriptor?? [ 1105.353105][T14941] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1107.948759][ T9857] cdc_subset: probe of 3-1:0.110 failed with error -71 [ 1107.991859][ T9857] usb 3-1: USB disconnect, device number 71 [ 1107.993172][T14964] loop3: detected capacity change from 0 to 64 [ 1108.031389][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 1108.532578][T14700] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 1108.558290][T14979] loop3: detected capacity change from 0 to 128 [ 1109.636566][T14700] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1109.760097][T14700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.790538][T14700] usb 1-1: Product: syz [ 1109.795208][T14700] usb 1-1: Manufacturer: syz [ 1109.805124][T14700] usb 1-1: SerialNumber: syz [ 1109.833012][T14700] usb 1-1: config 0 descriptor?? [ 1110.046639][T14700] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1110.318453][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2934'. [ 1110.594647][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 1110.866708][T15003] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2938'. [ 1111.037899][T15003] netlink: 'syz.4.2938': attribute type 11 has an invalid length. [ 1112.304216][T14700] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1112.824793][T14700] usb 1-1: USB disconnect, device number 79 [ 1113.842747][ T9859] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 1114.354294][ T9859] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1114.382271][ T9859] usb 1-1: config 0 has no interface number 0 [ 1114.396187][ T9859] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1114.414658][ T9859] usb 1-1: config 0 interface 110 has no altsetting 0 [ 1114.450893][ T9859] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1114.492718][ T9859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.501140][ T9859] usb 1-1: Product: syz [ 1114.526106][ T9859] usb 1-1: Manufacturer: syz [ 1114.530954][ T9859] usb 1-1: SerialNumber: syz [ 1114.573342][ T9859] usb 1-1: config 0 descriptor?? [ 1114.615716][T15025] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1115.434064][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.441519][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.479711][ T8556] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.493791][ T9859] cdc_subset: probe of 1-1:0.110 failed with error -71 [ 1115.550414][ T9859] usb 1-1: USB disconnect, device number 80 [ 1115.654009][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1115.663471][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1115.690285][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1115.705639][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1115.720559][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1115.729059][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1115.781776][ T8556] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.994740][ T8556] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.134116][T15050] blktrace: Concurrent blktraces are not allowed on loop2 [ 1116.278463][ T8556] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.823015][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 1117.857405][ T8556] tipc: Left network mode [ 1117.992912][ T4314] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1118.292120][ T4314] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1118.390937][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.553630][ T4314] usb 5-1: Product: syz [ 1118.616947][ T4314] usb 5-1: Manufacturer: syz [ 1118.666767][ T4314] usb 5-1: SerialNumber: syz [ 1118.934858][ T4314] usb 5-1: config 0 descriptor?? [ 1119.305978][ T4314] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1119.763370][T15040] chnl_net:caif_netlink_parms(): no params data found [ 1119.903176][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 1120.041620][T15084] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2957'. [ 1120.395946][T15040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.408144][T15040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.430425][T15084] netlink: 'syz.1.2957': attribute type 11 has an invalid length. [ 1120.439746][T15040] device bridge_slave_0 entered promiscuous mode [ 1120.462951][T14700] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 1120.765387][T14700] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1120.793309][T14700] usb 1-1: config 0 has no interface number 0 [ 1120.799576][T14700] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1120.876851][ T4314] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1120.901564][ T4314] usb 5-1: USB disconnect, device number 68 [ 1120.948517][T14700] usb 1-1: config 0 interface 110 has no altsetting 0 [ 1120.990332][T15040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.999876][T14700] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1121.002148][T15040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.040561][T14700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.050667][T15040] device bridge_slave_1 entered promiscuous mode [ 1121.074584][T14700] usb 1-1: Product: syz [ 1121.079305][T14700] usb 1-1: Manufacturer: syz [ 1121.116691][T14700] usb 1-1: SerialNumber: syz [ 1121.170630][T14700] usb 1-1: config 0 descriptor?? [ 1121.194184][T15093] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1121.323519][T15040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.355662][T15040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.988334][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 1122.279229][T14700] cdc_subset: probe of 1-1:0.110 failed with error -71 [ 1122.294641][T15040] team0: Port device team_slave_0 added [ 1122.307342][T14700] usb 1-1: USB disconnect, device number 81 [ 1122.358750][T15040] team0: Port device team_slave_1 added [ 1122.368930][T15113] loop4: detected capacity change from 0 to 512 [ 1122.571760][T15113] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1122.588479][T15113] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1124.303870][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 1124.463222][T15113] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.2963: bad orphan inode 131083 [ 1124.549471][T15113] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1124.680677][ T8556] device hsr_slave_0 left promiscuous mode [ 1124.697771][ T8556] device hsr_slave_1 left promiscuous mode [ 1124.859249][ T8556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.918671][ T8556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.036190][ T8556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1125.116571][ T8556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.238052][ T8556] device bridge_slave_1 left promiscuous mode [ 1125.306827][ T8556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.594085][ T8556] device bridge_slave_0 left promiscuous mode [ 1125.614936][ T8556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.524880][ T8556] device veth1_macvtap left promiscuous mode [ 1127.532999][ T8556] device veth0_macvtap left promiscuous mode [ 1127.539651][ T8556] device veth1_vlan left promiscuous mode [ 1127.546178][ T8556] device veth0_vlan left promiscuous mode [ 1129.039720][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 1129.051255][ T8556] bond1 (unregistering): Released all slaves [ 1129.821122][T15168] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2976'. [ 1129.956444][T15168] netlink: 'syz.3.2976': attribute type 11 has an invalid length. [ 1131.661238][ T8556] team0 (unregistering): Port device team_slave_1 removed [ 1131.856451][ T8556] team0 (unregistering): Port device team_slave_0 removed [ 1132.133029][ T8556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.303687][T15188] loop3: detected capacity change from 0 to 40427 [ 1132.364494][T15188] F2FS-fs (loop3): invalid crc value [ 1132.371573][T15188] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1132.405363][T15188] F2FS-fs (loop3): Start checkpoint disabled! [ 1133.493543][T15188] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1134.063839][ T8556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1136.268353][ T4276] Bluetooth: hci4: Unknown advertising packet type: 0xffff [ 1136.268590][ T4276] Bluetooth: hci4: adv larger than maximum supported [ 1136.277356][ T4276] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1141.503482][ T8556] bond0 (unregistering): Released all slaves [ 1141.976822][T15040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.984871][T15040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.011149][ C0] vkms_vblank_simulate: vblank timer overrun [ 1142.018258][T15040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.047056][T15207] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2988'. [ 1142.191139][T15040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.215002][T15040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.246509][T15040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.477993][T15040] device hsr_slave_0 entered promiscuous mode [ 1142.534804][T15040] device hsr_slave_1 entered promiscuous mode [ 1142.554436][T15040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1142.585006][T15269] loop3: detected capacity change from 0 to 1024 [ 1142.594141][T15040] Cannot create hsr debugfs directory [ 1142.603786][T15271] loop4: detected capacity change from 0 to 1024 [ 1142.667333][T15271] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1142.692063][T15269] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1143.480877][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 1144.750776][T15288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3006'. [ 1146.608369][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 1148.533217][T15300] loop4: detected capacity change from 0 to 40427 [ 1148.559991][T15300] F2FS-fs (loop4): invalid crc value [ 1148.568307][T15300] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1148.608992][T15300] F2FS-fs (loop4): Start checkpoint disabled! [ 1148.618232][T15300] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1148.701034][ T26] audit: type=1800 audit(1755937894.997:50): pid=15309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3009" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 1150.117720][ T11] kworker/u4:1: attempt to access beyond end of device [ 1150.117720][ T11] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1150.851651][T15040] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1151.146186][T15040] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1151.246181][T15040] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1151.326696][T15326] loop3: detected capacity change from 0 to 1024 [ 1151.480164][T15040] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1151.484333][T15326] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1153.037982][T15040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.224997][T15040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1153.278439][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1153.298689][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1153.365838][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1153.413029][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1153.441866][ T8247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.449129][ T8247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.515345][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1154.403418][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1154.411991][ T8247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.419261][ T8247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.556077][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1154.615547][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1154.655363][ T8309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1154.675043][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1154.695398][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1154.793330][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1154.811098][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1154.861081][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1154.911254][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1154.953324][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1154.984404][T15040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1155.016312][T15040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1155.041418][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1155.153681][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1157.514041][ T4276] Bluetooth: hci2: Unknown advertising packet type: 0xffff [ 1157.514146][ T4276] Bluetooth: hci2: adv larger than maximum supported [ 1157.521726][ T4276] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1159.938527][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 1161.115634][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1161.134236][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1161.149572][T15040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1161.343210][T13345] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 1161.772928][T13345] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1161.874958][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1161.924977][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1161.942568][T13345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.951279][T13345] usb 1-1: Product: syz [ 1161.998909][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1162.005035][T13345] usb 1-1: Manufacturer: syz [ 1162.029511][T13345] usb 1-1: SerialNumber: syz [ 1162.046762][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1162.050155][T13345] usb 1-1: config 0 descriptor?? [ 1162.100294][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1162.121492][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1162.154846][T15040] device veth0_vlan entered promiscuous mode [ 1162.189304][T15040] device veth1_vlan entered promiscuous mode [ 1162.313376][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1162.323618][T13345] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1162.336689][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1162.369243][T15040] device veth0_macvtap entered promiscuous mode [ 1162.395813][T15040] device veth1_macvtap entered promiscuous mode [ 1162.850411][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.862055][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.873345][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.892547][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.582449][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.680373][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.775155][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.822617][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.855292][T15040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1163.984012][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1163.994583][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.004547][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.015132][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.025226][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.029600][T15443] loop3: detected capacity change from 0 to 64 [ 1164.052674][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.088623][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.111618][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.127364][T15040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.193352][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1164.213513][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1164.230335][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1164.256743][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1164.281047][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1164.292292][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1164.375581][T13345] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1164.436756][T13345] usb 1-1: USB disconnect, device number 82 [ 1164.636691][T15450] loop4: detected capacity change from 0 to 40427 [ 1164.654064][T15450] F2FS-fs (loop4): invalid crc value [ 1164.699130][T15450] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1164.784332][T15040] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.807434][T15450] F2FS-fs (loop4): Start checkpoint disabled! [ 1164.829751][T15450] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1164.829836][T15040] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.856944][T15040] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.866321][T15040] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.847264][ T26] audit: type=1800 audit(1755937912.147:51): pid=15464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3046" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 1166.304601][T15473] 9pnet_fd: Insufficient options for proto=fd [ 1166.443613][ T7686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.721553][ T7686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.080324][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1167.091633][ T8247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.136320][ T8247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.181127][ T8284] kworker/u4:16: attempt to access beyond end of device [ 1167.181127][ T8284] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1167.263522][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1167.535848][T15487] loop2: detected capacity change from 0 to 64 [ 1168.663305][T15503] loop2: detected capacity change from 0 to 1024 [ 1168.866469][T15503] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1169.211502][T15040] EXT4-fs (loop2): unmounting filesystem. [ 1169.880303][T15517] loop2: detected capacity change from 0 to 40427 [ 1169.914339][T15517] F2FS-fs (loop2): invalid crc value [ 1169.952244][T15517] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1169.974042][T15517] F2FS-fs (loop2): Start checkpoint disabled! [ 1170.442601][T15517] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1170.521799][ T26] audit: type=1800 audit(1755937916.817:52): pid=15526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3062" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 1170.766070][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1170.776205][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1170.785557][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1170.803635][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1170.811266][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1170.818559][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1171.007294][ T7686] kworker/u4:8: attempt to access beyond end of device [ 1171.007294][ T7686] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1172.123990][T15539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3066'. [ 1172.862794][ T4275] Bluetooth: hci4: command 0x0409 tx timeout [ 1173.863827][ T7686] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.328959][T15545] loop3: detected capacity change from 0 to 64 [ 1174.502917][ T7686] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.551092][T15547] loop2: detected capacity change from 0 to 64 [ 1174.899417][T15557] loop3: detected capacity change from 0 to 128 [ 1174.942654][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 1176.306975][ T7686] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.406453][T15560] loop4: detected capacity change from 0 to 512 [ 1176.435983][T15560] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1176.445378][T15560] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1176.508306][T15560] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.3072: bad orphan inode 131083 [ 1176.570777][T15560] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1176.626160][ T7686] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.711618][T15528] chnl_net:caif_netlink_parms(): no params data found [ 1176.867282][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.875468][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.149464][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 1177.943498][T15528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.950768][T15528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.019364][T15528] device bridge_slave_0 entered promiscuous mode [ 1178.785150][T15528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.445878][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 1179.462348][T15528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.784085][T15528] device bridge_slave_1 entered promiscuous mode [ 1180.456807][ T7686] tipc: Left network mode [ 1180.617217][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 1181.004117][T15528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.036536][T15528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.459380][T15528] team0: Port device team_slave_0 added [ 1182.699572][T15528] team0: Port device team_slave_1 added [ 1184.763824][T15528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.784107][T15528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.912427][T15528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1185.953365][T15528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1185.961856][T15528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1185.988317][ C1] vkms_vblank_simulate: vblank timer overrun [ 1186.202771][T15528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.048233][T15663] loop4: detected capacity change from 0 to 128 [ 1187.927370][T15528] device hsr_slave_0 entered promiscuous mode [ 1187.983688][T15528] device hsr_slave_1 entered promiscuous mode [ 1188.100555][T15528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1188.134296][T15528] Cannot create hsr debugfs directory [ 1188.372548][ T4322] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1188.620472][ T4322] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1188.655621][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.688411][ T4322] usb 4-1: Product: syz [ 1188.702221][ T4322] usb 4-1: Manufacturer: syz [ 1188.716713][ T4322] usb 4-1: SerialNumber: syz [ 1188.743916][ T4322] usb 4-1: config 0 descriptor?? [ 1188.969261][ T4322] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1189.232689][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 1190.105815][ T7686] device hsr_slave_0 left promiscuous mode [ 1190.152937][ T7686] device hsr_slave_1 left promiscuous mode [ 1190.191324][ T7686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.219931][ T7686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1190.246666][ T7686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1190.286423][ T7686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1190.322216][ T7686] device bridge_slave_1 left promiscuous mode [ 1190.330704][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.344076][ T7686] device bridge_slave_0 left promiscuous mode [ 1190.359707][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.723435][ T4322] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1190.799867][ T4322] usb 4-1: USB disconnect, device number 72 [ 1191.172291][ T7686] device veth1_macvtap left promiscuous mode [ 1191.202884][ T7686] device veth0_macvtap left promiscuous mode [ 1191.219796][ T7686] device veth1_vlan left promiscuous mode [ 1191.253715][ T7686] device veth0_vlan left promiscuous mode [ 1192.682042][T15727] netlink: 2064 bytes leftover after parsing attributes in process `syz.3.3107'. [ 1194.015730][ T7686] team0 (unregistering): Port device team_slave_1 removed [ 1194.115925][ T7686] team0 (unregistering): Port device team_slave_0 removed [ 1194.142905][T13352] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1194.204425][ T7686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1194.287723][ T7686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1194.406228][T13352] usb 5-1: config 0 has an invalid interface number: 221 but max is 0 [ 1194.446398][T13352] usb 5-1: config 0 has no interface number 0 [ 1194.508209][T13352] usb 5-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ba.57 [ 1194.530442][T13352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.552572][T13352] usb 5-1: Product: syz [ 1194.562900][T13352] usb 5-1: Manufacturer: syz [ 1194.567627][T13352] usb 5-1: SerialNumber: syz [ 1194.603087][T13352] usb 5-1: config 0 descriptor?? [ 1196.117954][ T7686] bond0 (unregistering): Released all slaves [ 1196.796528][T15756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3114'. [ 1198.269449][T13352] HFC-S_USB: probe of 5-1:0.221 failed with error -5 [ 1198.539917][T13352] usb 5-1: USB disconnect, device number 69 [ 1198.721195][T15528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1198.732006][T15528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1198.764957][T15528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1198.772068][T15766] loop3: detected capacity change from 0 to 1024 [ 1198.874351][T15528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1199.212248][T15766] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1200.613528][T15528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1201.251768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1201.305779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1201.334849][T15528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1201.513931][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1201.528861][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1201.650029][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.657274][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.738313][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1202.474527][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1202.493376][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1202.570187][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.577385][ T8284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1202.661975][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1202.710146][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1202.779095][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1202.812317][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1202.871094][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1202.900742][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1202.927207][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1202.969486][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1202.996767][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1203.028487][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1203.051061][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1203.082322][T15528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1203.874041][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1203.881594][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1204.023962][T15528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.067281][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 1204.227990][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1204.249068][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1204.292745][T13352] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1204.298756][T15528] device veth0_vlan entered promiscuous mode [ 1204.346622][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1204.360856][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1204.386198][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1204.409519][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1204.427105][T15836] loop4: detected capacity change from 0 to 1024 [ 1204.438244][T15528] device veth1_vlan entered promiscuous mode [ 1204.494471][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1204.508125][T13352] usb 3-1: config 0 has an invalid interface number: 221 but max is 0 [ 1204.510007][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1204.551321][T13352] usb 3-1: config 0 has no interface number 0 [ 1204.597306][T15528] device veth0_macvtap entered promiscuous mode [ 1204.599349][T13352] usb 3-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ba.57 [ 1204.635595][T15836] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1204.666155][T13352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.668845][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1205.067204][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1205.262222][T15528] device veth1_macvtap entered promiscuous mode [ 1205.272673][T13352] usb 3-1: Product: syz [ 1205.276925][T13352] usb 3-1: Manufacturer: syz [ 1205.278303][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1205.330605][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1205.342194][T13352] usb 3-1: SerialNumber: syz [ 1205.358847][T13352] usb 3-1: config 0 descriptor?? [ 1205.920513][T15528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1205.982019][T15528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.008620][T15528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.049151][T15528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.088281][T15528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.115253][T15528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.139483][T15528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.180869][T15528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.204842][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 1206.212729][T15528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1206.231342][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1206.250710][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1206.305350][T15528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.342528][T15528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.389053][T15528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.423064][T15528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.466140][T15528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.504358][T15528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.556564][T15528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.583268][T15528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.613341][T15528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.640399][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1206.665092][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1206.705893][T15528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.731984][T15528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.770974][T15528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.808155][T15528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.943034][ T4395] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1207.053840][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.064441][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.127526][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1207.152299][ T4395] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1207.168341][ T4395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.192162][ T4395] usb 4-1: Product: syz [ 1207.200997][ T4395] usb 4-1: Manufacturer: syz [ 1207.214796][ T4395] usb 4-1: SerialNumber: syz [ 1207.241367][ T4395] usb 4-1: config 0 descriptor?? [ 1207.267755][ T8097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.323188][ T8097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.408019][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1207.478668][ T4395] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1208.603098][ T9857] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1208.762693][ T9857] usb 2-1: device descriptor read/64, error -71 [ 1209.039910][ T9857] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1209.158905][ T4395] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1209.196948][ T4395] usb 4-1: USB disconnect, device number 73 [ 1209.212714][ T9857] usb 2-1: device descriptor read/64, error -71 [ 1209.272380][T13352] HFC-S_USB: probe of 3-1:0.221 failed with error -5 [ 1209.332894][ T9857] usb usb2-port1: attempt power cycle [ 1209.352297][T13352] usb 3-1: USB disconnect, device number 72 [ 1209.742641][ T9857] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1209.783365][ T9857] usb 2-1: device descriptor read/8, error -71 [ 1209.971262][T15891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 1210.102592][ T9857] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1210.156294][ T9857] usb 2-1: device descriptor read/8, error -71 [ 1210.168655][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1210.213952][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1210.228216][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1210.246025][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1210.272170][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1210.285402][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1210.406341][ T9857] usb usb2-port1: unable to enumerate USB device [ 1210.483437][T11788] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.158905][T11788] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.668553][T11788] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.063187][T11788] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.384317][ T4276] Bluetooth: hci2: command 0x0409 tx timeout [ 1213.792708][T11788] tipc: Left network mode [ 1214.462661][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 1214.496845][T15892] chnl_net:caif_netlink_parms(): no params data found [ 1215.009485][T15892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.044980][T15892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.087921][T15892] device bridge_slave_0 entered promiscuous mode [ 1215.767136][T15892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.775514][T15892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.797140][T15892] device bridge_slave_1 entered promiscuous mode [ 1216.249870][T15924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3141'. [ 1216.358601][T15892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1216.461611][T15892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1216.552941][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 1216.570909][T15892] team0: Port device team_slave_0 added [ 1216.594105][T15892] team0: Port device team_slave_1 added [ 1216.671481][T11788] bridge0: port 3(gretap0) entered disabled state [ 1216.786898][T11788] device gretap0 left promiscuous mode [ 1216.806532][T11788] bridge0: port 3(gretap0) entered disabled state [ 1216.856675][T15892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.871710][T15892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.948989][T15892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.083036][T15892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.094686][T13352] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1217.107940][T15892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.251090][T15892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1217.334471][T13352] usb 2-1: config 0 has an invalid interface number: 221 but max is 0 [ 1217.352169][T13352] usb 2-1: config 0 has no interface number 0 [ 1217.543813][T13352] usb 2-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ba.57 [ 1217.572713][T13352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.587660][T13352] usb 2-1: Product: syz [ 1218.286660][T13352] usb 2-1: Manufacturer: syz [ 1218.291338][T13352] usb 2-1: SerialNumber: syz [ 1218.312010][T13352] usb 2-1: config 0 descriptor?? [ 1218.407369][T15892] device hsr_slave_0 entered promiscuous mode [ 1218.421153][T15892] device hsr_slave_1 entered promiscuous mode [ 1218.438904][T15892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1218.458581][T15892] Cannot create hsr debugfs directory [ 1218.642967][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 1219.040663][T11788] device hsr_slave_0 left promiscuous mode [ 1219.077867][T11788] device hsr_slave_1 left promiscuous mode [ 1219.110523][T11788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1219.157215][T11788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1219.175735][T11788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1219.190006][T11788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1219.263765][T11788] device bridge_slave_1 left promiscuous mode [ 1219.270280][T11788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.279320][T11788] device bridge_slave_0 left promiscuous mode [ 1219.286145][T11788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.521341][T11788] device veth1_macvtap left promiscuous mode [ 1219.577995][T11788] device veth0_macvtap left promiscuous mode [ 1219.620408][T11788] device veth1_vlan left promiscuous mode [ 1219.657206][T11788] device veth0_vlan left promiscuous mode [ 1222.710790][T11788] team0 (unregistering): Port device team_slave_1 removed [ 1222.788962][T11788] team0 (unregistering): Port device team_slave_0 removed [ 1222.868120][T11788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1222.940758][T11788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1223.439219][T13352] HFC-S_USB: probe of 2-1:0.221 failed with error -5 [ 1223.571021][T11788] bond0 (unregistering): Released all slaves [ 1223.696902][T16000] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1224.907373][T16013] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3160'. [ 1230.474935][T16042] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3167'. [ 1230.491315][T15892] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1230.548099][T15892] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1230.585933][T15892] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1230.627035][T15892] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1230.718882][ T4276] Bluetooth: hci0: Unknown advertising packet type: 0xffff [ 1230.718941][ T4276] Bluetooth: hci0: adv larger than maximum supported [ 1230.726732][ T4276] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1232.520551][ T9859] usb 2-1: USB disconnect, device number 95 [ 1233.000214][T15892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.098124][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1233.124454][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1233.149952][T15892] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.171287][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1233.186063][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1233.216966][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.224214][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.261533][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1233.276863][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1233.308323][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1233.329751][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.336988][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.365197][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1233.410529][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1233.439789][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1233.489533][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1233.648166][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1233.661281][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1233.693537][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1233.709981][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1233.738622][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1233.750069][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1233.759759][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1233.767660][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1233.781030][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1233.789195][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1233.817442][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1233.831106][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1233.843520][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1233.973206][T15892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1234.806389][T15474] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.536231][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'. [ 1235.545467][T16088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3175'. [ 1235.554853][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'. [ 1235.563757][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'. [ 1235.832716][ T4276] Bluetooth: hci1: command 0x0409 tx timeout [ 1235.938337][T15474] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.621886][T15474] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.800431][T15474] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.178843][T16104] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3179'. [ 1237.509120][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1237.527658][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1237.572197][T15892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1237.902685][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 1238.166039][T16071] chnl_net:caif_netlink_parms(): no params data found [ 1238.304707][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.313748][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.746907][T16071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.760085][T16071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.872856][T16071] device bridge_slave_0 entered promiscuous mode [ 1238.904589][T16071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.958954][T16071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.005009][T16071] device bridge_slave_1 entered promiscuous mode [ 1239.346934][T16071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.380201][T16071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.719408][T16071] team0: Port device team_slave_0 added [ 1239.903767][T16071] team0: Port device team_slave_1 added [ 1239.992579][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 1240.299546][T16071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.326356][T16071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.364670][T16071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.382815][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 1240.419853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1240.429333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1240.439781][T16071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.458240][T16071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.543736][T16071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.631400][T15892] device veth0_vlan entered promiscuous mode [ 1240.928595][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1240.989887][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1241.100596][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1241.229960][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1241.538483][T15892] device veth1_vlan entered promiscuous mode [ 1242.046585][T16071] device hsr_slave_0 entered promiscuous mode [ 1242.070384][T16071] device hsr_slave_1 entered promiscuous mode [ 1242.076786][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 1242.091881][T16071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1242.101176][T16071] Cannot create hsr debugfs directory [ 1242.161399][T15474] device hsr_slave_0 left promiscuous mode [ 1242.499898][T15474] device hsr_slave_1 left promiscuous mode [ 1242.625818][T15474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1242.695138][T15474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.736398][T15474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1242.744261][T15474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.761504][T15474] device bridge_slave_1 left promiscuous mode [ 1242.768056][T15474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.786951][T15474] device bridge_slave_0 left promiscuous mode [ 1242.793857][T15474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.830937][T15474] device veth1_macvtap left promiscuous mode [ 1242.840744][T15474] device veth0_macvtap left promiscuous mode [ 1242.851030][T15474] device veth1_vlan left promiscuous mode [ 1242.861509][T15474] device veth0_vlan left promiscuous mode [ 1245.022670][ T4395] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 1245.250466][ T4395] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1245.262229][ T4395] usb 1-1: config 0 has no interface number 0 [ 1245.279878][ T4395] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1245.294651][ T4395] usb 1-1: config 0 interface 110 has no altsetting 0 [ 1245.304059][ T4395] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1245.320738][ T4395] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.329394][ T4395] usb 1-1: Product: syz [ 1245.333879][ T4395] usb 1-1: Manufacturer: syz [ 1245.338533][ T4395] usb 1-1: SerialNumber: syz [ 1245.346700][ T4395] usb 1-1: config 0 descriptor?? [ 1245.352759][T16188] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1245.631371][T15474] team0 (unregistering): Port device team_slave_1 removed [ 1245.642627][T14697] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1245.844839][T15474] team0 (unregistering): Port device team_slave_0 removed [ 1245.865353][T14697] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1245.874265][T14697] usb 3-1: config 0 has no interface number 0 [ 1245.880743][T14697] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1245.899351][T14697] usb 3-1: config 0 interface 110 has no altsetting 0 [ 1245.931015][T14697] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1245.940534][T14697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.953523][T14697] usb 3-1: Product: syz [ 1245.957854][T14697] usb 3-1: Manufacturer: syz [ 1245.983084][T14697] usb 3-1: SerialNumber: syz [ 1246.020230][T14697] usb 3-1: config 0 descriptor?? [ 1246.037667][T16191] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1246.117896][T15474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.357348][T15474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.182402][ T4395] cdc_subset: probe of 1-1:0.110 failed with error -71 [ 1247.270390][ T4395] usb 1-1: USB disconnect, device number 83 [ 1248.094866][T15474] bond0 (unregistering): Released all slaves [ 1248.154874][T14697] cdc_subset: probe of 3-1:0.110 failed with error -71 [ 1248.184988][T14697] usb 3-1: USB disconnect, device number 73 [ 1248.247147][T16171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3190'. [ 1248.275177][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1248.366182][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1248.500779][T15892] device veth0_macvtap entered promiscuous mode [ 1248.546282][T15892] device veth1_macvtap entered promiscuous mode [ 1248.635664][T15892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.647713][T15892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.659271][T15892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.722924][T15892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.740925][T15892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.752243][T15892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.790947][T15892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1248.869371][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1248.880583][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1248.890229][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1248.947833][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3201'. [ 1248.957270][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3201'. [ 1248.967125][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3201'. [ 1248.976451][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3201'. [ 1249.505326][T15892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.517871][T15892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.528560][T15892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.539642][T15892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.549552][T15892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.560212][T15892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.605631][T15892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.662224][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1249.683146][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1249.782524][T15892] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.791305][T15892] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.810970][T15892] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.823575][T15892] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.867592][T16071] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1249.893790][T16071] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1249.943196][T16071] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1250.023160][T16071] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1250.182903][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.210648][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.269073][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.271848][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1250.295099][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.335993][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1250.844415][T16071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.039455][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1251.048804][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1251.084939][T16071] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.129029][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1251.143331][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1251.164605][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.171893][ T8097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.189348][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1251.224368][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1251.252857][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1251.283299][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.290471][ T8097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1251.357287][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1251.403249][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1251.471640][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1251.529469][T16244] loop4: detected capacity change from 0 to 1024 [ 1251.547712][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1251.680734][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1251.703273][T16244] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1251.731862][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1251.794004][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1251.921658][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1252.668463][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1252.854457][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1252.885712][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1253.257876][T16071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1253.306741][T16259] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3208'. [ 1255.775535][T15892] EXT4-fs (loop4): unmounting filesystem. [ 1257.894654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1257.903222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1258.117442][T16071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.835703][T12100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1264.897584][T12100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1265.324005][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1265.391017][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1266.066912][T16071] device veth0_vlan entered promiscuous mode [ 1266.121482][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1266.136679][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1266.212930][T16071] device veth1_vlan entered promiscuous mode [ 1266.775752][T12100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1266.859171][T12100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1266.900166][T16071] device veth0_macvtap entered promiscuous mode [ 1267.002882][T16071] device veth1_macvtap entered promiscuous mode [ 1267.067375][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1267.098367][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1267.131777][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1267.162041][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1267.189769][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1267.216773][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1267.752395][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1267.787314][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1267.844957][T16071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1267.854371][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1267.878001][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1267.902117][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1267.921649][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1268.044912][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1268.132572][T13345] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1268.356717][T13345] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1268.398404][T13345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.524585][T13345] usb 3-1: Product: syz [ 1268.573004][T13345] usb 3-1: Manufacturer: syz [ 1268.606725][T13345] usb 3-1: SerialNumber: syz [ 1268.663973][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.736050][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1268.763557][T13345] usb 3-1: config 0 descriptor?? [ 1268.778814][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.901774][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1268.941816][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.960897][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1268.978157][T13345] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1268.982490][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.081171][T16071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.135159][T16071] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.166774][T16071] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.176240][T16071] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.188989][T16071] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.224104][ T4313] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1269.261021][T12100] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1269.325659][T16430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3243'. [ 1269.334908][T16430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3243'. [ 1269.344834][T16430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3243'. [ 1269.354049][T16430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3243'. [ 1269.394429][T12100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1269.452871][ T4313] usb 1-1: device descriptor read/64, error -71 [ 1269.722826][ T4313] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1269.938186][ T8309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.966977][ T8309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.006789][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1270.014556][ T4313] usb 1-1: device descriptor read/64, error -71 [ 1270.046144][T15520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.063848][T15520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.090305][ T8309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1270.132894][ T4313] usb usb1-port1: attempt power cycle [ 1270.649713][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3246'. [ 1270.658799][T16444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3246'. [ 1270.668077][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3246'. [ 1270.677904][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3246'. [ 1271.352707][ T4313] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1271.512906][ T4313] usb 1-1: device descriptor read/8, error -71 [ 1271.521852][T13345] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1271.598855][T13345] usb 3-1: USB disconnect, device number 74 [ 1271.792634][ T4313] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1272.665413][ T4313] usb 1-1: device not accepting address 87, error -71 [ 1272.672655][ T4313] usb usb1-port1: unable to enumerate USB device [ 1273.989336][T13345] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1274.194415][T13345] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 1274.222631][T13345] usb 5-1: config 0 has no interface number 0 [ 1274.228781][T13345] usb 5-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1274.316037][T13345] usb 5-1: config 0 interface 110 has no altsetting 0 [ 1274.383874][T13345] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1274.402557][T13345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.411201][T13345] usb 5-1: Product: syz [ 1274.415839][T13345] usb 5-1: Manufacturer: syz [ 1274.424320][T13345] usb 5-1: SerialNumber: syz [ 1274.643104][T13345] usb 5-1: config 0 descriptor?? [ 1275.531331][T13345] usb 5-1: can't set config #0, error -71 [ 1275.551812][T13345] usb 5-1: USB disconnect, device number 70 [ 1276.890696][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3261'. [ 1279.879983][ T4313] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 1280.076425][ T4313] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1280.106052][ T4313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.167019][ T4313] usb 1-1: Product: syz [ 1280.171260][ T4313] usb 1-1: Manufacturer: syz [ 1280.204028][ T4313] usb 1-1: SerialNumber: syz [ 1280.233360][ T4313] usb 1-1: config 0 descriptor?? [ 1280.613394][ T4313] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1281.444301][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3268'. [ 1281.453278][T16543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3268'. [ 1281.462257][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3268'. [ 1281.471374][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3268'. [ 1281.892607][T13345] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1282.095776][T13345] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1282.131818][T13345] usb 3-1: config 0 has no interface number 0 [ 1282.141563][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1282.152347][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1282.161193][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1282.170750][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1282.180540][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1282.188026][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1282.195591][T13345] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1282.201189][T16560] loop5: detected capacity change from 0 to 64 [ 1282.207208][T13345] usb 3-1: config 0 interface 110 has no altsetting 0 [ 1282.223465][ T4313] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1282.233906][T13345] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1282.254209][ T4313] usb 1-1: USB disconnect, device number 88 [ 1282.270492][T13345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.279099][T13345] usb 3-1: Product: syz [ 1282.286246][T13345] usb 3-1: Manufacturer: syz [ 1282.290908][T13345] usb 3-1: SerialNumber: syz [ 1282.297895][T13345] usb 3-1: config 0 descriptor?? [ 1282.303915][T16551] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1282.468914][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.932098][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.223720][T16575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3272'. [ 1283.364746][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.304881][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 1284.333756][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.382569][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 1286.621638][T13345] cdc_subset: probe of 3-1:0.110 failed with error -71 [ 1286.690104][T13345] usb 3-1: USB disconnect, device number 75 [ 1286.957503][ T9] tipc: Left network mode [ 1287.572978][T13345] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1287.816344][T13345] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1287.923994][T13345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.006515][T13345] usb 3-1: Product: syz [ 1288.049515][T13345] usb 3-1: Manufacturer: syz [ 1288.259836][T13345] usb 3-1: SerialNumber: syz [ 1288.271822][T13345] usb 3-1: config 0 descriptor?? [ 1288.292341][T16558] chnl_net:caif_netlink_parms(): no params data found [ 1288.462663][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 1288.550427][T13345] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1290.270699][T16558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.385732][T16558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.395722][T16558] device bridge_slave_0 entered promiscuous mode [ 1290.602684][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 1290.661615][T16558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.692701][T16558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.701310][T16558] device bridge_slave_1 entered promiscuous mode [ 1290.820077][T16558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1290.841025][T16558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1290.847932][T13345] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1290.909565][T13345] usb 3-1: USB disconnect, device number 76 [ 1291.017911][ T9] bridge0: port 3(gretap0) entered disabled state [ 1291.067276][ T9] device gretap0 left promiscuous mode [ 1291.081266][ T9] bridge0: port 3(gretap0) entered disabled state [ 1291.909474][T16558] team0: Port device team_slave_0 added [ 1292.210085][T16558] team0: Port device team_slave_1 added [ 1292.223792][ T7] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1292.538520][ T7] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 1292.600781][ T7] usb 5-1: config 0 has no interface number 0 [ 1292.772618][ T7] usb 5-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1292.812891][ T7] usb 5-1: config 0 interface 110 has no altsetting 0 [ 1293.564779][ T7] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1293.575854][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.583946][ T7] usb 5-1: Product: syz [ 1293.588830][ T7] usb 5-1: Manufacturer: syz [ 1293.593538][ T7] usb 5-1: SerialNumber: syz [ 1293.600103][ T7] usb 5-1: config 0 descriptor?? [ 1293.608175][T16634] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1293.857077][T16558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.874160][T16558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.470498][T16558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.543714][T16558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.550854][T16558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.725499][T16558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.098816][ T7] cdc_subset: probe of 5-1:0.110 failed with error -71 [ 1295.134379][ T7] usb 5-1: USB disconnect, device number 71 [ 1295.186955][T16558] device hsr_slave_0 entered promiscuous mode [ 1295.228661][T16558] device hsr_slave_1 entered promiscuous mode [ 1295.309053][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3296'. [ 1296.702624][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 1296.926804][T16558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1296.961721][T16558] Cannot create hsr debugfs directory [ 1297.176068][ T9] device hsr_slave_0 left promiscuous mode [ 1297.221528][ T9] device hsr_slave_1 left promiscuous mode [ 1297.599719][ T4276] Bluetooth: hci0: Unknown advertising packet type: 0xffff [ 1297.599766][ T4276] Bluetooth: hci0: adv larger than maximum supported [ 1297.607377][ T4276] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1299.147902][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.233267][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1299.244613][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1299.252130][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1299.260494][ T9] device bridge_slave_1 left promiscuous mode [ 1299.267164][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.284196][ T9] device bridge_slave_0 left promiscuous mode [ 1299.322318][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.272849][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.279202][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.540463][ T9] device veth1_macvtap left promiscuous mode [ 1300.561848][ T9] device veth0_macvtap left promiscuous mode [ 1300.576896][ T9] device veth1_vlan left promiscuous mode [ 1300.586248][ T9] device veth0_vlan left promiscuous mode [ 1302.572503][ T4313] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1302.770541][ T4313] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1302.781046][ T4313] usb 3-1: config 0 has no interface number 0 [ 1302.789421][ T4313] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1302.805466][ T4313] usb 3-1: config 0 interface 110 has no altsetting 0 [ 1302.830809][ T4313] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1302.841846][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.861649][ T4313] usb 3-1: Product: syz [ 1302.868897][ T4313] usb 3-1: Manufacturer: syz [ 1302.880289][ T4313] usb 3-1: SerialNumber: syz [ 1302.901610][ T4313] usb 3-1: config 0 descriptor?? [ 1302.908731][T16713] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1303.017311][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1303.066361][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1303.654693][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1303.735707][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1304.149356][ T4313] cdc_subset: probe of 3-1:0.110 failed with error -71 [ 1304.176553][ T4313] usb 3-1: USB disconnect, device number 77 [ 1304.817382][ T9] bond0 (unregistering): Released all slaves [ 1307.421205][T16734] loop5: detected capacity change from 0 to 64 [ 1308.852867][ T22] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 1309.054204][ T22] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 1309.081096][ T22] usb 5-1: config 0 has no interface number 0 [ 1309.117323][ T22] usb 5-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1309.140817][ T22] usb 5-1: config 0 interface 110 has no altsetting 0 [ 1309.160782][ T22] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1309.170142][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.178848][ T22] usb 5-1: Product: syz [ 1309.183622][ T22] usb 5-1: Manufacturer: syz [ 1309.188385][ T22] usb 5-1: SerialNumber: syz [ 1309.257539][ T22] usb 5-1: config 0 descriptor?? [ 1309.286890][T16745] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1309.554062][T14697] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 1309.645414][T16558] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1309.773667][T16558] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1309.782865][T14697] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1309.830223][T16558] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1309.837283][T14697] usb 1-1: config 0 has no interface number 0 [ 1309.849692][T16558] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1309.889652][T14697] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1309.962750][T14697] usb 1-1: config 0 interface 110 has no altsetting 0 [ 1310.004296][T14697] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1310.047921][T14697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.072332][T14697] usb 1-1: Product: syz [ 1310.096867][T14697] usb 1-1: Manufacturer: syz [ 1310.107367][T14697] usb 1-1: SerialNumber: syz [ 1310.123285][T16558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1310.162795][T14697] usb 1-1: config 0 descriptor?? [ 1310.181349][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1310.194202][T16760] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1310.219528][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1310.258140][T16558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1310.305717][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1310.327039][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1310.365673][T15520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.372945][T15520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1310.380726][ T22] cdc_subset: probe of 5-1:0.110 failed with error -71 [ 1311.023418][ T22] usb 5-1: USB disconnect, device number 72 [ 1311.085083][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1311.105018][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1311.137188][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1311.177907][T15520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.185142][T15520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1311.246469][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1311.436042][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1311.581526][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1311.615764][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1311.656538][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1311.729322][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1311.766025][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1311.776429][T14697] cdc_subset: probe of 1-1:0.110 failed with error -71 [ 1311.804801][T14697] usb 1-1: USB disconnect, device number 89 [ 1311.877337][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1311.920361][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1311.943831][T16558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1311.955786][T16558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1311.968698][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1311.977653][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1315.101150][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3326'. [ 1315.111335][T16815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3326'. [ 1315.120753][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3326'. [ 1315.129745][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3326'. [ 1316.157411][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1316.172802][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1316.185887][T16558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1316.372549][T13345] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1316.377971][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1316.391679][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1316.887803][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1317.019388][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1317.109614][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1317.117723][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1317.266831][T16558] device veth0_vlan entered promiscuous mode [ 1317.289055][T16838] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3332'. [ 1317.325346][T13345] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 1317.484522][T13345] usb 5-1: config 0 has no interface number 0 [ 1317.579148][T13345] usb 5-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1317.588737][T16558] device veth1_vlan entered promiscuous mode [ 1317.721341][T13345] usb 5-1: config 0 interface 110 has no altsetting 0 [ 1317.792066][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1317.809854][T13345] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1317.833213][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1317.866721][T13345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.876935][T16558] device veth0_macvtap entered promiscuous mode [ 1317.890634][T13345] usb 5-1: Product: syz [ 1317.917253][T13345] usb 5-1: Manufacturer: syz [ 1317.920185][T16558] device veth1_macvtap entered promiscuous mode [ 1317.922001][T13345] usb 5-1: SerialNumber: syz [ 1318.002140][T13345] usb 5-1: config 0 descriptor?? [ 1318.024926][T16820] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1318.082661][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1318.149330][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.182936][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1318.224741][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.245373][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1318.256175][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.276222][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1318.327132][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.391618][T16849] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3334'. [ 1318.813086][T16558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1318.825447][T12100] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1319.083484][T12100] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1319.099353][T16850] netlink: 'syz.2.3334': attribute type 11 has an invalid length. [ 1319.288707][T12100] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1319.306759][T12100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1320.773503][T13345] cdc_subset: probe of 5-1:0.110 failed with error -71 [ 1320.781430][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.812976][T13345] usb 5-1: USB disconnect, device number 73 [ 1320.838221][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.890113][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.915705][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.962606][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.975627][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.987958][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.000812][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.573120][T16558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1321.623141][T16871] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3338'. [ 1321.640238][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1321.659896][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1321.726729][T16558] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.002899][T16558] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.192808][T16558] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.281068][T16558] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.337719][T16881] loop5: detected capacity change from 0 to 64 [ 1322.546623][ T8309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.589208][ T8309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.648785][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1322.720132][T11788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.755271][T11788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.810888][T11788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1324.302712][ T4313] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1324.498674][ T4313] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 1324.510401][ T4313] usb 5-1: config 0 has no interface number 0 [ 1324.520474][ T4313] usb 5-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1324.536622][ T4313] usb 5-1: config 0 interface 110 has no altsetting 0 [ 1324.814321][ T4313] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1325.050522][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.127113][ T4313] usb 5-1: Product: syz [ 1325.137237][ T4313] usb 5-1: Manufacturer: syz [ 1325.157484][ T4313] usb 5-1: SerialNumber: syz [ 1325.185996][ T4313] usb 5-1: config 0 descriptor?? [ 1325.206227][T16914] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1325.512851][ T4322] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 1325.773218][ T4322] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1325.783075][ T4322] usb 1-1: config 0 has no interface number 0 [ 1325.789411][ T4322] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1325.805175][ T4322] usb 1-1: config 0 interface 110 has no altsetting 0 [ 1325.823747][ T4322] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1325.832994][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.841176][ T4322] usb 1-1: Product: syz [ 1325.846052][ T4322] usb 1-1: Manufacturer: syz [ 1325.852247][ T4322] usb 1-1: SerialNumber: syz [ 1325.871238][ T4322] usb 1-1: config 0 descriptor?? [ 1325.881211][T16921] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1326.702581][ T4313] cdc_subset: probe of 5-1:0.110 failed with error -71 [ 1326.772596][ T4313] usb 5-1: USB disconnect, device number 74 [ 1328.049420][T16945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3356'. [ 1328.156163][T16953] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3357'. [ 1328.187527][ T4322] cdc_subset: probe of 1-1:0.110 failed with error -71 [ 1328.226195][ T4322] usb 1-1: USB disconnect, device number 90 [ 1328.311157][T16953] netlink: 'syz.5.3357': attribute type 11 has an invalid length. [ 1330.296772][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3361'. [ 1330.306167][T16976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3361'. [ 1330.315374][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3361'. [ 1330.324449][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3361'. [ 1331.281586][ T4276] Bluetooth: hci1: Unknown advertising packet type: 0xffff [ 1331.281704][ T4276] Bluetooth: hci1: adv larger than maximum supported [ 1331.291086][ T4276] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1331.306777][T13345] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1331.342699][ T4313] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1331.502732][ T129] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1331.526853][T13345] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1331.548816][ T4313] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 1331.587292][ T4313] usb 4-1: config 0 has no interface number 0 [ 1331.613428][T13345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.667624][ T4313] usb 4-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1331.707903][T13345] usb 5-1: Product: syz [ 1331.766344][ T129] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1331.780435][T13345] usb 5-1: Manufacturer: syz [ 1331.822252][ T4313] usb 4-1: config 0 interface 110 has no altsetting 0 [ 1331.835848][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.854357][T13345] usb 5-1: SerialNumber: syz [ 1331.925877][ T4313] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1331.944904][ T129] usb 3-1: Product: syz [ 1331.996266][T13345] usb 5-1: config 0 descriptor?? [ 1332.030452][ T129] usb 3-1: Manufacturer: syz [ 1332.081937][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.102360][ T129] usb 3-1: SerialNumber: syz [ 1332.239505][ T4313] usb 4-1: Product: syz [ 1332.282796][T13345] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1332.296705][ T129] usb 3-1: config 0 descriptor?? [ 1332.345070][ T4313] usb 4-1: Manufacturer: syz [ 1332.622529][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 1332.797866][ T4313] usb 4-1: SerialNumber: syz [ 1332.960745][T13345] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1333.055095][ T4313] usb 4-1: config 0 descriptor?? [ 1333.282740][T16979] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1333.478301][ T129] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1335.060802][ T4314] usb 5-1: USB disconnect, device number 75 [ 1335.410574][ T129] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1335.725309][ T129] usb 3-1: USB disconnect, device number 78 [ 1335.991353][ T4313] cdc_subset: probe of 4-1:0.110 failed with error -71 [ 1336.053142][ T4313] usb 4-1: USB disconnect, device number 74 [ 1336.286969][T17007] loop5: detected capacity change from 0 to 1024 [ 1341.161825][T17039] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3377'. [ 1341.524456][T17039] netlink: 'syz.0.3377': attribute type 11 has an invalid length. [ 1341.884837][T12100] hfsplus: b-tree write err: -5, ino 4 [ 1341.892610][ T4313] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 1342.834305][ T4313] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1342.959912][ T4313] usb 3-1: config 0 has no interface number 0 [ 1343.774890][ T4313] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1343.792569][ T4313] usb 3-1: config 0 interface 110 has no altsetting 0 [ 1343.809331][ T4313] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1343.849275][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.868669][ T4313] usb 3-1: Product: syz [ 1343.903033][ T4313] usb 3-1: Manufacturer: syz [ 1343.919139][ T4313] usb 3-1: SerialNumber: syz [ 1343.974288][ T4313] usb 3-1: config 0 descriptor?? [ 1343.997868][T17052] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1345.464236][ T4313] cdc_subset: probe of 3-1:0.110 failed with error -71 [ 1346.213528][ T9857] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1346.226646][ T4313] usb 3-1: USB disconnect, device number 79 [ 1346.576714][ T9857] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1347.025401][T17109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3392'. [ 1347.034601][T17109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3392'. [ 1347.043653][T17109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3392'. [ 1347.052594][T17109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3392'. [ 1347.123358][ T9857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.202948][ T9857] usb 4-1: Product: syz [ 1347.207256][ T9857] usb 4-1: Manufacturer: syz [ 1347.332053][ T9857] usb 4-1: SerialNumber: syz [ 1347.349078][ T9857] usb 4-1: config 0 descriptor?? [ 1347.569538][ T9857] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1349.837764][ T9857] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -110 [ 1349.881212][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3394'. [ 1349.942776][ T9857] usb 4-1: USB disconnect, device number 75 [ 1351.590785][T17157] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3400'. [ 1351.983945][T14698] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1352.668235][T14698] usb 6-1: config 0 has an invalid interface number: 110 but max is 0 [ 1353.436383][T17157] netlink: 'syz.3.3400': attribute type 11 has an invalid length. [ 1353.449288][T14698] usb 6-1: config 0 has no interface number 0 [ 1353.492867][T14698] usb 6-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1353.519217][T14698] usb 6-1: config 0 interface 110 has no altsetting 0 [ 1353.560541][T14698] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1353.571593][T14698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.590827][T14698] usb 6-1: Product: syz [ 1353.626871][T14698] usb 6-1: Manufacturer: syz [ 1353.638654][T14698] usb 6-1: SerialNumber: syz [ 1353.768032][T14698] usb 6-1: config 0 descriptor?? [ 1353.797269][T17153] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1356.508787][T14698] cdc_subset: probe of 6-1:0.110 failed with error -71 [ 1356.563453][T14698] usb 6-1: USB disconnect, device number 2 [ 1356.825565][ T4314] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1357.294860][ T4314] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1357.372489][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.529026][T17191] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3410'. [ 1357.948416][ T4314] usb 5-1: Product: syz [ 1357.958046][ T4314] usb 5-1: Manufacturer: syz [ 1357.963948][ T4314] usb 5-1: SerialNumber: syz [ 1357.982761][ T4314] usb 5-1: config 0 descriptor?? [ 1358.022602][ T4314] usb 5-1: can't set config #0, error -71 [ 1358.063124][ T4314] usb 5-1: USB disconnect, device number 76 [ 1358.482376][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3411'. [ 1358.491520][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3411'. [ 1358.500708][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3411'. [ 1358.509678][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3411'. [ 1358.552669][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 1359.002068][T17203] loop5: detected capacity change from 0 to 512 [ 1359.031834][T17203] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1359.069198][T17203] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1359.243302][T17203] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.3414: bad orphan inode 131083 [ 1359.687241][T17203] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1361.070910][T16071] EXT4-fs (loop5): unmounting filesystem. [ 1361.186473][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.192888][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.722657][ T4322] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1361.927080][ T4322] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1361.942682][ T4322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.956736][ T4322] usb 6-1: Product: syz [ 1361.964955][ T4322] usb 6-1: Manufacturer: syz [ 1361.969976][ T4322] usb 6-1: SerialNumber: syz [ 1361.977548][ T4322] usb 6-1: config 0 descriptor?? [ 1362.221538][ T4322] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1365.221685][ T4322] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 1365.857266][ T4322] usb 6-1: USB disconnect, device number 3 [ 1366.141933][T17274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3431'. [ 1373.712560][T14700] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1374.755812][T14700] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1374.766465][T14700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.775097][T14700] usb 3-1: Product: syz [ 1374.779404][T14700] usb 3-1: Manufacturer: syz [ 1374.789897][T14700] usb 3-1: SerialNumber: syz [ 1374.807431][T14700] usb 3-1: config 0 descriptor?? [ 1374.879145][T17337] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3447'. [ 1375.019851][T14700] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1375.094491][T17347] loop5: detected capacity change from 0 to 64 [ 1376.921150][T14700] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1377.384645][T14700] usb 3-1: USB disconnect, device number 80 [ 1379.528051][T17388] netlink: 2064 bytes leftover after parsing attributes in process `syz.3.3458'. [ 1383.602850][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3468'. [ 1387.702986][ T4395] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1389.174136][ T4395] usb 3-1: unable to read config index 0 descriptor/all [ 1389.181272][ T4395] usb 3-1: can't read configurations, error -71 [ 1392.438147][T17492] fuse: Bad value for 'fd' [ 1393.312171][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3488'. [ 1393.321403][T17508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3488'. [ 1393.330564][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3488'. [ 1393.339576][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3488'. [ 1396.379578][ T4275] Bluetooth: hci1: Unknown advertising packet type: 0xffff [ 1396.379617][ T4275] Bluetooth: hci1: adv larger than maximum supported [ 1396.387436][ T4275] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1398.772807][T13352] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1398.986593][T13352] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1399.012502][T13352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.020951][T13352] usb 3-1: Product: syz [ 1399.062541][T13352] usb 3-1: Manufacturer: syz [ 1399.067292][T13352] usb 3-1: SerialNumber: syz [ 1399.101168][T13352] usb 3-1: config 0 descriptor?? [ 1399.352020][T13352] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1401.605125][T13352] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1401.850641][T13352] usb 3-1: USB disconnect, device number 83 [ 1403.727962][T17599] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3509'. [ 1404.572878][T17599] netlink: 'syz.5.3509': attribute type 11 has an invalid length. [ 1408.708209][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3523'. [ 1408.717633][T17658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3523'. [ 1408.726731][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3523'. [ 1408.735712][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3523'. [ 1408.832242][ T4275] Bluetooth: hci2: Unknown advertising packet type: 0xffff [ 1408.832340][ T4275] Bluetooth: hci2: adv larger than maximum supported [ 1408.840265][ T4275] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1408.872551][T17659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3524'. [ 1409.422530][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 1411.119524][ T129] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1411.306317][T17670] loop5: detected capacity change from 0 to 1024 [ 1411.306432][ T129] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1411.328174][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.349549][ T129] usb 1-1: Product: syz [ 1411.371215][ T129] usb 1-1: Manufacturer: syz [ 1411.386458][T17670] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1411.932720][ T129] usb 1-1: SerialNumber: syz [ 1412.026293][ T129] usb 1-1: config 0 descriptor?? [ 1412.200622][T16071] EXT4-fs (loop5): unmounting filesystem. [ 1412.364400][ T129] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1413.598350][T17693] loop5: detected capacity change from 0 to 128 [ 1414.561411][ T129] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 1414.721110][ T129] usb 1-1: USB disconnect, device number 91 [ 1420.372574][T14697] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1420.598233][T14697] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1420.668459][T14697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.684132][T14697] usb 6-1: Product: syz [ 1420.691759][T14697] usb 6-1: Manufacturer: syz [ 1420.708592][T14697] usb 6-1: SerialNumber: syz [ 1420.776501][T14697] usb 6-1: config 0 descriptor?? [ 1420.988874][T14697] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1421.341889][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3549'. [ 1421.351147][T17745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3549'. [ 1421.360298][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3549'. [ 1421.369308][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3549'. [ 1422.643489][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.652624][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.246199][T14697] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 1423.497518][ T129] usb 6-1: USB disconnect, device number 4 [ 1424.998840][T17775] loop5: detected capacity change from 0 to 64 [ 1428.755390][ T4322] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1429.227451][ T4322] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1429.243782][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.265367][ T4322] usb 5-1: Product: syz [ 1429.269999][ T4322] usb 5-1: Manufacturer: syz [ 1429.279505][ T4322] usb 5-1: SerialNumber: syz [ 1429.291247][ T4322] usb 5-1: config 0 descriptor?? [ 1429.513140][ T4322] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1430.539977][ T4322] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1431.415781][ T4275] Bluetooth: hci0: Unknown advertising packet type: 0xffff [ 1431.415850][ T4275] Bluetooth: hci0: adv larger than maximum supported [ 1431.424303][ T4275] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1433.008128][T17845] usb 5-1: USB disconnect, device number 77 [ 1437.343401][T17845] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1438.178085][T17845] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1438.190888][T17845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.200096][T17845] usb 5-1: Product: syz [ 1438.204852][T17845] usb 5-1: Manufacturer: syz [ 1438.209493][T17845] usb 5-1: SerialNumber: syz [ 1438.222715][T17845] usb 5-1: config 0 descriptor?? [ 1439.315168][T17845] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 1439.325005][T17845] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -110 [ 1440.946438][T17911] loop5: detected capacity change from 0 to 1024 [ 1441.945259][ T4395] usb 5-1: USB disconnect, device number 78 [ 1447.550752][ T9] hfsplus: b-tree write err: -5, ino 4 [ 1449.300310][T17988] netlink: 2064 bytes leftover after parsing attributes in process `syz.2.3614'. [ 1450.616725][T18009] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3619'. [ 1450.880013][ T4275] Bluetooth: hci4: Unknown advertising packet type: 0xffff [ 1450.880112][ T4275] Bluetooth: hci4: adv larger than maximum supported [ 1450.888460][ T4275] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1450.917964][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3620'. [ 1452.350840][T18008] netlink: 'syz.5.3619': attribute type 11 has an invalid length. [ 1456.477729][ T4275] Bluetooth: hci1: Unknown advertising packet type: 0xffff [ 1456.477786][ T4275] Bluetooth: hci1: adv larger than maximum supported [ 1456.485655][ T4275] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1456.534859][T18041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3627'. [ 1466.362621][ T9857] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1467.812999][ T9857] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 1467.832170][ T9857] usb 4-1: config 0 has no interface number 0 [ 1467.838718][ T9857] usb 4-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1467.850196][ T9857] usb 4-1: config 0 interface 110 has no altsetting 0 [ 1468.686267][ T9857] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1468.697789][ T9857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.708818][ T9857] usb 4-1: Product: syz [ 1468.714007][ T9857] usb 4-1: Manufacturer: syz [ 1468.718650][ T9857] usb 4-1: SerialNumber: syz [ 1469.004404][ T9857] usb 4-1: config 0 descriptor?? [ 1469.435038][ T9857] usb 4-1: can't set config #0, error -71 [ 1469.449628][ T9857] usb 4-1: USB disconnect, device number 76 [ 1475.717975][ T4275] Bluetooth: hci4: Unknown advertising packet type: 0xffff [ 1475.718030][ T4275] Bluetooth: hci4: adv larger than maximum supported [ 1475.726397][ T4275] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1475.767472][T18179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3666'. [ 1479.259792][T18195] netlink: 'syz.2.3670': attribute type 10 has an invalid length. [ 1479.297906][T18195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3670'. [ 1479.554548][T18195] device team0 entered promiscuous mode [ 1479.690021][T18195] device team_slave_0 entered promiscuous mode [ 1479.893603][T18195] device team_slave_1 entered promiscuous mode [ 1480.154313][T18195] bridge0: port 3(team0) entered blocking state [ 1480.191485][T18195] bridge0: port 3(team0) entered disabled state [ 1480.315822][T18195] bridge0: port 3(team0) entered blocking state [ 1480.323806][T18195] bridge0: port 3(team0) entered forwarding state [ 1484.064562][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.071684][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.972654][T18045] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1485.435487][T18045] usb 6-1: config 0 has an invalid interface number: 110 but max is 0 [ 1485.529180][T18045] usb 6-1: config 0 has no interface number 0 [ 1485.537156][T18045] usb 6-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1485.550283][T18045] usb 6-1: config 0 interface 110 has no altsetting 0 [ 1486.154003][T18045] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1486.182501][T18045] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.190575][T18045] usb 6-1: Product: syz [ 1486.204679][T18045] usb 6-1: Manufacturer: syz [ 1486.209339][T18045] usb 6-1: SerialNumber: syz [ 1486.219984][T18045] usb 6-1: config 0 descriptor?? [ 1486.226720][T18251] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1489.162602][T18045] cdc_subset: probe of 6-1:0.110 failed with error -71 [ 1489.218628][T18045] usb 6-1: USB disconnect, device number 5 [ 1490.832949][T18314] netlink: 2064 bytes leftover after parsing attributes in process `syz.2.3704'. [ 1494.329716][ T7878] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1494.536600][ T7878] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1494.556831][ T7878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.573291][ T7878] usb 4-1: Product: syz [ 1494.578560][ T7878] usb 4-1: Manufacturer: syz [ 1494.590684][ T7878] usb 4-1: SerialNumber: syz [ 1494.628510][ T7878] usb 4-1: config 0 descriptor?? [ 1494.987279][ T7878] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 1494.995577][ T7878] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1495.002496][ T129] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1495.006112][ T7878] usb 4-1: USB disconnect, device number 77 [ 1495.080855][T18349] loop5: detected capacity change from 0 to 47 [ 1495.090020][T18349] ======================================================= [ 1495.090020][T18349] WARNING: The mand mount option has been deprecated and [ 1495.090020][T18349] and is ignored by this kernel. Remove the mand [ 1495.090020][T18349] option from the mount to silence this warning. [ 1495.090020][T18349] ======================================================= [ 1495.826495][ T129] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1495.837207][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.847221][ T129] usb 5-1: Product: syz [ 1495.852569][ T129] usb 5-1: Manufacturer: syz [ 1495.861908][ T129] usb 5-1: SerialNumber: syz [ 1495.882746][ T129] usb 5-1: config 0 descriptor?? [ 1496.066069][T18358] loop5: detected capacity change from 0 to 1024 [ 1496.103203][ T129] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1499.333754][ T129] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1499.383660][ T129] usb 5-1: USB disconnect, device number 79 [ 1500.498986][T18398] loop5: detected capacity change from 0 to 512 [ 1500.577162][T18398] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1500.596860][T18398] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1500.801902][T18398] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.3727: bad orphan inode 131083 [ 1500.941029][T18398] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1501.961661][T16071] EXT4-fs (loop5): unmounting filesystem. [ 1503.352400][ T4275] Bluetooth: hci0: Unknown advertising packet type: 0xffff [ 1503.352438][ T4275] Bluetooth: hci0: adv larger than maximum supported [ 1503.359875][ T4275] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1503.391288][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3731'. [ 1506.169176][T18432] loop5: detected capacity change from 0 to 32768 [ 1506.176096][T18432] xfs: Unknown parameter 'uid' [ 1506.488113][T18252] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1515.739519][ T4275] Bluetooth: hci3: Unknown advertising packet type: 0xffff [ 1515.739627][ T4275] Bluetooth: hci3: adv larger than maximum supported [ 1515.747937][ T4275] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1515.832468][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3754'. [ 1521.268928][T18547] loop5: detected capacity change from 0 to 512 [ 1521.438897][T18547] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1521.533647][T18547] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1521.748623][T18547] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.3765: bad orphan inode 131083 [ 1521.854228][T18547] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1522.655903][T16071] EXT4-fs (loop5): unmounting filesystem. [ 1526.421545][ T4275] Bluetooth: hci1: Unknown advertising packet type: 0xffff [ 1526.421689][ T4275] Bluetooth: hci1: adv larger than maximum supported [ 1526.429466][ T4275] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1526.540483][T18602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3778'. [ 1529.635005][T18616] fuse: Bad value for 'fd' [ 1531.730040][T18633] loop5: detected capacity change from 0 to 64 [ 1534.392598][ T7] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1534.586830][ T7] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1534.600215][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.612236][ T7] usb 5-1: Product: syz [ 1534.826995][ T7] usb 5-1: Manufacturer: syz [ 1534.831681][ T7] usb 5-1: SerialNumber: syz [ 1534.838801][ T7] usb 5-1: config 0 descriptor?? [ 1535.066600][ T7] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1537.944707][ T7] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1538.007771][ T7] usb 5-1: USB disconnect, device number 80 [ 1539.985247][T18721] loop5: detected capacity change from 0 to 512 [ 1540.016296][T18721] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1540.079383][T18721] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1540.303590][T18721] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.3813: bad orphan inode 131083 [ 1540.339192][T18721] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1541.876992][T16071] EXT4-fs (loop5): unmounting filesystem. [ 1544.185914][ T4275] Bluetooth: hci2: Unknown advertising packet type: 0xffff [ 1544.185948][ T4275] Bluetooth: hci2: adv larger than maximum supported [ 1544.193385][ T4275] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1544.226693][T18761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3822'. [ 1545.504739][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.511736][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.922583][T18045] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1551.124126][T18045] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 1551.140828][T18045] usb 4-1: config 0 has no interface number 0 [ 1551.166581][T18045] usb 4-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1551.198949][T18045] usb 4-1: config 0 interface 110 has no altsetting 0 [ 1551.226820][T18045] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1551.267971][T18045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.676207][T18045] usb 4-1: Product: syz [ 1552.697571][T18045] usb 4-1: Manufacturer: syz [ 1552.714556][T18045] usb 4-1: SerialNumber: syz [ 1552.756517][T18045] usb 4-1: config 0 descriptor?? [ 1552.779392][T18805] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1552.860613][T18809] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3838'. [ 1552.883764][T18818] netlink: 2064 bytes leftover after parsing attributes in process `syz.0.3839'. [ 1554.710682][T18045] cdc_subset: probe of 4-1:0.110 failed with error -71 [ 1554.746788][T18045] usb 4-1: USB disconnect, device number 78 [ 1554.813517][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3841'. [ 1554.822577][T18830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3841'. [ 1554.832171][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3841'. [ 1554.841345][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3841'. [ 1555.744525][ C0] ================================================================== [ 1555.752661][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 1555.760170][ C0] Read of size 2 at addr ffff88807954102a by task swapper/0/0 [ 1555.767657][ C0] [ 1555.770000][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.148-syzkaller #0 [ 1555.777744][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1555.787827][ C0] Call Trace: [ 1555.791140][ C0] [ 1555.794010][ C0] dump_stack_lvl+0x168/0x22e [ 1555.798715][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 1555.803773][ C0] ? show_regs_print_info+0x12/0x12 [ 1555.809020][ C0] ? load_image+0x3b0/0x3b0 [ 1555.813507][ C0] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1555.818950][ C0] ? __virt_addr_valid+0x188/0x540 [ 1555.824128][ C0] ? __virt_addr_valid+0x465/0x540 [ 1555.829217][ C0] ? rose_timer_expiry+0x470/0x490 [ 1555.834308][ C0] print_report+0xa8/0x210 [ 1555.838705][ C0] kasan_report+0x10b/0x140 [ 1555.843186][ C0] ? rose_timer_expiry+0x470/0x490 [ 1555.848313][ C0] rose_timer_expiry+0x470/0x490 [ 1555.853234][ C0] call_timer_fn+0x1a0/0x670 [ 1555.857818][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1555.862823][ C0] ? call_timer_fn+0xc1/0x670 [ 1555.867476][ C0] ? __run_timers+0x7c0/0x7c0 [ 1555.872128][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1555.877313][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1555.882494][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1555.887527][ C0] __run_timers+0x525/0x7c0 [ 1555.892006][ C0] ? detach_timer+0x350/0x350 [ 1555.896668][ C0] ? lock_chain_count+0x20/0x20 [ 1555.901499][ C0] run_timer_softirq+0x63/0xf0 [ 1555.906247][ C0] handle_softirqs+0x2a1/0x920 [ 1555.910993][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 1555.915823][ C0] ? do_softirq+0x200/0x200 [ 1555.920322][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1555.925500][ C0] __irq_exit_rcu+0x12f/0x220 [ 1555.930157][ C0] ? irq_exit_rcu+0x20/0x20 [ 1555.934642][ C0] irq_exit_rcu+0x5/0x20 [ 1555.938875][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1555.944505][ C0] [ 1555.947415][ C0] [ 1555.950340][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1555.956306][ C0] RIP: 0010:flush_smp_call_function_queue+0x1f7/0x340 [ 1555.963051][ C0] Code: 00 4d 85 f6 75 16 e8 d8 f2 0a 00 eb 15 e8 d1 f2 0a 00 e8 5c 86 a0 08 4d 85 f6 74 ea e8 c2 f2 0a 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 66 43 c7 44 25 09 00 00 43 c6 44 25 0b [ 1555.982655][ C0] RSP: 0018:ffffffff8c807ce0 EFLAGS: 00000293 [ 1555.988702][ C0] RAX: ffffffff8175cb9e RBX: 0000000000000000 RCX: ffffffff8c8bc680 [ 1555.996656][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1556.004618][ C0] RBP: ffffffff8c807d90 R08: dffffc0000000000 R09: fffff52000944f6e [ 1556.012594][ C0] R10: fffff52000944f6e R11: 1ffff92000944f6d R12: dffffc0000000000 [ 1556.020587][ C0] R13: 1ffffffff1900f9c R14: 0000000000000200 R15: 1ffffffff1c3ead6 [ 1556.028547][ C0] ? flush_smp_call_function_queue+0x1ee/0x340 [ 1556.034707][ C0] ? generic_smp_call_function_single_interrupt+0x120/0x120 [ 1556.041980][ C0] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 1556.048027][ C0] ? tick_nohz_idle_stop_tick+0x31c/0xa80 [ 1556.053725][ C0] ? default_idle_call+0xb2/0xc0 [ 1556.058644][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1556.063823][ C0] do_idle+0x520/0x570 [ 1556.067876][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1556.073054][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1556.078240][ C0] ? do_idle+0x11/0x570 [ 1556.082377][ C0] ? schedule_idle+0x57/0x90 [ 1556.086959][ C0] cpu_startup_entry+0x3f/0x60 [ 1556.091747][ C0] rest_init+0x2dc/0x300 [ 1556.096002][ C0] ? time_init+0x33/0x33 [ 1556.100245][ C0] arch_call_rest_init+0xa/0xa [ 1556.105020][ C0] start_kernel+0x490/0x539 [ 1556.109509][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 1556.115441][ C0] [ 1556.118457][ C0] [ 1556.120762][ C0] Allocated by task 16314: [ 1556.125247][ C0] kasan_set_track+0x4b/0x70 [ 1556.129828][ C0] __kasan_kmalloc+0x8e/0xa0 [ 1556.134411][ C0] rose_add_node+0x227/0xdb0 [ 1556.138995][ C0] rose_rt_ioctl+0xa4c/0xe90 [ 1556.143603][ C0] rose_ioctl+0x27a/0x790 [ 1556.147945][ C0] sock_do_ioctl+0xd3/0x2f0 [ 1556.152675][ C0] sock_ioctl+0x4ed/0x6e0 [ 1556.156991][ C0] __se_sys_ioctl+0xfa/0x170 [ 1556.161562][ C0] do_syscall_64+0x4c/0xa0 [ 1556.165970][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1556.171847][ C0] [ 1556.174149][ C0] Freed by task 18822: [ 1556.178277][ C0] kasan_set_track+0x4b/0x70 [ 1556.182861][ C0] kasan_save_free_info+0x2d/0x50 [ 1556.187877][ C0] ____kasan_slab_free+0x126/0x1e0 [ 1556.192971][ C0] slab_free_freelist_hook+0x131/0x1a0 [ 1556.198408][ C0] __kmem_cache_free+0xb6/0x1f0 [ 1556.203255][ C0] rose_rt_device_down+0x4e2/0x530 [ 1556.208346][ C0] rose_device_event+0x600/0x690 [ 1556.213267][ C0] raw_notifier_call_chain+0xcb/0x160 [ 1556.218723][ C0] __dev_notify_flags+0x178/0x2d0 [ 1556.223744][ C0] dev_change_flags+0xe3/0x1a0 [ 1556.228573][ C0] dev_ifsioc+0x159/0xe90 [ 1556.232887][ C0] dev_ioctl+0x578/0xea0 [ 1556.237113][ C0] sock_do_ioctl+0x222/0x2f0 [ 1556.241688][ C0] sock_ioctl+0x4ed/0x6e0 [ 1556.246007][ C0] __se_sys_ioctl+0xfa/0x170 [ 1556.250592][ C0] do_syscall_64+0x4c/0xa0 [ 1556.255016][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1556.260892][ C0] [ 1556.263291][ C0] The buggy address belongs to the object at ffff888079541000 [ 1556.263291][ C0] which belongs to the cache kmalloc-512 of size 512 [ 1556.277322][ C0] The buggy address is located 42 bytes inside of [ 1556.277322][ C0] 512-byte region [ffff888079541000, ffff888079541200) [ 1556.290502][ C0] [ 1556.292805][ C0] The buggy address belongs to the physical page: [ 1556.299206][ C0] page:ffffea0001e55000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79540 [ 1556.309340][ C0] head:ffffea0001e55000 order:2 compound_mapcount:0 compound_pincount:0 [ 1556.317640][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1556.325597][ C0] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441c80 [ 1556.334158][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1556.342837][ C0] page dumped because: kasan: bad access detected [ 1556.349238][ C0] page_owner tracks the page as allocated [ 1556.354946][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 16278, tgid 16275 (syz.3.3212), ts 1257850412642, free_ts 1195792359090 [ 1556.377512][ C0] post_alloc_hook+0x173/0x1a0 [ 1556.382278][ C0] get_page_from_freelist+0x1a26/0x1ac0 [ 1556.387827][ C0] __alloc_pages+0x1df/0x4e0 [ 1556.392411][ C0] alloc_slab_page+0x5d/0x160 [ 1556.397090][ C0] new_slab+0x87/0x2c0 [ 1556.401137][ C0] ___slab_alloc+0xbc6/0x1220 [ 1556.405793][ C0] __kmem_cache_alloc_node+0x1a0/0x260 [ 1556.411333][ C0] __kmalloc_node_track_caller+0x9e/0x230 [ 1556.417035][ C0] __alloc_skb+0x22a/0x7e0 [ 1556.421450][ C0] fdb_notify+0xa6/0x160 [ 1556.425671][ C0] fdb_add_local+0x155/0x250 [ 1556.430259][ C0] br_fdb_add_local+0x36/0x50 [ 1556.434936][ C0] __vlan_add+0x585/0x26e0 [ 1556.439336][ C0] nbp_vlan_add+0x25e/0x3b0 [ 1556.443816][ C0] br_vlan_info+0xf7/0x450 [ 1556.448209][ C0] br_process_vlan_info+0x545/0x7f0 [ 1556.453473][ C0] page last free stack trace: [ 1556.458132][ C0] free_unref_page_prepare+0x8b4/0x9a0 [ 1556.463572][ C0] free_unref_page+0x2e/0x3f0 [ 1556.468241][ C0] qlist_free_all+0x76/0xe0 [ 1556.472738][ C0] kasan_quarantine_reduce+0x144/0x160 [ 1556.478174][ C0] __kasan_slab_alloc+0x1e/0x80 [ 1556.483011][ C0] slab_post_alloc_hook+0x4b/0x480 [ 1556.488094][ C0] kmem_cache_alloc+0x123/0x2f0 [ 1556.492943][ C0] ptlock_alloc+0x1c/0x60 [ 1556.497260][ C0] pte_alloc_one+0xc5/0x2f0 [ 1556.501742][ C0] handle_mm_fault+0x280a/0x3e70 [ 1556.506671][ C0] __get_user_pages+0x3ff/0xeb0 [ 1556.511500][ C0] populate_vma_page_range+0x214/0x2b0 [ 1556.516933][ C0] __mm_populate+0x248/0x370 [ 1556.521512][ C0] vm_mmap_pgoff+0x203/0x2b0 [ 1556.526106][ C0] do_syscall_64+0x4c/0xa0 [ 1556.530522][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1556.536397][ C0] [ 1556.538696][ C0] Memory state around the buggy address: [ 1556.544301][ C0] ffff888079540f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1556.552351][ C0] ffff888079540f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1556.560391][ C0] >ffff888079541000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1556.568530][ C0] ^ [ 1556.573976][ C0] ffff888079541080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1556.582016][ C0] ffff888079541100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1556.590061][ C0] ================================================================== [ 1556.598293][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1556.605479][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.148-syzkaller #0 [ 1556.613263][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1556.623312][ C0] Call Trace: [ 1556.626587][ C0] [ 1556.629415][ C0] dump_stack_lvl+0x168/0x22e [ 1556.634088][ C0] ? memcpy+0x3c/0x60 [ 1556.638076][ C0] ? show_regs_print_info+0x12/0x12 [ 1556.643274][ C0] ? load_image+0x3b0/0x3b0 [ 1556.647795][ C0] panic+0x2c9/0x710 [ 1556.651699][ C0] ? asm_sysvec_call_function_single+0x16/0x20 [ 1556.657893][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1556.662390][ C0] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 1556.668271][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1556.674148][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1556.678991][ C0] check_panic_on_warn+0x80/0xa0 [ 1556.683922][ C0] ? rose_timer_expiry+0x470/0x490 [ 1556.689028][ C0] end_report+0x66/0x110 [ 1556.693257][ C0] kasan_report+0x118/0x140 [ 1556.697742][ C0] ? rose_timer_expiry+0x470/0x490 [ 1556.702843][ C0] rose_timer_expiry+0x470/0x490 [ 1556.707773][ C0] call_timer_fn+0x1a0/0x670 [ 1556.712346][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1556.717391][ C0] ? call_timer_fn+0xc1/0x670 [ 1556.722064][ C0] ? __run_timers+0x7c0/0x7c0 [ 1556.726735][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1556.731911][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1556.737091][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1556.742268][ C0] __run_timers+0x525/0x7c0 [ 1556.746750][ C0] ? detach_timer+0x350/0x350 [ 1556.751406][ C0] ? lock_chain_count+0x20/0x20 [ 1556.756269][ C0] run_timer_softirq+0x63/0xf0 [ 1556.761011][ C0] handle_softirqs+0x2a1/0x920 [ 1556.765755][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 1556.770600][ C0] ? do_softirq+0x200/0x200 [ 1556.775083][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1556.780280][ C0] __irq_exit_rcu+0x12f/0x220 [ 1556.784944][ C0] ? irq_exit_rcu+0x20/0x20 [ 1556.789435][ C0] irq_exit_rcu+0x5/0x20 [ 1556.793656][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1556.799283][ C0] [ 1556.802399][ C0] [ 1556.805318][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1556.811376][ C0] RIP: 0010:flush_smp_call_function_queue+0x1f7/0x340 [ 1556.818128][ C0] Code: 00 4d 85 f6 75 16 e8 d8 f2 0a 00 eb 15 e8 d1 f2 0a 00 e8 5c 86 a0 08 4d 85 f6 74 ea e8 c2 f2 0a 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 66 43 c7 44 25 09 00 00 43 c6 44 25 0b [ 1556.837731][ C0] RSP: 0018:ffffffff8c807ce0 EFLAGS: 00000293 [ 1556.843791][ C0] RAX: ffffffff8175cb9e RBX: 0000000000000000 RCX: ffffffff8c8bc680 [ 1556.851742][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1556.859693][ C0] RBP: ffffffff8c807d90 R08: dffffc0000000000 R09: fffff52000944f6e [ 1556.867732][ C0] R10: fffff52000944f6e R11: 1ffff92000944f6d R12: dffffc0000000000 [ 1556.875686][ C0] R13: 1ffffffff1900f9c R14: 0000000000000200 R15: 1ffffffff1c3ead6 [ 1556.883645][ C0] ? flush_smp_call_function_queue+0x1ee/0x340 [ 1556.889881][ C0] ? generic_smp_call_function_single_interrupt+0x120/0x120 [ 1556.897142][ C0] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 1556.903187][ C0] ? tick_nohz_idle_stop_tick+0x31c/0xa80 [ 1556.908890][ C0] ? default_idle_call+0xb2/0xc0 [ 1556.913805][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1556.918987][ C0] do_idle+0x520/0x570 [ 1556.923039][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1556.928234][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1556.933436][ C0] ? do_idle+0x11/0x570 [ 1556.938016][ C0] ? schedule_idle+0x57/0x90 [ 1556.942592][ C0] cpu_startup_entry+0x3f/0x60 [ 1556.947343][ C0] rest_init+0x2dc/0x300 [ 1556.951564][ C0] ? time_init+0x33/0x33 [ 1556.955789][ C0] arch_call_rest_init+0xa/0xa [ 1556.960531][ C0] start_kernel+0x490/0x539 [ 1556.965010][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 1556.970966][ C0] [ 1556.974216][ C0] Kernel Offset: disabled [ 1556.978621][ C0] Rebooting in 86400 seconds..