last executing test programs: 7m33.814717291s ago: executing program 4 (id=1770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, 0x0, &(0x7f0000000140)) 7m31.375025391s ago: executing program 4 (id=1773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, 0x0, &(0x7f0000000140)) 7m25.916666313s ago: executing program 4 (id=1775): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000001c0)='%(\x1f\xf3PI\x02n\x16u{4\x9e+\xfd\xd9\xb2\xae\x1d\xbb\x16\xca[', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='$\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000100)='\\\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='reiserfs\x00', &(0x7f00000003c0)='\\\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x8000003, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 7m17.190285516s ago: executing program 4 (id=1785): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xe, &(0x7f0000000300)={[{@dioread_nolock}, {@dioread_nolock}, {@nouser_xattr}, {@test_dummy_encryption}, {@grpjquota_path={'grpjquota', 0x3d, './file0/../file0'}}, {@nobh}]}, 0x3, 0x446, &(0x7f0000000480)="$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") preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r4, r3, 0x0, 0x80000000) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) 7m14.291772932s ago: executing program 4 (id=1787): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000008d6d3bde7f1b", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006100c0ff00000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfc, &(0x7f00000009c0)=""/252, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) brk(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='noac']) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2066}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x2000000000}) r5 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r6 = dup(r5) fanotify_mark(r1, 0x0, 0x48001059, r6, 0x0) sendfile(r5, r6, 0x0, 0x80000000) 7m10.321301067s ago: executing program 4 (id=1793): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000780)="cb"}) 6m57.261835737s ago: executing program 1 (id=1807): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x10) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="16010000000000407f0458c0000000000001090224000100000000090400000103000000092100000001220700090581034000000000"], 0x0) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x69, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) process_vm_readv(r1, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYBLOB]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005500)=[{0x0, 0x1c}], 0x1}, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0xc2242, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f000086fff4)) r6 = getpid() r7 = getpid() kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r2, &(0x7f00000000c0)={r5, r4}) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) 3m46.592796597s ago: executing program 1 (id=1817): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x68}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/251, 0xfb}], 0x1, &(0x7f0000000340)=[{&(0x7f0000217f28)=""/217, 0xd9}], 0x1, 0x0) r3 = memfd_secret(0x0) ftruncate(r3, 0x5) finit_module(r3, 0x0, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8005, &(0x7f0000000000)=0x3f, 0x9, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1400000035000b63d25a80643d66b7d804f2e2ff", 0x14}], 0x1}, 0x0) 3m45.97597872s ago: executing program 1 (id=1986): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000001080)={0x8, 0x90000c9}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={0x0}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 3m44.706503642s ago: executing program 1 (id=1987): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r1}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0x14}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3m42.302814695s ago: executing program 1 (id=1989): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./bus\x00', 0x201080b, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRES8], 0x21, 0x1d6, &(0x7f0000000580)="$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") 22.282969095s ago: executing program 5 (id=2194): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6(0xa, 0x4, 0x800) mkdir(&(0x7f00000004c0)='./bus\x00', 0x5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x400, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x1b3f, &(0x7f0000000300), &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000380)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) syz_io_uring_setup(0x4169, 0x0, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r4 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0x3) 11.367338568s ago: executing program 5 (id=2206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r1, 0x0, 0x0, 0x28004814, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)={0x0, 0x300}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)="49744e0e2dca72939889e0b0c77ed94de9e4b0443d96af7fcc72df6e", 0x1c}, {&(0x7f00000002c0)="5a704cd37ebd8b17bbe0aa3a51739153ca32117c", 0x14}, {&(0x7f0000000a80)="7963ffdcdfc6a1f009d0c0ba9891e2d601", 0x11}], 0x3}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a012f217fdf000000000002000000300004802c0001807465000000180002800c00028008000200081ccb3f08000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TCSETS2(r8, 0x402c542b, &(0x7f00000000c0)={0xb37, 0x7fffffff, 0x9, 0x4, 0x5, "43e54a0e9a088e90ec1df85d04820fe6068323", 0x8, 0xaa}) 11.135864935s ago: executing program 0 (id=2195): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bond0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0xffff, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x1000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) socket(0x15, 0x5, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x28) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 8.894621933s ago: executing program 3 (id=2198): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000300), &(0x7f0000001480)={'syz', 0x2}, &(0x7f00000014c0), 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x94c7, 0x2, 0x0, 0x0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x1000000003}, {}, 0x2040, 0x0, 0x1, 0x1}, [@mark={0xc, 0x15, {0x35075b}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.680277624s ago: executing program 0 (id=2199): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x441) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000740)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xdd, &(0x7f0000000780)=""/221}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) 7.432484132s ago: executing program 5 (id=2200): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000940)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TCSETSW2(r1, 0x5435, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000004f0000006400000000000000166ba7", @ANYRESHEX=0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 7.400399573s ago: executing program 2 (id=2201): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000300), &(0x7f0000001480)={'syz', 0x2}, &(0x7f00000014c0), 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x94c7, 0x2, 0x0, 0x0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x1000000003}, {}, 0x2040, 0x0, 0x1, 0x1}, [@mark={0xc, 0x15, {0x35075b}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.375086921s ago: executing program 3 (id=2202): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet(0x2, 0x3, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 6.162737239s ago: executing program 3 (id=2204): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)="53a1b228144d4835415007b390c577cc8a52baa9acba00f1dd7513f66663907dd44196b10d83678ae900d813987c30ec", 0x30}, {&(0x7f0000000540)="0b8b61a9d3983220d21a6c51b2595f671ffd4f674d81bec0e74d44fc1f87c6699a37d7dc912a573f5160648d2dc6dcb9b7fadbfa5f6d0b77afb8e72fc808ca522704d3a40c10a4ec42cef49e0f14cfed658cd906fbfbd5662ad2d46f866d5822", 0x60}, {&(0x7f0000000700)="ecb0cf337e24fac56e2538eeef46cfc55416975a2b339dc2fd50692d3a8701efab83f5d5522b4d66e05b95861dbd39ec103f21789acad70354be14337dee47726ee004957151164ff869fd080c8aba3cbbb98dc6833516bd27cea00e2bcf832865128a661ee2d8bb45952d584728fc7b3d9031f3fca7780d3345a6386a1380b311cbf7dcfcc6f0cc62cef4971d77e32d4df628932e98b716b22833c4f753ae66f24ad52ad704929d72860c28223013a4e9e1f1d0457b2ced6397ba", 0xbb}, {&(0x7f0000000340)="88b1b408f4505cceda1a52bd9275c1cee323958beab018ed3fcfbda5a40856fff0e5775f3964edba0dffc9d6d5781f0cd36e643553f83c877d4abcf0197bdc9e0420107e5ce648500ee9d4e1d6f9b70f882178e1d16aedb5ac18916125c173da0679e5256e3494915f76f31d", 0x6c}, {&(0x7f0000000880)="f3800fa39c041d1b847639be7e710c9d84b36d726fd1c0c270e96d7301800d1474a8eb421e917e4356d41fe994c2f77cbe4d1c995b1457fe265375b93d0921e88a50b1ecd43d26e80ac566f640c663150d78beb087b3b94a4abfe1f4595f787d80ddb07bd31da39d135514a9bb1489bef35ef7a524ce59fcada09cab615172ab3d844b24bb76d2b1443a7942708f845d143499446d609aba4d95531eb7396d6606b9d0e6f559fb04ec9352e6dc104d1f6d89e4157200fea77e", 0xb9}, {&(0x7f00000009c0)="91e63bba648258706160117885363debd7e23684aa6e7c41fd6873ca56f4cffd1550819bdaee6c6d923c1ccd95950a085ca74094eee665b3a23811bb4e193946573ddf786db600d95230e5e4771638575d297fc5d7055a5aac2323a863e69f0843e1978fcf5a8501bf0a587601a0019e315d68a38b2fbbc07016fbc5938551d39b5dafe31a7c50f47d8c9d8b0c152d5bbe2194208c2093faa1447e1bff7f78e8e715b29dc3f4ff086a0570bf519be43633f57dfa1628a5665fd75f78295733525e2952887565d265698c93b1c551e71d5b04074a6af623f6b7142de0f4608c4cfb12e49e17f0d2598ea42337393f690fe4f4f29ae7b31753f769c85387c0f22e28df35968d6353e2f0db11339b7d136bff95efb22dae41c46f2d0046486e2ab1ae862a5fe46f32ce0f40d710ef0ffe579497a49404094f2161d17b4401b85481b2d72001ff", 0x145}, {&(0x7f00000007c0)="3efce8a8cebdc7241cb440f11fea781548d34d5e722a5dba696e4537ea944559f4e059a3fe4330959c11510fa33e1c42452283b13d4c83a23330b6408a9be851c6236b43a9ea7afb34e1a990513670a5c28bc7e3214ef988fed2004e84214e139f098cdd67c5f34c9080698ef5b3624d7da6c42114782f19b032ea52", 0x7c}, {&(0x7f0000000940)="c8", 0x1}, {&(0x7f0000000640)='i', 0x1}], 0x9}}], 0x1, 0x7c9ce320e12db95) sendfile(r2, r1, 0x0, 0x4000000000010046) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6.153863798s ago: executing program 2 (id=2216): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet(0x2, 0x3, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 5.847475242s ago: executing program 2 (id=2207): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0) chdir(&(0x7f0000000080)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x3, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x800, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 5.831411252s ago: executing program 5 (id=2208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x2200c0c0) socket$igmp(0x2, 0x3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r7 = fanotify_init(0x0, 0x0) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) 4.476657939s ago: executing program 5 (id=2209): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x2000000b) read(0xffffffffffffffff, 0x0, 0x0) close(r1) socket(0x840000000002, 0x3, 0x100) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00'}) write$binfmt_misc(r3, &(0x7f0000000740)=ANY=[], 0xfffffc8f) splice(r2, 0x0, r4, 0x0, 0x1800, 0x0) 3.933309303s ago: executing program 0 (id=2210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") chdir(&(0x7f0000000380)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 3.927976161s ago: executing program 3 (id=2211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x933d, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x0, @sliced={0x6b0b, [0x4, 0x5000, 0x8, 0x0, 0x8, 0xffff, 0x0, 0x1, 0xfe01, 0x7, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0xe4, 0x8b9d, 0x0, 0x4, 0x6, 0x2823, 0x49f, 0x101, 0x7ff, 0xc, 0x4, 0x9, 0x0, 0x1, 0x7, 0x8, 0x3, 0x9f5, 0x7ff, 0x3c7f, 0xe, 0xff, 0x8000, 0x7, 0x0, 0x0, 0x6, 0x81, 0x0, 0x7f, 0x40, 0x10, 0x7], 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000f80)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r8, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f0000000040)=0x44b) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000000)={"9b000000000000000000c69671ea00", r9}) 3.806527079s ago: executing program 2 (id=2212): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000840)=ANY=[@ANYRES16=r0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0cfc74b1fcd9ff1099c7014bc7ad0d337d9bfeeea9e1d1f5becb6fb7241514772f49ffd7321d07ab91bbb7202d49c2c37ce52aa5856b7a15b0f3d1b918451b1c42a959619facdd16c797f4c7abd5d77b0d6c896b38148c40a8b511c3ca5968"], 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) r2 = socket$inet6(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') chown(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0xcf, 0x48, &(0x7f00000003c0)="d91eb262f58cbb7f3b274ab40494c031ae6faa3946928ddd5d9920cbf49ae4317aa06404367072f1efd51ce4348ba3e2b887b475fa1eb5adc9f04f4cb811f476e1f43d4eba55fba460b896b4416a10644dc9fd2c2b4efc28160adb199eeb3f46d8d9630c700d483d0e7e26013cf77ccdea2cab14c8ff781099249ad82278b5f58dc7805630768cb2e836c62f6dac5887cd3e8cf318fdc9bb205714ace3e874c20dc4435994c680c6897d94b7be5e3c00e0689377553f0388f44061a8a8df16aeafcc2662550fd10cfb191a0a11cbe7", &(0x7f0000000740)=""/72, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), &(0x7f0000000240), 0x0, 0x0, 0x3}, 0x50) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x700}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="fb001b02e00000025825c96838000000"], 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 2.881487937s ago: executing program 0 (id=2213): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000580)={0x20e, 0x2, 0x0, {{0x500, 0xcd, 0x500, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x9b\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x20e) 2.700202986s ago: executing program 3 (id=2214): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000300), &(0x7f0000001480)={'syz', 0x2}, &(0x7f00000014c0), 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x94c7, 0x2, 0x0, 0x0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x1000000003}, {}, 0x2040, 0x0, 0x1, 0x1}, [@mark={0xc, 0x15, {0x35075b}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.933766736s ago: executing program 1 (id=1991): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={[{@grpquota}, {@filestreams}, {@logbufs={'logbufs', 0x3d, 0x3}}]}, 0x1, 0xb862, &(0x7f0000017140)="$eJzs3XtsnWUdwPGnXdu1kMEwdFwUGZMBA9nWbVAKwbUd6yiXymVgB0yorMCk4zIKblxLCAmoGMB4IWZRIl6jRHEQiYLTiHJxGGOA+AeRgDFgsuhfoMZQ8/acU9pDaehTnqeBfT7J+p73Pf29Oz3f87wnLKSnt+vszhDqQslQqPb869se++L6rsd//qV7dzx4x7MPlY62N5bvbi9vO8rbzjByspHDtaVDdV/f/nBtsVM79rx7NDXV7BXCxVXnaS1tbmipfN9wlfLh+ZX7a0d3az5f+jNqz+LLH9rX94UQ5o6ZrwkhLH3bD7qb6u1Y01V+TsKYbrPKd9e8dd/Itq70Z+XTIazcEd7x9TGjisc5t2vOxw+c6QfyftDbsaa7qn97uXNNeT22V6/B3VH16/yVBxbfXn4KR15vM5hwWno7uk4Lk6zjY/53wcLh0nWzPoTQEEKYHUJonOkevDc6OpcX79m1lf1y9sr6nzvR6+LwZa/8J4Qwr3gbL10vSu8FwPtLR+fyVROs/4bJ1n/bbdtfs/7h/a+7o3N5sdar1n/jZOt/Y9u650rrvr21NPXmzP4QAAAAAMCErtl6/eV9AwP9m91www03Rm/M9JUJSO2tRT/TjwQAAAAAAAAAAAB4t3L878Qz/TMCAAAAAAAAAAAAwAdFd0/Hrlk14w7NGrtz0M7+ke2KN3ov+95dwxsq2/Ldp05wynGf8z88PDzctmtl5bPYZ1d9XnZj9XBx/qG6N54s77ZXf/5g/cjR+nDRJRsH+pcWf9Wq+rCl2GkpzttVH+4udpYVO2vqw/eLneUjO01hR7Gz+OIrBzYUB06OfMY+WLp7hsKsccXCuFfD2P5D9Qt2VLaTnLJytrpQ7r/vvudsrrqvYuL+b52/450+l5z3xtT6L95S2U5yyret/wNeXfvLie575/6j5+/UP60Jrv/jGlVf96uu//MnOOXo/Lznn7ys6P/I43esLR+qezfX/zHnX1Xdf+Tko9f/4lQnVa7/xXvL6mk9Gbuh7p5bd022/ifvX1d5X68dMzt6ttNOeLat6L/Xou1/Lh+qn2L/kyZb/zXz33Y9YYq6e+4frlr/U+gfDpvglKNNvvbCKU8X/X/y5NrmMfdNpf/q6v5LBjddteSardcfvXFT36X9l/Zf0bp0xXHHtrSuaFkyckUofZ3ec7I7md76H/n8/7EzNSEsHJ1feOyb5xX95327q7d8qHGK/bsmXf8XjX+sjLGgNjQ0hC19g4ObW0pfK7vLSl9L3zZB/ym8/3/siPK3NZW3NSHsPzrful/z/kX/5lmrP1I+1DDF/msm7T80+vcSaZrrf0PVzLj+Q8/c/7Oi/4Ifnlv5N4Wpvv+fPFn/2m9Z/9PV3VP1Dz7vsaL/3+oWHR853u2//9LK0f9X+y48O3L8FP3TytH/ug8fMhg5fqr+aeXo37TixFsjx0/TP60c/Xec0PbdyPHT9U8rR/9vHHXMHyPHe/RPK0f/sw5teTVy/JP6p5Wj/98/tPX8yPEz9E8rR/8lB910Y+T4mfqnlaP/4JyrmyPHz9I/rRz9H6u9dlnk+Nn6p5Wj/2+O3vj7yPG1+qeVo/+eCza9FDl+jv5p5eh/xrK+OyPHz9U/rRz97zux/8HI8U/pn1aO/hce+PAlkeO9+qeVo/9Xm3/aETm+Tv+0cvTfWf/YEZHj5+mfVo7+dXs8unfk+Pn6p5Wj/w0Lv/PfyPEL9E8rR/+Hjrz/xcjx9fqnlaP/a8f/eHvk+Kf1TytH//nH/ODLkeMX6p9Wjv5XHfKnFyLHL9I/rRz9H1383L8ix/v0TytH/5c/8Zf7Isc/o39aOfof1fLi45HjF+ufVo7+az/664l+T9C7sUH/tHL037bPEwOR4/36p5Wj/+9qnqqPHL9E/7Ry9N97r50LIscv1T+tHP2fWnTQPyLHL9M/rRz9w2EH7Iwc36h/Wjn6n39s8wOR45/VP60c/e9t2+e2yPHL9U8rR/9d8+ZcFzk+oH9aOfofekDTmZHjm/RPK0f/W5rqj4scv0L/tHL0f6Sh5uDI8Sv1TytH/9ql3T+KHL9K/7Ry9H9m5elfiBy/Wv+0cvS/e0nHy5Hjm/VPK0f/dfNXPxE5fo3+aeXof9je62J/I/ug/mnl6P/PsH6/yPFr9U8rR//tc8+8OXL8Ov3TytH/poPPWRc5/rnnX982O+ifTI7+vzju9nsix7dY/2nl6L+59dZHIse36p9Wjv6LDr/rr5Hj1+ufVo7+Lx1x578jx2/QP60c/b85+ytzIsdv1D+tHP3PbbznyMjxm/RPK0f/OftvWxU5frP+aeXo/9v97tsQOX6L/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsHcncJfOhf//7xkz9iRlLZK9ZJclhUGD0mJNsu+yhrIWokK2pCgpa0RJlpKQdkuWyr7v+77v/o8xM2K8x1c9/H/K+/l8POa+73POdZ+5zud1Xdc5c3/ucw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDGW3X4iksMDAwZdWnXV91++eOHnbXPGsPPPn2/A885cc+LTh557eLjj7p58RfGMPDinS0+4rbBIxcZcsipxwwecWHwy+93wgkmGDTJwKD18lrttOb/sdrTj/5i8EsXB+098s9LJnrxb590nZMGBgYm/T/ur9aqw5YePmLwRv55qds4o24edf1LXw8Z+WeRtQYGFll9YKzbx5vvuZWHL/9mr8P/glWHLb3sGP0HRnV+sfuY+3erMbfzcfZYfdCbGu4Nsuqw4cuNaD22/Xj77fZ7cRsYGBhy+MDAkCMGBoYcOTAw5Kg3uwdvjGFLzLfEiGP+6Msjq+86+gVBOr4PevqTp454zhg68nliyNGjnwuA/y3DlphvybD/jzv69rT/3/rsLavY/+F/37LDlphv4GWv80deu+vof9/H/X/Rac+87s1bYwAAAODf9fx9Z5w9aq5v8MDAdANjzPe+aNTPBQaddM4ll7xpK/rfIcyTvfp3Jv7HjOg8/vHTDwxssfKbvSq8Cd4S89j8x/Tvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/2Jjmf+fdPTnncc5balRi8586UGbrjTm94+4bvz/52v9pnmrzv8PbDJoZMsRzTcZGBj41LAVVpptYGBgpU0PunSGgZduW2jEbYtMNs6oEwTM9uLHj43ljke/m/zFkzVM+NJ9nPTi/S/7whHjDBpjJV5m/Rf2PXbjVZ+Yf8zPs4z9cbx0fonzP37FwaPfyzJ4jIXGtq2Ovv/Rj2XMzqPWfbYR6z7XtptvNdc2O+w4xyabr7PRBhttsMWCc8+/0ALzLDj/PHNtuMlmG8w98uPYxmzkqSuWfD1jNu6YY3bfsJeP2ZiPbWxjNv1rj9mL97jxuZdPMXrMhvybY7bka4/Z9JuMXtfFhw6s/eLYjPgrlxo6sP2IC/OMN2ITGrXsVCOW/chkgwcGDvjXAx3x1XgvbYODdt3kDThvyajPw0Z9XiKet+S0sZ23ZGC9Me5n4ZGftj1r9HJjvs961NWv+7wliw7ffdYR++IY3///h//o+f9VvRYa9NJAjT5pyKhlRvb613kmRg/b4i87z8SC6Vwyb6RXre/0g1/artP6jnpf3KAxxv+13hc3MNuta58w8nEtvuDI73r+P46Sjx3L/Wv0glccOwZe+9gxzr++/Ne1G1w47ZjHjk+MfRVfsV+MHqPxxlhobMeOc58YsuuI+x+9zmM5diy3yag3Gv/r2DHir11y9LFjxLoPHzpwwIgL8464sPTQgeNGXJjvxQsTDJwz4sKc62252fojrljm1dvtbINe8QuPYbsdPsZ2+zrOj7PY+QMDi52THtfYhzNL2+24r7G++f3cA6/5fu5Z93p2xYGBgSlGPkuPeJAj1/0/kdZ3yGuvbzj/xMBrnX9iYOGFTljyDV7fl/azF7e1UaeLWmYs3/OK/WzSV+1nu43zsj3j9b6uWT8sP/LrqV66t1OOuGDX0WM0dIz7/b+eo0c/ltR/9Gu+lxt8+MCg1xqbpV/P2Ezy2mPzel+/zDbjyNsneI2xmWryKRccPTbj/ptjs/RYxublr4dfbtCuAxO8cmyGvPgaeKZRYzP89YzNxG/MdjNhWH7k1zO/dNVqzy8w8+ixCWMRn/9H3//wf3ds1n5pu5npxdtmGDww7rgD26+z7bZbzzPy4+iL8478+Nr74FKvZyzHf2PGcppRR53Brx6cl65a+KJFlvtP98Gl/t2xnH5g8Oh/c28y5s7yxvHzn276d9O/m/7d9O+mfzf9u+lfbCzz/9OP/rng7BfOdsmoH8YMPe+EVdZ/s9f3TfaWnv8f1fcV8//rr3LCeYMHXrrtNednRy7zXzk/u+DITzvNM3q5MecHR139uudnz9z/9NX/H83P/kdG76uv4+eGjv/d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/YmOZ/5979O8BPH/vtjeOmggduu6wqf/j91m9Rbyl5/9H9X3F/P85Uw9bd/DAS7e95vz/yGU65v+3vub23f+b5/9H76vm//k/6N9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+xcYy/7/46N8D2Oz5yx4Y/fsAFx+6xJZv9vq+yd6q8//+//9ejv/d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/YqPm/wfG+G8PP2O7iML8//+2sfRfXv+opf8K+kct/VfUP2rpv5L+UUv/lfWPWvqvon/U0v+z+kct/VfVP2rp/zn9o5b+q+kftfT/vP5RS//V9Y9a+q+hf9TSf039o5b+a+kftfRfW/+opf86+kct/dfVP2rpv57+UUv/9fWPWvpvoH/0yv5vgREaS/8N9Y9a9v+N9I9a+m+sf9TSfxP9o5b+X9A/aum/qf5RS//N9I9a+m+uf9TSfwv9o5b+W+oftfTfSv+opf8X9Y9a+m+tf9TSfxv9o5b+2+oftfT/kv5RS/8v6x+19N9O/6il//b6Ry39d9A/aum/o/5RS/+d9I9a+u+sf9TS/yv6Ry39v6p/1NJ/F/2jlv676h+19N9N/6il/9f0j1r6765/1NJ/D/2jlv5f1z9q6f8N/aOW/t/UP2rpv6f+UUv/vfSPWvrvrX/U0v9b+kct/ffRP2rpv6/+UUv//fSPWvrvr3/U0v+AV/Wf4P/pav23aun/bft/1NL/QP2jlv7f0T9q6X+Q/lFL/+/qH7X0/57+UUv/g/WPWvofon/U0v/7+kct/X+gf9TS/1D9o5b+P9Q/aul/mP5RS/8f6R+19P+x/lFL/8P1j1r6H6F/1NL/SP2jlv5H6R+19D9a/6il/zH6Ry39f6J/1NL/WP2jlv7H6R+19P+p/lFL/+P1j1r6n6B/1NL/Z/pHLf1/rn/U0v9E/aOW/r/QP2rpf5L+UUv/X+oftfQ/Wf+opf8p+kct/U/VP2rpf5r+UUv/X+kftfT/tf5RS//T9Y9a+v9G/6il/xn6Ry39f6t/1NL/TP2jlv5n6R+19D9b/6il/+/0j1r6n6N/1NL/9/pHLf3/oH/U0v+P+kct/f+kf9TS/8/6Ry39/6J/1NL/r/pHLf3P1T9q6X+e/lFL//P1j1r6X6B/1NL/b/pHLf0v1D9q6X+R/lFL/4v1j1r6X6J/1NL/7/pHLf3/oX/U0v+f+kct/S/VP2rpf5n+UUv/y/WPWvpfoX/U0v9K/aOW/lfpH7X0v1r/qKX/NfpHLf2v1T9q6X+d/lFL/+v1j1r636B/1NL/Rv2jlv436R+19L9Z/6il/y36Ry39b9U/aul/m/5RS//b9Y9a+t+hf9TS/079o5b+d+kftfS/W/+opf89+kct/e/VP2rpf5/+UUv/+/WPWvo/oH/U0v9B/aOW/g/pH7X0f1j/qKX/I/pHLf0f1T9q6f+Y/lFL/8f1j1r6P6F/1NL/Sf2jlv5P6R+19H9a/6il/zP6Ry39n9U/aun/nP5RS//n9Y9a+r+gf1TSf9CA/lFL/0H6Ry39B+sftfQfR/+opf8Q/aOW/kP1j1r6j6t/1NJ/PP2jlv7j6x+19J9A/6il/4T6Ry39J9I/auk/sf5RS/+36R+19J9E/6il/9v1j1r6T6p/1NL/HfpHLf0n0z9q6f9O/aOW/u/SP2rpP7n+UUv/KfSPWvpPqX/U0n8q/aOW/lPrH7X0n0b/qKX/u/WPWvq/R/+opf+0+kct/afTP2rp/179o5b+0+sftfR/n/5RS/8Z9I9a+s+of9TSfyb9o5b+M+sftfSfRf+opf+s+kct/WfTP2rp/379o5b+H9A/auk/u/5RS/8P6h+19J9D/6il/5z6Ry3959I/auk/t/5RS/959I9a+s+rf9TSfz79o5b+8+sftfT/kP5RS/8F9I9a+i+of9TSfyH9o5b+C+sftfT/sP5RS/9F9I9a+n9E/6il/0f1j1r6L6p/1NJ/Mf2jlv6L6x+19B+mf9TSfwn9o5b+S+oftfRfSv+opf/H9I9a+g/XP2rpv7T+UUv/ZfSPWvovq3/U0v/j+kct/T+hf9TSfzn9o5b+n9Q/aun/Kf2jlv6f1j9q6f8Z/aOW/svrH7X0X0H/qKX/ivpHLf1X0j9q6b+y/lFL/1X0j1r6f1b/qKX/qvpHLf0/p3/U0n81/aOW/p/XP2rpv7r+UUv/NfSPWvqvqX/U0n8t/aOW/mvrH7X0X0f/qKX/uvpHLf3X0z9q6b++/lFL/w30j1r6b6h/1NJ/I/2jlv4b6x+19N9E/6il/xf0j1r6b6p/1NJ/M/2jlv6b6x+19N9C/6il/5b6Ry39t9I/aun/Rf2jlv5b6x+19N9G/6il/7b6Ry39v6R/1NL/y/pHLf230z9q6b+9/lFL/x30j1r676h/1NJ/J/2jlv476x+19P+K/lFL/6/qH7X030X/qKX/rvpHLf130z9q6f81/aOW/rvrH7X036Om/wsj7fL6lm7p//Wa/v+elv7f0D9q6f9N/aOW/nvqH7X030v/qKX/3vpHLf2/pX/U0n8f/aOW/vvqH7X030//qKX//vpHLf0P0D9q6f9t/aOW/gfqH7X0/47+UUv/g/SPWvp/V/+opf/39I9a+h+sf/TW7T/45dcOOkT/6K3b/5X7//f1j1r6/0D/qKX/ofpHLf1/qH/U0v8w/aOW/j/SP2rp/2P9o5b+h+sftfQ/Qv+opf+R+kct/Y/SP2rpf7T+UUv/Y/SPWvr/RP+opf+x+kct/Y/TP2rp/1P9o5b+x+sftfQ/Qf+opf/P9I9a+v9c/6il/4n6Ry39f6F/1NL/JP2jlv6/1D9q6X+y/lFL/1P0j1r6n6p/1NL/NP2jlv6/0j9q6f9r/aOW/qfrH7X0/43+UUv/M/SPWvr/Vv+opf+Z+kct/c/SP2rpf7b+UUv/3+kftfQ/R/+opf/v9Y9a+v9B/6il/x/1j1r6/0n/qKX/n/WPWvr/Rf+opf9f9Y9a+p+rf9TS/zz9o5b+5+sftfS/QP+opf/f9I9a+l+of9TS/yL9o5b+F+sftfS/RP+opf/f9Y9a+v9D/6il/z/1j1r6X6p/1NL/Mv2jlv6X6x+19L9C/6il/5X6Ry39r9I/aul/tf5RS/9r9I9a+l+rf9TS/zr9o5b+1+sftfS/Qf+opf+N+kct/W/SP2rpf7P+UUv/W/SPWvrfqn/U0v82/aOW/rfrH7X0v0P/qKX/nfpHLf3v0j9q6X+3/lFL/3v0j1r636t/1NL/Pv2jlv736x+19H9A/6il/4P6Ry39H9I/aun/sP5RS/9H9I9a+j+qf9TS/zH9o5b+j+sftfR/Qv+opf+T+kct/Z/SP2rp/7T+UUv/Z/SPWvo/q3/U0v85/aOW/s/rH7X0f0H/qKT/i1/q/2ot/QfpH7X0H6x/1NJ/HP2jlv5D9I9a+g/VP2rpP67+UUv/8fSPWvqPr3/U0n8C/aOW/hPqH7X0n0j/qKX/xPpHLf3fpn/U0n8S/aOW/m/XP2rpP6n+UUv/d+gftfSfTP+opf879Y9a+r9L/6il/+T6Ry39p9A/auk/pf5RS/+p9I9a+k+tf9TSfxr9o5b+79Y/aun/Hv2jlv7T6h+19J9O/6il/3v1j1r6T69/1NL/ffpHLf1n0D9q6T+j/lFL/5n0j1r6z6x/1NJ/Fv2jlv6z6h+19J9N/6il//v1j1r6f0D/qKX/7PpHLf0/qH/U0n8O/aOW/nPqH7X0n0v/qKX/3PpHLf3n0T9q6T+v/lFL//n0j1r6z69/1NL/Q/pHLf0X0D9q6b+g/lFL/4X0j1r6L9zef3C+uqX/h9v7j0VL/0X0j1r6f0T/qKX/R/WPWvovqn/U0n8x/aOW/ovrH7X0H6Z/1NJ/Cf2jlv5L6h+19F9K/6il/8f0j1r6D9c/aum/tP5RS/9l9I9a+i+rf9TS/+P6Ry39P6F/1NJ/Of2jlv6f1D9q6f8p/aOW/p/WP2rp/xn9o5b+y+sftfRfQf+opf+K+kct/VfSP2rpv7L+UUv/VfSPWvp/Vv+opf+q+kct/T+nf9TSfzX9o5b+n9c/aum/uv5RS/819I9a+q+pf9TSfy39o5b+a+sftfRfR/+opf+6+kct/dfTP2rpv77+UUv/DfSPWvpvqH/U0n8j/aOW/hvrH7X030T/qKX/F/SPWvpvqn/U0n8z/aOW/pvrH7X030L/qKX/lvpHLf230j9q6f9F/aOW/lvrH7X030b/qKX/tvpHLf2/pH/U0v/L+kct/bfTP2rpv73+UUv/HfSPWvrvqH/U0n8n/aOW/jvrH7X0/4r+UUv/r+oftfTfRf+opf+u+kct/XfTP2rp/zX9o5b+u+sftfTfQ/+opf/X9Y9a+n9D/6il/zf1j1r676l/1NJ/L/2jlv576x+19P+W/lFL/330j1r676t/1NJ/P/2jlv776x+19D9A/6il/7f1j1r6H6h/1NL/O/pHLf0P0j9q6f9d/aOW/t/TP2rpf7D+UUv/Q/SPWvp/X/+opf8P9I9a+h+qf9TS/4f6Ry39D9M/aun/I/2jlv4/1j9q6X+4/lFL/yP0j1r6H6l/1NL/KP2jlv5H6x+19D9G/6il/0/0j1r6H6t/1NL/OP2jlv4/1T9q6X+8/lFL/xP0j1r6/0z/qKX/z/WPWvqfqH/U0v8X+kct/U/SP2rp/0v9o5b+J+sftfQ/Rf+opf+p+kct/U/TP2rp/yv9o5b+v9Y/aul/uv5RS//f6B+19D9D/6il/2/1j1r6n6l/1NL/LP2jlv5n6x+19P+d/lFL/3P0j1r6/17/qKX/H/SPWvr/Uf+opf+f9I9a+v9Z/6il/1/0j1r6/1X/qKX/ufpHLf3P0z9q6X++/lFL/wv0j1r6/03/qKX/hfpHLf0v0j9q6X+x/lFL/0v0j1r6/13/qKX/P/SPWvr/U/+opf+l+kct/S/TP2rpf7n+UUv/K/SPWvpfqX/U0v8q/aOW/lfrH7X0v0b/qKX/tfpHLf2v0z9q6X+9/lFL/xv0j1r636h/1NL/Jv2jlv436x+19L9F/6il/636Ry39b9M/aul/u/5RS/879I9a+t+pf9TS/y79o5b+d+sftfS/R/+opf+9+kct/e/TP2rpf7/+UUv/B/SPWvo/qH/U0v8h/aOW/g/rH7X0f0T/qKX/o/pHLf0f0z9q6f+4/lFL/yf0j1r6P6l/1NL/Kf2jlv5P6x+19H9G/6il/7P6Ry39n9M/aun/vP5RS/8X9I9K+o8zoH/U0n+Q/lFL/8H6Ry39x9E/auk/RP+opf9Q/aOW/uPqH7X0H0//qKX/+PpHLf0n0D9q6T+h/lFL/4n0j1r6T6x/1NL/bfpHLf0n0T9q6f92/aOW/pPqH7X0f4f+UUv/yfSPWvq/U/+opf+79I9a+k+uf9TSfwr9o5b+U+oftfSfSv+opf/U+kct/afRP2rp/279o5b+79E/auk/rf5RS//p9I9a+r9X/6il//T6Ry3936d/1NJ/Bv2jlv4z6h+19J9J/6il/8z6Ry39Z9E/auk/q/5RS//Z9I9a+r9f/6il/wf0j1r6z65/1NL/g/pHLf3n0D9q6T+n/lFL/7n0j1r6z61/1NJ/npH9x3uzVuu/VUv/ee3/UUv/+fSPWvrPr3/U0v9D+kct/RfQP2rpv6D+UUv/hfSPWvovrH/U0v/D+kct/RfRP2rp/xH9o5b+H9U/aum/qP5RS//F9I9a+i+uf9TSf5j+UUv/JfSPWvovqX/U0n8p/aOW/h/TP2rpP1z/qKX/0vpHLf2X0T9q6b+s/lFL/4/rH7X0/4T+UUv/5fSPWvp/Uv+opf+n9I9a+n9a/6il/2f0j1r6L69/1NJ/Bf2jlv4r6h+19F9J/6il/8r6Ry39V9E/aun/Wf2jlv6r6h+19P+c/lFL/9X0j1r6f17/qKX/6vpHLf3X0D9q6b+m/lFL/7X0j1r6r61/1NJ/Hf2jlv7r6h+19F9P/6il//r6Ry39N9A/aum/of5RS/+N9I9a+m+sf9TSfxP9o5b+X9A/aum/qf5RS//N9I9a+m+uf9TSfwv9o5b+W+oftfTfSv+opf8X9Y9a+m+tf9TSfxv9o5b+2+oftfT/kv5RS/8v6x+19N9O/6il//b6Ry39d9A/aum/o/5RS/+d9I9a+u+sf9TS/yv6Ry39v6p/1NJ/F/2jlv676h+19N9N/6il/9f0j1r6765/1NJ/D/2jlv5f1z9q6f8N/aOW/t/UP2rpv6f+UUv/vfSPWvrvrX/U0v9b+kct/ffRP2rpv6/+UUv//fSPWvrvr3/U0v8A/aOW/t/WP2rpf6D+UUv/7+gftfQ/SP+opf939Y9a+n9P/6il/8H6Ry39D9E/aun/ff2jlv4/0D9q6X+o/lFL/x/qH7X0P0z/qKX/j/SPWvr/WP+opf/h+kct/Y/QP2rpf6T+UUv/o/SPWvofrX/U0v8Y/aOW/j/RP2rpf6z+UUv/4/SPWvr/VP+opf/x+kct/U/QP2rp/zP9o5b+P9c/aul/ov5RS/9f6B+19D9J/6il/y/1j1r6n6x/1NL/FP2jlv6n6h+19D9N/6il/6/0j1r6/1r/qKX/6fpHLf1/o3/U0v8M/aOW/r/VP2rpf6b+UUv/s/SPWvqfrX/U0v93+kct/c/RP2rp/3v9o5b+f9A/aun/R/2jlv5/0j9q6f9n/aOW/n/RP2rp/1f9o5b+5+oftfQ/T/+opf/5+r/KuEX9L9A/aun/N/2jlv4X6h+19L9I/6il/8X6Ry39L9E/aun/d/2jlv7/0D9q6f9P/aOW/pfqH7X0v0z/qKX/5fpHLf2v0D9q6X+l/lFL/6v0j1r6X61/1NL/Gv2jlv7X6h+19L9O/6il//X6Ry39b9A/aul/o/5RS/+b9I9a+t+sf9TS/xb9o5b+t+oftfS/Tf+opf/t+kct/e/QP2rpf6f+UUv/u/SPWvrfrX/U0v8e/aOW/vfqH7X0v0//qKX//fpHLf0f0D9q6f+g/lFL/4f0j1r6P6x/1NL/Ef2jlv6P6h+19H9M/6il/+P6Ry39n9A/aun/pP5RS/+n9I9a+j+tf9TS/xn9o5b+z+oftfR/Tv+opf/z+kct/V/QPyrpP2RA/6il/yD9o5b+g/WPWvqPo3/U0n+I/lFL/6H6Ry39x9U/auk/nv5RS//x9Y9a+k+gf9TSf0L9o5b+E+kftfSfWP+opf/b9I9a+k+if9TS/+36Ry39J9U/aun/Dv2jlv6T6R+19H+n/lFL/3fpH7X0n1z/qKX/FPpHLf2n1D9q6T+V/lFL/6n1j1r6T6N/1NL/3fpHLf3fo3/U0n9a/aOW/tPpH7X0f6/+UUv/6fWPWvq/T/+opf8M+kct/WfUP2rpP5P+UUv/mfWPWvrPon/U0n9W/aOW/rPpH7X0f7/+UUv/D+gftfSfXf+opf8H9Y9a+s+hf9TSf079o5b+c+kftfSfW/+opf88+kct/efVP2rpP5/+UUv/+fWPWvp/SP+opf8C+kct/RfUP2rpv5D+UUv/hfWPWvp/WP+opf8i+kct/T+if9TS/6P6Ry39F9U/aum/mP5RS//F9Y9a+g/TP2rpv4T+UUv/JfWPWvovpX/U0v9j+kct/YfrH7X0X1r/qKX/MvpHLf2X1T9q6f9x/aOW/p/QP2rpv5z+UUv/T+oftfT/lP5RS/9P6x+19P+M/lFL/+X1j1r6r6B/1NJ/Rf2jlv4r6R+19F9Z/6il/yr6Ry39P6t/1NJ/Vf2jlv6f0z9q6b+a/lFL/8/rH7X0X13/qKX/GvpHLf3X1D9q6b+W/lFL/7X1j1r6r6N/1NJ/Xf2jlv7r6R+19F9f/6il/wb6Ry39N9Q/aum/kf5RS/+N9Y9a+m+if9TS/wv6Ry39N9U/aum/mf5RS//N9Y9a+m+hf9TSf0v9o5b+W+kftfT/ov5RS/+t9Y9a+m+jf9TSf1v9o5b+X9I/aun/Zf2jlv7b6R+19N9e/6il/w76Ry39d9Q/aum/k/5RS/+d9Y9a+n9F/6il/1f1j1r676J/1NJ/V/2jlv676R+19P+a/lFL/931j1r676F/1NL/6/pHLf2/oX/U0v+b+kct/ffUP2rpv5f+UUv/vfWPWvp/S/+opf8++kct/ffVP2rpv5/+UUv//fWPWvofoH/U0v/b+kct/Q/UP2rp/x39o5b+B+kftfT/rv5RS//v6R+19D9Y/6il/yH6Ry39v69/1NL/B/pHLf0P1T9q6f9D/aOW/ofpH7X0/5H+UUv/H+sftfQ/XP+opf8R+kct/Y/UP2rpf5T+UUv/o/WPWvofo3/U0v8n+kct/Y/VP2rpf5z+UUv/n+oftfQ/Xv+opf8J+kct/X+mf9TS/+f6Ry39T9Q/aun/C/2jlv4n6R+19P+l/lFL/5P1j1r6n6J/1NL/VP2jlv6n6R+19P+V/lFL/1/rH7X0P13/qKX/b/SPWvqfoX/U0v+3+kct/c/UP2rpf5b+UUv/s/WPWvr/Tv+opf85+kct/X+vf9TS/w/6Ry39/6h/1NL/T/pHLf3/rH/U0v8v+kct/f+qf9TS/1z9o5b+5+kftfQ/X/+opf8F+kct/f+mf9TS/0L9o5b+F+kftfS/WP+opf8l+kct/f+uf9TS/x/6Ry39/6l/1NL/Uv2jlv6X6R+19L9c/6il/xX6Ry39r9Q/aul/lf5RS/+r9Y9a+l+jf9TS/1r9o5b+1+kftfS/Xv+opf8N+kct/W/UP2rpf5P+UUv/m/WPWvrfon/U0v9W/aOW/rfpH7X0v13/qKX/HfpHLf3v1D9q6X+X/lFL/7v1j1r636N/1NL/Xv2jlv736R+19L9f/6il/wP6Ry39H9Q/aun/kP5RS/+H9Y9a+j+if9TS/1H9o5b+j+kftfR/XP+opf8T+kct/Z/UP2rp/5T+UUv/p/WPWvo/o3/U0v9Z/aOW/s/pH7X0f17/qKX/C/pHJf2HDugftfQfpH/U0n+w/lFL/3H0j1r6D9E/auk/VP+opf+4+kct/cfTP2rpP77+UUv/CfSPWvpPqH/U0n8i/aOW/hPrH7X0f5v+UUv/SfSPWvq/Xf+opf+k+kct/d+hf9TSfzL9o5b+79Q/aun/Lv2jlv6T6x+19J9C/6il/5T6Ry39p9I/auk/tf5RS/9p9I9a+r9b/6il/3v0j1r6T6t/1NJ/Ov2jlv7v1T9q6T+9/lFL//fpH7X0n0H/qKX/jPpHLf1n0j9q6T+z/lFL/1n0j1r6z6p/1NJ/Nv2jlv7v1z9q6f8B/aOW/rPrH7X0/6D+UUv/OfSPWvrPqX/U0n8u/aOW/nPrH7X0n0f/qKX/vPpHLf3n0z9q6T+//lFL/w/pH7X0X0D/qKX/gvpHLf0X0j9q6b+w/lFL/w/rH7X0X0T/qKX/R/SPWvp/VP+opf+i+kct/RfTP2rpv7j+UUv/YfpHLf2X0D9q6b+k/lFL/6X0j1r6f0z/qKX/cP2jlv5L6x+19F9G/6il/7L6Ry39P65/1NL/E/pHLf2X0z9q6f9J/aOW/p/SP2rp/2n9o5b+n9E/aum/vP5RS/8V9I9a+q+of9TSfyX9o5b+K+sftfRfRf+opf9n9Y9a+q+qf9TS/3P6Ry39V9M/aun/ef2jlv6r6x+19F9D/6il/5r6Ry3919I/aum/tv5RS/919I9a+q+rf9TSfz39o5b+6+sftfTfQP+opf+G+kct/TfSP2rpv7H+UUv/TfSPWvp/Qf+opf+m+kct/TfTP2rpv7n+UUv/LfSPWvpvqX/U0n8r/aOW/l/UP2rpv7X+UUv/bfSPWvpvq3/U0v9L+kct/b+sf9TSfzv9o5b+2+sftfTfQf+opf+O+kct/XfSP2rpv7P+UUv/r+gftfT/qv5RS/9d9I9a+u+qf9TSfzf9o5b+X9M/aum/u/5RS/899I9a+n9d/6il/zf0j1r6f1P/qKX/nvpHLf330j9q6b+3/lFL/2/pH7X030f/qKX/vvpHLf330z9q6b+//lFL/wP0j1r6f1v/qKX/gfpHLf2/o3/U0v8g/aOW/t/VP2rp/z39o5b+B+sftfQ/RP+opf/39Y9a+v9A/6il/6H6Ry39f6h/1NL/MP2jlv4/0j9q6f9j/aOW/ofrH7X0P0L/qKX/kfpHLf2P0j9q6X+0/lFL/2P0j1r6/0T/qKX/sfpHLf2P0z9q6f9T/aOW/sfrH7X0P0H/qKX/z/SPWvr/XP+opf+J+kct/X+hf9TS/yT9o5b+v9Q/aul/sv5RS/9T9I9a+p+qf9TS/zT9o5b+v9I/aun/a/2jlv6n6x+19P+N/lFL/zP0j1r6/1b/qKX/mfpHLf3P0j9q6X+2/lFL/9/pH7X0P0f/qKX/7/WPWvr/Qf+opf8f9Y9a+v9J/6il/5/1j1r6/0X/qKX/X/WPWvqfq3/U0v88/aOW/ufrH7X0v0D/qKX/3/SPWvpfqH/U0v8i/aOW/hfrH7X0v0T/qKX/3/WPWvr/Q/+opf8/9Y9a+l+qf9TS/zL9o5b+l+sftfS/Qv+opf+V+kct/a/SP2rpf7X+UUv/a/SPWvpfq3/U0v86/aOW/tfrH7X0v0H/qKX/jfpHLf1v0j9q6X+z/lFL/1v0j1r636p/1NL/Nv2jlv636x+19L9D/6il/536Ry3979I/aul/t/5RS/979I9a+t+rf9TS/z79o5b+9+sftfR/QP+opf+D+kct/R/SP2rp/7D+UUv/R/SPWvo/qn/U0v8x/aOW/o/rH7X0f0L/qKX/k/pHLf2f0j9q6f+0/lFL/2f0j1r6P6t/1NL/Of2jlv7P6x+19H9B/6ik/7gD+kct/QfpH7X0H6x/1NJ/HP2jlv5D9I9a+g/VP2rpP67+UUv/8fSPWvqPr3/U0n8C/aOW/hPqH7X0n0j/qKX/xPpHLf3fpn/U0n8S/aOW/m/XP2rpP6n+UUv/d+gftfSfTP+opf879Y9a+r9L/6il/+T6Ry39p9A/auk/pf5RS/+p9I9a+k+tf9TSfxr9o5b+79Y/aun/Hv2jlv7T6h+19J9O/6il/3v1j1r6T69/1NL/ffpHLf1n0D9q6T+j/lFL/5n0j1r6z6x/1NJ/Fv2jlv6z6h+19J9N/6il//v1j1r6f0D/qKX/7PpHLf0/qH/U0n8O/aOW/nPqH7X0n0v/qKX/3PpHLf3n0T9q6T+v/lFL//n0j1r6z69/1NL/Q/pHLf0X0D9q6b+g/lFL/4X0j1r6L6x/1NL/w/pHLf0X0T9q6f8R/aOW/h/VP2rpv6j+UUv/xfSPWvovrn/U0n+Y/lFL/yX0j1r6L6l/1NJ/Kf2jlv4f0z9q6T9c/6il/9L6Ry39l9E/aum/rP5RS/+P6x+19P+E/lFL/+X0j1r6f1L/qKX/p/SPWvp/Wv+opf9n9I9a+i+vf9TSfwX9o5b+K+oftfRfSf+opf/K+kct/VfRP2rp/1n9o5b+q+oftfT/nP5RS//V9I9a+n9e/6il/+r6Ry3919A/aum/pv5RS/+19I9a+q+tf9TSfx39o5b+6+oftfRfT/+opf/6+kct/TfQP2rpv6H+UUv/jfSPWvpvrH/U0n8T/aOW/l/QP2rpv6n+UUv/zfSPWvpvrn/U0n8L/aOW/lvqH7X030r/qKX/F/WPWvpvrX/U0n8b/aOW/tvqH7X0/5L+UUv/L+sftfTfTv+opf/2+kct/XfQP2rpv6P+UUv/nfSPWvrvrH/U0v8r+kct/b+qf9TSfxf9o5b+u+oftfTfTf+opf/X9I9a+u+uf9TSfw/9o5b+X9c/aun/Df2jlv7f1D9q6b+n/lFL/730j1r6761/1NL/W/pHLf330T9q6b+v/lFL//30j1r6769/1NL/AP2jlv7f1j9q6X+g/lFL/+/oH7X0P0j/qKX/d/WPWvp/T/+opf/B+kct/Q/RP2rp/339o5b+P9A/aul/qP5RS/8f6h+19D9M/6il/4/0j1r6/1j/qKX/4fpHLf2P0D9q6X+k/lFL/6P0j1r6H61/1NL/GP2jlv4/0T9q6X+s/lFL/+P0j1r6/1T/qKX/8fpHLf1P0D9q6f8z/aOW/j/XP2rpf6L+UUv/X+gftfQ/Sf+opf8v9Y9a+p+sf9TS/xT9o5b+p+oftfQ/Tf+opf+v9I9a+v9a/6il/+n6Ry39f6N/1NL/DP2jlv6/1T9q6X+m/lFL/7P0j1r6n61/1NL/d/pHLf3P0T9q6f97/aOW/n/QP2rp/0f9o5b+f9I/aun/Z/2jlv5/0T9q6f9X/aOW/ufqH7X0P0//qKX/+fpHLf0v0D9q6f83/aOW/hfqH7X0v0j/qKX/xfpHLf0v0T9q6f93/aOW/v/QP2rp/0/9o5b+l+oftfS/TP+opf/l+kct/a/QP2rpf6X+UUv/q/SPWvpfrX/U0v8a/aOW/tfqH7X0v07/qKX/9fpHLf1v0D9q6X+j/lFL/5v0j1r636x/1NL/Fv2jlv636h+19L9N/6il/+36Ry3979A/aul/p/5RS/+79I9a+t+tf9TS/x79o5b+9+oftfS/T/+opf/9+kct/R/QP2rp/6D+UUv/h/SPWvo/rH/U0v8R/aOW/o/qH7X0f0z/qKX/4/pHLf2f0D9q6f+k/lFL/6f0j1r6P61/1NL/Gf2jlv7P6h+19H9O/6il//P6Ry39X9A/Kuk/3oD+UUv/QfpHLf0H6x+19B9H/6il/xD9o5b+Q/WPWvqPq3/U0n88/aOW/uPrH7X0n0D/qKX/hPpHLf0n0j9q6T+x/lFL/7fpH7X0n0T/qKX/2/WPWvpPqn/U0v8d+kct/SfTP2rp/079o5b+79I/auk/uf5RS/8p9I9a+k+pf9TSfyr9o5b+U+sftfSfRv+opf+79Y9a+r9H/6il/7T6Ry39p9M/aun/Xv2jlv7T6x+19H+f/lFL/xn0j1r6z6h/1NJ/Jv2jlv4z6x+19J9F/6il/6z6Ry39Z9M/aun/fv2jlv4f0D9q6T+7/lFL/w/qH7X0n0P/qKX/nPpHLf3n0j9q6T+3/lFL/3n0j1r6z6t/1NJ/Pv2jlv7z6x+19P+Q/lFL/wX0j1r6L6h/1NJ/If2jlv4L6x+19P+w/tFbuf/Leo+3iP7RW7n/y/f/j+gftfT/qP5RS/9F9Y9a+i+mf9TSf3H9o5b+w/SPWvovoX/U0n9J/aOW/kvpH7X0/5j+UUv/4fpHLf2X1j9q6b+M/lFL/2X1j1r6f1z/qKX/J/SPWvovp3/U0v+T+kct/T+lf9TS/9P6Ry39P6N/1NJ/ef2jlv4r6B+19F9R/6il/0r6Ry39V9Y/aum/iv5RS//P6h+19F9V/6il/+f0j1r6r6Z/1NL/8/pHLf1X1z9q6b+G/lFL/zX1j1r6r6V/1NJ/bf2jlv7r6B+19F9X/6il/3r6Ry3919c/aum/gf5RS/8N9Y9a+m+kf9TSf2P9o5b+m+gftfT/gv5RS/9N9Y9a+m+mf9TSf3P9o5b+W+gftfTfUv+opf9W+kct/b+of9TSf2v9o5b+2+gftfTfVv+opf+X9I9a+n9Z/6il/3b6Ry39t9c/aum/g/5RS/8d9Y9a+u+kf9TSf2f9o5b+X9E/aun/Vf2jlv676B+19N9V/6il/276Ry39v6Z/1NJ/d/2jlv576B+19P+6/lFL/2/oH7X0/6b+UUv/PfWPWvrvpX/U0n9v/aOW/t/SP2rpv4/+UUv/ffWPWvrvp3/U0n9//aOW/gfoH7X0/7b+UUv/A/WPWvp/R/+opf9B+kct/b+rf9TS/3v6Ry39D9Y/aul/iP5RS//v6x+19P+B/lFL/0P1j1r6/1D/qKX/YfpHLf1/pH/U0v/H+kct/Q/XP2rpf4T+UUv/I/WPWvofpX/U0v9o/aOW/sfoH7X0/4n+UUv/Y/WPWvofp3/U0v+n+kct/Y/XP2rpf4L+UUv/n+kftfT/uf5RS/8T9Y9a+v9C/6il/0n6Ry39f6l/1NL/ZP2jlv6n6B+19D9V/6il/2n6Ry39f6V/1NL/1/pHLf1P1z9q6f8b/aOW/mfoH7X0/63+UUv/M/WPWvqfpX/U0v9s/aOW/r/TP2rpf47+UUv/3+sftfT/g/5RS/8/6h+19P+T/lFL/z/rH7X0/4v+UUv/v+oftfQ/V/+opf95+kct/c/XP2rpf4H+UUv/v+kftfS/UP+opf9F+kct/S/WP2rpf4n+UUv/v+sftfT/h/5RS/9/6h+19L9U/6il/2X6Ry39L9c/aul/hf5RS/8r9Y9a+l+lf9TS/2r9o5b+1+gftfS/Vv+opf91+kct/a/XP2rpf4P+UUv/G/WPWvrfpH/U0v9m/aOW/rfoH7X0v1X/qKX/bfpHLf1v1z9q6X+H/lFL/zv1j1r636V/1NL/bv2jlv736B+19L9X/6il/336Ry3979c/aun/gP5RS/8H9Y9a+j+kf9TS/2H9o5b+j+gftfR/VP+opf9j+kct/R/XP2rp/4T+UUv/J/WPWvo/pX/U0v9p/aOW/s/oH7X0f1b/qKX/c/pHLf2f1z9q6f+C/lFJ//EH9I9a+g/SP2rpP1j/qKX/OPpHLf2H6B+19B+qf9TSf1z9o5b+4+kftfQfX/+opf8E+kct/SfUP2rpP5H+UUv/ifWPWvq/Tf+opf8k+kct/d+uf9TSf1L9o5b+79A/auk/mf5RS/936h+19H+X/lFL/8n1j1r6T6F/1NJ/Sv2jlv5T6R+19J9a/6il/zT6Ry39361/1NL/PfpHLf2n1T9q6T+d/lFL//fqH7X0n17/qKX/+/SPWvrPoH/U0n9G/aOW/jPpH7X0n1n/qKX/LPpHLf1n1T9q6T+b/lFL//frH7X0/4D+UUv/2fWPWvp/UP+opf8c+kct/efUP2rpP5f+UUv/ufWPWvrPo3/U0n9e/aOW/vPpH7X0n1//qKX/h/SPWvovoH/U0n9B/aOW/gvpH7X0X1j/qKX/h/WPWvovon/U0v8j+kct/T+qf9TSf1H9o5b+i+kftfRfXP+opf8w/aOW/kvoH7X0X1L/qKX/UvpHLf0/pn/U0n+4/lFL/6X1j1r6L6N/1NJ/Wf2jlv4f1z9q6f8J/aOW/svpH7X0/6T+UUv/T+kftfT/tP5RS//P6B+19F9e/6il/wr6Ry39V9Q/aum/kv5RS/+V9Y9a+q+if9TS/7P6Ry39V9U/aun/Of2jlv6r6R+19P+8/lFL/9X1j1r6r6F/1NJ/Tf2jlv5r6R+19F9b/6il/zr6Ry3919U/aum/nv5RS//19Y9a+m+gf9TSf0P9o5b+G+kftfTfWP+opf8m+kct/b+gf9TSf1P9o5b+m+kftfTfXP+opf8W+kct/bfUP2rpv5X+UUv/L+oftfTfWv+opf82+kct/bfVP2rp/yX9o5b+X9Y/aum/nf5RS//t9Y9a+u+gf9TSf0f9o5b+O+kftfTfWf+opf9X9I9a+n9V/6il/y76Ry39d9U/aum/m/5RS/+v6R+19N9d/6il/x76Ry39v65/1NL/G/pHLf2/qX/U0n9P/aOW/nvpH7X031v/qKX/t/SPWvrvo3/U0n9f/aOW/vvpH7X031//qKX/AfpHLf2/rX/U0v9A/aOW/t/RP2rpf5D+UUv/7+oftfT/nv5RS/+D9Y9a+h+if9TS//v6Ry39f6B/1NL/UP2jlv4/1D9q6X+Y/lFL/x/pH7X0/7H+UUv/w/WPWvofoX/U0v9I/aOW/kfpH7X0P1r/qKX/MfpHLf1/on/U0v9Y/aOW/sfpH7X0/6n+UUv/4/WPWvqfoH/U0v9n+kct/X+uf9TS/0T9o5b+v9A/aul/kv5RS/9f6h+19D9Z/6il/yn6Ry39T9U/aul/mv5RS/9f6R+19P+1/lFL/9P1j1r6/0b/qKX/GfpHLf1/q3/U0v9M/aOW/mfpH7X0P1v/qKX/7/SPWvqfo3/U0v/3+kct/f+gf9TS/4/6Ry39/6R/1NL/z/pHLf3/on/U0v+v+kct/c/VP2rpf57+UUv/8/WPWvpfoH/U0v9v+kct/S/UP2rpf5H+UUv/i/WPWvpfon/U0v/v+kct/f+hf9TS/5/6Ry39L9U/aul/mf5RS//L9Y9a+l+hf9TS/0r9o5b+V+kftfS/Wv+opf81+kct/a/VP2rpf53+UUv/6/WPWvrfoH/U0v9G/aOW/jfpH7X0v1n/qKX/LfpHLf1v1T9q6X+b/lFL/9v1j1r636F/1NL/Tv2jlv536R+19L9b/6il/z36Ry3979U/aul/n/5RS//79Y9a+j+gf9TS/0H9o5b+D+kftfR/WP+opf8j+kct/R/VP2rp/5j+UUv/x/WPWvo/oX/U0v9J/aOW/k/pH7X0f1r/qKX/M/pHLf2f1T9q6f+c/lFL/+f1j1r6v6B/VNJ/ggH9o5b+g/SPWvoP1j9q6T+O/lFL/yH6Ry39h+oftfQfV/+opf94+kct/cfXP2rpP4H+UUv/CfWPWvpPpH/U0n9i/aOW/m/TP2rpP4n+UUv/t+sftfSfVP+opf879I9a+k+mf9TS/536Ry3936V/1NJ/cv2jlv5T6B+19J9S/6il/1T6Ry39p9Y/auk/jf5RS/936x+19H+P/lFL/2n1j1r6T6d/1NL/vfpHLf2n1z9q6f8+/aOW/jPoH7X0n1H/qKX/TPpHLf1n1j9q6T+L/lFL/1n1j1r6z6Z/1NL//fpHLf0/oH/U0n92/aOW/h/UP2rpP4f+UUv/OfWPWvrPpX/0lusPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPx/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuCgAA//91NCn7") openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x220140, 0x0) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = getpid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x3af4701e) 1.406988768s ago: executing program 0 (id=2215): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000300), &(0x7f0000001480)={'syz', 0x2}, &(0x7f00000014c0), 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x94c7, 0x2, 0x0, 0x0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x1000000003}, {}, 0x2040, 0x0, 0x1, 0x1}, [@mark={0xc, 0x15, {0x35075b}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.383089271s ago: executing program 5 (id=2217): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000300), &(0x7f0000001480)={'syz', 0x2}, &(0x7f00000014c0), 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x94c7, 0x2, 0x0, 0x0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x1000000003}, {}, 0x2040, 0x0, 0x1, 0x1}, [@mark={0xc, 0x15, {0x35075b}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.369109646s ago: executing program 2 (id=2218): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet(0x2, 0x3, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 723.040211ms ago: executing program 2 (id=2219): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000940)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TCSETSW2(r1, 0x5435, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000004f0000006400000000000000166ba7", @ANYRESHEX=0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 555.633216ms ago: executing program 3 (id=2220): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 0 (id=2221): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2008000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a56ff111e8292928fcab21ade63ff9e7ce2c502b45b161ff634e6024dc72487d"}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) socket$inet6(0xa, 0x5, 0xfff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000fcff0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x356, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x4, 0x1}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="3100030007"], 0xd) kernel console output (not intermixed with test programs): if_netlink_parms(): no params data found [ 1869.681786][T17247] hfsplus: b-tree write err: -5, ino 4 [ 1869.855073][T18094] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1869.874855][T18094] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1870.204952][T17248] Bluetooth: hci7: Frame reassembly failed (-84) [ 1870.786191][T18094] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1870.798277][T18094] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1871.127520][T18179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1871.136916][T18179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1871.144963][T18179] bridge_slave_0: entered allmulticast mode [ 1871.159085][T18179] bridge_slave_0: entered promiscuous mode [ 1871.230464][T17248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1871.247468][T17248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1871.260741][T18179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1871.278324][T18179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1871.286907][T18179] bridge_slave_1: entered allmulticast mode [ 1871.295077][T18179] bridge_slave_1: entered promiscuous mode [ 1871.406021][T18186] Bluetooth: hci5: command tx timeout [ 1871.471310][T15502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1871.484987][T15502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1871.564488][T18179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1871.599867][T18179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1871.828392][T18179] team0: Port device team_slave_0 added [ 1871.915930][T18179] team0: Port device team_slave_1 added [ 1871.938325][T17984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1872.042615][T18179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1872.051043][T18179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1872.078038][T18179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1872.092088][T18186] Bluetooth: hci7: command 0x1003 tx timeout [ 1872.092113][T18179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1872.098086][T18179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1872.098121][T18179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1872.143468][T12923] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1872.352737][T18244] loop1: detected capacity change from 0 to 2048 [ 1872.379300][T18245] Invalid ELF header magic: != ELF [ 1872.436813][T18244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1872.748314][T18179] hsr_slave_0: entered promiscuous mode [ 1872.766758][T18179] hsr_slave_1: entered promiscuous mode [ 1873.534969][T18179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1873.578412][T18179] Cannot create hsr debugfs directory [ 1873.619136][T18094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1873.792226][ T29] audit: type=1800 audit(2000000484.548:260): pid=18255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1988" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1873.818654][ T29] audit: type=1326 audit(2000000484.548:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18254 comm="syz.3.1988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bdd57def9 code=0x0 [ 1873.872757][T18094] 8021q: adding VLAN 0 to HW filter on device team0 [ 1873.907534][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 1873.943910][ T5500] bridge_slave_1: left allmulticast mode [ 1873.949878][ T5500] bridge_slave_1: left promiscuous mode [ 1873.955748][ T5500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1873.966566][ T5500] bridge_slave_0: left allmulticast mode [ 1873.972706][ T5500] bridge_slave_0: left promiscuous mode [ 1873.979268][ T5500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1874.000434][ T5500] bridge_slave_1: left allmulticast mode [ 1874.006192][ T5500] bridge_slave_1: left promiscuous mode [ 1874.012185][ T5500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1874.021959][ T5500] bridge_slave_0: left allmulticast mode [ 1874.028149][ T5500] bridge_slave_0: left promiscuous mode [ 1874.033924][ T5500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1875.107471][ T5500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1875.120358][ T5500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1875.136675][ T5500] bond0 (unregistering): Released all slaves [ 1875.434198][ T5500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1875.450961][ T5500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1875.463816][ T5500] bond0 (unregistering): Released all slaves [ 1875.544005][T15530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1875.551268][T15530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1875.802445][T15530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1875.809681][T15530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1875.853527][T18253] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1875.881143][T17984] veth0_vlan: entered promiscuous mode [ 1875.987275][ T5500] hsr_slave_0: left promiscuous mode [ 1876.003828][ T5500] hsr_slave_1: left promiscuous mode [ 1876.016211][ T5500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1876.046584][ T5500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1876.096841][ T5500] hsr_slave_0: left promiscuous mode [ 1876.139745][ T5500] hsr_slave_1: left promiscuous mode [ 1876.161928][ T5500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1876.180922][ T5500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1876.266235][ T5500] veth1_vlan: left promiscuous mode [ 1876.272298][ T5500] veth0_vlan: left promiscuous mode [ 1876.288656][ T5500] veth1_vlan: left promiscuous mode [ 1876.294045][ T5500] veth0_vlan: left promiscuous mode [ 1876.408683][ T5295] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1876.622183][ T5295] usb 4-1: Using ep0 maxpacket: 16 [ 1876.630065][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1876.652029][ T5295] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1876.681561][ T5295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.706816][ T5295] usb 4-1: Product: syz [ 1876.718828][ T5295] usb 4-1: Manufacturer: syz [ 1876.730798][ T5295] usb 4-1: SerialNumber: syz [ 1876.747304][ T5295] usb 4-1: config 0 descriptor?? [ 1876.763272][T18186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1876.776357][T18186] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1876.786210][T18186] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1876.795749][T18186] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1876.804402][T18186] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1876.812621][T18186] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1876.998005][ T5295] usb 4-1: USB disconnect, device number 18 [ 1877.470061][ T5500] team0 (unregistering): Port device team_slave_1 removed [ 1877.555004][ T5500] team0 (unregistering): Port device team_slave_0 removed [ 1878.800796][T18186] Bluetooth: hci2: command tx timeout [ 1880.602714][ T5500] team0 (unregistering): Port device team_slave_1 removed [ 1880.761792][ T5500] team0 (unregistering): Port device team_slave_0 removed [ 1880.816917][T18186] Bluetooth: hci2: command tx timeout [ 1880.971061][ C0] vkms_vblank_simulate: vblank timer overrun [ 1881.628445][T12923] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1881.643196][T12923] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1881.655704][T12923] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1881.732852][T12923] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1881.769725][T12923] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1881.793517][T12923] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1882.765533][T12923] Bluetooth: hci2: command tx timeout [ 1883.692233][T18298] overlayfs: failed to resolve './file1': -2 [ 1883.968029][T18186] Bluetooth: hci7: command tx timeout [ 1884.489887][T18303] loop3: detected capacity change from 0 to 512 [ 1884.504300][T18303] ext4: Unknown parameter 'dont_hash' [ 1884.525585][T18303] xt_TCPMSS: Only works on TCP SYN packets [ 1884.690902][T18139] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1884.753301][T18139] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1884.762015][T18186] Bluetooth: hci2: command tx timeout [ 1885.794708][T18139] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1885.826047][T18139] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1885.911349][T18186] Bluetooth: hci7: command tx timeout [ 1889.687142][T18186] Bluetooth: hci7: command tx timeout [ 1889.975396][T18285] chnl_net:caif_netlink_parms(): no params data found [ 1890.092341][T18094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1890.546583][T18261] chnl_net:caif_netlink_parms(): no params data found [ 1890.711484][T18285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1890.738161][T18285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1890.760003][T18285] bridge_slave_0: entered allmulticast mode [ 1890.768314][T18285] bridge_slave_0: entered promiscuous mode [ 1890.784723][T18285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1890.792461][T18285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1890.801424][T18285] bridge_slave_1: entered allmulticast mode [ 1890.811047][T18285] bridge_slave_1: entered promiscuous mode [ 1890.819042][T18179] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1890.936295][T18179] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1890.951231][T18179] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1891.005913][T18139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1891.050172][T18285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1891.105775][T18179] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1891.187396][T18285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1891.261964][T18261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.270986][T18261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.280923][T18261] bridge_slave_0: entered allmulticast mode [ 1891.288612][T18261] bridge_slave_0: entered promiscuous mode [ 1891.399042][T18261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.406321][T18261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.416908][T18261] bridge_slave_1: entered allmulticast mode [ 1891.424817][T18261] bridge_slave_1: entered promiscuous mode [ 1891.466604][T18285] team0: Port device team_slave_0 added [ 1891.502326][T18139] 8021q: adding VLAN 0 to HW filter on device team0 [ 1891.538834][T18261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1891.551160][T18285] team0: Port device team_slave_1 added [ 1891.607984][T18186] Bluetooth: hci7: command tx timeout [ 1891.609209][T18261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1891.654794][T17248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.661982][T17248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1891.677518][T18094] veth0_vlan: entered promiscuous mode [ 1891.720325][T18285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1891.727613][T18285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1891.759351][T18285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1891.775797][T18285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1891.782971][T18285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1891.809832][T18285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1891.920441][T18261] team0: Port device team_slave_0 added [ 1891.939930][T18261] team0: Port device team_slave_1 added [ 1891.955726][ T5474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.962978][ T5474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1891.990988][T18285] hsr_slave_0: entered promiscuous mode [ 1891.997764][T18285] hsr_slave_1: entered promiscuous mode [ 1892.005103][T18285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1892.013026][T18285] Cannot create hsr debugfs directory [ 1892.129378][T18094] veth1_vlan: entered promiscuous mode [ 1892.139282][T18261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1892.149458][T18261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1892.176001][T18261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1892.245243][T18261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1892.252860][T18261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1892.281390][T18261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1892.423009][ T5500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.601021][ T5500] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.637881][T18261] hsr_slave_0: entered promiscuous mode [ 1892.644736][T18261] hsr_slave_1: entered promiscuous mode [ 1892.654859][T18261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1892.668106][T18261] Cannot create hsr debugfs directory [ 1892.748165][ T5500] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.919910][ T5500] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.941401][T18139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1893.194787][T18094] veth0_macvtap: entered promiscuous mode [ 1893.222798][T18094] veth1_macvtap: entered promiscuous mode [ 1893.476589][T18179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1893.560159][ T5500] bridge_slave_1: left allmulticast mode [ 1893.566763][ T5500] bridge_slave_1: left promiscuous mode [ 1893.575278][ T5500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.595924][ T5500] bridge_slave_0: left allmulticast mode [ 1893.610029][ T5500] bridge_slave_0: left promiscuous mode [ 1893.616323][ T5500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.633440][ T5500] bridge_slave_1: left allmulticast mode [ 1893.639501][ T5500] bridge_slave_1: left promiscuous mode [ 1893.645216][ T5500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.654905][ T5500] bridge_slave_0: left allmulticast mode [ 1893.660806][ T5500] bridge_slave_0: left promiscuous mode [ 1893.669650][ T5500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1894.691835][ T5500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1894.711559][ T5500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1894.732655][ T5500] bond0 (unregistering): Released all slaves [ 1894.989987][ T5500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1895.008935][ T5500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1895.030831][ T5500] bond0 (unregistering): Released all slaves [ 1895.056115][T18179] 8021q: adding VLAN 0 to HW filter on device team0 [ 1895.108847][T18094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1895.135885][T18094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1895.147480][T18094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1895.158394][T18094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1895.168343][T18094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1895.179195][T18094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1895.211431][T18094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1895.315184][T15530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1895.322529][T15530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1895.356007][T15530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1895.363233][T15530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1895.471126][T18094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1895.486267][T18094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1895.497766][T18094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1895.508848][T18094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1895.519397][T18094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1895.531943][T18094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1895.544741][T18094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1895.555571][T18139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1895.712421][T18094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.724977][T18094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.733707][T18094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.746395][T18094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.821699][T18179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1895.856645][T18285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1895.945554][T18285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1895.974176][T18285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1896.000937][T18285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1896.032067][ T5500] hsr_slave_0: left promiscuous mode [ 1896.046472][ T5500] hsr_slave_1: left promiscuous mode [ 1896.055477][ T5500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1896.071872][ T5500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1896.088238][ T5500] hsr_slave_0: left promiscuous mode [ 1896.094284][ T5500] hsr_slave_1: left promiscuous mode [ 1896.105349][ T5500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1896.112887][ T5500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1896.125573][ T5500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1896.133064][ T5500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1896.180444][ T5500] veth0_vlan: left promiscuous mode [ 1896.187378][ T5500] veth1_macvtap: left promiscuous mode [ 1896.193281][ T5500] veth0_macvtap: left promiscuous mode [ 1896.198978][ T5500] veth1_vlan: left promiscuous mode [ 1896.205169][ T5500] veth0_vlan: left promiscuous mode [ 1896.981042][ T5500] team0 (unregistering): Port device team_slave_1 removed [ 1897.061098][ T5500] team0 (unregistering): Port device team_slave_0 removed [ 1898.533890][ T5500] team0 (unregistering): Port device team_slave_1 removed [ 1898.604287][ T5500] team0 (unregistering): Port device team_slave_0 removed [ 1899.605720][T18139] veth0_vlan: entered promiscuous mode [ 1899.817082][T18139] veth1_vlan: entered promiscuous mode [ 1899.881466][T18179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1900.095777][T18139] veth0_macvtap: entered promiscuous mode [ 1900.144416][T18139] veth1_macvtap: entered promiscuous mode [ 1900.458331][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.488942][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.530042][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.555824][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.573820][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.584706][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.632982][T18139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1900.678016][T18261] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1900.884336][T12923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1900.927334][ T5248] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1900.940640][ T5248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1900.943188][T18285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1900.961934][ T5248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1900.971760][ T5248] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1900.975816][T18261] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1900.987227][ T5248] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1901.047384][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.060704][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.070673][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.081142][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.091054][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.101532][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.113556][T18139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1901.128009][T18139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.136737][T18139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.150056][T18139] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.158826][T18139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.171251][T18261] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1901.239798][T18261] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1901.264869][T18285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1901.330224][ T5474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.337458][ T5474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1901.348866][ T5474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1901.356155][ T5474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1901.377852][T18179] veth0_vlan: entered promiscuous mode [ 1901.523826][T18179] veth1_vlan: entered promiscuous mode [ 1901.639626][T15502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1901.657117][T15502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1901.739849][T18179] veth0_macvtap: entered promiscuous mode [ 1901.808770][T17248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1901.917495][T17248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1901.979777][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1901.989630][T18179] veth1_macvtap: entered promiscuous mode [ 1902.002047][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1902.088131][T17248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.165773][T18179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1902.184275][T18179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.194997][T18179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1902.207152][T18179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.217043][T18179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1902.227648][T18179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.237702][T18179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1902.248288][T18179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.261926][T18179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1902.387984][T17248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.429723][T18179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1902.445297][T18179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.455996][T18179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1902.469143][T18179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.480714][T18179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1902.499470][T18179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.517481][T18179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1902.536400][T18179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.550477][T18179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1902.598145][T18179] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.640738][T18179] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.660635][T18179] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.699814][T18179] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.742113][T18371] chnl_net:caif_netlink_parms(): no params data found [ 1902.967005][T18186] Bluetooth: hci0: command tx timeout [ 1903.355570][T18261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1903.390450][T18285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1904.712967][T18393] loop3: detected capacity change from 0 to 1024 [ 1904.738294][ T69] hfsplus: b-tree write err: -5, ino 4 [ 1904.838136][T18371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1904.865484][T18371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1904.882165][T18371] bridge_slave_0: entered allmulticast mode [ 1904.906962][T18371] bridge_slave_0: entered promiscuous mode [ 1904.937556][T18261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1904.958313][ T5248] Bluetooth: hci0: command tx timeout [ 1905.106823][T18400] xt_l2tp: v2 sid > 0xffff: 16777216 [ 1905.116771][ T5490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.120329][T18371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1905.138283][ T5490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1905.156310][T18371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1905.172911][T18371] bridge_slave_1: entered allmulticast mode [ 1905.206673][T18371] bridge_slave_1: entered promiscuous mode [ 1905.288368][T17248] bridge_slave_1: left allmulticast mode [ 1905.298056][T17248] bridge_slave_1: left promiscuous mode [ 1905.315157][T17248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1905.347403][T17248] bridge_slave_0: left allmulticast mode [ 1905.356150][T17248] bridge_slave_0: left promiscuous mode [ 1905.371275][T17248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1905.958905][T18186] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1906.931752][T18186] Bluetooth: hci0: command tx timeout [ 1907.003184][T18412] loop2: detected capacity change from 0 to 64 [ 1907.266970][ C1] vkms_vblank_simulate: vblank timer overrun [ 1907.386376][T17248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1907.403677][T17248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1907.419513][T17248] bond0 (unregistering): Released all slaves [ 1907.436687][ T5490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.443853][ T5490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1907.989645][T18371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1908.336311][ T5490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.343742][ T5490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1908.378360][T18371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1908.678743][ T5490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1908.687698][ T5490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1908.912881][T18186] Bluetooth: hci0: command tx timeout [ 1909.676123][T18371] team0: Port device team_slave_0 added [ 1909.727826][T17248] hsr_slave_0: left promiscuous mode [ 1909.753995][T17248] hsr_slave_1: left promiscuous mode [ 1909.800464][T17248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1909.852209][T17248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1909.883234][T17248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1909.924052][T18424] loop2: detected capacity change from 0 to 1024 [ 1909.940016][T17248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1909.961872][T18424] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1909.972099][T18424] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1909.978141][T18426] futex_wake_op: syz.5.1859 tries to shift op by -1; fix this program [ 1909.994875][T18424] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1910.038276][T18424] EXT4-fs error (device loop2): ext4_get_journal_inode:5740: inode #5: comm syz.2.2012: unexpected bad inode w/o EXT4_IGET_BAD [ 1910.054139][T18424] EXT4-fs (loop2): no journal found [ 1910.075658][T18424] EXT4-fs (loop2): can't get journal size [ 1910.086593][T17248] veth1_macvtap: left promiscuous mode [ 1910.154707][T17248] veth0_macvtap: left promiscuous mode [ 1910.160383][T17248] veth1_vlan: left promiscuous mode [ 1910.167112][T18424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1910.248137][T17248] veth0_vlan: left promiscuous mode [ 1910.589895][T18139] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1910.971815][T18186] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1910.981100][T18186] Bluetooth: hci4: Injecting HCI hardware error event [ 1910.992558][T18186] Bluetooth: hci4: hardware error 0x00 [ 1911.475641][ C1] vkms_vblank_simulate: vblank timer overrun [ 1913.051367][T18186] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1913.740867][T18463] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1913.747435][T18463] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1913.777030][T18463] vhci_hcd vhci_hcd.0: Device attached [ 1913.825770][T18464] vhci_hcd: connection closed [ 1913.837693][ T5500] vhci_hcd: stop threads [ 1913.849260][ T5500] vhci_hcd: release socket [ 1913.853699][ T5500] vhci_hcd: disconnect device [ 1913.907059][T17248] team0 (unregistering): Port device team_slave_1 removed [ 1913.987535][T17248] team0 (unregistering): Port device team_slave_0 removed [ 1914.556482][T18470] overlayfs: failed to resolve './file1': -2 [ 1915.806493][T18371] team0: Port device team_slave_1 added [ 1915.923827][T18474] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1916.169817][T18371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1916.177781][T18371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1916.214588][T18371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1916.230908][T18371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1916.239699][T18371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1916.267575][T18371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1916.789492][T18285] veth0_vlan: entered promiscuous mode [ 1918.063598][T18285] veth1_vlan: entered promiscuous mode [ 1918.369287][T18371] hsr_slave_0: entered promiscuous mode [ 1918.611766][T18371] hsr_slave_1: entered promiscuous mode [ 1918.954690][ T5248] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1918.966823][ T5248] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1918.978499][ T5248] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1918.990257][ T5248] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1918.998229][ T5248] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1919.005849][ T5248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1919.771747][T18512] loop5: detected capacity change from 0 to 128 [ 1920.589646][T18512] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1920.602209][T18512] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1920.619140][T18285] veth0_macvtap: entered promiscuous mode [ 1920.974480][T18179] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1921.047768][ T5248] Bluetooth: hci1: command tx timeout [ 1921.097108][T18285] veth1_macvtap: entered promiscuous mode [ 1921.135929][T18519] Bluetooth: MGMT ver 1.23 [ 1921.513291][T18526] loop2: detected capacity change from 0 to 1764 [ 1921.526439][T18285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1921.559092][T18526] iso9660: Invalid gid '0x00000000ffffffff' [ 1921.618032][T18285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.644729][T18285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1921.666941][T18285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.677962][T18285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1921.688802][T18285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.699327][T18285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1921.855998][T18285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.874564][T18285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1921.886866][T18261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1922.548901][T18285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1922.740218][T18285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1922.757732][T18285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1922.772871][T18285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1922.787449][T18285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1922.829447][T18285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1922.864323][T18285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1922.883678][T18526] loop2: detected capacity change from 0 to 4096 [ 1922.889050][T18285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1922.980083][T18285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1923.003871][T18526] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1923.016173][ T5248] Bluetooth: hci1: command tx timeout [ 1923.053411][T18526] NILFS (loop2): trying rollback from an earlier position [ 1923.129044][T18526] NILFS (loop2): recovery complete [ 1923.150286][T18535] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1923.339809][ T9018] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1923.553769][ T9018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1923.585995][ T9018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1923.616513][ T9018] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1923.622362][T18285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.647697][T18285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.654658][ T9018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.661516][T18285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.687557][T18285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.690835][ T9018] usb 6-1: config 0 descriptor?? [ 1924.324019][ T9018] isku 0003:1E7D:319C.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 1924.487992][T18261] veth0_vlan: entered promiscuous mode [ 1924.495900][ T9018] isku 0003:1E7D:319C.000E: couldn't init struct isku_device [ 1924.512790][ T9018] isku 0003:1E7D:319C.000E: couldn't install keyboard [ 1924.531782][ T9018] isku 0003:1E7D:319C.000E: probe with driver isku failed with error -71 [ 1924.554492][T18233] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1924.573377][T17248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1924.593664][ T9018] usb 6-1: USB disconnect, device number 7 [ 1924.616886][T17248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1924.746307][T18261] veth1_vlan: entered promiscuous mode [ 1924.802442][T18233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1924.820539][T18233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1924.828828][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1924.835004][T18233] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1924.855543][T18233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.876801][T18233] usb 3-1: config 0 descriptor?? [ 1924.924563][ T5474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1924.940793][T18503] chnl_net:caif_netlink_parms(): no params data found [ 1924.967292][ T5474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1925.008508][ T5248] Bluetooth: hci1: command tx timeout [ 1925.023320][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.092158][T18233] ath6kl: Failed to submit usb control message: -71 [ 1925.107046][T18233] ath6kl: unable to send the bmi data to the device: -71 [ 1925.116891][T18233] ath6kl: Unable to send get target info: -71 [ 1925.129291][T18233] ath6kl: Failed to init ath6kl core: -71 [ 1925.187691][T18233] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1925.214920][T18233] usb 3-1: USB disconnect, device number 14 [ 1925.354605][T18551] xt_limit: Overflow, try lower: 0/0 [ 1925.376925][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.560435][T18371] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1925.630647][T18371] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1925.677441][T18558] trusted_key: encrypted_key: insufficient parameters specified [ 1925.687153][T18261] veth0_macvtap: entered promiscuous mode [ 1926.458283][T18556] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2033'. [ 1926.712697][T18566] loop2: detected capacity change from 0 to 512 [ 1926.892394][ T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.979623][T18566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1927.002857][ T5248] Bluetooth: hci1: command tx timeout [ 1927.020800][T18577] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2036'. [ 1927.180341][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 1927.211817][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 1927.212816][T18566] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1927.867007][T18371] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1927.873728][T18566] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.2034: Directory hole found for htree leaf block 0 [ 1928.081675][T18371] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1928.224462][T18261] veth1_macvtap: entered promiscuous mode [ 1928.262419][T18503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1928.285816][T18503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1928.320160][T18503] bridge_slave_0: entered allmulticast mode [ 1928.339110][T18503] bridge_slave_0: entered promiscuous mode [ 1928.415943][T18503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1928.521577][T18503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1928.552659][T18503] bridge_slave_1: entered allmulticast mode [ 1928.596520][T18503] bridge_slave_1: entered promiscuous mode [ 1928.611570][T18139] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1928.831348][T18503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1928.894282][T18598] loop2: detected capacity change from 0 to 256 [ 1928.904887][T18503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1928.927174][T18598] exfat: Deprecated parameter 'utf8' [ 1928.959876][T18598] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 1929.163540][ T29] audit: type=1800 audit(2000000020.347:262): pid=18598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2040" name="bus" dev="loop2" ino=1048906 res=0 errno=0 [ 1929.244074][T18503] team0: Port device team_slave_0 added [ 1929.282716][T18503] team0: Port device team_slave_1 added [ 1929.358710][T18261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.262201][T18261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.307615][T18261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.320761][T18261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.331012][T18261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.341747][T18261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.352842][T18261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.365202][T18261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.401211][T18261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.414641][T18261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.431289][T18261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1930.442208][T18605] Bluetooth: MGMT ver 1.23 [ 1930.884791][T18615] loop5: detected capacity change from 0 to 16 [ 1930.931031][T18615] erofs: (device loop5): mounted with root inode @ nid 36. [ 1931.475218][T18503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1931.507040][T18503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1931.572216][T18503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1931.695136][T18261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1931.725818][T18261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1931.741289][T18261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1931.753151][T18261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1931.763156][T18261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1931.781979][T18261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1931.811679][T18261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1931.840036][T18261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1931.859324][T18261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1931.886477][T18261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1931.900371][T18261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1931.968511][T18503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1931.981804][T18503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1932.020560][T18503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1932.065051][ T69] bridge_slave_1: left allmulticast mode [ 1932.071624][ T69] bridge_slave_1: left promiscuous mode [ 1932.077500][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1932.098604][ T69] bridge_slave_0: left allmulticast mode [ 1932.104621][ T69] bridge_slave_0: left promiscuous mode [ 1932.111056][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1932.791583][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1932.805700][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1932.817780][ T69] bond0 (unregistering): Released all slaves [ 1932.868938][T18261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1932.878947][T18261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1932.887685][T18261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1932.907451][T18261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.065387][T18503] hsr_slave_0: entered promiscuous mode [ 1933.082698][T18503] hsr_slave_1: entered promiscuous mode [ 1933.095172][T18503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1933.111688][T18503] Cannot create hsr debugfs directory [ 1933.585763][ T69] hsr_slave_0: left promiscuous mode [ 1933.592171][ T69] hsr_slave_1: left promiscuous mode [ 1933.610501][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1933.620355][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1933.640356][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1933.647956][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1933.729646][ T69] veth1_macvtap: left promiscuous mode [ 1933.735275][ T69] veth0_macvtap: left promiscuous mode [ 1933.745987][ T69] veth1_vlan: left promiscuous mode [ 1933.751405][ T69] veth0_vlan: left promiscuous mode [ 1934.686207][T18186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1934.718876][T18186] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1934.746829][T18186] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1934.778038][T18186] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1934.786385][T18186] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1934.794473][T18186] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1934.879285][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1934.949299][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1936.823790][ T5248] Bluetooth: hci3: command tx timeout [ 1937.849246][T18371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1938.272356][ T9018] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1938.520454][T18661] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2047'. [ 1938.520509][ T9018] usb 6-1: Using ep0 maxpacket: 16 [ 1938.815956][ T5248] Bluetooth: hci3: command tx timeout [ 1939.036283][ T9018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1939.313478][ T9018] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1939.563586][ T9018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.597900][ T9018] usb 6-1: config 0 descriptor?? [ 1944.742366][ T5248] Bluetooth: hci3: command tx timeout [ 1944.748941][ T9018] usb 6-1: can't set config #0, error -110 [ 1945.250552][T12478] usb 6-1: USB disconnect, device number 8 [ 1946.375122][ T29] audit: type=1326 audit(2000000038.408:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18677 comm="syz.5.2051" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e35d7def9 code=0x0 [ 1946.393092][T18371] 8021q: adding VLAN 0 to HW filter on device team0 [ 1946.583019][ T29] audit: type=1326 audit(2000000038.575:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18677 comm="syz.5.2051" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e35d7def9 code=0x0 [ 1946.905774][T18186] Bluetooth: hci3: command tx timeout [ 1946.935047][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1946.942211][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1947.820055][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1947.827274][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1947.957859][T18693] loop2: detected capacity change from 0 to 512 [ 1947.985145][T18693] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1948.022104][T18693] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.2053: corrupted in-inode xattr: invalid ea_ino [ 1948.139906][T18693] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2053: couldn't read orphan inode 12 (err -117) [ 1948.190754][T18693] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1949.424996][T18139] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1949.771667][T18639] chnl_net:caif_netlink_parms(): no params data found [ 1950.060076][T18715] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1951.651438][ T69] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1951.969512][T18729] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2060'. [ 1953.050084][ T69] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.837690][ T69] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.995089][T18639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1954.014535][T18639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1954.091281][T18639] bridge_slave_0: entered allmulticast mode [ 1954.100040][T18639] bridge_slave_0: entered promiscuous mode [ 1954.333890][ T69] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1954.388316][T18639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1954.401687][T18751] loop5: detected capacity change from 0 to 256 [ 1954.409302][T18639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1954.429191][T18639] bridge_slave_1: entered allmulticast mode [ 1954.455499][T18639] bridge_slave_1: entered promiscuous mode [ 1954.540210][T18751] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1954.754120][T18639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1954.879953][T18639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1955.054562][T18503] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1955.154677][T18503] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1955.381970][T18639] team0: Port device team_slave_0 added [ 1955.400699][T18639] team0: Port device team_slave_1 added [ 1956.376433][T18503] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1956.445653][T18639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1956.445676][T18639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1956.445702][T18639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1956.447505][T18639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1956.447521][T18639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1956.447547][T18639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1956.534456][T18503] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1956.678266][T18371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1957.209539][ T69] bridge_slave_1: left allmulticast mode [ 1957.215395][ T69] bridge_slave_1: left promiscuous mode [ 1957.312029][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1957.408638][ T69] bridge_slave_0: left allmulticast mode [ 1957.435886][ T69] bridge_slave_0: left promiscuous mode [ 1957.686231][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1957.920164][T18787] loop5: detected capacity change from 0 to 2048 [ 1958.120193][T18186] Bluetooth: hci5: unexpected event 0x30 length: 4 > 3 [ 1958.432666][ T4678] loop5: p1 < > p4 [ 1958.496953][ T4678] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1958.775936][T18362] udevd[18362]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1958.794216][T18397] udevd[18397]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1959.018854][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1959.255565][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1959.295746][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1959.363804][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1959.402155][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1959.427213][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1959.456899][T18799] loop2: detected capacity change from 0 to 512 [ 1959.484951][T18799] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1959.496439][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1959.519369][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1959.591768][T18799] EXT4-fs (loop2): 1 truncate cleaned up [ 1959.603542][T18799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1959.984633][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 1959.997255][ T9] usbtmc 1-1:16.0: can't read capabilities [ 1960.067344][ T5248] Bluetooth: hci5: command tx timeout [ 1960.979388][T18139] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1961.038253][T18186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1961.081743][T18186] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1961.102080][T18186] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1961.110537][T18186] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1961.140830][T18186] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1961.159024][T18186] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1961.604118][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1961.621679][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1961.642681][ T69] bond0 (unregistering): Released all slaves [ 1961.677396][T18639] hsr_slave_0: entered promiscuous mode [ 1961.703912][T18639] hsr_slave_1: entered promiscuous mode [ 1961.739604][T18639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1961.751511][T18639] Cannot create hsr debugfs directory [ 1962.101401][ T5294] usb 1-1: USB disconnect, device number 21 [ 1962.252875][ T69] hsr_slave_0: left promiscuous mode [ 1962.286799][ T69] hsr_slave_1: left promiscuous mode [ 1962.312534][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1962.352914][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1962.674702][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1963.050103][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1963.191727][T18186] Bluetooth: hci2: command tx timeout [ 1964.680623][ T69] veth1_macvtap: left promiscuous mode [ 1964.686449][ T69] veth0_macvtap: left promiscuous mode [ 1964.692216][ T69] veth1_vlan: left promiscuous mode [ 1964.709950][ T69] veth0_vlan: left promiscuous mode [ 1965.268813][T18186] Bluetooth: hci2: command tx timeout [ 1969.512001][T18186] Bluetooth: hci2: command tx timeout [ 1971.219686][T18233] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1971.433976][T18186] Bluetooth: hci2: command tx timeout [ 1972.309605][T18233] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1972.342664][T18233] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1972.365252][T18233] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1972.404779][T18233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.493641][T18233] usb 6-1: config 0 descriptor?? [ 1972.827264][ T5248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1972.843755][ T5248] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1972.853083][ T5248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1972.863098][ T5248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1972.871242][ T5248] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1972.879285][ T5248] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1973.368683][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1973.536558][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1973.836827][T18863] netlink: 165 bytes leftover after parsing attributes in process `syz.5.2080'. [ 1974.296613][T18233] usb 6-1: string descriptor 0 read error: -71 [ 1974.312137][T18233] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #200: -71 [ 1974.330654][T18233] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71 [ 1974.339498][T18233] uclogic 0003:256C:006D.000F: failed probing pen v2 parameters: -71 [ 1974.357569][T18233] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 1974.366833][T18233] uclogic 0003:256C:006D.000F: probe with driver uclogic failed with error -71 [ 1974.389969][T18233] usb 6-1: USB disconnect, device number 9 [ 1974.504713][ T5248] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1974.530939][ T5248] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1974.542728][ T5248] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1974.586814][ T5248] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1974.594786][ T5248] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1974.603024][ T5248] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1974.862036][T18186] Bluetooth: hci0: command tx timeout [ 1976.556096][T18186] Bluetooth: hci8: command tx timeout [ 1976.846553][T18186] Bluetooth: hci0: command tx timeout [ 1978.514597][T18186] Bluetooth: hci8: command tx timeout [ 1978.830279][T18186] Bluetooth: hci0: command tx timeout [ 1979.281534][ T29] audit: type=1800 audit(2000000072.933:265): pid=18894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2087" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1979.576771][T18904] loop2: detected capacity change from 0 to 164 [ 1979.586198][T18901] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2089'. [ 1980.508088][T18186] Bluetooth: hci8: command tx timeout [ 1980.812363][ T5248] Bluetooth: hci0: command tx timeout [ 1982.483273][ T5248] Bluetooth: hci8: command tx timeout [ 1982.783322][ T5248] Bluetooth: hci5: command 0x0406 tx timeout [ 1984.810729][T18865] chnl_net:caif_netlink_parms(): no params data found [ 1985.400337][T18806] chnl_net:caif_netlink_parms(): no params data found [ 1985.405197][T18954] loop5: detected capacity change from 0 to 2048 [ 1985.458846][T18954] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1985.809851][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 1985.816902][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 1988.532736][T18856] chnl_net:caif_netlink_parms(): no params data found [ 1989.644311][T18978] loop2: detected capacity change from 0 to 256 [ 1993.260079][T18639] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1993.717555][T18865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1993.751908][T18865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1993.778846][T18865] bridge_slave_0: entered allmulticast mode [ 1994.327839][T19001] 9pnet_fd: Insufficient options for proto=fd [ 1994.391087][T19001] loop2: detected capacity change from 0 to 4096 [ 1995.034718][T18865] bridge_slave_0: entered promiscuous mode [ 1995.081442][T18865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1995.127472][T19007] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1995.169832][T18865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1995.224549][T18865] bridge_slave_1: entered allmulticast mode [ 1995.485954][T18865] bridge_slave_1: entered promiscuous mode [ 1995.714281][T18806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1995.743580][T18806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1995.750848][T18806] bridge_slave_0: entered allmulticast mode [ 1995.780308][T19010] loop5: detected capacity change from 0 to 512 [ 1995.817287][T18806] bridge_slave_0: entered promiscuous mode [ 1996.066889][T19010] EXT4-fs (loop5): blocks per group (71) and clusters per group (20800) inconsistent [ 1996.081984][ T5248] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1996.272465][ T5248] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1996.348626][ T5248] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1996.371276][ T5248] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1996.465991][ T5248] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1996.476227][ T5248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1997.879145][T18806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1997.886771][T18806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1997.914481][T18806] bridge_slave_1: entered allmulticast mode [ 1997.928610][T18806] bridge_slave_1: entered promiscuous mode [ 1998.066066][T19037] raw_sendmsg: syz.5.2106 forgot to set AF_INET. Fix it! [ 1998.909228][T19040] loop2: detected capacity change from 0 to 1024 [ 1999.034393][T18865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1999.102896][T18865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1999.265265][T19044] loop5: detected capacity change from 0 to 128 [ 1999.306553][T18806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1999.379511][T18806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1999.479234][ T5248] Bluetooth: hci1: command tx timeout [ 1999.540035][T18856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1999.556340][T18856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.563953][T18856] bridge_slave_0: entered allmulticast mode [ 1999.579648][T18856] bridge_slave_0: entered promiscuous mode [ 1999.599206][T18856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1999.607007][T18856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.617718][T18856] bridge_slave_1: entered allmulticast mode [ 1999.628886][T18856] bridge_slave_1: entered promiscuous mode [ 2000.078145][T18806] team0: Port device team_slave_0 added [ 2000.102443][T18806] team0: Port device team_slave_1 added [ 2000.270442][T19047] loop2: detected capacity change from 0 to 32768 [ 2000.378141][T18865] team0: Port device team_slave_0 added [ 2000.419689][T18865] team0: Port device team_slave_1 added [ 2000.437144][T18856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2000.455620][T18856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2001.136324][T18806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2001.173999][T18806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2001.217205][T18806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2001.454108][ T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2001.470576][ T5248] Bluetooth: hci1: command tx timeout [ 2001.581437][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888058490400: rx timeout, send abort [ 2001.590562][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888058492400: rx timeout, send abort [ 2001.599434][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888058490400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2001.616564][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888058492400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2001.864055][T18856] team0: Port device team_slave_0 added [ 2001.877439][T18806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2001.884624][T18806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2001.923441][T18806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2001.950166][T18865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2001.958792][T18865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2002.040717][T18865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2002.242132][T18865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2002.346973][T18865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2002.452159][T18865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2002.614444][ T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2002.724643][T18856] team0: Port device team_slave_1 added [ 2002.824207][T19065] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2114'. [ 2003.443343][ T5248] Bluetooth: hci1: command tx timeout [ 2003.627293][T19066] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2115'. [ 2003.969615][T19068] loop2: detected capacity change from 0 to 1024 [ 2003.983947][T19068] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2003.999196][ T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.023667][T19068] EXT4-fs: Ignoring removed bh option [ 2004.039841][T19068] EXT4-fs: Ignoring removed nobh option [ 2004.080716][T19068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2004.118522][T18856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2004.136546][T18856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2004.361755][T18856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2005.180315][T18139] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2005.319044][T19082] loop2: detected capacity change from 0 to 512 [ 2005.329747][T19082] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2005.369885][T19082] EXT4-fs (loop2): 1 truncate cleaned up [ 2005.376717][T19082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2005.404107][ T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.569027][ T5248] Bluetooth: hci1: command tx timeout [ 2005.687942][T18856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2005.696035][T18856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2005.722574][T18856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2006.057607][T18865] hsr_slave_0: entered promiscuous mode [ 2006.131450][T18865] hsr_slave_1: entered promiscuous mode [ 2006.150485][T18865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2006.168494][T18865] Cannot create hsr debugfs directory [ 2006.398940][T18139] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2007.900964][T19096] ubi0: attaching mtd0 [ 2007.922475][T19096] ubi0: scanning is finished [ 2007.927210][T19096] ubi0: empty MTD device detected [ 2007.994425][T19099] Bluetooth: MGMT ver 1.23 [ 2009.102174][T19096] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 2009.110731][T19096] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 2009.160017][T19096] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 2009.200348][T19096] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 2009.234236][T19096] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 2009.260588][T19096] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 2009.274646][T19096] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2764437611 [ 2009.299926][T18806] hsr_slave_0: entered promiscuous mode [ 2009.305917][T19096] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 2009.325880][T19103] ubi0: background thread "ubi_bgt0d" started, PID 19103 [ 2009.369360][T19106] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2122'. [ 2009.417669][T18806] hsr_slave_1: entered promiscuous mode [ 2009.434715][T18806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2009.456265][T18806] Cannot create hsr debugfs directory [ 2009.676593][T19016] chnl_net:caif_netlink_parms(): no params data found [ 2009.872971][T18856] hsr_slave_0: entered promiscuous mode [ 2009.913322][T18856] hsr_slave_1: entered promiscuous mode [ 2009.980104][T18856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2009.988175][T18856] Cannot create hsr debugfs directory [ 2010.221490][T19114] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2124'. [ 2010.557514][T19120] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2125'. [ 2010.802607][ T29] audit: type=1800 audit(2000000106.010:266): pid=19126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2126" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2010.857213][ T29] audit: type=1326 audit(2000000106.052:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19125 comm="syz.5.2126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e35d7def9 code=0x0 [ 2010.932075][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2126'. [ 2011.628752][T19139] loop2: detected capacity change from 0 to 256 [ 2011.637218][T19139] exfat: Deprecated parameter 'namecase' [ 2011.669637][T19139] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 2011.842162][T19139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2128'. [ 2013.076113][T19150] orangefs_mount: mount request failed with -4 [ 2013.088114][T19016] bridge0: port 1(bridge_slave_0) entered blocking state [ 2013.095299][T19016] bridge0: port 1(bridge_slave_0) entered disabled state [ 2013.234567][T19016] bridge_slave_0: entered allmulticast mode [ 2013.247542][T19016] bridge_slave_0: entered promiscuous mode [ 2013.388594][T19016] bridge0: port 2(bridge_slave_1) entered blocking state [ 2014.168852][T19157] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2014.373364][T19016] bridge0: port 2(bridge_slave_1) entered disabled state [ 2014.440114][T19016] bridge_slave_1: entered allmulticast mode [ 2014.475289][T19016] bridge_slave_1: entered promiscuous mode [ 2014.508605][ T69] bridge_slave_1: left allmulticast mode [ 2014.525213][ T69] bridge_slave_1: left promiscuous mode [ 2014.532181][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 2014.572149][ T69] bridge_slave_0: left allmulticast mode [ 2014.582637][ T69] bridge_slave_0: left promiscuous mode [ 2014.610680][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 2014.642347][ T69] bridge_slave_1: left allmulticast mode [ 2014.648011][ T69] bridge_slave_1: left promiscuous mode [ 2014.695013][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 2014.780012][ T69] bridge_slave_0: left allmulticast mode [ 2014.790146][ T69] bridge_slave_0: left promiscuous mode [ 2014.796396][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 2014.810845][T19166] use of bytesused == 0 is deprecated and will be removed in the future, [ 2014.823844][ T69] bridge_slave_1: left allmulticast mode [ 2014.829516][ T69] bridge_slave_1: left promiscuous mode [ 2014.836910][T19166] use the actual size instead. [ 2014.869461][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 2014.912928][ T69] bridge_slave_0: left allmulticast mode [ 2014.946639][ T69] bridge_slave_0: left promiscuous mode [ 2014.952466][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 2015.582890][T19170] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2134'. [ 2016.477651][T19176] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2135'. [ 2018.764041][T18186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2018.780450][T18186] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2018.792588][T18186] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2018.805906][T18186] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2018.843011][T18186] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2018.850454][T18186] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2019.313710][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2019.325865][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2019.340309][ T69] bond0 (unregistering): Released all slaves [ 2019.595573][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2019.610275][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2019.622181][ T69] bond0 (unregistering): Released all slaves [ 2019.876553][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2019.898327][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2019.914489][ T69] bond0 (unregistering): Released all slaves [ 2020.370391][T19164] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 2020.376212][T19164] pim6reg0: linktype set to 776 [ 2020.543537][T19016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2020.595175][T19016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2020.827535][T18186] Bluetooth: hci3: command tx timeout [ 2022.073832][T19016] team0: Port device team_slave_0 added [ 2022.134963][T19016] team0: Port device team_slave_1 added [ 2022.314797][ T69] hsr_slave_0: left promiscuous mode [ 2022.368519][ T69] hsr_slave_1: left promiscuous mode [ 2022.381134][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2022.412435][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2022.461582][ T69] hsr_slave_0: left promiscuous mode [ 2022.517404][ T69] hsr_slave_1: left promiscuous mode [ 2022.543983][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2022.574349][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2022.609618][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2022.632331][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2022.707747][ T69] hsr_slave_0: left promiscuous mode [ 2022.727956][ T69] hsr_slave_1: left promiscuous mode [ 2022.751242][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2022.787399][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2022.806631][T18186] Bluetooth: hci3: command tx timeout [ 2022.899946][ T69] veth1_macvtap: left promiscuous mode [ 2022.913802][ T69] veth0_macvtap: left promiscuous mode [ 2022.919626][ T69] veth1_vlan: left promiscuous mode [ 2022.931366][ T69] veth0_vlan: left promiscuous mode [ 2024.823037][T18186] Bluetooth: hci3: command tx timeout [ 2024.864442][T19229] loop5: detected capacity change from 0 to 1024 [ 2026.574245][T19229] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2026.954522][T18186] Bluetooth: hci3: command tx timeout [ 2027.926209][T19233] syz.2.2144 (19233): drop_caches: 2 [ 2031.052687][T19247] loop2: detected capacity change from 0 to 512 [ 2031.069145][T19247] ext4: Unknown parameter 'nobh"' [ 2031.250599][ T69] team0 (unregistering): Port device team_slave_1 removed [ 2031.595207][ T29] audit: type=1326 audit(2000000127.837:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19246 comm="syz.2.2148" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b2217def9 code=0x0 [ 2032.138441][ T69] team0 (unregistering): Port device team_slave_0 removed [ 2032.423552][ T5248] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2032.447905][ T5248] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2032.461343][ T5248] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2032.471362][ T5248] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2032.504536][ T5248] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2032.512025][ T5248] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2032.768367][ T5248] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2032.783751][ T5248] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2032.811234][ T5248] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2032.827822][ T5248] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2032.835792][ T5248] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2032.845991][ T5248] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2033.523327][ T69] team0 (unregistering): Port device team_slave_1 removed [ 2033.606380][ T69] team0 (unregistering): Port device team_slave_0 removed [ 2034.546173][ T5248] Bluetooth: hci2: command tx timeout [ 2034.678510][ T69] team0 (unregistering): Port device team_slave_1 removed [ 2034.751715][ T69] team0 (unregistering): Port device team_slave_0 removed [ 2034.851609][ T5248] Bluetooth: hci7: command tx timeout [ 2035.597256][T19016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2035.605576][T19016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2035.631802][T19016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2035.861740][T19016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2035.883664][T19016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2035.944543][T19016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2036.528832][ T5248] Bluetooth: hci2: command tx timeout [ 2036.833516][ T5248] Bluetooth: hci7: command tx timeout [ 2036.950884][ T29] audit: type=1800 audit(2000000133.441:269): pid=19279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2153" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2036.982126][ T29] audit: type=1326 audit(2000000133.473:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19277 comm="syz.2.2153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b2217def9 code=0x0 [ 2037.124168][T19280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2153'. [ 2037.156683][T19016] hsr_slave_0: entered promiscuous mode [ 2037.173602][T19016] hsr_slave_1: entered promiscuous mode [ 2038.529864][ T5248] Bluetooth: hci2: command tx timeout [ 2038.815693][ T5248] Bluetooth: hci7: command tx timeout [ 2038.870081][T19303] team_slave_0: entered promiscuous mode [ 2038.875895][T19303] team_slave_1: entered promiscuous mode [ 2038.886720][T19303] team_slave_0: left promiscuous mode [ 2038.892287][T19303] team_slave_1: left promiscuous mode [ 2039.354379][T19312] loop5: detected capacity change from 0 to 128 [ 2039.396026][T19312] vfat: Unknown parameter 'ÿÿÿÿÿÿªªªªª»†Ý`' [ 2040.552839][ T5248] Bluetooth: hci2: command tx timeout [ 2040.579391][T19184] chnl_net:caif_netlink_parms(): no params data found [ 2040.806788][ T5248] Bluetooth: hci7: command tx timeout [ 2041.711312][T19328] loop2: detected capacity change from 0 to 1024 [ 2041.753061][T19328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2042.663401][T19259] chnl_net:caif_netlink_parms(): no params data found [ 2044.233203][T19184] bridge0: port 1(bridge_slave_0) entered blocking state [ 2044.266658][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 2044.273199][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 2044.323974][T19184] bridge0: port 1(bridge_slave_0) entered disabled state [ 2044.331364][T19184] bridge_slave_0: entered allmulticast mode [ 2044.365558][T19184] bridge_slave_0: entered promiscuous mode [ 2044.475371][T19355] kAFS: unparsable volume name [ 2044.727713][T19184] bridge0: port 2(bridge_slave_1) entered blocking state [ 2044.756052][T19184] bridge0: port 2(bridge_slave_1) entered disabled state [ 2044.790549][T19184] bridge_slave_1: entered allmulticast mode [ 2044.809574][ T9018] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2044.840888][T19184] bridge_slave_1: entered promiscuous mode [ 2044.878508][T19263] chnl_net:caif_netlink_parms(): no params data found [ 2045.049934][ T9018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2045.114963][ T9018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2045.153753][ T9018] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2045.210344][ T9018] usb 6-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 2045.228961][ T9018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.283992][ T9018] usb 6-1: config 0 descriptor?? [ 2045.352919][T19184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2045.424317][T19259] bridge0: port 1(bridge_slave_0) entered blocking state [ 2045.435315][T19259] bridge0: port 1(bridge_slave_0) entered disabled state [ 2045.443250][T19259] bridge_slave_0: entered allmulticast mode [ 2045.454166][T19259] bridge_slave_0: entered promiscuous mode [ 2045.472157][T18139] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2045.472523][T19184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2045.628880][T19367] loop2: detected capacity change from 0 to 512 [ 2045.631744][T19259] bridge0: port 2(bridge_slave_1) entered blocking state [ 2045.643730][T19367] EXT4-fs (loop2): filesystem is read-only [ 2045.659742][T19259] bridge0: port 2(bridge_slave_1) entered disabled state [ 2045.660959][T19367] EXT4-fs (loop2): filesystem is read-only [ 2045.673224][T19367] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2045.680693][T19367] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2164: bad orphan inode 16 [ 2045.689737][T19259] bridge_slave_1: entered allmulticast mode [ 2045.691530][T19367] ext4_test_bit(bit=15, block=3) = 0 [ 2045.704017][T19367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 2045.722123][T19259] bridge_slave_1: entered promiscuous mode [ 2045.733841][ T9018] uclogic 0003:28BD:0055.0010: interface is invalid, ignoring [ 2045.944520][ T9018] usb 6-1: USB disconnect, device number 10 [ 2046.528694][T19016] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2046.584266][T18139] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2046.668343][T19184] team0: Port device team_slave_0 added [ 2046.799792][T19016] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2046.895634][T19259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2046.942113][T19377] loop2: detected capacity change from 0 to 8 [ 2046.987483][T19184] team0: Port device team_slave_1 added [ 2047.000365][T19378] loop5: detected capacity change from 0 to 1024 [ 2047.157925][T19016] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2047.177867][T19378] hfsplus: bad catalog entry type [ 2047.204840][T19016] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2047.276855][T19259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2047.455872][T19184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2047.470784][T19184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2047.520244][T19184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2047.570376][T19263] bridge0: port 1(bridge_slave_0) entered blocking state [ 2047.593611][T19263] bridge0: port 1(bridge_slave_0) entered disabled state [ 2047.601312][T19263] bridge_slave_0: entered allmulticast mode [ 2047.613287][T19263] bridge_slave_0: entered promiscuous mode [ 2047.757816][T19259] team0: Port device team_slave_0 added [ 2047.821901][T17248] hfsplus: b-tree write err: -5, ino 4 [ 2047.828027][T19184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2047.866987][T19184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2047.925210][T19184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2047.954352][T19263] bridge0: port 2(bridge_slave_1) entered blocking state [ 2047.990246][T19263] bridge0: port 2(bridge_slave_1) entered disabled state [ 2048.012367][T19263] bridge_slave_1: entered allmulticast mode [ 2048.254857][T19263] bridge_slave_1: entered promiscuous mode [ 2048.360450][T19385] input: syz0 as /devices/virtual/input/input29 [ 2049.640387][T19259] team0: Port device team_slave_1 added [ 2050.735166][T19263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2051.594739][T19259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2051.651716][T19259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2051.737502][T19259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2051.837595][T19263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2051.882657][T19259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2051.908742][T19259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2051.994568][T19259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2052.056754][T19184] hsr_slave_0: entered promiscuous mode [ 2052.093816][T19184] hsr_slave_1: entered promiscuous mode [ 2052.136629][T19184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2052.164284][T19184] Cannot create hsr debugfs directory [ 2052.195208][T18186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2052.208584][T18186] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2052.220570][T18186] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2052.231494][T18186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2052.239902][T18186] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2052.252746][T18186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2052.667572][T19263] team0: Port device team_slave_0 added [ 2052.701647][T19263] team0: Port device team_slave_1 added [ 2052.736691][T19259] hsr_slave_0: entered promiscuous mode [ 2052.758148][T19259] hsr_slave_1: entered promiscuous mode [ 2052.776517][T19259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2052.785634][T19259] Cannot create hsr debugfs directory [ 2053.155335][T19263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2053.166642][T19263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2053.200323][T19263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2053.211070][T19430] loop2: detected capacity change from 0 to 512 [ 2053.225606][T19430] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2053.232305][T19430] EXT4-fs: Invalid want_extra_isize 9 [ 2053.426986][T19263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2053.466309][T19263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2053.546566][T19263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2053.559748][ T69] bridge_slave_1: left allmulticast mode [ 2053.565691][ T69] bridge_slave_1: left promiscuous mode [ 2053.571636][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 2053.592191][ T69] bridge_slave_0: left allmulticast mode [ 2053.601974][ T69] bridge_slave_0: left promiscuous mode [ 2054.043496][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 2054.162467][ T69] bridge_slave_1: left allmulticast mode [ 2054.191347][ T69] bridge_slave_1: left promiscuous mode [ 2054.211382][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 2054.219846][ T5248] Bluetooth: hci0: command tx timeout [ 2054.267511][ T69] bridge_slave_0: left allmulticast mode [ 2054.300610][ T69] bridge_slave_0: left promiscuous mode [ 2054.317307][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 2054.382683][ T69] bridge_slave_1: left allmulticast mode [ 2054.397902][ T69] bridge_slave_1: left promiscuous mode [ 2054.413837][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 2054.463864][ T69] bridge_slave_0: left allmulticast mode [ 2054.469553][ T69] bridge_slave_0: left promiscuous mode [ 2054.481753][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 2054.503761][ T69] bridge_slave_1: left allmulticast mode [ 2054.520098][ T69] bridge_slave_1: left promiscuous mode [ 2054.536635][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 2054.556781][ T69] bridge_slave_0: left allmulticast mode [ 2054.562752][ T69] bridge_slave_0: left promiscuous mode [ 2054.586396][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 2055.018648][T19438] loop5: detected capacity change from 0 to 32768 [ 2055.641286][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2055.664609][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2055.687160][ T69] bond0 (unregistering): Released all slaves [ 2055.730471][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2055.762277][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2055.782298][ T69] bond0 (unregistering): Released all slaves [ 2055.825877][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2055.856475][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2055.886108][ T69] bond0 (unregistering): Released all slaves [ 2055.929602][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2055.969486][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2055.989546][ T69] bond0 (unregistering): Released all slaves [ 2056.199736][ T5248] Bluetooth: hci0: command tx timeout [ 2056.465290][T19263] hsr_slave_0: entered promiscuous mode [ 2056.495800][T19263] hsr_slave_1: entered promiscuous mode [ 2056.549615][T19263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2056.561237][T19263] Cannot create hsr debugfs directory [ 2056.636865][ T69] hsr_slave_0: left promiscuous mode [ 2056.670605][ T69] hsr_slave_1: left promiscuous mode [ 2056.693544][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2056.719001][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2056.810329][ T69] hsr_slave_0: left promiscuous mode [ 2056.865439][ T69] hsr_slave_1: left promiscuous mode [ 2056.892500][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2056.910636][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2056.953399][ T69] hsr_slave_0: left promiscuous mode [ 2056.963655][ T69] hsr_slave_1: left promiscuous mode [ 2056.989588][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2057.033508][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2057.083696][ T69] hsr_slave_0: left promiscuous mode [ 2057.102550][ T69] hsr_slave_1: left promiscuous mode [ 2057.117467][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2057.139825][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2058.179094][ T5248] Bluetooth: hci0: command tx timeout [ 2060.170446][ T5248] Bluetooth: hci0: command tx timeout [ 2060.325519][T19495] loop5: detected capacity change from 0 to 256 [ 2061.729133][T19500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2062.675429][T19505] loop5: detected capacity change from 0 to 512 [ 2062.704715][ T69] team0 (unregistering): Port device team_slave_1 removed [ 2062.716415][T19505] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 2062.799763][T19505] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.2179: invalid indirect mapped block 83886080 (level 1) [ 2062.814614][T19505] EXT4-fs (loop5): Remounting filesystem read-only [ 2062.834538][T19505] EXT4-fs (loop5): 1 orphan inode deleted [ 2062.848818][T19505] EXT4-fs (loop5): 1 truncate cleaned up [ 2062.882377][T19505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2062.929464][ T69] team0 (unregistering): Port device team_slave_0 removed [ 2064.632565][ T69] team0 (unregistering): Port device team_slave_1 removed [ 2064.685641][ T69] team0 (unregistering): Port device team_slave_0 removed [ 2065.229705][ T69] team0 (unregistering): Port device team_slave_1 removed [ 2065.278973][ T69] team0 (unregistering): Port device team_slave_0 removed [ 2065.856318][ T69] team0 (unregistering): Port device team_slave_1 removed [ 2065.905499][ T69] team0 (unregistering): Port device team_slave_0 removed [ 2066.260386][T19508] netlink: 'syz.2.2180': attribute type 12 has an invalid length. [ 2066.479336][T18179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2066.803571][T19520] ubi: mtd0 is already attached to ubi0 [ 2069.807059][T19414] chnl_net:caif_netlink_parms(): no params data found [ 2069.809763][T19546] loop2: detected capacity change from 0 to 16 [ 2069.832823][T19546] erofs: (device loop2): mounted with root inode @ nid 36. [ 2069.880796][T19259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2070.099423][T19259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2071.618049][T19259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2071.633165][T19555] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2188'. [ 2072.313113][T19259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2072.498599][T19559] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2189'. [ 2073.385364][T19563] loop2: detected capacity change from 0 to 512 [ 2073.417364][T19563] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2073.496564][T19563] EXT4-fs (loop2): 1 truncate cleaned up [ 2073.513039][T19563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2073.939151][T19571] netlink: 'syz.2.2190': attribute type 1 has an invalid length. [ 2074.641941][T18139] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2074.675474][T19572] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2191'. [ 2074.856810][T19414] bridge0: port 1(bridge_slave_0) entered blocking state [ 2074.876997][T19414] bridge0: port 1(bridge_slave_0) entered disabled state [ 2074.893902][T19414] bridge_slave_0: entered allmulticast mode [ 2074.923799][T19414] bridge_slave_0: entered promiscuous mode [ 2074.941394][T19414] bridge0: port 2(bridge_slave_1) entered blocking state [ 2074.948580][T19414] bridge0: port 2(bridge_slave_1) entered disabled state [ 2074.956562][T19414] bridge_slave_1: entered allmulticast mode [ 2075.009609][T19414] bridge_slave_1: entered promiscuous mode [ 2075.326447][T19414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2075.384007][T19414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2077.202142][T19414] team0: Port device team_slave_0 added [ 2077.477356][T18186] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2077.490472][T18186] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2077.524335][T18186] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2077.548592][T18186] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2077.563483][T18186] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2077.571124][T18186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2077.592059][T19414] team0: Port device team_slave_1 added [ 2077.923943][T19414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2077.930970][T19414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2077.959672][T19414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2077.973964][T19414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2077.982567][T19414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2078.010713][T19414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2078.063618][T19259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2078.098243][T19259] 8021q: adding VLAN 0 to HW filter on device team0 [ 2078.144104][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state [ 2078.151271][ T5480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2078.242567][T19414] hsr_slave_0: entered promiscuous mode [ 2078.249948][T19414] hsr_slave_1: entered promiscuous mode [ 2078.256244][T19414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2078.264661][T19414] Cannot create hsr debugfs directory [ 2078.365763][T15502] bridge0: port 2(bridge_slave_1) entered blocking state [ 2078.373191][T15502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2078.422107][T19263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2078.521639][T19263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2078.536470][T19263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2078.602887][T19263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2079.148752][T19259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2079.256205][T19597] chnl_net:caif_netlink_parms(): no params data found [ 2079.480204][T19263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2079.583730][T19597] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.591080][T19597] bridge0: port 1(bridge_slave_0) entered disabled state [ 2079.600188][T19597] bridge_slave_0: entered allmulticast mode [ 2079.608765][T19597] bridge_slave_0: entered promiscuous mode [ 2079.610531][T18186] Bluetooth: hci1: command tx timeout [ 2079.733181][T19597] bridge0: port 2(bridge_slave_1) entered blocking state [ 2079.742866][T19597] bridge0: port 2(bridge_slave_1) entered disabled state [ 2079.753420][T19597] bridge_slave_1: entered allmulticast mode [ 2079.760643][T19597] bridge_slave_1: entered promiscuous mode [ 2079.792210][ T69] bridge_slave_1: left allmulticast mode [ 2079.798531][ T69] bridge_slave_1: left promiscuous mode [ 2079.812173][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 2079.822478][ T69] bridge_slave_0: left allmulticast mode [ 2079.828155][ T69] bridge_slave_0: left promiscuous mode [ 2079.835193][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 2079.845916][ T69] bridge_slave_1: left allmulticast mode [ 2079.853008][ T69] bridge_slave_1: left promiscuous mode [ 2079.859269][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 2079.873004][ T69] bridge_slave_0: left allmulticast mode [ 2079.879622][ T69] bridge_slave_0: left promiscuous mode [ 2079.885482][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 2080.230011][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2080.242612][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2080.262138][ T69] bond0 (unregistering): Released all slaves [ 2080.282905][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2080.300009][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2080.313345][ T69] bond0 (unregistering): Released all slaves [ 2080.339507][T19263] 8021q: adding VLAN 0 to HW filter on device team0 [ 2080.481974][T19597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2080.514339][T19259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2080.555378][T19597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2080.607244][T17248] bridge0: port 1(bridge_slave_0) entered blocking state [ 2080.614497][T17248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2080.664279][ T69] hsr_slave_0: left promiscuous mode [ 2080.680306][ T69] hsr_slave_1: left promiscuous mode [ 2080.690059][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2080.707050][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2080.734025][ T69] hsr_slave_0: left promiscuous mode [ 2080.741012][ T69] hsr_slave_1: left promiscuous mode [ 2080.755413][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2080.771325][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2081.223327][ T69] team0 (unregistering): Port device team_slave_1 removed [ 2081.274499][ T69] team0 (unregistering): Port device team_slave_0 removed [ 2081.592420][T18186] Bluetooth: hci1: command tx timeout [ 2081.773219][ T69] team0 (unregistering): Port device team_slave_1 removed [ 2081.827327][ T69] team0 (unregistering): Port device team_slave_0 removed [ 2082.202030][T19597] team0: Port device team_slave_0 added [ 2082.215500][T19597] team0: Port device team_slave_1 added [ 2082.248990][T17248] bridge0: port 2(bridge_slave_1) entered blocking state [ 2082.256290][T17248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2082.360641][T19597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2082.377568][T19597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2082.404314][T19597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2082.443476][T19597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2082.457990][T19597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2082.484752][T19597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2082.710037][T19597] hsr_slave_0: entered promiscuous mode [ 2082.717325][T19597] hsr_slave_1: entered promiscuous mode [ 2082.880564][T19414] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2082.970579][T19263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2082.990458][T19414] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2083.023373][T19414] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2083.096654][T19414] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2083.232882][T19259] veth0_vlan: entered promiscuous mode [ 2083.372122][T19259] veth1_vlan: entered promiscuous mode [ 2083.565722][T18186] Bluetooth: hci1: command tx timeout [ 2083.585011][T19263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2083.713317][T19597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2083.741819][T19597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2083.760092][T19597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2083.772261][T19597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2083.801557][T19259] veth0_macvtap: entered promiscuous mode [ 2083.830954][T19259] veth1_macvtap: entered promiscuous mode [ 2083.883483][T19414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2083.971788][T19259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.982866][T19259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.995068][T19259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2084.005678][T19259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.015568][T19259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2084.030025][T19259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.043007][T19259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2084.074492][T19259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2084.086229][T19259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.097748][T19259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2084.110547][T19259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.120436][T19259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2084.133300][T19259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.145183][T19259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2084.157838][T19259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.168896][T19259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.178965][T19259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.188263][T19259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.202330][T19414] 8021q: adding VLAN 0 to HW filter on device team0 [ 2084.236042][T19263] veth0_vlan: entered promiscuous mode [ 2084.258056][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.265269][ T5480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2084.303155][T19263] veth1_vlan: entered promiscuous mode [ 2084.332565][T11221] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.339790][T11221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2084.476922][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2084.488379][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2084.626107][T19597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2084.636703][T15502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2084.668667][T15502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2084.685649][T19597] 8021q: adding VLAN 0 to HW filter on device team0 [ 2084.735679][T19263] veth0_macvtap: entered promiscuous mode [ 2084.774225][T15502] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.781451][T15502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2084.804992][T15502] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.812174][T15502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2084.836745][T19263] veth1_macvtap: entered promiscuous mode [ 2084.951706][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2084.986083][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2085.033043][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2085.062646][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2085.098830][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2085.136818][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2085.167468][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2085.178043][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2085.449419][T19263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2085.709710][T18186] Bluetooth: hci1: command tx timeout [ 2085.989498][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2086.022434][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2086.036484][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2086.071105][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2086.090080][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2086.109124][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2086.130172][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2086.142501][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2086.156068][T19263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2086.181522][T19597] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2086.199941][T19597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2086.238050][T19263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.260705][T19263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.272022][T19263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.287574][T19263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.429991][T19414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2086.613187][T11223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2086.633276][T11223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2086.733352][T11223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2086.755605][T19414] veth0_vlan: entered promiscuous mode [ 2086.771158][T11223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2086.908038][T19414] veth1_vlan: entered promiscuous mode [ 2086.974438][T19597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2087.214477][T19677] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2206'. [ 2087.223466][T19677] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2206'. [ 2087.287263][T19678] loop3: detected capacity change from 0 to 4096 [ 2087.314049][T19678] NILFS (loop3): invalid segment: Checksum error in segment payload [ 2087.393540][T19685] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 2087.740184][T19678] NILFS (loop3): trying rollback from an earlier position [ 2088.294951][T19414] veth0_macvtap: entered promiscuous mode [ 2088.329326][ T5233] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2088.342294][T19414] veth1_macvtap: entered promiscuous mode [ 2088.373356][T19687] ubi: mtd0 is already attached to ubi0 [ 2088.438276][T19678] NILFS (loop3): recovery complete [ 2088.481685][T19690] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2088.561770][ T5233] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2088.625050][ T5233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.998336][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2089.011525][T19691] loop2: detected capacity change from 0 to 2048 [ 2089.016704][ T5233] usb 6-1: config 0 descriptor?? [ 2089.066831][T19691] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2089.127996][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.262987][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2089.350542][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.403961][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2089.445729][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.475039][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2089.493992][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.517848][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2089.547718][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.598275][T19414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2089.681823][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2089.773999][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.818607][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2089.882794][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.948993][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2089.971779][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.992795][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2090.023068][T19710] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2197'. [ 2090.030984][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2090.082521][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2090.108898][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2090.131235][T19712] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2198'. [ 2090.202763][ T5233] ath6kl: Failed to submit usb control message: -110 [ 2090.204283][T19414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2090.243911][ T5233] ath6kl: unable to send the bmi data to the device: -110 [ 2090.308790][ T5233] ath6kl: Unable to send get target info: -110 [ 2090.384772][ T5233] ath6kl: Failed to init ath6kl core: -110 [ 2090.420941][ T5233] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 2090.487190][T19414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2090.567088][T19414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2090.590440][ T5233] usb 6-1: USB disconnect, device number 11 [ 2090.626167][T19414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2090.728059][T19414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2091.175949][T19719] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2201'. [ 2091.959895][T19597] veth0_vlan: entered promiscuous mode [ 2092.358701][T19597] veth1_vlan: entered promiscuous mode [ 2092.582486][ T5500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2092.623878][ T5500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2094.501629][T19597] veth0_macvtap: entered promiscuous mode [ 2094.540592][T15502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2094.558519][T19597] veth1_macvtap: entered promiscuous mode [ 2094.594816][T15502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2094.722467][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2094.781279][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2094.791763][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2094.802312][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2094.989350][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2095.180515][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2095.272471][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2095.316408][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2095.347368][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2095.383581][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2095.410548][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2095.435496][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2095.787232][T19597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2096.445533][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2096.817052][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2096.927042][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2097.033850][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2097.068941][T19764] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2214'. [ 2097.136809][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2097.171863][T19760] loop1: detected capacity change from 0 to 65536 [ 2097.190933][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2097.201456][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2097.212855][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2097.225010][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2097.236210][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2097.250032][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2097.271054][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2097.301471][T19597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2097.311939][T19768] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2215'. [ 2097.325061][T19760] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 2097.377874][T19770] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2217'. [ 2097.387784][T19597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.447451][T19597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.569868][T19597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.704469][T19760] XFS (loop1): Ending clean mount [ 2097.733757][T19597] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.744028][T19760] XFS (loop1): Quotacheck needed: Please wait. [ 2097.903061][T19760] XFS (loop1): Quotacheck: Done. [ 2103.956143][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 2103.965335][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.333043][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.339384][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 2198.344683][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2198.351665][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5480/1:b..l P19259/1:b..l P19766/1:b..l [ 2198.363088][ C0] rcu: (detected by 0, t=10502 jiffies, g=209833, q=856 ncpus=2) [ 2198.370991][ C0] task:syz.5.2217 state:R running task stack:24672 pid:19766 tgid:19766 ppid:18179 flags:0x00004000 [ 2198.384382][ C0] Call Trace: [ 2198.387669][ C0] [ 2198.390612][ C0] __schedule+0x1800/0x4a60 [ 2198.395183][ C0] ? __pfx___schedule+0x10/0x10 [ 2198.400071][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.405729][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2198.411751][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 2198.417060][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 2198.422187][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2198.427942][ C0] irqentry_exit+0x5e/0x90 [ 2198.432371][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2198.438378][ C0] RIP: 0010:unwind_next_frame+0x1e77/0x2a00 [ 2198.444301][ C0] Code: eb 0c e8 0c 47 52 00 eb 05 e8 05 47 52 00 bf 01 00 00 00 e8 7b bb 21 00 65 8b 1d 4c 91 c2 7e 31 ff 89 de e8 2b 4b 52 00 85 db <0f> 84 9d 02 00 00 e8 de 46 52 00 b0 01 e9 1d fd ff ff 80 3d 34 fb [ 2198.463926][ C0] RSP: 0018:ffffc90004457148 EFLAGS: 00000286 [ 2198.470014][ C0] RAX: 0000000000000000 RBX: 0000000080000000 RCX: 0000000000000001 [ 2198.477994][ C0] RDX: ffff888028a4da00 RSI: 0000000080000000 RDI: 0000000000000000 [ 2198.485976][ C0] RBP: ffffc90004457220 R08: ffffffff814145c5 R09: ffffffff814140bf [ 2198.493962][ C0] R10: 0000000000000003 R11: ffff888028a4da00 R12: ffffc90004457620 [ 2198.501949][ C0] R13: dffffc0000000000 R14: ffffc90004450000 R15: ffffc90004457628 [ 2198.509949][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 2198.515262][ C0] ? unwind_next_frame+0x1e75/0x2a00 [ 2198.520589][ C0] ? unwind_next_frame+0x1e75/0x2a00 [ 2198.525926][ C0] ? free_unref_folios+0x103a/0x1b00 [ 2198.531243][ C0] ? free_unref_folios+0x103a/0x1b00 [ 2198.536561][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2198.542745][ C0] arch_stack_walk+0x151/0x1b0 [ 2198.547532][ C0] ? folios_put_refs+0x76e/0x860 [ 2198.552508][ C0] stack_trace_save+0x118/0x1d0 [ 2198.557384][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2198.562780][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.568472][ C0] save_stack+0xfb/0x1f0 [ 2198.573176][ C0] ? __pfx_save_stack+0x10/0x10 [ 2198.578046][ C0] ? free_unref_folios+0x103a/0x1b00 [ 2198.583368][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.589032][ C0] ? page_ext_get+0x20/0x2a0 [ 2198.593671][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.599355][ C0] __reset_page_owner+0x76/0x430 [ 2198.604329][ C0] ? page_ext_get+0x1d6/0x2a0 [ 2198.609058][ C0] free_unref_folios+0x103a/0x1b00 [ 2198.614228][ C0] folios_put_refs+0x76e/0x860 [ 2198.619042][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 2198.624371][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.630043][ C0] ? free_swap_cache+0xb3/0x880 [ 2198.634927][ C0] free_pages_and_swap_cache+0x2ea/0x690 [ 2198.640597][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 2198.646810][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.652493][ C0] ? tlb_table_flush+0x143/0x410 [ 2198.657559][ C0] tlb_flush_mmu+0x3a3/0x680 [ 2198.662183][ C0] ? __pfx_down_write+0x10/0x10 [ 2198.667068][ C0] tlb_finish_mmu+0xd4/0x200 [ 2198.671686][ C0] exit_mmap+0x44f/0xc80 [ 2198.675955][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 2198.680733][ C0] ? __asan_memset+0x23/0x50 [ 2198.685375][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.691035][ C0] ? uprobe_clear_state+0x277/0x290 [ 2198.696252][ C0] ? mm_update_next_owner+0xa4/0x810 [ 2198.701552][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2198.706776][ C0] __mmput+0x115/0x390 [ 2198.710872][ C0] exit_mm+0x220/0x310 [ 2198.714968][ C0] ? __pfx_exit_mm+0x10/0x10 [ 2198.719577][ C0] ? taskstats_exit+0x326/0xa60 [ 2198.724472][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.730153][ C0] do_exit+0x9b2/0x27f0 [ 2198.734327][ C0] ? preempt_schedule_common+0x84/0xd0 [ 2198.739804][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.745466][ C0] ? __pfx_do_exit+0x10/0x10 [ 2198.750077][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.755748][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 2198.761147][ C0] do_group_exit+0x207/0x2c0 [ 2198.765759][ C0] __x64_sys_exit_group+0x3f/0x40 [ 2198.770794][ C0] x64_sys_call+0x2634/0x2640 [ 2198.775497][ C0] do_syscall_64+0xf3/0x230 [ 2198.780021][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.785694][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2198.791610][ C0] RIP: 0033:0x7f5e35d7def9 [ 2198.796033][ C0] RSP: 002b:00007fffc1f0c4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2198.804471][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5e35d7def9 [ 2198.812464][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 2198.820446][ C0] RBP: 00007fffc1f0c4fc R08: 00007fffc1f0c58f R09: 000000000020d62a [ 2198.828430][ C0] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000032 [ 2198.836411][ C0] R13: 000000000020d62a R14: 000000000020d237 R15: 00007fffc1f0c550 [ 2198.844508][ C0] [ 2198.847537][ C0] task:syz-executor state:R running task stack:20656 pid:19259 tgid:19259 ppid:19239 flags:0x00000000 [ 2198.859293][ C0] Call Trace: [ 2198.862579][ C0] [ 2198.865523][ C0] __schedule+0x1800/0x4a60 [ 2198.870102][ C0] ? __pfx___schedule+0x10/0x10 [ 2198.874989][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.880654][ C0] ? mark_lock+0x9a/0x350 [ 2198.885019][ C0] ? copy_pmd_range+0x7a7a/0x8500 [ 2198.890075][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.895739][ C0] ? preempt_schedule+0xe1/0xf0 [ 2198.900606][ C0] preempt_schedule_common+0x84/0xd0 [ 2198.905925][ C0] preempt_schedule+0xe1/0xf0 [ 2198.910619][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 2198.916001][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2198.921932][ C0] ? __page_table_check_ptes_set+0x30f/0x410 [ 2198.927947][ C0] ? copy_pmd_range+0x7a7a/0x8500 [ 2198.933001][ C0] preempt_schedule_thunk+0x1a/0x30 [ 2198.938260][ C0] _raw_spin_unlock+0x3e/0x50 [ 2198.942967][ C0] copy_pmd_range+0x7ad5/0x8500 [ 2198.947854][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.953518][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.959198][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 2198.964428][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.970085][ C0] ? look_up_lock_class+0x77/0x160 [ 2198.975213][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.980868][ C0] ? register_lock_class+0x102/0x980 [ 2198.986191][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 2198.991853][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2198.997512][ C0] ? mark_lock+0x9a/0x350 [ 2199.001877][ C0] ? __entry_text_end+0x1020c5/0x1020c9 [ 2199.007447][ C0] ? __lock_acquire+0x137a/0x2040 [ 2199.012533][ C0] copy_page_range+0x99f/0xe90 [ 2199.017341][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 2199.022652][ C0] ? __pfx_up_write+0x10/0x10 [ 2199.027349][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.033011][ C0] ? __asan_memset+0x23/0x50 [ 2199.037650][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 2199.044441][ C0] ? vma_interval_tree_insert_after+0x259/0x2b0 [ 2199.050711][ C0] copy_mm+0x11ea/0x1f30 [ 2199.055004][ C0] ? __pfx_copy_mm+0x10/0x10 [ 2199.059634][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.065292][ C0] ? __init_rwsem+0x122/0x160 [ 2199.069990][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.075652][ C0] ? copy_signal+0x549/0x670 [ 2199.080272][ C0] copy_process+0x187a/0x3dc0 [ 2199.084977][ C0] ? mark_lock+0x9a/0x350 [ 2199.089358][ C0] ? copy_process+0xa03/0x3dc0 [ 2199.094157][ C0] ? __pfx_copy_process+0x10/0x10 [ 2199.099221][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.104888][ C0] kernel_clone+0x226/0x8f0 [ 2199.109426][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 2199.114501][ C0] __x64_sys_clone+0x258/0x2a0 [ 2199.119299][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 2199.124612][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2199.130634][ C0] ? exc_page_fault+0x590/0x8c0 [ 2199.135513][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.141177][ C0] ? do_syscall_64+0xb6/0x230 [ 2199.145873][ C0] do_syscall_64+0xf3/0x230 [ 2199.150401][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2199.156316][ C0] RIP: 0033:0x7f29b5974753 [ 2199.160740][ C0] RSP: 002b:00007ffcc89a3608 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2199.169172][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f29b5974753 [ 2199.177155][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2199.185134][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2199.193116][ C0] R10: 00005555581997d0 R11: 0000000000000246 R12: 0000000000000000 [ 2199.201096][ C0] R13: 000000000020e0cf R14: 000000000020dd64 R15: 00007ffcc89a3790 [ 2199.209101][ C0] [ 2199.212133][ C0] task:kworker/u8:19 state:R running task stack:19984 pid:5480 tgid:5480 ppid:2 flags:0x00004000 [ 2199.223898][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 2199.230175][ C0] Call Trace: [ 2199.233465][ C0] [ 2199.236409][ C0] __schedule+0x1800/0x4a60 [ 2199.240975][ C0] ? __pfx___schedule+0x10/0x10 [ 2199.245863][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.251523][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2199.257524][ C0] ? mark_lock+0x9a/0x350 [ 2199.261888][ C0] ? __lock_acquire+0x137a/0x2040 [ 2199.266941][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 2199.272246][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 2199.277377][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2199.283112][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.288785][ C0] irqentry_exit+0x5e/0x90 [ 2199.293222][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2199.299226][ C0] RIP: 0010:ieee80211_sta_get_rates+0x3ed/0x660 [ 2199.305489][ C0] Code: e8 e8 a0 5d f6 49 bc 00 00 00 00 00 fc ff df 4c 8b 74 24 28 44 39 7c 24 68 75 3d e9 03 01 00 00 e8 c8 a0 5d f6 44 39 7c 24 68 <75> 2c e9 f2 00 00 00 e8 b7 a0 5d f6 48 8b 54 24 30 48 89 d0 48 c1 [ 2199.325111][ C0] RSP: 0018:ffffc90002e8f798 EFLAGS: 00000206 [ 2199.331200][ C0] RAX: ffffffff8b35ebe8 RBX: 000000000000005a RCX: ffff88802ca90000 [ 2199.339185][ C0] RDX: 0000000000000000 RSI: 000000000000005a RDI: 000000000000000a [ 2199.347172][ C0] RBP: 000000000000000a R08: ffffffff8b35eb7c R09: 1ffffffff2030ebd [ 2199.355156][ C0] R10: dffffc0000000000 R11: fffffbfff2030ebe R12: dffffc0000000000 [ 2199.363150][ C0] R13: 000000000000000f R14: ffff88805dbd30d0 R15: 0000000000000005 [ 2199.371148][ C0] ? ieee80211_sta_get_rates+0x37c/0x660 [ 2199.376808][ C0] ? ieee80211_sta_get_rates+0x3e8/0x660 [ 2199.382471][ C0] ? ieee80211_sta_get_rates+0x3e8/0x660 [ 2199.388148][ C0] ieee80211_ibss_rx_queued_mgmt+0x11e1/0x2d70 [ 2199.394357][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 2199.400628][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 2199.407248][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.412920][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.418841][ C0] ? mark_lock+0x9a/0x350 [ 2199.423203][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.428864][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2199.434877][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2199.441229][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.446887][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2199.452130][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 2199.457371][ C0] cfg80211_wiphy_work+0x2dd/0x490 [ 2199.462513][ C0] ? process_scheduled_works+0x945/0x1830 [ 2199.468255][ C0] process_scheduled_works+0xa2e/0x1830 [ 2199.473865][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2199.479878][ C0] ? assign_work+0x364/0x3d0 [ 2199.484499][ C0] worker_thread+0x86d/0xd10 [ 2199.489136][ C0] ? __kthread_parkme+0x169/0x1d0 [ 2199.494190][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2199.499326][ C0] kthread+0x2f2/0x390 [ 2199.503407][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2199.508544][ C0] ? __pfx_kthread+0x10/0x10 [ 2199.513151][ C0] ret_from_fork+0x4d/0x80 [ 2199.517679][ C0] ? __pfx_kthread+0x10/0x10 [ 2199.522284][ C0] ret_from_fork_asm+0x1a/0x30 [ 2199.527187][ C0] [ 2199.530214][ C0] rcu: rcu_preempt kthread starved for 10620 jiffies! g209833 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2199.541509][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2199.551486][ C0] rcu: RCU grace-period kthread stack dump: [ 2199.557376][ C0] task:rcu_preempt state:R running task stack:24976 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 2199.569135][ C0] Call Trace: [ 2199.572419][ C0] [ 2199.575363][ C0] __schedule+0x1800/0x4a60 [ 2199.579899][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.585585][ C0] ? __pfx___schedule+0x10/0x10 [ 2199.590470][ C0] ? __pfx_lock_release+0x10/0x10 [ 2199.595519][ C0] ? __asan_memset+0x23/0x50 [ 2199.600139][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 2199.605974][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2199.612331][ C0] ? schedule+0x90/0x320 [ 2199.616603][ C0] schedule+0x14b/0x320 [ 2199.620790][ C0] schedule_timeout+0x1be/0x310 [ 2199.625668][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2199.631067][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2199.636385][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.642043][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 2199.647621][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 2199.652493][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 2199.657708][ C0] ? rcu_gp_init+0x1256/0x1630 [ 2199.662501][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 2199.667457][ C0] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 2199.673987][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2199.679300][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2199.685242][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.690912][ C0] ? finish_swait+0xd4/0x1e0 [ 2199.695535][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 2199.700149][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2199.705369][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2199.711299][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.716961][ C0] ? __kthread_parkme+0x169/0x1d0 [ 2199.722022][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2199.727250][ C0] kthread+0x2f2/0x390 [ 2199.731332][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2199.736550][ C0] ? __pfx_kthread+0x10/0x10 [ 2199.741189][ C0] ret_from_fork+0x4d/0x80 [ 2199.745671][ C0] ? __pfx_kthread+0x10/0x10 [ 2199.750281][ C0] ret_from_fork_asm+0x1a/0x30 [ 2199.755097][ C0] [ 2199.758128][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2199.764451][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc7-syzkaller-00021-g7c6a3a65ace7 #0 [ 2199.774784][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2199.784937][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 2199.790246][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d7 03 00 48 f7 00 08 00 00 00 75 10 eb 07 0f 00 2d b5 73 b0 00 f3 0f 1e fa fb f4 e9 f4 6f 36 00 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 2199.809863][ C0] RSP: 0018:ffffffff8e607ca8 EFLAGS: 00000246 [ 2199.815960][ C0] RAX: ffffffff8e694680 RBX: ffff88801da8d864 RCX: 0000000000ccd329 [ 2199.823945][ C0] RDX: 0000000000000001 RSI: ffff88801da8d800 RDI: ffff88801da8d864 [ 2199.831930][ C0] RBP: 000000000003a678 R08: ffff8880b8837c7b R09: 1ffff11017106f8f [ 2199.839913][ C0] R10: dffffc0000000000 R11: ffffffff8bb9ccc0 R12: ffff888021b79800 [ 2199.848074][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8f0e4220 [ 2199.856065][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 2199.865008][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2199.871600][ C0] CR2: 00007f6720324866 CR3: 0000000028cf4000 CR4: 0000000000350ef0 [ 2199.879585][ C0] Call Trace: [ 2199.882868][ C0] [ 2199.885720][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 2199.892079][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.897747][ C0] ? print_other_cpu_stall+0x1470/0x15a0 [ 2199.903401][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.909062][ C0] ? __lock_acquire+0x137a/0x2040 [ 2199.914129][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 2199.919978][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.925636][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 2199.931901][ C0] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 2199.937302][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.942968][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 2199.948629][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.954289][ C0] ? hrtimer_run_queues+0x16c/0x460 [ 2199.959503][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2199.965168][ C0] ? update_process_times+0x1ce/0x230 [ 2199.970565][ C0] ? tick_nohz_handler+0x37c/0x500 [ 2199.975702][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2199.981181][ C0] ? __hrtimer_run_queues+0x553/0xd50 [ 2199.986571][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 2199.992597][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2199.998364][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2200.004087][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 2200.010188][ C0] ? hrtimer_interrupt+0x396/0x990 [ 2200.015346][ C0] ? __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 2200.021535][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 2200.027369][ C0] [ 2200.030308][ C0] [ 2200.033254][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2200.039433][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 2200.044743][ C0] ? acpi_safe_halt+0x21/0x30 [ 2200.049439][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2200.055093][ C0] acpi_idle_enter+0xe4/0x140 [ 2200.059791][ C0] cpuidle_enter_state+0x114/0x480 [ 2200.064918][ C0] ? __pfx_menu_select+0x10/0x10 [ 2200.069886][ C0] cpuidle_enter+0x5d/0xa0 [ 2200.074323][ C0] do_idle+0x375/0x5d0 [ 2200.078420][ C0] ? __pfx_do_idle+0x10/0x10 [ 2200.083030][ C0] ? poll_idle+0xb0/0xb0 [ 2200.087394][ C0] ? rest_init+0x31/0x300 [ 2200.091740][ C0] cpu_startup_entry+0x42/0x60 [ 2200.096524][ C0] rest_init+0x2dc/0x300 [ 2200.100791][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2200.106365][ C0] start_kernel+0x47a/0x500 [ 2200.110894][ C0] x86_64_start_reservations+0x2a/0x30 [ 2200.116379][ C0] x86_64_start_kernel+0x9f/0xa0 [ 2200.121340][ C0] common_startup_64+0x13e/0x147 [ 2200.126315][ C0] [ 2200.603141][T12923] Bluetooth: hci7: command 0x0406 tx timeout [ 2200.609220][T12923] Bluetooth: hci2: command 0x0406 tx timeout