last executing test programs: 1m5.042297789s ago: executing program 2 (id=449): syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0xb862, &(0x7f0000017140)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x02\x00', r0, &(0x7f0000000180)='.\x02\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) socket$nl_rdma(0x10, 0x3, 0x14) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r4, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pipe2(&(0x7f0000000000), 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m4.916829931s ago: executing program 4 (id=450): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='alarmtimer_suspend\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={r1, 0x0, 0x0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 1m4.319479336s ago: executing program 4 (id=453): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$inet6(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$dri(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0xd0009411, &(0x7f0000000380)={{}, 0x0, 0x0}) 1m4.090640357s ago: executing program 4 (id=454): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x2008002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 1m0.851760305s ago: executing program 2 (id=461): r0 = creat(0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', &(0x7f0000000740), 0x0, 0x100) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) fcntl$getown(0xffffffffffffffff, 0x9) mount$fuse(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500), 0x164000, &(0x7f00000008c0)=ANY=[]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="53107172ae91c9522941ff2fa46527703a1ae870f8a105154a6c437df3c8c9204b9e43a2f4cee0721f36280f132518a3d36c5d13540e336d936071bb7cc92bd68ed660c27b211285d12506865fe4842b985968a06ab9de06aeab9605cac88883efb743fd6ceb46f21e7ccdcc17442ee98c55f95bf5b2e8b8f239b6ada8df960f0d2db0b39b75a368e893cca213bc186bae3fdb9028c977782b41459a67b2ee70377f79c031941b39db32a1e23bdf067f41b604a79b7ef54da9643eca17cc4a559cd9e915efcfbd0ff9e6db", 0xcb}, {&(0x7f0000000140)}, {&(0x7f0000000180)="fd12fef5da9ddd56ee2e2fab5c30fa4f3bb666bf391ac2b2f49499cb9680f6fd865ca415219f30752ed8acafb4a266fd9f56fc2a575ead26d2248125e5008dddbc693ceae96581f4b67cc4b803952e564d333d273049344b98f44ca1c017e41c0c95262f5266a31f3d678c2ba6ac564c1a2b70a8c360bafe1b79284f5754864ce9ef08fdba3116e9e2db1cf313e789fef3c60329f99bb250a4c63a991b7fff8207ee02564de2dd58801d7d4cdcdfcb3a9ec4c3bda69dcf77021b37cad2f98c0951e8315e7ca55d696b6360b096ae496c13d932309ba53c2f335c9979804aed1d1f0d80687cba49b1824d5513a2ebf6755832dd54", 0xf4}, {&(0x7f0000000280)="2c2a6313505cc944aca90ac1ea25fc399e187d1020db8ee1819dfc1ef7d212eee4b6a4a208ab88e59999611150ba5e252f70ccf1a8a2d39cb258a2775cd7896e539a1372b41f3c63643294c46aa7503768eeda3d7fcbef9806c3c94b5f70a3a208b9b76cbdf33eedc6d6711991fba83688", 0x71}, {&(0x7f0000000300)="e93d01d69d8e441f9a858eec7d472887abcb64521ac214b6e3278e316366c2ba67a322a896be5b9d99c60c5a57e8117f811a8321a3e664bfa42f0fe61e9322ba03623ccb9dc5a9e2d136c00113809030a26580b23797b118d2f1133030e8bd9701f6a888636a1463537102768370f1c34435c247a2d5b344ec0ea253e8c539276101033a", 0x84}, {&(0x7f00000003c0)="7a6bae6fd8c57e4f6599418c774b6eb4288f3d2897abe3d70bf2e76c", 0x1c}, {&(0x7f0000000400)="5ca5378d8ee5cc6bbb90cd39473c215c2d24e86e4b3d2f29500c55f61cc064135993a56bf33957d15207d1af211452b6ff3ef6512433d392642a3fff75d83d4e48839428b64a1d4460fd07cd54e49519c1be25fc4df99137e863c8eded", 0x5d}, {&(0x7f0000000480)="3c3052acbd5b2a1d716c1a6934ff5df933594139b6031b55f4d83c4d3161f170bf3e0d42d5b40487e7e89f6731006400fb4687ff480111d3adc9831748da6ed7248befee635a7e12e0c47a1a4758d833ebd93538d9df3e7a0dbbd74fbccccd63085adc32ab124ca9110def567df5715273121e8587eb595e8ce4d62cbe", 0x7d}], 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000001c000000030001000100000002000477", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x1}}, {{&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000007c0)="05d7399eb84f6188720fcad0fa36a31886aeb54b5203b8b6e0934f4c8bcef587a2f3015a8a2e46a37e", 0x29}, {&(0x7f0000000800)="45d6e2479542d1e88b01858be8eaecf1a3602b06f28258bb8a33d9a9e9316130fc68e930ca41e577cfe3eab2d5ab84f17a8ae07b5cb8d7af46217f3f3af6861648b50bab123d26efa71c0b8f063add956f2a5044f3038f702ba92d44b3f7b2ffe7ca2f5cc99f6061825d3d8703b9f471aaf5951c5c879dad94d82940595c63b70b0fad", 0x83}], 0x2, &(0x7f0000000a40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0, 0x40011}}, {{&(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000bc0)="23205f8f5ecd954f0e6bed6d54da83dbff3299793a44218c7f03fe9681fbb6523f0bd5889f3184da3c437543f952b01dab9f27df2c869009d25872877b669827f06bdd3340e06ec458d84fcfd8945342073fe0b8695a2a18be2d8f61cd9844ead2469bb88562a92119fc10a25c381ccc1046f5e559272a337e79328d0a233dec", 0x80}, {&(0x7f0000000c40)="d38ba7e01561b1d03d40a0c012917359463a75f1f124eecf0f6cf5d2b8860d01101ef586df74153197d404650c95e0bde1c0c8423159734e787a6fa87d97da4d50cc5f31ad37d8ea51374f148d86af7a37112d3ec05b7c98c3d0bb8228e086cfd1945dbbd201707d4ad56c345e0e7584b668f360b4fe18bf64b5bd273993fdb6f952b81b27b982d2ce3d09852602f2860b8d62735b508f2fc1edbb5cea1b91a3900bc285f2d8038a4a43009e9a2f7c324b70358e19d5370cc25e334d02e1c42a0ddfcfea8bf0258d5fda20a6", 0xcc}, {&(0x7f0000000d40)="53d416", 0x3}, {&(0x7f0000000d80)="ca148f7101bdddf944b0f4c348dc22b8b05c371090e2204d3c7eeb09246da2450b1e4f1ebebaac9f9f00327a7ff84ceddbc5d52b98337f0c54e86e12a82779d143abbf0bdcf84e3f09f65195b2fa7cd94c3aa1496a71c09d0959117879b01f236539d96b440657a21bd338a8b3e56b6d28aace", 0x73}, {&(0x7f0000000e00)="6e41dc21d08268a6f56e6f1a9c555e0b7eab0e781bdd4608384a19f902405c01f14378ae885278704432fe53d8a229e9ebccbc744279e919800754eb8699b8e09f16157f0f6d476572e459e5", 0x4c}, {&(0x7f0000000e80)="d8e320f4206fd562c73e64a0cae48c7172d35bb1f6b88aec98f92c0cb5af6d2b0bfe2280899607a8c5b95234b60c5d99cc1b835df97150ed7488531b7b3cf3ae19a0c991d392b2a2ac6383dfb882e34c8498dd2cdd292f076a69a1bcaff2b90b47345f5912078a3aa948df88816149716fd7573ec6df5e000f021f454e4d5092315a6f77321baef217ecd2aa927a989f303b557feaaebbf0dd123a06db9c6ee2ae5c93e3a41296db23d1381f75dc36a360d268e810b991cfdd19eae75a38d8c74739df0ea9f55b2a49bc561f4058ddf51f1d0f1e67be555237fa5c38e9096f362fba785179bea648fe50b947", 0xec}, {&(0x7f0000000f80)="a68ff581ac795503412c4ada7ba2630108615e37f062d0dbcd7813aabc4437984d016569d06e588102a08899e0388eb448f39ab4e180c74ce8a76afa9d8aff84da5f6a0d980440fefb087ab86af41bc21ac005af8114f3c408089b42d5ed4a79fc3440a3bc18df20151507b3120e796f9ea96fb36ecf6e35f18d5d41a546fa35baa9e164dc8b5d78c0c9c31e169543c07dbe71b91c69d4be2eeb9bf245d2ad287138a2cf73cb0732c2678bb7e6", 0xad}], 0x7, &(0x7f00000010c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x40000}}, {{&(0x7f00000013c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001440)="0b19940439e3bcf56bf93c6e556947f7e2eb1f69fcc4a80d073a62ad7bd2c47440d20b7e84c377d7e10d3eefaeebeabfec30c464217bfff79dc94027d715a1c0856a17d8849cb44671df8f97bc0fbb4c279a82c55c929b0dd974fcf3722005757b5aab9833935b9d71b6b8ffabb85192f455f4614646564554ed63a1c85727143bea3b7d9f03ca73fe8260e7c5858a279282b4f8057fa83259834ec4c5640bf667ad39001f2459a2a97935500eefde10ce8eed3e92f0556d351c46c5a3e5323b1d047bdec80e1230426219c79cddfb20141771ba", 0xd4}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30, 0x4}}, {{&(0x7f00000017c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001840)="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", 0xfc}], 0x1, &(0x7f0000001b00), 0x0, 0x44}}], 0x5, 0x800) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r2, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="0ebc413afab03763dbfb428a19b5a01afc091732dff17dbd9cace50f6445c6bc5b7dca0a1f804414e1176984acc716037dac1ad4edfdd81c9b978cea2731c53ac9cd9661d3745c28982d2b40c16ef095e6983e5b03f01a8dbd33474f63fad78a84b76566a6583eab398a9596b918b100976dae82e7397c6c25ed8800c560d9aa0a91243e69932c673850411a68e4528dde0a065e9ea8bb511d5253532ed176d564cc5de569747e6b701b902999db4db6e9e08fc87bf528eec200aa6bae4b0bb5a004069085d84c6b97309f8eacba4a9ef8799951054db1e5716c9abc27c2c6085148c295734add8291efa452989ef39816fbecff82fb4eec4117f14c5202f05b18ac3010e905ec5831d8bee49e40c1aedd96a0be7658ccb5b6cf229aa2f2b57ca8ab6f0c574818493fc218e6c2f8bf977c9074ead62006c270e7194ef0f6533151d15d567f741cf0f22de115df4907972b45ed039ab6b98a7671b77d40949dd5ad58488f36a5847fcc426c36cb7e28a12b0c2ad5c8430c7d36acf59ebd9c4ed9b423c96c694e9139b4aedae403dbe95730b9004288ab5493212ca51a39cbb42243b3728d1bb3d59719012c8394db94fb604db72ec627fd244aa0c87129a8711ca3f7c49830d30c35fc9f7da79bcab886a652d7b2fca1a1d623a9453d912143dc4a3e9b2a176b56e66661c085b6e690affa5dc716382d7381c39d2d3a1addee5d1ccb27e2e3b9bff0def5f3f0c3ce596c67b612522711b0f568511af11f6f2bbad404fe6753637858dd30776e43ccfcbb7800f5f1384e67e192227103f4da5ad0d6d331ae5b0e8626e49416fd1bb2910aba9553211626c6f3951de38af333b916536c80e7b4d1199585b8fbd133e1ae9adfc58a2880b362202cb251d07c913a831ff6164a550d58ed95a030a166d39fcc85cef7b769416a2cd141980215c815b324c71bd3b7e4d3edc04c6d66882a609bbb820f757e354193cb61518f7e6b6518b3c6b45d8605d337aedf36828adba8098a5279acd1ad40322284a043087575c318cb9040462908d92765c4ad22e4ae21e7509d3ad3d2bd7339bab5ef562cbcf57c5842318bb699e39c53c7c6156794d73eac93a2d80ca881f08960a23bce83fa706d46972a737d472607dfc7ab690d23336e5503b40548e9c478ed9e3009d54d033a95683c15d0f8d036750aa1e87271ccc3d3b4aaaafbc73ed5e068000b0daab6eaa63d27027ff8cc540182cab5e297acf42bf7408086d064a8539ec3e95d57454ed1e27199fda1e3459813c83c29b71493e0ed6b5ccfc9d5aeef2198b905f19de225772c85315c5ab257774b1d6040f911cbb58a706e4a5e78caaefb26000ef30411451b03b40dd537981d0ea70d9125de9b7da1938309e3a37ef31fd9b45c2c53bee2fa62e6f4e0fd68a31ef2cca67c180d19ec9bbc2a06cc7ffe78d706f2d559ddb8eda86ad775653d49caeb281c433387095888dae48365c5f16f878337ce0244c476e541a4216d30fc6df3552a4d481f4338cb49a1f16b4471e8ee465762cf996c6f0aebaf4b85fda385c1b8d0aacb51ce96af969396fe718fe890468e3cf4a6b66d699ad9bc31c6a4365a787461c93ccd4fd8f8e749e74521f1f66fb79baa5b7e5bb8d86400db16966abfa5d5583a400930d87a8fc454488ded230d008b45423cfbf183b35eebac0ad32ac3bf86f1043b9df279c67a3e3c4aab0533b4ad79f97f87a305f4035949fe8faac0dfd37d2d92f97e23e1bf260814ae492a2d873c28f18af98018aa1445e4c7bea53a2b240b2724648eb73579ff7e6c34a5f16d98ecc4fdc0887d7773330829d972c274e4cf5cee2e3b3638c6f5bcb53003dce3f7900d0e2bc089c4bae84fcc17900d8a48ae1571b6176329c1b13971e2b66df6dd89666c40a47006b618665596102ea700096c3f2c7e2469007453d042b73529edfcdc842f9233e75ec487f67c68843bd0967fc316eb8b631dd40172ba55e9e1a7606740cd201eee29aef08bff1aa225f1ae1083a4a29ddcee7a479f400da910eea27c1f00d14bc6395fea756095d9c35ef9ece7f6b9c1893e53ad16e0d47aaa2c2f2b3e1deb461b7bc007ff8e9cdfa8d87139ff0e746a9c56f80ce8ed02052da4609e2bf7200726573ad150d7003fc06829944d59c356c69a36de9eccaf431c519b37ad55c1e96a8cf04a9bcc749e02394d76356c0ae6f542212f2f29e765c6862aea5fa33b106ed0e30363c3c129bb7f7432a19235a42d42ae07288174bc61482ba87758aaf7609165cf2b3d88338604f77501296bab3d86b5903d5c88e58785b9f614aa03f38aa7493f3ef95efa68b0f655655f131699ac4f330e7ab337877f940c6404ba0cf8941941f5c8e5a23101eb9832896e128a339b97dfd2577c72bf5d1d1b6e53ed22da9100095810b77462bc392bb694684938c9477bbbefd2cd6a15675682d075f34fe38a078e553543e6fa7f043704352d609db1fd6e45378a0456ccf2d8727545b3ed63cc8dc35a3f6eae9077a687e45c6fe428f45dd88c8403a42585d00d214173a50909618c3634208d392a271c3b27a7d79c4fcf802118fcb8d51a3b600d403f40b1daef08bae3f31824698384fb3676e5924c8ef04865e370ff2c21aae0b8732775c6cebca0e16d704f0d0610e0705f10d103d02ef6cc73c8f43689a6e21e718fde69b01efdca56e2a72550e03bb97f63ff6f42d642f1f9be058126e9d8d181fb1c4b9f883d7f359406c27b68e3ceaacd8b23ac36db80bb6757d9d7fa75c8a29af12ef000ff7c7b2b9d4a9993bced972d6142c08e39a4713f4168bee97bc60ec0c0c3e33f2aa264e9d87d410d3393c75055445d7836dda34e3a4c2456f35edc5128b017116b283915d97095754f63c0fa8da3d936d448e2eacd9149f24e1ebb595a8889379bea7ef08c1c3e9296609520bbeadedc3663644ccb56156d37b7e7aed62becae29f98a36b8e38ea6fd64384c289edcf4365f4392441b898aaa527147356a4dcdb1b08f78bd59ef78717aef51c5427611d8f17ca51da5cef07a6d61aaac9d786f312f19eafe60406f9c2540a0be085115e584f541414a61604e0c9d83c6c2316c91c1662c5f97b7ca161a7f89239ec05cea86abde0c5f6d73c8753379f8c9abdfbcdf77316881448238fc7e33d84db7d68784367240474d8d1d6337d76c5aa1baf6e99bc7a5a17cd582281642ce3a771ac6a937704edd384e06c7ad09461e29ffa938c83c81c4ba36e026f97430fa0794832a86573048c4839829f4c103e5b391ab36041b168426b13c86e702d416785b050600e6460fecb486e64320274a3f14201c5de350035b4b9b985498ac457124392d505728915603ebb0529b18b5613634a40dd409eba36de71937993c9342d952b455b4fd8e6610bae51ff85a27cead45f97eb6cf44c209172244fefa7b1e9a882ee7ef043ac14eb0db65f27aad100bf8d99d19aac5ce5c97c4f12fd054b37ad175316558814298838942f54ff25a603d57f6fbeb136f4ee42885057dc9f7a1ab30a86c67f22727a1a98b5d9d886cb4a0de67dd97902789469dc63646ae31e3acf0a7a049cb8a54a70423328d6dc3b49afc3e3d33c9451b1db095382cf2540580659f201558bf30fe83c0eaa221fb0611fe5524a1c9dc80702f575603c373ec361d764584d56da2784a46a7c6b856a2fe69efd863881c20484d37996484c276f2c36b982f755a4ea977e97d49c456dc4c73422ac8be06a667acaadf3ef2ec357f168fdb6552ddf18ca2739222c5cbdec4d0a5e2d03c21fd704f05dbe339030510aa464a0de5b2fac0fed01b2ae62a47941264a0d293e0bfb3e8288e9057a2476a3c6be135335079ae080c27991e21642a60edefbe47f9b41372db0838c5033352bafc14a1ba03eabb46d332a2f63829d0c51aa7cda862c44ce24a4a65ee9d51399520a928f8f07695e4218df9781ac2a5121c06370195a06f268d47d04ecaad3b46db4b9ca03d0e91502a8d02d8d211e4f89608a15adbf72c7db6983859f7828b4771966bef57f9e4a806c3b1a57e6ad6d1e41be701aaf0ca8e8d15e23dd21d4c35da3eb69cd623e8f5567db78e846caeba00ec5deaab3b74a3ec1a775158d907d3ca73738c419fd05b6daec4f283976c8332a55f8c041a7773a547a89a21d1e4c4b6ebf1bdf1a7e3b36f2d26234d24226e8d974e68304d9215977d609b0a6375e4698d312997cc6f05844044f28dd7ec781075ccd8a13792e6a148bbdcf874198015eb7e2558b399336b362f0772492cd170cc5863c31b0c0044cdadc190c157b8b51fe18ff712a0b2d4c4f876fa962ad6afcb6ef755873b8713f2e1acf2ec37d67775887a99182ab21cdd392bae07043141c75e0cee21371755a856f9797d418c64fefac9827da0b8db5421a40e9861f325092693799e97abde4d72e2892a5b7d712de6715652f5edc01a83a5f26d1a8b730d07fbb8f3d37d2e836f0b9305d14edb15451c1aaabe358e8e3b725869d85df76c3d4f0cb1ce27b2717238deb9b4e2c9b77acd2e7c64be1a6bffff3d1f3bd49d1a730ddd39f51a4dd4b2e99a3fe88d07bc0ca8b6dac57b92e141b77757d6b80e314b38cffe781ae4c33330280dee7b5376c7aaca2dd90678c30e86babc44be62e6279f22c8039e0e4e6f330c83f3731b7db10a5d841add1c6fb4d70924d3bc5887b2c24eaafbc840641c9bbe65d296b7e5ffbf70039047aead1003101d4d24c636bc812eac8b05ba54a33c5e01c10145e28162f6aa680a49f89e8f234a435b3332a65c8dcf5fea034042bef6472e829c4d02160a0f82b838d8c58da42e3c7884a92e7c11c678833591684d522db3f5d60fae450a4944fe0b305b411d77fd68567d702013472775cec6e832f5e4b14af3635b9449f15ad5ea6316f0a3b58b99feb0b825bef90bf2d3fda8d21c8a54151253b64a31c52f4c980463365548fae87964a7b7e42b7db1950a3299917f2ba12b82be8cd79f5ae6c8a9b5b6c895902021b302ccc442a17f4d215d2f589e81fbaa53a31946057c73cb3571bc572ef2800a6ae6e258f099b15a7c0abf3b7e093d498ab14a8ebdb07f098557aa72aadde20b84bea1f603ea318f698908772a9d630f445b1534c7dff63be95c16868bd232cd9e46457d03abacd8f6ba2e507b03f87a15c19d6f2d8133affbb73c54201ddd4d0b44579e459695aa1a84b879dc05b4ed0d23c8953c7895606ebc1754565ff4bd351c9d6741609aa6622ad5bf5e0462665147f29eb40002c9ef6bf6cb57d7d65319f7d432e09c39235d469f1bff33fcc7e5220f78b3e6cb0d57a29a3f3615c723194f6f3e05435dcf0710f63c2797d6fdbe80c262a3600c3fd07d8b036adc220d69d1cb3ea6c70c573be294707d785ad89c8131482900bcea4d209b4e93721e161e6181523c20c9477d1e0cfc3fbbf93d17139cbc1d6b2c939b3482161137186f94c2804807d894423cb57fb760253158d32e88cfd00963f59df043c5bce8004937e37ddd3865ee44ab1d689979feeeb07fa9a4ca97e0c71b8ccdc35324375b802dd70f486af6c298cb9675a127b7d5c34ccab55b2e8c4543bb1d95d5c700cbeaaa8e5174204132ea03ab1a191657a4d73e981247cf4ca99344f14e2003ba38940cadd5c1fd9f03430cad613ef9d97324553001e3b499d411e9eaeace5777b7a6f66134d5f0371c5d75a4f4c8f22cecd7d25f59b882034e8e2b492d6e398fed546ddf940989182ed22803726fb5b4cf8668fd1abc987cb2706e2b8649fb16760b91c23f2a531bd4b992203d25a3a9", 0x1000}], 0x2, &(0x7f0000001b80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="a88326d35b472860080002000000000000000800"], 0x38, 0x4004000}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001280)="9ff3ca704f578553cd48e247b89354ed502a835aab3123b66874978cfa09599661019464493a44264c08425c6180e6317765cdf8e9ff47ef7508207f09c25a81edc0b845601cafcdc495bf732a100f46bfc31954167d1c461931a5", 0x5b}], 0x1, &(0x7f0000001380)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r1, 0xffffffffffffffff, r2]}}], 0x48, 0x881}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001400)="04e753bbfa8f5b9633e07f6ea865d1bf46ef36b42b0c37c4ed", 0x19}], 0x1, 0x0, 0x0, 0x40000001}}, {{&(0x7f0000001480)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001500)="c5969ef8e773f467d37f25a9871a720469d2ae63574f543feedde6c538499485f7af5e6ef0907945df906e1a6dd11e3b1f1c39a1a6742a38f4b3be69b7616becf0b8d390f38861d7090871a926976e8acac3acfe77d1f6db186d0f1f7ac4e05ee5c1227ce7f54935521ad0c5af331cff68312a72e03079e0d4f01f", 0x7b}, {&(0x7f0000001580)="b1bbb21edaea2767700d92ffcd0f1381baa2db54e97946df2230cf0480223c1c163e30a9fe5290d1b34ec66f6cbba5c1695ffa758b412374bf627cb73a94245396b2e993d7febb4bd9f9d59a068445fc06e2baee00a0750490ef6f6f1ffa69b7e114434c11fcca8e7783229527e421e4833d15936dfec4e4be923623544e4ab9a3fb3c04702928188959c5e1a12c29ecf02a69517026182bc21ef44b1643d99c29834dfeca8efbd70e276cd00c1bd5c09323539c87d5e12f7a733869404e4c6c090abf13aaf6", 0xc6}, {&(0x7f0000001680)="7d99dee3abf7b5caed69f69310cc692d982df77c06883c83c93eb7d1e99ba00f72d7fc8dfd9677f598d74da4df025fc8b507391179bb901e44f7355dbd8c33587eeeab8a2302eee01aa3", 0x4a}, {&(0x7f0000001700)="29c2c8ffb0d08b4f8f4e1970bc560789ee89999f09ac600d9ff1a400f917", 0x1e}, {&(0x7f0000001740)="7164a48373e1668672b76258810a48957da975bdd0df9b01f8d7bfd5261e6676c95c27d348027fb0a7f287f30c30fb35424165058b151aef42212d3c95fef392988380ec3d3e5a13ccb2a1327c584df5a7546a104dac4a8736d24d5f8cf56c28aa9ca6db40f4edf2d9ef954c475a78b5d251288f2b963047c0f0e47edc5a61c2dc567cd0d2a2cc62c5f6", 0x8a}, {&(0x7f0000001800)="d44bc31747f3369fd113f4d8190cb5a5db600514d5abb3c706ffe981308f8308ee7a84c0d0001852a10420fa41ed9ced1b2839f0e0fe4fbdc2c6462bfded4735bc956f7ca5a84676547e4bdacb3d6130d60332b76b4d32ad1541856ddbd1d277", 0x60}, {&(0x7f0000001880)="8b99d108217ab1e7fdd8e43368557f5be564b10d19cbdad17f508ac11c9421d7d3a7b7bf53389099a3721f9483f4ea790e5e7e65dc997861b3b38addb01046cde6d6ee26a05715006a49cedcdc8676db5772116a85ad5237058152d73be88ec545e649f059f9e41c7d2cad17bdbd7cc1b509d0224ae2d19e1ee9bce0378bb0b802a47241e1c53ae9f8bca9834de7d07d45c1c198af2600e728d433308fd824ef395f7911f8b7c3", 0xa7}, {&(0x7f0000001940)="0cdbbc", 0x3}, {&(0x7f0000001980)="81a97e178aed1ccd98d4551025cf03798f6e9a8c54f430ecd9ac9ae0f32e07a647dec44c2e957aa1497e8eeb677b1700", 0x30}], 0x9, 0x0, 0x0, 0x8881}}], 0x4, 0x40080) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 1m0.461929261s ago: executing program 2 (id=466): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349bfd2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket(0x10, 0x803, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_1\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x80d889ef35ffb0fe, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x4a) 59.809247901s ago: executing program 4 (id=467): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) r1 = open(0x0, 0x121342, 0x0) write$tcp_mem(r1, &(0x7f0000000240)={0x2, 0x2c, 0x0, 0x2c, 0x7, 0x2c}, 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005e00)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0xa4}}, @TCA_TBF_BURST={0x8, 0x6, 0xd206}]}}]}, 0x60}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$netlink(0x10, 0x3, 0x9) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) 14.350650158s ago: executing program 0 (id=558): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) sendto$l2tp6(r0, 0x0, 0x2, 0x4048814, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x20) 14.296571213s ago: executing program 0 (id=559): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT") r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) dup2(r0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0xfecc) 14.123420439s ago: executing program 0 (id=560): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0x40) 13.094502384s ago: executing program 0 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000300)={[{@noblock_validity}, {@barrier}, {@resuid}, {@noload}, {@dioread_lock}, {@bh}, {}, {@bsdgroups}]}, 0x6, 0x641, &(0x7f0000000d80)="$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") syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') close_range(r6, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) 11.745104728s ago: executing program 0 (id=563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) landlock_create_ruleset(&(0x7f00000000c0), 0x10, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x6, 0x1f}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x0, 0xc}}, @l2cap_disconn_rsp={{0x7, 0x11, 0x4}, {0x75, 0xb0ff}}, @l2cap_move_chan_req={{0xe, 0x3f, 0x3}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x7, 0xa3}}, @l2cap_move_chan_rsp={{0xf, 0x8, 0x4}, {0x200, 0x1f}}]}}, 0x36) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xf26, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000081, @void, @value}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 10.621478822s ago: executing program 0 (id=565): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r1, &(0x7f0000000000), 0x100000008) ioctl$EVIOCSABS20(r1, 0x401845e0, 0x0) 6.5109011s ago: executing program 1 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) 6.226645496s ago: executing program 3 (id=571): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xfffc, 0x1, 0x5, 0x7, 0x6, 0xffffffffffffffff}) 6.07008695s ago: executing program 1 (id=572): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r0, 0x0, 0x6) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 6.041292703s ago: executing program 3 (id=573): io_uring_setup(0x0, 0x0) 5.818642384s ago: executing program 3 (id=574): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c41, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) flock(r0, 0x1) flock(0xffffffffffffffff, 0x5) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x5451, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) syz_io_uring_setup(0x6167, 0x0, 0x0, &(0x7f0000000140)) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) r4 = syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000005ec0)={0x4, 0x0, 0x2002, 0xb, "a2196bf0ae9048ced3900813726203ea0337b065c6b388e3cdf73cb18bfd1b04"}) 5.789172867s ago: executing program 1 (id=575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x18) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r3, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="3c0002803800010024"], 0x58}, 0x1, 0xf000}, 0x0) sendmsg$netlink(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000000001808"], 0x114}], 0x1}, 0x0) recvmmsg(r3, 0x0, 0x0, 0x12040, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x2) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000340)=0xd, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1, 0x7, 0x1}, 0x10) 5.440462599s ago: executing program 2 (id=488): socket$inet6(0xa, 0x806, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000001780)='%', 0x1, 0x24000015, 0x0, 0x0) sendto$inet(r0, &(0x7f00000003c0)="9e", 0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4.676066759s ago: executing program 1 (id=576): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0x40) ppoll(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) sendto$l2tp6(r4, 0x0, 0x2, 0x4048814, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x20) 3.884193042s ago: executing program 2 (id=577): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000000140)='./file1\x00', 0x1000000, &(0x7f00000000c0)={[{@pqnoenforce}, {@noquota}, {@nouuid}, {@usrquota}, {@pquota}, {@pqnoenforce}, {@noikeep}]}, 0x1, 0x985b, &(0x7f000001c900)="$eJzs3QW4ZXXBsP0zw9CNhYEMjUU3BqEggoCElBLSkgJKGIAIAqKApKAIKFIiSIl0d3d3d3d81zAzOo43PD7v+3wvPt73fV1n9t5rr73O2v/fWuuczTrsveIiyy40MDDJwPBGXv69Q1/+5NFbvrzQTsdef8RLix6++NEjJo81/GLI0BGXU424nHpgYGDQiOUMGj5t8JATTxo8MM7AwOBRlzvBuOMPmmBgYK0RNxcYcTn38IsJrxk531ujxSs6bDUG7Tr8a/g3HRgYGHfYlWcGZl5h1OWMWK9Z/umJSltxwUUX+bvV39yGjd+QEddH/Rpr+NeElw0MTHjpAG8fg97bZ/T2959k7wtWWvk9Xo//Fa244KKLjeY/bF8cY8S0uYft46Pvg8ZG386Hzn3HyGPQIDxw/i9pxQUXWWLgnY/zA6u+edDmb7193Bw83sDA4PEHBgZPMDAweMKBgcETDQwMnvi9dqn/u97Tja+qqqrekxZcaPaFhr3eG+33gXFG/l5Lvxeu8sZSdwwMDIw5fJ7Bc418LVhVVVVVVVVV/54tuNDsC8Pr/0ne7fX/Cae+OmOv/6uqqqqqqqr+97TYggvNPux1/Giv/yd/t9f/2z3w4oYj/vZ/7uGPevO9fRJVVVVVVVVV9a4t89W3X/+PP9rr/6Hv9vr/4fl3eXDEfCP/u8Eboyxy0Ch/T/DaKNPHGGX+V0eZPmSU6aPOP9bAwOAhI6a//vfJg8cbdt8/zz94kmHrPWL6K6NMn+Xv/3/zkGlHmT7rKNOnH2X6bCPWddj0GUaZPuco88/4r4xtVVVVVVVVVVVVVVVVVVXV/6vefOLUM//+nu8fHxjl/dv/9j7uI/4uYNBxZ1999Xu2ov8eDfrnv4fY7r1ep//bhjmPc9TQgYGNl3+vV6Xeg97rz2uo97b83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/cO5z//9v7/09x+Foj/5/5uQ/dfcqJRn3s+qNcH+f/6Vq/Z/2nnv8fWH/QwMAI30mGuS654DLLzTgwMDDRlLsfOsfA3+6bZ9h98082xog3SBj+NgjTDeEFbzfiU9G3GzHriGUc9/byF3vrkDEGjbYSozTpyYcdtt6KL80x+uX07/w8Bo+88oFLtlp45HtZDB5tpnfaTkcuf+RzGd15xLrPOGzdZ95io01n3nzrbT6z/kZrrLv2umtvPO/cc88z59xzzTvbzOusv+Haswz/953GbOjb/07zr4zZ5KOP2RMLjjpmoz+3dxqzoe8+Zm8vcey9Vttg5JiNvmr/1ZhN8+5jNnT9Ed9oyNAxB1Z/e2wGDQwMmXbMga2G3Zh17IGBIdONmHfyYfN+drLBAwN7/P2JDrs29t+2wUHbDZtnxUWWXejvH7v/zx+//w6fZz/W8IshI4ZkyFQjLqce/m0mGfj7pjh4yIknDR723P9hmCcYd/xBEwwMrDXi5gIjLucdce+VI+d7h89ZH21F336blV2Hf/3NY9xhV45ZeuKbRl3OOxD8T/R/9PP/n7zmGfS3gRo04mvEPMO9Flx0sb9/r7eHYYGR7wkz7GfLMJP/i4+x/y/7p/UdOs7bb3L7Tuv7Lu+LO/z5w/Y1/WPnDf2fel9cPnYs8fa/Q/+VY8fAux87xvj71b9PXfuKKUY/diz+zqv4D/vFyDEae7SZ3unYMeP+C2779rHp3Y8dS6w/4oOG/n7sGDwwMGSakceOYQeS6ccc2GPYjdmG3ZhhzIEjht2Y/e0b4w6cPezGTGtusuFag95+254Ry51l2HIXmGzQ20/+6pkXPHqMvd96a9oR6zLLaAfWEdvH0FF/Pi442fBhG/lYWu7dWwy/b/oRy531v7HckY+l5c6z2fD7Zhix3NlGW+4Y77LckY8duT8Mm/Xt/WHGQf/wh5+w/y4y2v47aORhfZSHjPwaa/jXhJeN/Gwo2F/+W8cd2n8neZf1fZfPtcLtbdi0HZa84tT/qc+1ovUd593X950+h/sd13eDcbda6n9gfQeNsr7/sJ1tOt/wbWXGEdvZnP+N7XfkY0c/jo359r3DGWb8V45jC/zTcWz7MQaPtvKj9E6/A60F8w+/PvnfljbvkWNMPHLsxxxtuf/V70AzvvtxbJL1R3vcIgcPDKIxf/jxw9Yb+78Y8zEH/vF39ZFjPvKx7zbmM/zzmA/6pzGf593H/F/9vXPGaYbfP8a7jPngnTdfcuSYj/XfHPMZ/rtjvsDAGDTmexwwfNze7Xj6TmM+8rH/OOZDBr40MDAw7Ygxn/5f2c5n+Z/ZzseD+Ydff+Bvky6Z4ozdRjnGDPrvjPn0/90xH/q37Xzat++bevDAWGMNbLXGFltsNuvwf0fenG34v3wsevr+4eP8bj9L38lo5GPfbb+Y9l8xGvo/Y/SRIf88/8gXHSNvL3/2MZP+nx6Lpv3vGQ1aZICPRadcNHzc3u33onca85GPpZ+DQ0d5/Oiv697l/SjxOQ2btt/++9w+cpEjHtb7Uf7r/cNmO/K/8a0/+kG+/lPrv/+7y99d/u7yd5e/uHc4//+39/9/eJJlHxvxInnMPedbd833en3f4/6jz/+P8P2H8/9rrjvfnsNeCo64713Pzw6f59/y/Ozcwy8mvGbkfKOfH+QVfefzszPsNdMyA/9vzs/+HzVyX/0XXsd3/HeXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe4fz/yP/RnnogW/cv92IE6Fj7rvPmm+81+v7Hvcfff5/hO8/nP9/Y8199h088Lf73vX8//B5HOf/lzpw75MG/o3P/4/cVzv/X/9F+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uHc4/7/AyL8DmGu1dXYd+fcAG8/6hR3f6/V9j/tPPf/f5/976/jvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yFzfi/P/AaB/ruHTbBQbn//939w7+X8sfs/gvkz9m8V82f8ziv1z+mMV/+fwxi//X88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMX/G/ljFv9v5o9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjF/1v5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/t/PHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/d/LHLP6b5Y9Z/DfPH7P4b5E/ZvH/bv6Yxf97+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx/37+mMX/B/ljFv8fju6/4ub/b9fr3zSL/4/a/zGL/7b5Yxb/7fLHLP7b549Z/H+cP2bx3yF/zOL/k/wxi/+O+WMW/53yxyz+P80fs/jvnD9m8d8lf8ziv2v+mMX/Z/ljFv/d8scs/j/PH7P4/yJ/zOK/e/6YxX+P/DGL/575Yxb/X+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/X+WPWfwPyB+z+B+YP2bx/3X+mMX/N/ljFv+D8scs/r/NH7P4H5w/ZvE/JH/M4n9o/pjF/3f5Yxb/3+ePWfwPyx+z+P8hf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfz/mD9m8T8mf8zi/6f8MYv/sfljFv/j8scs/n/OH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv+/5I9Z/E/JH7P4/zV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+T+A8ayB+z+A/KH7P4D84fs/iPkT9m8R+SP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/pPlj1n835c/ZvF/f/6Yxf8D+WMW/w/mj1n8P5Q/ZvGfPH/M4v/h/DGL/0fyxyz+H80fs/h/LH/M4j9F/pjF/+P5Yxb/KfPHLP5D88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+n8gfs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4v/F/DGL/5fyxyz+i+SPWfwXzR+z+H85f8ziv1j+mMX/K/ljFv/F88cs/kvkj1n8v5o/ZvFfMn/M4r9U/pjFf+n8MYv/1/LHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v/1/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvH/Rv6Yxf+b+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bx/1b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOL/7fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOL/nfwxi/9m+WMW/83zxyz+W+SPWfy/mz9m8f9e/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8v58/ZvH/Qf6Yxf+H+WMW/x/lj1n8t80fs/hvlz9m8d8+f8zi/+P8MYv/DvljFv+f5I9Z/HfMH7P475Q/ZvH/af6YxX/n/DGL/y75Yxb/XfPHLP4/yx+z+O+WP2bx/3n+mMX/F/ljFv/d88cs/nvkj1n898wfs/j/Mn/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/j/Kn/M4n9A/pjF/8D8MYv/r/PHLP6/yR+z+B+UP2bx/23+mMX/4Pwxi/8h+WMW/0Pzxyz+v8sfs/j/Pn/M4n9Y/pjF/w/5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4v/H/DGL/zH5Yxb/P+WPWfyPzR+z+B+XP2bx/3P+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+P8lf8zif0r+mMX/r/ljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjE/+2r+f9zFv9B+WMW/8H5Yxb/MfLHLP5D8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOI/af6YxX+y/DGL//vyxyz+788fs/h/IH/M4v/B/DGL/4fyxyz+k+ePWfw/nD9m8f9I/pjF/6P5Yxb/j+WPWfynyB+z+H88f8ziP2X+mMV/aP6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjF/xP5Yxb/T+aPWfw/lT9m8f90/pjF/zP5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfy/mD9m8f9S/pjFf5H8MYv/ovljFv8v549Z/BfLH7P4fyV/zOK/eP6YxX+J/DGL/1fzxyz+S+aPWfyXyh+z+C+dP2bx/1r+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfy/nj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+38gfs/h/M3/M4r9q/pjFf7X8MYv/6vljFv818scs/t/KH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8v50/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8v5M/ZvHfLH/M4r95/pjFf4v8MYv/d/PHLP7fyx+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/7b5Yxb/7fLHLP7b549Z/H+cP2bx3yF/zOL/k/wxi/+O+WMW/53yxyz+P80fs/jvnD9m8d8lf8ziv2v+mMX/Z/ljFv/d8scs/j/PH7P4/yJ/zOK/e/6YxX+P/DGL/575Yxb/X+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/X+WPWfwPyB+z+B+YP2bx/3X+mMX/N/ljFv+D8scs/r/NH7P4H5w/ZvE/JH/M4n9o/pjF/3f5Yxb/3+ePWfwPyx+z+P8hf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfz/mD9m8T8mf8zi/6f8MYv/sfljFv/j8scs/n/OH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv+/5I9Z/E/JH7P4/zV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+T+I8xkD9m8R+UP2bxH5w/ZvEfI3/M4j8kf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4vy9/zOL//vwxi/8H8scs/h/MH7P4fyh/zOI/ef6Yxf/D+WMW/4/kj1n8P5o/ZvH/WP6YxX+K/DGL/8fzxyz+U+aPWfyH5o9Z/KfKH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8P5E/ZvH/ZP6Yxf9T+WMW/0/nj1n8P5M/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfwXyB+z+C+YP2bxXyh/zOK/cP6Yxf+L+WMW/y/lj1n8F8kfs/gvmj9m8f9y/pjFf7H8MYv/V/LHLP6L549Z/JfIH7P4fzV/zOK/ZP6YxX+p/DGL/9L5Yxb/r/3d/9W3hveerN6/Wxb/Zdr/MYv/svljFv/l8scs/svnj1n8v54/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/t/IH7P4fzN/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP7fyh+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/L+dP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/L+TP2bx3yx/zOK/ef6YxX+L/DGL/3fzxyz+38sfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi//388cs/j/IH7P4/zB/zOL/o/wxi/+2+WMW/+3yxyz+2+ePWfx/nD9m8d8hf8zi/5P8MYv/jvljFv+d8scs/j/NH7P475w/ZvHfJX/M4r9r/pjF/2f5Yxb/3fLHLP4/zx+z+P8if8ziv3v+mMV/j/wxi/+e+WMW/1/mj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/1/lj1n8D8gfs/gfmD9m8f91/pjF/zf5Yxb/g/LHLP6/zR+z+B+cP2bxPyR/zOJ/aP6Yxf93+WMW/9/nj1n8D8sfs/j/IX/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8/5g/ZvE/Jn/M4v+n/DGL/7H5Yxb/4/LHLP5/zh+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/v+SPWfxPyR+z+P81f8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yes/uO++90W/yet/v9FFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHJP5DBvLHLP6D8scs/oPzxyz+Y+SPWfyH5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi/9k+WMW//flj1n8358/ZvH/QP6Yxf+D+WMW/w/lj1n8J88fs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/hPkT9m8f94/pjFf8r8MYv/0Pwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/yfyxyz+n8wfs/h/Kn/M4v/p/DGL/2fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/AvljFv8F88cs/gvlj1n8F84fs/h/MX/M4v+l/DGL/yL5Yxb/RfPHLP5fzh+z+C+WP2bx/0r+mMV/8fwxi/8S+WMW/6/mj1n8l8wfs/gvlT9m8V86f8zi/7X8MYv/MvljFv9l88cs/svlj1n8l88fs/h/PX/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8v5E/ZvH/Zv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/L+VP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4fzt/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4fyd/zOK/Wf6YxX/z/DGL/xb5Yxb/7+aPWfy/lz9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/23zxyz+2+WPWfy3zx+z+P84f8ziv0P+mMX/J/ljFv8d88cs/jvlj1n8f5o/ZvHfOX/M4r9L/pjFf9f8MYv/z/LHLP675Y9Z/H+eP2bx/0X+mMV/9/wxi/8e+WMW/z3zxyz+v8wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+v8ofs/gfkD9m8T8wf8zi/+v8MYv/b/LHLP4H5Y9Z/H+bP2bxPzh/zOJ/SP6Yxf/Q/DGL/+/yxyz+v88fs/gflj9m8f9D/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/j/MX/M4n9M/pjF/0/5Yxb/Y/PHLP7H5Y9Z/P+cP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP5/yR+z+J+SP2bx/2v+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT8m8R9zIH/M4j8of8ziPzh/zOI/Rv6YxX9I/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+E+WP2bxf1/+mMX//fljFv8P5I9Z/D+YP2bx/1D+mMV/8vwxi/+H88cs/h/JH7P4fzR/zOL/sfwxi/8U+WMW/4/nj1n8p8wfs/gPzR+z+E+VP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fyJ/zOL/yfwxi/+n8scs/p/OH7P4fyZ/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8X88cs/l/KH7P4L5I/ZvFfNH/M4v/l/DGL/2L5Yxb/r+SPWfwXzx+z+C+RP2bx/2r+mMV/yfwxi/9S+WMW/6Xzxyz+X8sfs/gvkz9m8V82f8ziv1z+mMV/+fwxi//X88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMX/G/ljFv9v5o9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjF/1v5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/t/PHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/d/LHLP6b5Y9Z/DfPH7P4b5E/ZvH/bv6Yxf97+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx/37+mMX/B/ljFv8f5o9Z/H+UP2bx3zZ/zOK/Xf6YxX/7/DGL/4/zxyz+O+SPWfx/kj9m8d8xf8ziv1P+mMX/p/ljFv+d88cs/rvkj1n8d80fs/j/LH/M4r9b/pjF/+f5Yxb/X+SPWfx3zx+z+O+RP2bx3zN/zOL/y/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOL/q/wxi/8B+WMW/wPzxyz+v84fs/j/Jn/M4n9Q/pjF/7f5Yxb/g/PHLP6H5I9Z/A/NH7P4/y5/zOL/+/wxi/9h+WMW/z/kj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8f88cs/sfkj1n8/5Q/ZvE/Nn/M4n9c/pjF/8/5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4v+X/DGL/yn5Yxb/v+aPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMS/7EG8scs/oPyxyz+g/PHLP5j5I9Z/Ifkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/2T5Yxb/9+WPWfzfnz9m8f9A/pjF/4P5Yxb/D+WPWfwnzx+z+H84f8zi/5H8MYv/R/PHLP4fyx+z+E+RP2bx/3j+mMV/yvwxi//Q/DGL/1T5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/J/LHLP6fzB+z+H8qf8zi/+n8MYv/Z/LHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+H8xf8zi/6X8MYv/IvljFv9F88cs/l/OH7P4L5Y/ZvH/Sv6YxX/x/DGL/xL5Yxb/r+aPWfyXzB+z+C+VP2bxXzp/zOL/tfwxi/8y+WMW/2Xzxyz+y+WPWfyXzx+z+H89f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfy/kT9m8f9m/pjFf9X8MYv/avljFv/V88cs/mvkj1n8v5U/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/h/O3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8N80fs/h/J3/M4r9Z/pjFf/P8MYv/FvljFv/v5o9Z/L+XP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/7+ePWfx/kD9m8f9h/pjF/0f5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zh/zOK/Q/6Yxf8n+WMW/x3zxyz+O+WPWfx/mj9m8d85f8ziv0v+mMV/1/wxi//P8scs/rvlj1n8f54/ZvH/Rf6YxX/3/DGL/x75Yxb/PfPHLP6/zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP6/yh+z+B+QP2bxPzB/zOL/6/wxi/9v8scs/gflj1n8f5s/ZvE/OH/M4n9I/pjF/9D8MYv/7/LHLP6/zx+z+B+WP2bx/0P+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+P8xf8zif0z+mMX/T/ljFv9j88cs/sflj1n8/5w/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/n/JH7P4n5I/ZvH/a/6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxH3sgf8ziPyh/zOI/OH/M4j9G/pjFf0j+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4T5Y/ZvF/X/6Yxf/9+WMW/w/kj1n8P5g/ZvH/UP6YxX/y/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/xT5Yxb/j+ePWfynzB+z+A/NH7P4T5U/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8Z8wfs/h/In/M4v/J/DGL/6fyxyz+n84fs/h/Jn/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+H82f8zi/7n8MYv/5/PHLP5fyB+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/xfzxyz+X8ofs/gvkj9m8V80f8zi/+X8MYv/YvljFv+v5I9Z/BfPH7P4L5E/ZvH/av6YxX/J/DGL/1L5Yxb/pfPHLP5fyx+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/9fzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6Yxf8b+WMW/2/mj1n8V80fs/ivlj9m8V89f8ziv0b+mMX/W/ljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/+388cs/hvkj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/938scs/pvlj1n8N88fs/hvkT9m8f9u/pjF/3v5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvHfNn/M4r9d/pjFf/v8MYv/j/PHLP475I9Z/H+SP2bx3zF/zOK/U/6Yxf+n+WMW/53zxyz+u+SPWfx3zR+z+P8sf8ziv1v+mMX/5/ljFv9f5I9Z/HfPH7P475E/ZvHfM3/M4v/L/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4v+r/DGL/wH5Yxb/A/PHLP6/zh+z+P8mf8zif1D+mMX/t/ljFv+D88cs/ofkj1n8D80fs/j/Ln/M4v/7/DGL/2H5Yxb/P+SPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/x/zxyz+x+SPWfz/lD9m8T82f8zif1z+mMX/z/ljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zi/5f8MYv/KfljFv+/5o9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5YxL/cQbyxyz+g/LHLP6D88cs/mPkj1n8h+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/ZPljFv/35Y9Z/N+fP2bx/0D+mMX/g/ljFv8P5Y9Z/CfPH7P4fzh/zOL/kfwxi/9H88cs/h/LH7P4T5E/ZvH/eP6YxX/K/DGL/9D8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/8n8scs/p/MH7P4fyp/zOL/6fwxi/9n8scs/jPlj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4fzF/zOL/pfwxi/8i+WMW/0Xzxyz+X84fs/gvlj9m8f9K/pjFf/H8MYv/EvljFv+v5o9Z/JfMH7P4L5U/ZvFfOn/M4v+1/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4fz1/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/L+RP2bx/2b+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfy/lT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+H87f8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfw3zR+z+H8nf8ziv1n+mMV/8/wxi/8W+WMW/+/mj1n8v5c/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv/v549Z/H+QP2bx/2H+mMX/R/ljFv9t88cs/tvlj1n8t88fs/j/OH/M4r9D/pjF/yf5Yxb/HfPHLP475Y9Z/H+aP2bx3zl/zOK/S/6YxX/X/DGL/8/yxyz+u+WPWfx/nj9m8f9F/pjFf/f8MYv/HvljFv8988cs/r/MH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/r/KH7P4H5A/ZvE/MH/M4v/r/DGL/2/yxyz+B+WPWfx/mz9m8T84f8zif0j+mMX/0Pwxi//v8scs/r/PH7P4H5Y/ZvH/Q/6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4/zF/zOJ/TP6Yxf9P+WMW/2Pzxyz+x+WPWfz/nD9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+f8kfs/ifkj9m8f9r/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/JvEfdyB/zOI/KH/M4j84f8ziP0b+mMV/SP6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8X9f/pjF//35Yxb/D+SPWfw/mD9m8f9Q/pjFf/L8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/FPljFv+P549Z/KfMH7P4D80fs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfxnzB+z+H8if8zi/8n8MYv/p/LHLP6fzh+z+H8mf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4fzZ/zOL/ufwxi//n88cs/l/IH7P4L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/F/PHLP5fyh+z+C+SP2bxXzR/zOL/5fwxi/9i+WMW/6/8K/6D/39cr3/TLP6Lt/9jFv8l8scs/l/NH7P4L5k/ZvFfKn/M4r90/pjF/2v5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvH/ev6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4fyN/zOL/zfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+H8rf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx/3b+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx/07+mMV/s/wxi//m+WMW/y3yxyz+380fs/h/L3/M4r9l/pjFf6v8sf9Q/7epR/XfOn/sP9T/7Ub13yZ/zOL//fwxi/8P8scs/j/MH7P4/yh/zOK/bf6YxX+7/DGL//b5Yxb/H+ePWfx3yB+z+P8kf8ziv2P+mMV/p/wxi/9P88cs/jvnj1n8d8kfs/jvmj9m8f9Z/pjFf7f8MYv/z/PHLP6/yB+z+O+eP2bx3yN/zOK/Z/6Yxf+X+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf9X7+rv3TIs/geold85i/+B+WMW/1/nj1n8f5M/ZvE/KH/M4v/b/DGL/8H5Yxb/Q/LHLP6H5o9Z/H+XP2bx/33+mMX/sPwxi/8f8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/j/ljFv9j8scs/n/KH7P4H5s/ZvE/Ln/M4v/n/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvH/S/6Yxf+U/DGL/1/zxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxif94A/ljFv9B+WMW/8H5Yxb/MfLHLP5D8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOI/af6YxX+y/DGL//vyxyz+788fs/h/IH/M4v/B/DGL/4fyxyz+k+ePWfw/nD9m8f9I/pjF/6P5Yxb/j+WPWfynyB+z+H88f8ziP2X+mMV/aP6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjF/xP5Yxb/T+aPWfw/lT9m8f90/pjF/zP5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfy/mD9m8f9S/pjFf5H8MYv/ovljFv8v549Z/BfLH7P4fyV/zOK/eP6YxX+J/DGL/1fzxyz+S+aPWfyXyh+z+C+dP2bx/1r+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfy/nj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+38gfs/h/M3/M4r9q/pjFf7X8MYv/6vljFv818scs/t/KH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8v50/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8v5M/ZvHfLH/M4r95/pjFf4v8MYv/d/PHLP7fyx+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/7b5Yxb/7fLHLP7b549Z/H+cP2bx3yF/zOL/k/wxi/+O+WMW/53yxyz+P80fs/jvnD9m8d8lf8ziv2v+mMX/Z/ljFv/d8scs/j/PH7P4/yJ/zOK/e/6YxX+P/DGL/575Yxb/X+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/X+WPWfwPyB+z+B+YP2bx/3X+mMX/N/ljFv+D8scs/r/NH7P4H5w/ZvE/JH/M4n9o/pjF/3f5Yxb/3+ePWfwPyx+z+P8hf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfz/mD9m8T8mf8zi/6f8MYv/sfljFv/j8scs/n/OH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv+/5I9Z/E/JH7P4/zV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+T+I8/kD9m8R+UP2bxH5w/ZvEfI3/M4j8kf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4vy9/zOL//vwxi/8H8scs/h/MH7P4fyh/zOI/ef6Yxf/D+WMW/4/kj1n8P5o/ZvH/WP6YxX+K/DGL/8fzxyz+U+aPWfyH5o9Z/KfKH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8P5E/ZvH/ZP6Yxf9T+WMW/0/nj1n8P5M/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfwXyB+z+C+YP2bxXyh/zOK/cP6Yxf+L+WMW/y/lj1n8F8kfs/gvmj9m8f9y/pjFf7H8MYv/V/LHLP6L549Z/JfIH7P4fzV/zOK/ZP6YxX+p/DGL/9L5Yxb/r+WPWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf/r+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOL/jfwxi/8388cs/qvmj1n8V8sfs/ivnj9m8V8jf8zi/638MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMX/2/ljFv8N8scs/hvmj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMX/O/ljFv/N8scs/pvnj1n8t8gfs/h/N3/M4v+9/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4b5s/ZvHfLn/M4r99/pjF/8f5Yxb/HfLHLP4/yR+z+O+YP2bx3yl/zOL/0/wxi//O+WMW/13yxyz+u+aPWfx/lj9m8d8tf8zi//P8MYv/L/LHLP67549Z/PfIH7P475k/ZvH/Zf6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvH/Vf6Yxf+A/DGL/4H5Yxb/X+ePWfx/kz9m8T8of8zi/9v8MYv/wfljFv9D8scs/ofmj1n8f5c/ZvH/ff6Yxf+w/DGL/x/yxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+P+WMW/2Pyxyz+f8ofs/gfmz9m8T8uf8zi/+f8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8f9L/pjF/5T8MYv/X/PHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGJ/wQD+WMW/0H5Yxb/wfljFv8x8scs/kPyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/rt5/ME61+I+n9+cs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+78sfs/i/P3/M4v+B/DGL/wfzxyz+H8ofs/hPnj9m8f9w/pjF/yP5Yxb/j+aPWfw/lj9m8Z8if8zi//H8MYv/lPljFv+h+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/T+SPWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8F8scs/gvmj1n8F8ofs/gvnD9m8f9i/pjF/0v5Yxb/RfLHLP6L5o9Z/L+cP2bxXyx/zOL/lfwxi//i+WMW/yXyxyz+X80fs/gvmT9m8V8qf8ziv3T+mMX/a/ljFv9l8scs/svmj1n8l8sfs/gvnz9m8f96/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/h/I3/M4v/N/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4fyt/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/dv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvH/Tv6YxX+z/DGL/+b5Yxb/LfLHLP7fzR+z+H8vf8ziv2X+mMV/q/wxi//W+WMW/23yxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+2+aPWfy3yx+z+G+fP2bx/3H+mMV/h/wxi/9P8scs/jvmj1n8d8ofs/j/NH/M4r9z/pjFf5f8MYv/rvljFv+f5Y9Z/HfLH7P4/zx/zOL/i/wxi//u+WMW/z3yxyz+e+aPWfx/mT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfx/lT9m8T8gf8zif2D+mMX/1/ljFv/f5I9Z/A/KH7P4/zZ/zOJ/cP6Yxf+Q/DGL/6H5Yxb/3+WPWfx/nz9m8T8sf8zi/4f8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8f9j/pjF/5j8MYv/n/LHLP7H5o9Z/I/LH7P4/zl/zOJ/fP7Y3/3HHfhP9j8hf8yy/5+YP2bxPyl/zOJ/cv6Yxf8v+WMW/1Pyxyz+f80fs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J/7X/q/+f/vev2bZvE/r/0fs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGJ/4QD+WMW/0H5Yxb/wfljFv8x8scs/kPyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjFf7L8MYv/+/LHLP7vzx+z+H8gf8zi/8H8MYv/h/LHLP6T549Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/KfIH7P4fzx/zOI/Zf6YxX9o/pjFf6r8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMX/E/ljFv9P5o9Z/D+VP2bx/3T+mMX/M/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/L+YP2bx/1L+mMV/kfwxi/+i+WMW/y/nj1n8F8sfs/h/JX/M4r94/pjFf4n8MYv/V/PHLP5L5o9Z/JfKH7P4L50/ZvH/Wv6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/L+eP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP7fyB+z+H8zf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+38ofs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfy/nT9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfy/kz9m8d8sf8ziv3n+mMV/i/wxi/9388cs/t/LH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/tvljFv/t8scs/tvnj1n8f5w/ZvHfIX/M4v+T/DGL/475Yxb/nfLHLP4/zR+z+O+cP2bx3yV/zOK/a/6Yxf9n+WMW/93yxyz+P88fs/j/In/M4r97/pjFf4/8MYv/nvljFv9f5o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv9f5Y9Z/A/IH7P4H5g/ZvH/df6Yxf83+WMW/4Pyxyz+v80fs/gfnD/2n+g/aGBgu4HR/A/JH/tP9Kf9/9D8MYv/7/LHLP6/zx+z+B+WP2bx/0P+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+P8xf8zif0z+mMX/T/ljFv9j88cs/sflj1n8/5w/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/n/JH7P4n5I/ZvH/a/6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxn2ggf8ziPyh/zOI/OH/M4j9G/pjFf0j+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4T5Y/ZvF/X/6Yxf/9+WMW/w/kj1n8P5g/ZvH/UP6YxX/y/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/xT5Yxb/j+ePWfynzB+z+A/NH7P4T5U/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8Z8wfs/h/In/M4v/J/DGL/6fyxyz+n84fs/h/Jn/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+H82f8zi/7n8MYv/5/PHLP5fyB+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/xfzxyz+X8ofs/gvkj9m8V80f8zi/+X8MYv/YvljFv+v5I9Z/BfPH7P4L5E/ZvH/av6YxX/J/DGL/1L5Yxb/pfPHLP5fyx+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/9fzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6Yxf8b+WMW/2/mj1n8V80fs/ivlj9m8V89f8ziv0b+mMX/W/ljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/+388cs/hvkj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/938scs/pvlj1n8N88fs/hvkT9m8f9u/pjF/3v5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvHfNn/M4r9d/pjFf/v8MYv/j/PHLP475I9Z/H+SP2bx3zF/zOK/U/6Yxf+n+WMW/53zxyz+u+SPWfx3zR+z+P8sf8ziv1v+mMX/5/ljFv9f5I9Z/HfPH7P475E/ZvHfM3/M4v/L/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4v+r/DGL/wH5Yxb/A/PHLP6/zh+z+P8mf8zif1D+mMX/t/ljFv+D88cs/ofkj1n8D80fs/j/Ln/M4v/7/DGL/2H5Yxb/P+SPWfwPzx+z+B+RPzaa//H/qf5H5o9Z9v+j8scs/kfnj1n8/5g/ZvE/Jn/M4v+n/DGL/7H5Yxb/4/LHLP5/zh+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/v+SPWfxPyR+z+P81f8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofk/hPPJA/ZvEflD9m8R+cP2bxHyN/zOI/JH/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/j/f+zcfbjXdX3H8S/wAckb0LlaaBiBKJoKgopk3qClHoGj3VhKgpLizQRlSoGulOzG2spZrnJtpXmTOlNLZ801HOWc00WzotpmY2zmWCtclhO3SnYdOIc4p3fn8nz57usV78fjD875/U7vX8rzunrxO1ynHfQPZem/o/6hLP130j+Upf8I/UNZ+o/UP5Sl/876h7L030X/UJb+v6F/KEv/XfUPZen/m/qHsvR/sf6hLP1fon8oS//f0j+Upf9L9Q9l6T9K/1CW/rvpH8rSf3f9Q1n6v0z/UJb+o/UPZem/h/6hLP1frn8oS/8x+oey9H+F/qEs/cfqH8rSf5z+oSz999Q/lKX/eP1DWfrvpX8oS/+99Q9l6T9B/1CW/vvoH8rSf1/9Q1n6v1L/UJb+++kfytJ/f/1DWfofoH8oS/+J+oey9J+kfyhL/wP1D2XpP1n/0Lbef9imT0dO0T+0rffvNvIg/UNZ+h+sfyhL/0P0D2XpP1X/UJb+h+ofytJ/mv6hLP1fpX8oS//D9A9l6f9q/UNZ+h+ufyhL/yP0D2Xpf6T+oSz9j9I/lKX/dP1DWfofrX8oS/9j9A9l6f8a/UNZ+r9W/1CW/sfqH8rS/zj9Q1n6H69/KEv/Dv1DWfqfoH8oS/8Z+oey9J+pfyhL/1n6h7L079Q/lKX/ifqHsvQ/Sf9Qlv6v0z+Upf/r9Q9l6f8G/UNZ+r9R/1CW/ifrH8rS/036h7L0f7P+oSz9T9E/lKX/qfqHsvSfrX8oS/+36B/K0v80/UNZ+s/RP5Sl/1z9Q1n6n65/KEv/M/QPZek/T/9Qlv5v1T+Upf+Z+oey9D9L/1CW/vP1D2Xpf7b+oSz9z9E/lKX/ufqHsvQ/T/9Qlv6/rX8oS//z9Q9l6b9A/1CW/gv1D2Xpf4H+oSz9L9Q/lKX/Iv1DWfr/jv6hLP0v0j+Upf/F+oey9F+sfyhL/7fpH8rS/+36h7L0X6J/KEv/pfqHsvS/RP9Qlv6X6h/K0v939Q9l6f8O/UNZ+r9T/1CW/pfpH8rS/3L9Q1n6L9M/lKX/u/QPZel/hf6hLP3frX8oS//36B/K0v+9+oey9H+f/qEs/a/UP5Sl//v1D2Xp/wH9Q1n6/57+oSz9f1//UJb+H9Q/lKX/h/QPZel/lf6hLP3/QP9Qlv5X6x/K0v/D+oey9P+I/qEs/a/RP5Sl/x/qH8rS/6P6h7L0/5j+oSz9P65/KEv/a/UPZen/R/qHsvT/hP6hLP3/WP9Qlv5/on8oS/9P6h/K0v9T+oey9L9O/1CW/tfrH8rS/9P6h7L0v0H/UJb+N+ofytL/Jv1DWfrfrH8oS//P6B/K0v8W/UNZ+t+qfyhL/9v0D2Xp/6f6h7L0v13/UJb+n9U/lKX/HfqHsvS/U/9Qlv536R/K0v9z+oey9P+8/qEs/e/WP5Sl/z36h7L0/zP9Q1n636t/KEv/L+gfytL/i/qHsvT/c/1DWfrfp38oS/+/0D+Upf+X9A9l6f+X+oey9F+ufyhL//v1D2Xp/1f6h7L0X6F/KEv/L+sfytL/K/qHsvR/QP9Qlv5/rX8oS/8H9Q9l6f83+oey9H9I/1CW/n+rfyhL/4f1D2Xp/4j+oSz9/07/UJb+X9U/lKX/Sv1DWfp/Tf9Qlv5/r38oS/9H9Q9l6f91/UNZ+n9D/1CW/t/UP5Sl/yr9Q1n6f0v/UJb+39Y/lKX/d/QPZen/D/qHsvT/R/1DWfr/k/6hLP0f0z+Upf939Q9l6f/P+oey9F+tfyhL/3/RP5Sl/xr9Q1n6/6v+oSz9/03/UJb+j+sfytL/e/qHsvR/Qv9Qlv7/rn8oS/+1+oey9P8P/UNZ+n9f/1CW/v+pfyhL/x/oH8rS/4f6h7L0X6d/KEv/J/UPZen/X/qHsvT/kf6hLP2f0j+Upf+P9Q9l6f8T/UNZ+j+tfyhL///WP5Sl/zP6h7L0X69/KEv/Z/UPZen/P/qHsvT/X/1DWfr/VP9Qlv4/0z+Upf/P9Q9l6f+c/qEs/TfoH0rSf+dK/1CW/oP0D2XpP1j/UJb+Q/QPZelf9A9l6T9U/1CW/sP0D2Xpv53+oSz9h+sfytL/RfqHsvTfXv9Qlv476B/K0n9H/UNZ+u+kfyhL/xH6h7L0H6l/aJvrDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUVUfn9HVDBvV6asiWD0avnL/x40HrTzn35pu/sEvPx+4vzwhecvCWDzZs2LBh8NPVV7sfbldVVdd/287dj4f3Pe56/cunXzth06My5oZn9719ybNHv++uVbeuP+6WGbcP3fjs0OqMs89bMH/S4Koq44ZWS7seHDioqspeQ6urux5M7nqw99Dq1q4HUzY+eFG1ouvBAWdeuOCsricm1P49A4Bfdx2dy6ohvRa76vWngS33//Lp9yzr+djPS/a8Wqm69/++u3d9e5+v9fgV+9/z+uUVffd/wP+CAMAvGdj+PzCm52M/L/lL7/9nXfCxVdHXfvX+97x+GWv/AaB5wff/e2103+/79/n+f/TngM33559+zXZd+3/L+pMXdz9Vns/3/3/x+mVc3/0f3Ov7/4OqquzZ8/3/7aqqjN/K3w4ASKGj813r+nv/3//+l9363Azacv93uWPFyV37v3r7u17S/dTQAe7/nv29/z+2zz8rAPD8dHR+ekOf9/8D2P9qr+AlN+//MUsffnHX/n999ffGbPG1gez/+L77P3HxwkUTL77k0v3PWzjvnPnnzL9g2tSphx489ZBpkydu/I7Apl+38jcFALZxW/f+v9q+z82gqnpi8/0Hl49+uGv/J3/i+HO7nxo+wP3fq9/3/2O8/weAXsYOroYNq5bOW7z4ogM3/drzcPKmXzf9x4L9H8Df/4/r+SG6np8ZHFRVL91833nx+wd37f+N43Zb3v3UsAHu/9797v9RvX9WEQB4frby/f9ZfW567f/IIbdN69r/E8bvc2X3UwP9+/8J/e7/9d7/A0AdHZ3V/+ub6K79v2LHn19X77rs4+f/AKB5bez/k6PfPbbeddnX/gNA89rY//lH7nRvvevySvsPAM1rY/8f6rhmTr3rsp/9B4DmtbH/M88f/Ui967K//QeA5rWx/2MuPXNJvetygP0HgOa1sf+3n7JuTb3rMtH+A0Dz2tj/04avfqredZlk/wGgeW3s/3f2PensetflQPsPAM1rY/+/dNgBj9W7LpPtPwA0r439nzTq+pn1rssU+w8AzWtj/z9y4RE31bsuB9l/AGheG/s/atbnptS7LgfbfwBoXhv7/7bTvnZVvetyiP0HgOa1sf/PXXbUqHrXZar9B4DmtbH/Kx7aY3a963Ko/QeA5rWx/zOeuHplvesyzf4DQPPa2P+9n35yUb3r8ir7DwDNa2P/P/vtM9bWuy6H2X8AaF4b+z/i+udG1rsur7b/ANC8Nvb/vVcsurbedTnc/gNA89rY/+9fM2J8vetyhP0HgOa1sf9v/fyyu+tdlyPtPwA0r439/8bjU2bUuy5H2X8AaF4b+3/ql5d/t951mW7/AaB5bez/wY8+MK/edTna/gNA89rY//t/POuZetflGPsPAM1rY/9f9p5v7lHvurzG/gNA89rY/49/Zs4H6l2X19p/AGheG/v/0y+OO6jedTnW/gNA89rY/0UfvePGetflOPsPAM1rY/879/vJmnrX5Xj7DwDNa2P/HxzxziX1rkuH/QeA5rWx/7e9fMgj9a7LCfYfAJrXxv6PPfxDc+pdlxn2HwCa18b+L5ux6731rstM+w8AzWtj/3c475Nj612XWfYfAJrXxv6fs/Tx6+pdl077DwDNa2P/fzh74fB61+VE+w8AzWtj/3fffu6oetflJPsPAM1rY/+vnvDoVfWuy+vsPwA0r439/9m0O6fUuy6vt/8A0Lw29n/J7mNuqndd3mD/AaB5bez/txbeP7PedXmj/QeA5rWx/3NPnPRYvetysv0HgOa1sf+T53aeXe+6vMn+A0Dz2tj/+96x4ql61+XN9h8AmtfG/l/54KfurnddTrH/ANC8NvZ/x7U7j693XU61/wDQvDb2/4xnLri23nWZbf8BoHlt7P8PVq0ZWe+6vMX+A0Dz2tj/jhsuW1vvupxm/wGgeW3s/1eW/WhRvesyx/4DQPPa2P87P3zVynrXZa79B4DmtbH/4++pZte7LqfbfwBo3sWXXHr+vAUL5l/kE5/4xCebP3mh/5cJAABo2i/+0P9C/5MAAAAAAAAAAAAAAAAAAABAXm3834m90P+OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAIL8rVcYoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4CgAA///tatps") memfd_create(&(0x7f00000006c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6\x02\x00\x00\x00A\xc5\xb8_\xd4\x18,\fus\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb71\x16<\xc5\xc5\xd7j\xcdl\xf3\x9c#b\r\xe2Rvd\xbc\xee\b0\xc3\x93;\xcc\x14\x02\xc4\xfd{\xbb-\x80\xbf\xab\xbf\xd2\xd3\xe0Cf\xb7\x7f\x93X\'\xf5/\xf9cY\x828\xa2\x00_\xb0#w\xae\xb8L\xeb\xa1\xecF\xbd\xf0\x91$s\xd8\xcb,Y\xe6\xf0\x13\x15J\x9f,\xa5\xf2.A\x00\x00S\x94\xe7\x05no\xee\x8b\xb0ciB\x82\t9\x8e\v\xf7\xc7\x86>wHw]=rW\x01\xe3\xdb\x10G-\xf7\xacD\xd7\xfb\xa0\x96\x85u\xddDv\x9c\x8b\xab\xe3F\x1d\xd2C\xdc\x1f\x80\x005\'y8a\xd3s_\xa6\b\x90\xab\xc9_\xc9\xcb;z\xcc\x9d5\xd2j\x1d\xd9\xe1\xcb\x1c\x156\xc5\xf2d\xfe\x0er\x01\xcdyF\xc1H\r\x94\xa9\x89P|\xcff\x9e\x03\xa4:\x04\v\xfe\x04\x02.\x9e\xf5~\x00\xf2TL\xac\x87<)\x02\xbaq\xae\x87\x1a\xc0\xe5\x90\x00'/322, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x0, 0x3a) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000001640)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x6, 0x1, 0x80000001, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3308, 0x0, 0x4000004, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2}}}}, 0xa0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r6, 0x0) ftruncate(r6, 0x8001) r7 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGLED(r7, 0x80044501, &(0x7f0000000000)=""/81) 3.545158193s ago: executing program 1 (id=578): syz_emit_ethernet(0x6a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaa0180c200000008004500005c000000000011907800000000000000010000800000000078030000000008000000000000009911c40180000012110200c72597a2d165de62580c5119fb37bf4a8be03c1f77030bafce6ab79eb3b71dc477351f542ce9232f484f8900000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000200)={0xa, 0x0, @private}, 0x1c) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x200040) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000005c0)={0x1, 0x6, 0xffffffaa, 0x0, 0xf}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0xfffffffd}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r6}}, 0x48) 2.415641957s ago: executing program 1 (id=579): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}}, 0x1c) getsockname$l2tp6(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) r4 = dup(r3) write$FUSE_INIT(r4, 0x0, 0x0) 2.306553727s ago: executing program 3 (id=580): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40082104, 0x0) 1.290951131s ago: executing program 4 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) 1.150456534s ago: executing program 3 (id=581): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) 866.6125ms ago: executing program 4 (id=582): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x541b) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) 286.359293ms ago: executing program 2 (id=584): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x20000400) ioctl$RTC_SET_TIME(r0, 0x7004, 0x0) 0s ago: executing program 3 (id=585): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000600)=ANY=[@ANYBLOB='iocharset=iso8859-1,noadinicb,uid=forget,anchor=00000000000000000145,iocharset=cp949,dmode=00000000000000000000001,undelete,partition=00000000000000000001,unhide,mode=00000000000004000000006,gid=', @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB=',context=user_u,appraise,euid=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c666f5f9f276ec9776e65723cf4f35fe4113026aea579cf39a0f0c29957f53b57c3b489eb054980f991fd7da326951341daebf88b7573ead7344e8185d60a1644469d91bcb8587f93f34db553c02bca476f5744f1aa69e5accfbfd06c024c0950225000dca631a828ab74affc80a0160784", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0xc4f, &(0x7f00000026c0)="$eJzs3U9sHNd9B/DfGy3FpdzWTOwqThoHm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkZYskhIlfz629J2deW/mvZn1DC3ozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xr1w8lTaZsOhh9AYAOCBuDT21ZOnt3v+AwCPrcs7/f8/AAAAAAAAAAAAAABwUKQo4qlIMXdpLU1UnzvqF9t9N2+ND49sX20gVTUPVeXLX/VTp8+c/dKLQ+e6ebE98yH199pn4vWxyxcar8zemJufWliYmmyMz7Svzk5O3fMedlt/q+PVCWjceOPm5LVrC43TL5zZtPnW4Af9TxwdPD/03Ilnu2XHh0dGxjaK1HvL1+67IR07jfA4HEWciBTPf++nqRURRez+XNQf7LXfaqDqxPGqE+PDI1VHptutmcVy42j3RBQRjZ5Kze452v5aRK3vgfZhZ82IpbL5ZYOPl90bm2vNt65MTzVGW/OL7cX27Mxo6rS27E8jijiXIpYjYrX/zt31RRG1SPGdJ9fSlfzWj+o8fLEaGLxzO4p97OM9KNvZ6ItYLh6Ba3aA9UcRr0WKn717LK7m+0x1r/lCxGtl/iDi7TJfjkjlF+NsxPvbfI94NNWiiD8vr//5tTRZ3Q+695WLX2t8ZebabE/Z7n3lIz4f7rhTPKTnw8CWfDAO+L2pHkW0qjv+Wrr/H3YAAAAAAAAAAAAAAAAA2GsDUcSnI8Wr//ZH1bjiqMalP3l+6PcHf7l3zPgzd9lPWfaFiFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsVL7x1Ly9E7p3h75nrjcuvKdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaERPRyZX+h906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4fqRo/EHz9rpaRKTq345j5W9no3m4zE9Gc6jMl6N5IWerylrzWw+h/exOXyrix5Giv/7O7Quer39f59Ptr0G8/c2NT5+pdfJQd+PgB/1PHH3y/NDI557ZaTlt14DjF9szN281xodHRsZ6Vtfy0T/Zs24wH7fYm64TEQtvvvVGa3p6av7+F8qvwC6qP0ILqfZx6amFaiFqB6IZD6fvm9Qf1g2KfVU+/9+PFL/93r93H/id5389fqnz6fYTPn7+JxvP/5e27ugen/+1rfXy8798pm/3/H+qZ91L+aeRvlpEffHGXN/RiPrCm2+daN9oXZ+6PjVz9uTJLw8NffnMyb7DEfVr7empnqU9OV0AAAAAAAAAAAAAAAAAD04q4ncjRevHa6kREbeq8VqD54eeO/HsoThUjbfaNG779bHLFxqvzN6Ym59aWJiabIzPtK/OTk7d6+Hq1XCv8eGRfenMXQ3sc/sH6q/Mzr05377+h4vbbj9Sv3BlYXG+dXX7zTEQRUSzd83xqsHjwyNVo6fbrZmq6ui2g+k/ur5UxH9EiqtnG+nzeV0e/791hP+m8f9LW3e0h+P/P3dkY/zfJ3qKlsdMqYifR4rf+otn4vNVO4/EHecsl/ubSHH83GdzuThcluu2ofNegc7IwLLs/0SKf/jF5rLd8ZBPbZQ99ZFO7iOgvP5PRorv/9l349fzus3vf9j++h/ZuqN9ev/D0z3rjmx6X8Guu06+/icixctPvRO/Ua35vw99/0f33RvHOoU33s+xT9f/V3vWDebj/uZedR4AAAAAAAAAAOAR1peK+NtI8cORWnoxr7uXv/83uXVH+/T3vz7Vs25yb+YruuvCrk8qAAAAABwQfamIn0SK64vv3B5DvXn8d8/4z9/ZGP85nLZsrf6c71eq9wbs5Z//9RrMx53YfbcBAAAAAAAAAAAAAAAAAADgQEmpiBfzfOoT1Xj+yR3nU1+JFK/+1/O5XDpaluvOAz9Y/V6/NDtz4sL09Gw9FltXpqcaY3Otq1Nl3acjxdpffzbXLar51bvzzXfmeN+Yi30+Uoz8XbdsZy727tzkT2+UPVWW/USk+M+/31w2T02d546uyp4uy/5VpPj6P21f9uhG2TNl2e9Gih99vdEte6Qs230/6qc2yr5wdbbYh6sCAAAAAAAAAAAAAAAAAADAx01fKuJPI8V/31i+PZY/z//f1/OxXi68/c2e+f63uFXN8z9Yzf+/0/L9zP9fvVdgaaejAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA4ylFEW9FirlLa2mlv/zcUb/Ynrl5a3x4ZPtqA6mqeagqX/6qnzp95uyXXhw6180Pr7/XPh2vj12+0Hhl9sbc/NTCwtRkY3ymfXV2cuqe97Db+lsdr05A48YbNyevXVtonH7hzKbNtwY/6H/i6OD5oedOPNstOz48MjLWU6bWd99Hv0PaYf3hKOIvI8Xz3/tp+mF/RBG7Pxd3+e7st4GqE8erTowPj1QdmW63ZhbLjaPdE1FENHoqNbvn6AFci11pRiyVzS8bfLzs3thca751ZXqqMdqaX2wvtmdnRlOntWV/GlHEuRSxHBGr/Xfuri+KeCNSfOfJtfTP/RGHuufhi5fGvnry9M7tKPaxj/egbGejL2K5eASu2QHWH0X8Y6T42bvH4l/6I2rR+RVfiHitzB9EvB2d653KL8bZiPe3+R7xaKpFEf9bXv/za+nd/vJ+0L2vXPxa4ysz12Z7ynbvK4/i86HndjXwAA974O9N9SjiR9Udfy39613+u97pZwgAAAAAAAAAAAAAAAAA9kMRvxYpXnrvWKrGB98eU9yeud643Loy3RnW1x371x0zvb6+vt5InWzmnMi5lHM550rO1ZxR5Po5m2XW19cn8uelnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ2DwAAAAAAAAAAAAAAAAAAeLwU1T8pvv2NtbTe35lfeiI6uWKe38fe/wcAAP//29j5Jw==") mkdir(&(0x7f0000002bc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) kernel console output (not intermixed with test programs): .499425][ T4464] XFS (loop1): Mounting V5 Filesystem [ 116.694347][ T4464] XFS (loop1): Ending clean mount [ 116.707266][ T4464] XFS (loop1): Quotacheck needed: Please wait. [ 116.727054][ T4456] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 116.774446][ T4464] XFS (loop1): Quotacheck: Done. [ 116.805511][ T4456] syz.3.166: attempt to access beyond end of device [ 116.805511][ T4456] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.828840][ T4481] loop2: detected capacity change from 0 to 1024 [ 116.853799][ T4456] syz.3.166: attempt to access beyond end of device [ 116.853799][ T4456] loop3: rw=2049, sector=45104, nr_sectors = 48 limit=40427 [ 116.872303][ T4456] syz.3.166: attempt to access beyond end of device [ 116.872303][ T4456] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.989448][ T3639] syz-executor: attempt to access beyond end of device [ 116.989448][ T3639] loop3: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 117.037179][ T4481] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.482538][ T4492] loop4: detected capacity change from 0 to 8 [ 117.489824][ T4492] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 117.507770][ T3647] XFS (loop1): Unmounting Filesystem [ 117.541093][ T4490] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 117.764840][ T3638] XFS (loop0): Unmounting Filesystem [ 117.995513][ T3652] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 118.076016][ T3652] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 118.120250][ T3652] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 118.153691][ T3652] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 118.193676][ T3652] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 118.222943][ T3652] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 118.266519][ T3652] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 118.490668][ T3652] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 118.538459][ T4504] netlink: 'syz.1.172': attribute type 29 has an invalid length. [ 118.562946][ T4504] netlink: 'syz.1.172': attribute type 29 has an invalid length. [ 118.574571][ T4504] netlink: 'syz.1.172': attribute type 29 has an invalid length. [ 118.689675][ T3652] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 118.748783][ T3640] Bluetooth: Wrong link type (-22) [ 118.759202][ T3640] Bluetooth: Wrong link type (-22) [ 118.763608][ T3652] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 118.764656][ T3640] Bluetooth: Wrong link type (-22) [ 118.780834][ T3640] Bluetooth: hci2: link tx timeout [ 118.789034][ T3640] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.910657][ T4511] hub 9-0:1.0: USB hub found [ 118.933866][ T4511] hub 9-0:1.0: 8 ports detected [ 119.461328][ T3652] EXT4-fs (loop2): unmounting filesystem. [ 119.817011][ T3904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.949591][ T3904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.029847][ T3904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.162715][ T3646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.172002][ T3646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.180014][ T3646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.189653][ T3646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.197383][ T3646] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 120.220042][ T3646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.304311][ T3904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.840708][ T3646] Bluetooth: hci2: command 0x0406 tx timeout [ 121.140384][ T4529] loop4: detected capacity change from 0 to 32768 [ 121.243738][ T4529] XFS (loop4): Mounting V5 Filesystem [ 121.405408][ T4529] XFS (loop4): Ending clean mount [ 121.458812][ T4529] XFS (loop4): Quotacheck needed: Please wait. [ 121.544191][ T4529] XFS (loop4): Quotacheck: Done. [ 122.280162][ T3646] Bluetooth: hci4: command tx timeout [ 122.414588][ T4543] loop1: detected capacity change from 0 to 32768 [ 122.438673][ T4543] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.186 (4543) [ 122.524261][ T4543] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 122.542119][ T4543] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 122.569894][ T4543] BTRFS info (device loop1): turning on flush-on-commit [ 122.598355][ T4543] BTRFS info (device loop1): using free space tree [ 122.818662][ T4543] BTRFS info (device loop1): enabling ssd optimizations [ 123.008663][ T3647] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 123.637334][ T4573] loop1: detected capacity change from 0 to 16 [ 124.243390][ T4573] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26222) [ 124.362586][ T3646] Bluetooth: hci4: command tx timeout [ 125.527295][ T4575] netlink: 32 bytes leftover after parsing attributes in process `syz.1.190'. [ 125.643129][ T3643] XFS (loop4): Unmounting Filesystem [ 125.961421][ T4582] loop0: detected capacity change from 0 to 1024 [ 126.189710][ T4577] loop3: detected capacity change from 0 to 32768 [ 126.226168][ T4577] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.191 (4577) [ 126.443596][ T3646] Bluetooth: hci4: command tx timeout [ 126.640863][ T3646] Bluetooth: Wrong link type (-22) [ 126.648180][ T3646] Bluetooth: Wrong link type (-22) [ 126.654742][ T3646] Bluetooth: Wrong link type (-22) [ 126.660669][ T3646] Bluetooth: hci3: link tx timeout [ 126.666838][ T3646] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.745926][ T4523] chnl_net:caif_netlink_parms(): no params data found [ 126.761590][ T4577] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.826944][ T3704] hfsplus: b-tree write err: -5, ino 4 [ 126.893401][ T4589] hub 9-0:1.0: USB hub found [ 126.937591][ T4577] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 127.002463][ T4589] hub 9-0:1.0: 8 ports detected [ 127.006264][ T4577] BTRFS info (device loop3): using free space tree [ 127.368773][ T4577] BTRFS info (device loop3): enabling ssd optimizations [ 128.346305][ T4523] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.391535][ T3639] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.406922][ T4523] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.519976][ T4523] device bridge_slave_0 entered promiscuous mode [ 128.526537][ T3646] Bluetooth: hci4: command tx timeout [ 128.700801][ T4523] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.732590][ T4523] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.741430][ T4523] device bridge_slave_1 entered promiscuous mode [ 129.501406][ T4523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.807083][ T4523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.074218][ T4523] team0: Port device team_slave_0 added [ 130.112241][ T4523] team0: Port device team_slave_1 added [ 130.362860][ T4632] loop4: detected capacity change from 0 to 32768 [ 130.410933][ T4523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.430878][ T4523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.562477][ T26] audit: type=1800 audit(1726842856.536:4): pid=4632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.198" name="bus" dev="loop4" ino=4 res=0 errno=0 [ 130.586038][ T4523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.657847][ T4645] loop0: detected capacity change from 0 to 32768 [ 130.756220][ T4645] XFS (loop0): Mounting V5 Filesystem [ 130.991793][ T4645] XFS (loop0): Ending clean mount [ 131.010806][ T4523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.026613][ T4645] XFS (loop0): Quotacheck needed: Please wait. [ 131.032932][ T4523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.081874][ T4523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.169291][ T4645] XFS (loop0): Quotacheck: Done. [ 131.401536][ T4656] loop3: detected capacity change from 0 to 32768 [ 131.496824][ T4523] device hsr_slave_0 entered promiscuous mode [ 131.513711][ T4523] device hsr_slave_1 entered promiscuous mode [ 131.536605][ T4523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.585408][ T4523] Cannot create hsr debugfs directory [ 131.675370][ T3904] device hsr_slave_0 left promiscuous mode [ 131.700710][ T3904] device hsr_slave_1 left promiscuous mode [ 131.728777][ T4656] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 131.750362][ T3904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.810336][ T3904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.851935][ T3904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.864836][ T4676] loop1: detected capacity change from 0 to 32768 [ 131.880091][ T3904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.887495][ T4676] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.208 (4676) [ 131.903963][ T3904] device bridge_slave_1 left promiscuous mode [ 131.912056][ T3904] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.937950][ T4676] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.953239][ T4676] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 131.963522][ T4676] BTRFS info (device loop1): using free space tree [ 131.971145][ T3904] device bridge_slave_0 left promiscuous mode [ 131.977667][ T3904] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.022408][ T3904] device veth1_macvtap left promiscuous mode [ 132.028927][ T3904] device veth0_macvtap left promiscuous mode [ 132.048012][ T3639] ocfs2: Unmounting device (7,3) on (node local) [ 132.061388][ T3904] device veth1_vlan left promiscuous mode [ 132.067865][ T3904] device veth0_vlan left promiscuous mode [ 132.206001][ T4676] BTRFS info (device loop1): enabling ssd optimizations [ 132.500883][ T3647] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.513852][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.520172][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.995362][ T4721] loop1: detected capacity change from 0 to 4096 [ 133.016143][ T4721] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 133.281338][ T3646] Bluetooth: Wrong link type (-22) [ 133.288201][ T3646] Bluetooth: Wrong link type (-22) [ 133.300293][ T4725] hub 9-0:1.0: USB hub found [ 133.306989][ T3646] Bluetooth: Wrong link type (-22) [ 133.312285][ T3646] Bluetooth: hci1: link tx timeout [ 133.318671][ T4725] hub 9-0:1.0: 8 ports detected [ 133.333450][ T3646] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.748404][ T3904] team0 (unregistering): Port device team_slave_1 removed [ 133.900820][ T3904] team0 (unregistering): Port device team_slave_0 removed [ 133.951038][ T3904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.998654][ T3904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.413852][ T3904] bond0 (unregistering): Released all slaves [ 134.648377][ T3638] XFS (loop0): Unmounting Filesystem [ 135.392441][ T3646] Bluetooth: hci1: command 0x0406 tx timeout [ 136.420742][ T4742] loop3: detected capacity change from 0 to 32768 [ 136.477935][ T4742] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.221 (4742) [ 136.544708][ T4742] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.592551][ T4742] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 136.655885][ T4742] BTRFS info (device loop3): using free space tree [ 136.828495][ T4742] BTRFS info (device loop3): enabling ssd optimizations [ 136.829209][ T4523] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 136.885301][ T4523] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 136.954940][ T3646] Bluetooth: Wrong link type (-22) [ 136.960327][ T3646] Bluetooth: Wrong link type (-22) [ 136.966098][ T3646] Bluetooth: Wrong link type (-22) [ 136.972886][ T3646] Bluetooth: hci3: link tx timeout [ 136.978865][ T3646] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.979027][ T4793] hub 9-0:1.0: USB hub found [ 136.992654][ T4793] hub 9-0:1.0: 8 ports detected [ 137.108044][ T4523] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.186388][ T4523] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.835019][ T4785] loop4: detected capacity change from 0 to 16 [ 137.841654][ T4785] erofs: Unknown parameter 'ÿÿÿÿÞ`ØÜSmRXÖ©JÕV£MÆ[~÷œTäÊßâ#ÐÁ [ 137.841654][ T4785] Õ' [ 137.875818][ T3639] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.913941][ T3654] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 137.988568][ T4523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.180099][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.209990][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.244823][ T4523] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.333858][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.354665][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.413208][ T3965] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.420349][ T3965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.478810][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.490553][ T4810] loop4: detected capacity change from 0 to 1024 [ 138.517426][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.576468][ T3965] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.584666][ T3965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.212849][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.292858][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.301024][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.343160][ T3987] hfsplus: b-tree write err: -5, ino 4 [ 139.444398][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.508051][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.541057][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.583967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.621324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.684419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.789013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.845026][ T4523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.905102][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.953478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.972731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.378541][ T4813] loop3: detected capacity change from 0 to 32768 [ 140.407060][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.426070][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.485867][ T4523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.493483][ T4813] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.229 (4813) [ 140.555722][ T4813] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.632557][ T4813] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 140.641329][ T4813] BTRFS info (device loop3): setting nodatacow, compression disabled [ 140.653202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.681485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.722887][ T4813] BTRFS info (device loop3): enabling auto defrag [ 140.729419][ T4813] BTRFS info (device loop3): max_inline at 0 [ 140.749352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.763745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.777628][ T4813] BTRFS info (device loop3): using free space tree [ 140.791295][ T4523] device veth0_vlan entered promiscuous mode [ 140.804252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.819491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.832707][ T3683] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 140.856510][ T4523] device veth1_vlan entered promiscuous mode [ 140.910156][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.920728][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.931094][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.944281][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.958085][ T4523] device veth0_macvtap entered promiscuous mode [ 140.976661][ T4523] device veth1_macvtap entered promiscuous mode [ 141.066656][ T4523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.092603][ T3683] usb 2-1: Using ep0 maxpacket: 8 [ 141.102487][ T4523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.113930][ T4523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.124665][ T4523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.135646][ T4523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.146927][ T4523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.157317][ T4523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.167980][ T4523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.181051][ T4523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.192981][ T4523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.213164][ T3683] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 141.221531][ T4523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.233493][ T3683] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.272415][ T4523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.288001][ T3683] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.316098][ T4523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.347905][ T3683] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 141.375357][ T4523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.390547][ T3683] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 141.400332][ T4523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.415304][ T3683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.429711][ T4523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.451724][ T4523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.483675][ T3683] usbtmc 2-1:16.0: bulk endpoints not found [ 141.504072][ T4523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.511555][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.523541][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.540119][ T3639] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.588778][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.649923][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.765988][ T26] audit: type=1326 audit(1726842867.746:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4827 comm="syz.1.233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcc917def9 code=0x0 [ 141.804357][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.883389][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.910895][ T4523] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.950025][ T4523] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.000935][ T4523] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.047728][ T4523] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.357246][ T3987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.529075][ T4866] sched: RT throttling activated [ 144.423415][ T3987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.536816][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.611594][ T3865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.653105][ T3865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.705131][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.657659][ T4890] device syzkaller0 entered promiscuous mode [ 145.870613][ T4896] loop3: detected capacity change from 0 to 1024 [ 145.888721][ T4899] loop4: detected capacity change from 0 to 256 [ 146.198802][ T3684] usb 2-1: USB disconnect, device number 2 [ 146.560057][ T4899] FAT-fs (loop4): Directory bread(block 64) failed [ 146.568693][ T4899] FAT-fs (loop4): Directory bread(block 65) failed [ 146.575415][ T4899] FAT-fs (loop4): Directory bread(block 66) failed [ 146.582111][ T4899] FAT-fs (loop4): Directory bread(block 67) failed [ 146.588759][ T4899] FAT-fs (loop4): Directory bread(block 68) failed [ 146.609359][ T4899] FAT-fs (loop4): Directory bread(block 69) failed [ 146.616897][ T4901] hfsplus: b-tree write err: -5, ino 4 [ 146.650017][ T4899] FAT-fs (loop4): Directory bread(block 70) failed [ 146.794442][ T4899] FAT-fs (loop4): Directory bread(block 71) failed [ 146.801091][ T4899] FAT-fs (loop4): Directory bread(block 72) failed [ 146.821206][ T4899] FAT-fs (loop4): Directory bread(block 73) failed [ 146.927694][ T4882] loop2: detected capacity change from 0 to 32768 [ 146.935103][ T4882] XFS: noikeep mount option is deprecated. [ 147.065621][ T4882] XFS (loop2): Mounting V5 Filesystem [ 147.213729][ T4882] XFS (loop2): Ending clean mount [ 147.247060][ T4882] XFS (loop2): Quotacheck needed: Please wait. [ 147.514716][ T4882] XFS (loop2): Quotacheck: Done. [ 148.117404][ T4523] XFS (loop2): Unmounting Filesystem [ 152.123050][ T4964] loop4: detected capacity change from 0 to 128 [ 152.244386][ T4951] loop2: detected capacity change from 0 to 32768 [ 152.330335][ T4951] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.249 (4951) [ 152.458693][ T4951] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.523994][ T4951] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 152.548542][ T4967] loop4: detected capacity change from 0 to 1024 [ 152.598763][ T4959] loop1: detected capacity change from 0 to 32768 [ 152.622389][ T4951] BTRFS info (device loop2): using free space tree [ 152.714439][ T4959] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.251 (4959) [ 153.171893][ T3654] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (3654) [ 153.214357][ T3704] hfsplus: b-tree write err: -5, ino 4 [ 153.330212][ T4951] BTRFS info (device loop2): enabling ssd optimizations [ 153.618636][ T4523] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.631275][ T5008] Invalid ELF header type: 0 != 1 [ 157.427760][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 158.115584][ T3651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.125563][ T3651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.154693][ T3651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.200312][ T3651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.208081][ T3651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 158.217162][ T3651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.722262][ T5018] loop1: detected capacity change from 0 to 32768 [ 158.766741][ T5018] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.266 (5018) [ 158.877710][ T5018] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.910530][ T5018] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 158.920335][ T5018] BTRFS info (device loop1): using free space tree [ 159.186483][ T5018] BTRFS info (device loop1): enabling ssd optimizations [ 159.374011][ T3647] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.042565][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 160.272562][ T3651] Bluetooth: hci5: command tx timeout [ 160.302437][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 160.432722][ T14] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 160.466290][ T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.480891][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.491479][ T14] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 160.527408][ T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.593543][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.675887][ T14] usbtmc 4-1:16.0: bulk endpoints not found [ 160.883972][ T26] audit: type=1326 audit(1726842886.866:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.3.273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb302d7def9 code=0x0 [ 162.362476][ T3651] Bluetooth: hci5: command tx timeout [ 163.634376][ T3904] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.034899][ T5023] chnl_net:caif_netlink_parms(): no params data found [ 164.731077][ T3651] Bluetooth: hci5: command tx timeout [ 164.755715][ T3715] usb 4-1: USB disconnect, device number 3 [ 164.830716][ T5106] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 164.911662][ T3904] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.171292][ T3904] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.277416][ T5023] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.309492][ T5023] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.345410][ T5023] device bridge_slave_0 entered promiscuous mode [ 166.446634][ T3904] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.535370][ T5023] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.555521][ T5023] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.596440][ T5023] device bridge_slave_1 entered promiscuous mode [ 166.703768][ T5023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.746143][ T5023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.854436][ T3651] Bluetooth: hci5: command tx timeout [ 167.163745][ T5131] device syzkaller0 entered promiscuous mode [ 167.259778][ T5023] team0: Port device team_slave_0 added [ 168.734839][ T3222] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 168.995990][ T3222] usb 2-1: Using ep0 maxpacket: 8 [ 169.125971][ T3222] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 169.152497][ T3222] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.183909][ T3222] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.214272][ T3222] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 169.228360][ T5158] loop2: detected capacity change from 0 to 32768 [ 169.241605][ T3222] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 169.251982][ T3222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.260928][ T5158] XFS: noikeep mount option is deprecated. [ 169.303981][ T3222] usbtmc 2-1:16.0: bulk endpoints not found [ 169.386277][ T5158] XFS (loop2): Mounting V5 Filesystem [ 169.514133][ T26] audit: type=1326 audit(1726842895.496:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.1.292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcc917def9 code=0x0 [ 169.558048][ T5158] XFS (loop2): Ending clean mount [ 169.572127][ T5158] XFS (loop2): Quotacheck needed: Please wait. [ 169.694145][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 170.276223][ T5158] XFS (loop2): Quotacheck: Done. [ 170.745264][ T4523] XFS (loop2): Unmounting Filesystem [ 172.736496][ T5180] loop3: detected capacity change from 0 to 40427 [ 172.816961][ T5180] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 172.861037][ T5180] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 172.902281][ T5180] F2FS-fs (loop3): invalid crc value [ 172.986320][ T5180] F2FS-fs (loop3): Found nat_bits in checkpoint [ 173.040374][ T3684] usb 2-1: USB disconnect, device number 3 [ 173.091359][ T5180] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 173.112594][ T5180] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 173.216994][ T5200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.297'. [ 174.041693][ T5205] loop2: detected capacity change from 0 to 1024 [ 174.750438][ T3865] hfsplus: b-tree write err: -5, ino 4 [ 176.930164][ T5223] loop3: detected capacity change from 0 to 1024 [ 177.539201][ T9] hfsplus: b-tree write err: -5, ino 4 [ 177.661018][ T5023] team0: Port device team_slave_1 added [ 177.915613][ T5023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.932760][ T5023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.020831][ T3646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.032676][ T3646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.046965][ T3646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.054954][ T3646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.063596][ T3646] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 178.070950][ T3646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.091094][ T5023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.182238][ T5023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.192783][ T5023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.257125][ T5023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.543979][ T5023] device hsr_slave_0 entered promiscuous mode [ 178.562603][ T5023] device hsr_slave_1 entered promiscuous mode [ 178.572060][ T5023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.589125][ T5023] Cannot create hsr debugfs directory [ 180.112669][ T3640] Bluetooth: hci0: command tx timeout [ 180.673248][ T3640] Bluetooth: hci3: command 0x0406 tx timeout [ 180.673293][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 181.418399][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 181.790857][ T3904] device hsr_slave_0 left promiscuous mode [ 181.805187][ T3904] device hsr_slave_1 left promiscuous mode [ 181.831147][ T5275] loop2: detected capacity change from 0 to 32768 [ 181.840620][ T3904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.858915][ T3904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.891812][ T5275] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.315 (5275) [ 181.920992][ T3904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.949314][ T5275] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.972543][ T3904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.990661][ T5275] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 182.018265][ T3904] device bridge_slave_1 left promiscuous mode [ 182.021067][ T5275] BTRFS info (device loop2): using free space tree [ 182.042676][ T3904] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.073089][ T3904] device bridge_slave_0 left promiscuous mode [ 182.079358][ T3904] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.155640][ T3904] device veth1_macvtap left promiscuous mode [ 182.161756][ T3904] device veth0_macvtap left promiscuous mode [ 182.192421][ T3646] Bluetooth: hci0: command tx timeout [ 182.223027][ T3904] device veth1_vlan left promiscuous mode [ 182.269068][ T5278] loop1: detected capacity change from 0 to 32768 [ 182.322656][ T3904] device veth0_vlan left promiscuous mode [ 182.337172][ T5278] XFS (loop1): Mounting V5 Filesystem [ 182.421586][ T5275] BTRFS info (device loop2): enabling ssd optimizations [ 182.523874][ T5278] XFS (loop1): Ending clean mount [ 182.544853][ T5278] XFS (loop1): Quotacheck needed: Please wait. [ 182.651017][ T5278] XFS (loop1): Quotacheck: Done. [ 182.764008][ T4523] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.582465][ T3646] Bluetooth: hci0: command tx timeout [ 184.668849][ T3904] team0 (unregistering): Port device team_slave_1 removed [ 184.946126][ T3904] team0 (unregistering): Port device team_slave_0 removed [ 185.248927][ T3904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.273313][ T3640] Bluetooth: hci4: unexpected event 0x04 length: 14 > 10 [ 185.277422][ T26] audit: type=1800 audit(1726842911.256:8): pid=5350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.324" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 185.336730][ T3904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.682492][ T5354] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 187.303910][ T5367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 187.312994][ T3640] Bluetooth: hci4: command tx timeout [ 188.016109][ T3904] bond0 (unregistering): Released all slaves [ 188.400658][ T3647] XFS (loop1): Unmounting Filesystem [ 189.710950][ T5391] loop2: detected capacity change from 0 to 2048 [ 189.747984][ T5391] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.000757][ T5391] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 190.025445][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.053591][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.053780][ T5400] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 190.062207][ T5230] device bridge_slave_0 entered promiscuous mode [ 190.113452][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.307899][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.332496][ T5230] device bridge_slave_1 entered promiscuous mode [ 190.344032][ T5399] loop3: detected capacity change from 0 to 4096 [ 190.714003][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.804043][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.956575][ T5023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 191.039533][ T5023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 191.061160][ T5230] team0: Port device team_slave_0 added [ 191.074595][ T5023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 191.164190][ T5230] team0: Port device team_slave_1 added [ 191.170984][ T5023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 191.377475][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.517240][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.543864][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.704158][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.843182][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.066454][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.307416][ T5420] loop3: detected capacity change from 0 to 1024 [ 192.435826][ T5230] device hsr_slave_0 entered promiscuous mode [ 192.472995][ T5230] device hsr_slave_1 entered promiscuous mode [ 192.731228][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.944555][ T5230] Cannot create hsr debugfs directory [ 193.071807][ T5023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.142648][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.159399][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.187419][ T5023] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.251842][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.271609][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.301156][ T4132] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.308338][ T4132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.347697][ T3865] hfsplus: b-tree write err: -5, ino 4 [ 193.401737][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.420726][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.437808][ T4132] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.444988][ T4132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.608640][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.649556][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.658371][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.742108][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.759958][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.106308][ T5425] loop2: detected capacity change from 0 to 32768 [ 194.392761][ T5422] loop1: detected capacity change from 0 to 32768 [ 194.446259][ T5422] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.340 (5422) [ 194.486742][ T5425] XFS (loop2): Mounting V5 Filesystem [ 194.550549][ T5425] XFS (loop2): Ending clean mount [ 194.567069][ T5425] XFS (loop2): Quotacheck needed: Please wait. [ 194.624842][ T5425] XFS (loop2): Quotacheck: Done. [ 194.631833][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.638414][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.666007][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.712929][ T5422] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.742633][ T5422] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 194.760766][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.791929][ T5422] BTRFS info (device loop1): using free space tree [ 194.823329][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.843288][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.880457][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.976778][ T5451] binder: 5450:5451 ioctl 4018620d 0 returned -22 [ 194.990466][ T5451] binder: 5450:5451 ioctl c0306201 20000380 returned -11 [ 195.117898][ T5230] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.158796][ T5422] BTRFS info (device loop1): enabling ssd optimizations [ 195.293089][ T3647] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 195.368765][ T5230] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.397152][ T5470] Bluetooth: MGMT ver 1.22 [ 195.811603][ T4523] XFS (loop2): Unmounting Filesystem [ 196.762339][ T5230] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.896316][ T5023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.918494][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.934404][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.948281][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.998793][ T5230] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.173925][ T5230] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 198.222990][ T5230] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 198.266155][ T5495] loop1: detected capacity change from 0 to 128 [ 198.403226][ T5230] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 198.557722][ T5230] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 199.203461][ T5498] ceph: No mds server is up or the cluster is laggy [ 199.600315][ T3683] libceph: connect (1)[c::]:6789 error -101 [ 199.613809][ T3683] libceph: mon0 (1)[c::]:6789 connect error [ 199.757101][ T5507] loop1: detected capacity change from 0 to 32768 [ 199.832037][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.868421][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.882810][ T3681] libceph: connect (1)[c::]:6789 error -101 [ 199.892481][ T3681] libceph: mon0 (1)[c::]:6789 connect error [ 199.941374][ T5507] XFS (loop1): Mounting V5 Filesystem [ 200.066954][ T5521] loop3: detected capacity change from 0 to 1024 [ 200.193566][ T5507] XFS (loop1): Ending clean mount [ 200.214560][ T5023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.342861][ T5507] XFS (loop1): Quotacheck needed: Please wait. [ 200.692450][ T5507] XFS (loop1): Quotacheck: Done. [ 200.789099][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.804098][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.830232][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.899921][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.921946][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.954915][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.969475][ T5023] device veth0_vlan entered promiscuous mode [ 201.008227][ T3704] hfsplus: b-tree write err: -5, ino 4 [ 201.296910][ T5515] loop2: detected capacity change from 0 to 40427 [ 201.327486][ T5515] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 201.385809][ T5515] F2FS-fs (loop2): invalid crc value [ 201.406110][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.428239][ T5515] F2FS-fs (loop2): Found nat_bits in checkpoint [ 201.446084][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.472714][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.500400][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.516894][ T3925] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.524248][ T3925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.547936][ T5023] device veth1_vlan entered promiscuous mode [ 201.614242][ T5515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 201.677779][ T5515] syz.2.358: attempt to access beyond end of device [ 201.677779][ T5515] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.708077][ T3647] XFS (loop1): Unmounting Filesystem [ 201.716235][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.739304][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.776857][ T5515] syz.2.358: attempt to access beyond end of device [ 201.776857][ T5515] loop2: rw=2049, sector=45104, nr_sectors = 48 limit=40427 [ 201.778991][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.808369][ T5515] syz.2.358: attempt to access beyond end of device [ 201.808369][ T5515] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.848860][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.867170][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.885176][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.902859][ T3925] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.909986][ T3925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.918786][ T4523] syz-executor: attempt to access beyond end of device [ 201.918786][ T4523] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 201.932754][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.933868][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.092448][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 202.100814][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.139398][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.189728][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.230220][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.261168][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.320651][ T3904] device hsr_slave_0 left promiscuous mode [ 202.339327][ T3904] device hsr_slave_1 left promiscuous mode [ 202.359905][ T3904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.383446][ T3904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.406681][ T3904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.420698][ T3904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.441459][ T3904] device bridge_slave_1 left promiscuous mode [ 202.452604][ T3904] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.468104][ T3904] device bridge_slave_0 left promiscuous mode [ 202.482829][ T3904] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.534525][ T3904] device veth1_macvtap left promiscuous mode [ 202.540617][ T3904] device veth0_macvtap left promiscuous mode [ 202.570144][ T3904] device veth1_vlan left promiscuous mode [ 202.607104][ T3904] device veth0_vlan left promiscuous mode [ 202.969760][ T5548] hub 9-0:1.0: USB hub found [ 202.975903][ T5548] hub 9-0:1.0: 8 ports detected [ 203.092676][ T3646] Bluetooth: Wrong link type (-22) [ 203.108608][ T3646] Bluetooth: Wrong link type (-22) [ 203.114050][ T3646] Bluetooth: Wrong link type (-22) [ 203.119746][ T3646] Bluetooth: hci3: link tx timeout [ 203.127482][ T3646] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 203.137317][ T3646] Bluetooth: hci3: link tx timeout [ 203.143586][ T3646] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 206.027094][ T3904] team0 (unregistering): Port device team_slave_1 removed [ 206.201356][ T3904] team0 (unregistering): Port device team_slave_0 removed [ 206.388073][ T3904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.566070][ T3904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.840489][ T5573] loop3: detected capacity change from 0 to 32768 [ 206.848060][ T5571] loop2: detected capacity change from 0 to 32768 [ 206.905451][ T5571] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.370 (5571) [ 206.962043][ T5571] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.974246][ T5571] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 206.983566][ T5571] BTRFS info (device loop2): using free space tree [ 207.006467][ T5573] XFS (loop3): Mounting V5 Filesystem [ 207.097783][ T5573] XFS (loop3): Ending clean mount [ 207.114347][ T5573] XFS (loop3): Quotacheck needed: Please wait. [ 207.339119][ T5573] XFS (loop3): Quotacheck: Done. [ 207.368695][ T5571] BTRFS info (device loop2): enabling ssd optimizations [ 207.466083][ T4523] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.951512][ T5602] loop1: detected capacity change from 0 to 32768 [ 207.964648][ T5602] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.374 (5602) [ 208.010720][ T5602] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.045554][ T5602] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 208.092346][ T5602] BTRFS info (device loop1): using free space tree [ 208.305139][ T5602] BTRFS info (device loop1): enabling ssd optimizations [ 208.379087][ T3904] bond0 (unregistering): Released all slaves [ 208.513064][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.530974][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.541414][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.559212][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.563150][ T3647] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.570782][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.607560][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.654296][ T5023] device veth0_macvtap entered promiscuous mode [ 208.688068][ T5023] device veth1_macvtap entered promiscuous mode [ 208.739086][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.754785][ T3639] XFS (loop3): Unmounting Filesystem [ 208.762177][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.775017][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.786862][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.797890][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.817354][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.853029][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.881407][ T5023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.053117][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.123833][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.138025][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.149732][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.161468][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.173150][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.279077][ T5023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.318965][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.390358][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.516959][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.636725][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.743382][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.825584][ T5023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.866986][ T5023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.876017][ T5023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.884882][ T5023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.104285][ T3965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.160883][ T3965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.272223][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.336193][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.385590][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.421950][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.430462][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.439119][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.661487][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.918908][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 211.704972][ T5663] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 212.177564][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.212730][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.303672][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.321060][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.362922][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.399368][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.439611][ T5230] device veth0_vlan entered promiscuous mode [ 212.490077][ T5230] device veth1_vlan entered promiscuous mode [ 212.566683][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.591637][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 212.623080][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.658325][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.703145][ T5230] device veth0_macvtap entered promiscuous mode [ 212.719533][ T5230] device veth1_macvtap entered promiscuous mode [ 212.797557][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.832710][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.866930][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.902520][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.927378][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.975309][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.022337][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.061039][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.081566][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.094242][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.113906][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.139312][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.169424][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.209691][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.242316][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.258010][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.289330][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.332375][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.413060][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.432488][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.455646][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.477829][ T5675] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 213.510299][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.526763][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.547607][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.563426][ T5230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.588236][ T5230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.629551][ T5230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.647378][ T5230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.033241][ T3925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.084354][ T3925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.162878][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.190466][ T3925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.200710][ T3925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.215122][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.518646][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 217.345760][ T5709] loop4: detected capacity change from 0 to 128 [ 217.413726][ T26] audit: type=1804 audit(1726842943.386:9): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.392" name="/newroot/1/file2/file0" dev="loop4" ino=1048606 res=1 errno=0 [ 217.894019][ T5725] loop1: detected capacity change from 0 to 128 [ 218.079973][ T5731] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 218.129433][ T5733] loop4: detected capacity change from 0 to 512 [ 218.964473][ T5733] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 218.981740][ T5733] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 218.991786][ T5733] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.400: Failed to acquire dquot type 0 [ 219.022779][ T5733] EXT4-fs (loop4): Remounting filesystem read-only [ 219.048517][ T5733] EXT4-fs (loop4): 1 orphan inode deleted [ 219.158214][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 219.516544][ T5733] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 219.633492][ T5742] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 219.660607][ T5733] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 219.742086][ T5742] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 219.779526][ T5733] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 219.828955][ T5733] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 219.839081][ T5733] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.400: Failed to acquire dquot type 0 [ 219.855510][ T5733] EXT4-fs (loop4): Remounting filesystem read-only [ 219.983707][ T5230] EXT4-fs (loop4): unmounting filesystem. [ 220.374271][ T5750] loop2: detected capacity change from 0 to 512 [ 220.501089][ T5750] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 220.784567][ T5750] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038 (0x7fffffff) [ 221.232802][ T5750] EXT4-fs error (device loop2): ext4_readdir:260: inode #12: block 32: comm syz.2.405: path /49/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 221.501952][ T4523] EXT4-fs (loop2): unmounting filesystem. [ 221.916120][ T4058] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 222.210589][ T5766] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 222.213349][ T5746] loop1: detected capacity change from 0 to 65536 [ 222.413005][ T4058] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.458649][ T4058] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.492697][ T4058] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 222.502669][ T4058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.524113][ T4058] usb 4-1: config 0 descriptor?? [ 222.542089][ T5746] XFS (loop1): Mounting V5 Filesystem [ 222.654165][ T5746] XFS (loop1): Ending clean mount [ 222.661892][ T5778] loop4: detected capacity change from 0 to 256 [ 222.797447][ T5762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.843001][ T5762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.932869][ T5762] device bond_slave_0 entered promiscuous mode [ 222.940071][ T5762] device bond_slave_1 entered promiscuous mode [ 222.959711][ T5762] device vlan2 entered promiscuous mode [ 222.987361][ T5762] device bond0 entered promiscuous mode [ 223.074107][ T5762] device bond0 left promiscuous mode [ 223.085741][ T5762] device bond_slave_0 left promiscuous mode [ 223.091741][ T5762] device bond_slave_1 left promiscuous mode [ 223.114036][ T5788] sg_write: process 177 (syz.2.414) changed security contexts after opening file descriptor, this is not allowed. [ 223.296337][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 223.865352][ T3647] XFS (loop1): Unmounting Filesystem [ 224.054519][ T4058] usbhid 4-1:0.0: can't add hid device: -71 [ 224.061293][ T4058] usbhid: probe of 4-1:0.0 failed with error -71 [ 224.194902][ T4058] usb 4-1: USB disconnect, device number 4 [ 226.323997][ T26] audit: type=1800 audit(1726842951.316:10): pid=5801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.420" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 226.825510][ T26] audit: type=1326 audit(1726842952.806:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5811 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb302d7def9 code=0x7ffc0000 [ 227.109235][ T26] audit: type=1326 audit(1726842952.806:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5811 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb302d7def9 code=0x7ffc0000 [ 227.132930][ T26] audit: type=1326 audit(1726842952.806:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5811 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb302d7def9 code=0x7ffc0000 [ 227.156216][ T26] audit: type=1326 audit(1726842952.806:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5811 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb302d7def9 code=0x7ffc0000 [ 227.180444][ T26] audit: type=1326 audit(1726842952.806:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5811 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb302d7def9 code=0x7ffc0000 [ 227.209190][ T26] audit: type=1326 audit(1726842952.806:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5811 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fb302d7def9 code=0x7ffc0000 [ 227.235452][ T26] audit: type=1326 audit(1726842952.806:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5811 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb302d7def9 code=0x7ffc0000 [ 227.243038][ T5819] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 227.512592][ T4058] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 227.782738][ T4058] usb 4-1: Using ep0 maxpacket: 16 [ 227.903878][ T4058] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 227.912104][ T4058] usb 4-1: config 0 has no interface number 0 [ 227.944569][ T4058] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 227.984592][ T4058] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 229.368457][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 229.776877][ T4058] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 229.807656][ T4058] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.816570][ T4058] usb 4-1: Product: syz [ 229.820777][ T4058] usb 4-1: Manufacturer: syz [ 229.852347][ T4058] usb 4-1: SerialNumber: syz [ 229.867708][ T4058] usb 4-1: config 0 descriptor?? [ 229.892722][ T5821] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 229.900322][ T5821] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 230.826029][ T4058] asix: probe of 4-1:0.251 failed with error -71 [ 230.837990][ T4058] usb 4-1: USB disconnect, device number 5 [ 231.072010][ T5844] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 231.231932][ T26] audit: type=1326 audit(1726842957.206:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 231.314330][ T5853] loop2: detected capacity change from 0 to 8 [ 231.358698][ T26] audit: type=1326 audit(1726842957.206:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 231.399384][ T5853] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 231.452341][ T26] audit: type=1326 audit(1726842957.206:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 231.630042][ T26] audit: type=1326 audit(1726842957.206:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 231.783246][ T26] audit: type=1326 audit(1726842957.206:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 231.909312][ T5860] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 232.182427][ T26] audit: type=1326 audit(1726842957.206:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 232.311096][ T26] audit: type=1326 audit(1726842957.206:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 232.363659][ T26] audit: type=1326 audit(1726842957.206:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 232.449535][ T26] audit: type=1326 audit(1726842957.206:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 232.536967][ T26] audit: type=1326 audit(1726842957.206:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 233.594410][ T26] audit: type=1326 audit(1726842959.576:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0bd7def9 code=0x7ffc0000 [ 233.646038][ T5859] loop3: detected capacity change from 0 to 32768 [ 233.669121][ T5859] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.440 (5859) [ 233.748279][ T5859] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.766355][ T5859] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 233.792459][ T5859] BTRFS info (device loop3): using free space tree [ 233.950009][ T5855] loop0: detected capacity change from 0 to 40427 [ 233.991175][ T5855] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 234.032074][ T5855] F2FS-fs (loop0): invalid crc value [ 234.077585][ T5855] F2FS-fs (loop0): Found nat_bits in checkpoint [ 234.122483][ T5859] BTRFS info (device loop3): enabling ssd optimizations [ 234.270598][ T5855] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 234.370710][ T5855] syz.0.438: attempt to access beyond end of device [ 234.370710][ T5855] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 234.370997][ T3639] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.415799][ T5855] syz.0.438: attempt to access beyond end of device [ 234.415799][ T5855] loop0: rw=2049, sector=45104, nr_sectors = 48 limit=40427 [ 234.454366][ T5855] syz.0.438: attempt to access beyond end of device [ 234.454366][ T5855] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 234.731801][ T5023] syz-executor: attempt to access beyond end of device [ 234.731801][ T5023] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 234.845294][ T5924] loop3: detected capacity change from 0 to 256 [ 234.926807][ T5900] loop1: detected capacity change from 0 to 32768 [ 234.968329][ T5900] XFS: noikeep mount option is deprecated. [ 235.116435][ T5900] XFS (loop1): Mounting V5 Filesystem [ 235.267055][ T5900] XFS (loop1): Ending clean mount [ 235.327328][ T5900] XFS (loop1): Quotacheck needed: Please wait. [ 235.383315][ T5900] XFS (loop1): Quotacheck: Done. [ 236.177494][ T3647] XFS (loop1): Unmounting Filesystem [ 237.216925][ T5946] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 237.561360][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 237.561376][ T26] audit: type=1326 audit(1726842963.536:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 237.637683][ T26] audit: type=1326 audit(1726842963.536:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 237.692646][ T26] audit: type=1326 audit(1726842963.596:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 237.821646][ T26] audit: type=1326 audit(1726842963.596:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 237.907219][ T5959] loop1: detected capacity change from 0 to 128 [ 237.912255][ T26] audit: type=1326 audit(1726842963.606:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 238.040756][ T26] audit: type=1326 audit(1726842963.606:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 238.163256][ T26] audit: type=1326 audit(1726842963.606:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 238.286436][ T26] audit: type=1326 audit(1726842963.606:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 238.491007][ T26] audit: type=1800 audit(1726842963.986:47): pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.461" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 238.513670][ T5970] loop1: detected capacity change from 0 to 16 [ 238.528400][ T5970] erofs: (device loop1): mounted with root inode @ nid 36. [ 238.539337][ T5970] syz.1.465: attempt to access beyond end of device [ 238.539337][ T5970] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 238.553184][ T5970] syz.1.465: attempt to access beyond end of device [ 238.553184][ T5970] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 238.570938][ T5970] syz.1.465: attempt to access beyond end of device [ 238.570938][ T5970] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 238.786365][ T5969] device syzkaller0 entered promiscuous mode [ 239.302172][ T5962] loop3: detected capacity change from 0 to 32768 [ 239.332534][ T5962] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.463 (5962) [ 239.409710][ T5962] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.457679][ T5962] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 239.625013][ T5962] BTRFS info (device loop3): using free space tree [ 240.252319][ T5982] netlink: 'syz.1.468': attribute type 16 has an invalid length. [ 240.280157][ T5982] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.468'. [ 241.784785][ T5962] BTRFS error (device loop3): open_ctree failed [ 242.898760][ T3646] Bluetooth: Wrong link type (-22) [ 242.904109][ T3646] Bluetooth: Wrong link type (-22) [ 242.909265][ T3646] Bluetooth: Wrong link type (-22) [ 242.915348][ T3646] Bluetooth: hci3: link tx timeout [ 242.921234][ T3646] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 242.929277][ T3646] Bluetooth: hci3: link tx timeout [ 242.934511][ T3646] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 243.156031][ T6007] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 243.575165][ T26] audit: type=1326 audit(1726842969.556:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 243.671354][ T26] audit: type=1326 audit(1726842969.556:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 243.756992][ T26] audit: type=1326 audit(1726842969.556:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 243.762384][ T6016] loop1: detected capacity change from 0 to 128 [ 243.915212][ T26] audit: type=1326 audit(1726842969.556:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 243.964741][ T26] audit: type=1326 audit(1726842969.556:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 244.004607][ T6018] program syz.0.476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.017244][ T26] audit: type=1326 audit(1726842969.556:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 244.053699][ T26] audit: type=1326 audit(1726842969.556:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050f97def9 code=0x7ffc0000 [ 244.683740][ T3646] Bluetooth: Wrong link type (-22) [ 244.689314][ T3646] Bluetooth: Wrong link type (-22) [ 244.696593][ T3646] Bluetooth: Wrong link type (-22) [ 244.706192][ T3646] Bluetooth: hci3: link tx timeout [ 244.716467][ T3646] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 244.743770][ T6032] hub 9-0:1.0: USB hub found [ 244.750172][ T6032] hub 9-0:1.0: 8 ports detected [ 244.774449][ T3646] Bluetooth: hci3: link tx timeout [ 244.819014][ T3646] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 247.458361][ T6045] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 247.472460][ T3646] Bluetooth: hci4: command 0x0406 tx timeout [ 247.995707][ T6034] loop1: detected capacity change from 0 to 32768 [ 248.032025][ T6034] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.481 (6034) [ 248.110989][ T6034] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.160789][ T6034] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 248.221393][ T6034] BTRFS info (device loop1): using free space tree [ 248.350460][ T6055] loop0: detected capacity change from 0 to 128 [ 248.664759][ T6034] BTRFS error (device loop1): open_ctree failed [ 249.085048][ T3640] Bluetooth: Wrong link type (-22) [ 249.091509][ T3640] Bluetooth: Wrong link type (-22) [ 249.098398][ T3640] Bluetooth: Wrong link type (-22) [ 249.106580][ T3640] Bluetooth: hci1: link tx timeout [ 249.111796][ T3640] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 249.153891][ T6078] hub 9-0:1.0: USB hub found [ 249.159419][ T6078] hub 9-0:1.0: 8 ports detected [ 249.165730][ T3640] Bluetooth: hci1: link tx timeout [ 249.170937][ T3640] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 250.252543][ T7] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 250.960178][ T3640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.980477][ T3640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.990264][ T3640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.999508][ T3640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.007364][ T3640] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 251.015287][ T3640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.315473][ T3646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 251.322555][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.322705][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 251.323546][ T7] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 251.357536][ T3646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 251.366804][ T3646] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 251.378597][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.378612][ T3646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 251.400632][ T3646] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 251.408287][ T3646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 251.410431][ T7] usb 2-1: config 0 descriptor?? [ 251.474810][ T6091] loop3: detected capacity change from 0 to 32768 [ 251.495569][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 251.507729][ T6091] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.496 (6091) [ 251.517661][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 251.615563][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 251.653022][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 251.660075][ T6091] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 251.674150][ T7] usb 2-1: media controller created [ 251.676581][ T6091] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 251.690442][ T6091] BTRFS info (device loop3): using free space tree [ 251.694093][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.699274][ T6082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.740439][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 251.747703][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 251.768102][ T6082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.800671][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 251.829102][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 251.847914][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 251.889580][ T7] usb 2-1: USB disconnect, device number 4 [ 251.973163][ T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 252.060929][ T6091] BTRFS info (device loop3): enabling ssd optimizations [ 252.248840][ T3639] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 253.069354][ T6124] loop3: detected capacity change from 0 to 128 [ 253.084487][ T3646] Bluetooth: hci2: command tx timeout [ 253.728940][ T3640] Bluetooth: hci6: command tx timeout [ 253.754795][ T6124] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 253.763935][ T6124] sysv_free_block: trying to free block not in datazone [ 253.773957][ T6124] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 254.271494][ T6115] loop0: detected capacity change from 0 to 32768 [ 254.310519][ T6115] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.505 (6115) [ 254.372189][ T6115] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.442916][ T6115] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 254.451689][ T6115] BTRFS info (device loop0): using free space tree [ 254.717235][ T6115] BTRFS info (device loop0): enabling ssd optimizations [ 254.948238][ T5023] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 255.112513][ T6139] loop3: detected capacity change from 0 to 40427 [ 255.162629][ T3646] Bluetooth: hci2: command tx timeout [ 255.163283][ T6139] F2FS-fs (loop3): invalid crc value [ 255.211725][ T6139] F2FS-fs (loop3): Found nat_bits in checkpoint [ 255.323962][ T6139] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 255.402783][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.409177][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.508717][ T6161] loop0: detected capacity change from 0 to 128 [ 255.902621][ T3646] Bluetooth: hci6: command tx timeout [ 256.650300][ T5974] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 256.914603][ T6164] loop0: detected capacity change from 0 to 32768 [ 256.975260][ T3880] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (3880) [ 257.093276][ T6164] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 257.174949][ T6164] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 257.237453][ T3640] Bluetooth: hci2: command tx timeout [ 257.244933][ T6164] BTRFS info (device loop0): using free space tree [ 257.389764][ T6164] BTRFS info (device loop0): enabling ssd optimizations [ 257.626836][ T3639] syz-executor: attempt to access beyond end of device [ 257.626836][ T3639] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 257.644461][ T5023] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 257.953430][ T3640] Bluetooth: hci6: command tx timeout [ 258.066361][ T3865] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.178139][ T6167] loop1: detected capacity change from 0 to 40427 [ 258.204541][ T6167] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 258.319202][ T6167] F2FS-fs (loop1): invalid crc value [ 258.332089][ T3865] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.373086][ T3640] Bluetooth: hci2: command tx timeout [ 259.413382][ T6167] F2FS-fs (loop1): Found nat_bits in checkpoint [ 259.430163][ T6092] chnl_net:caif_netlink_parms(): no params data found [ 259.539062][ T6088] chnl_net:caif_netlink_parms(): no params data found [ 259.639597][ T6167] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 259.642038][ T3865] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.709440][ T6167] syz.1.503: attempt to access beyond end of device [ 259.709440][ T6167] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 259.769226][ T6167] syz.1.503: attempt to access beyond end of device [ 259.769226][ T6167] loop1: rw=2049, sector=45104, nr_sectors = 48 limit=40427 [ 259.781493][ T6204] loop0: detected capacity change from 0 to 256 [ 259.802397][ T3222] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 259.821438][ T26] audit: type=1800 audit(1726842985.776:55): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.508" name="bus" dev="loop0" ino=1048615 res=0 errno=0 [ 259.831771][ T6167] syz.1.503: attempt to access beyond end of device [ 259.831771][ T6167] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 259.864432][ T3865] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.893431][ T3647] syz-executor: attempt to access beyond end of device [ 259.893431][ T3647] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 259.955701][ T6209] loop0: detected capacity change from 0 to 8 [ 259.966190][ T6209] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 260.032660][ T3640] Bluetooth: hci6: command tx timeout [ 260.050090][ T6092] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.060554][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.069273][ T6092] device bridge_slave_0 entered promiscuous mode [ 260.173907][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.184223][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.198712][ T26] audit: type=1800 audit(1726842986.176:56): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.511" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 260.202688][ T6088] device bridge_slave_0 entered promiscuous mode [ 260.254356][ T6092] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.261533][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.302836][ T6092] device bridge_slave_1 entered promiscuous mode [ 260.322677][ T3222] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.344044][ T3222] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 260.358816][ T3222] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 260.372517][ T3222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.391037][ T3222] usb 4-1: config 0 descriptor?? [ 260.396247][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.411243][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.424070][ T6088] device bridge_slave_1 entered promiscuous mode [ 260.454529][ T3222] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 260.461198][ T3222] dvb-usb: bulk message failed: -22 (3/0) [ 260.479809][ T3222] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 260.481205][ T6092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.506980][ T3222] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 260.535874][ T3222] usb 4-1: media controller created [ 260.572125][ T3222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.602748][ T3222] dvb-usb: bulk message failed: -22 (6/0) [ 260.612655][ T3222] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 260.653988][ T3222] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 260.667514][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.715006][ T3222] dvb-usb: schedule remote query interval to 150 msecs. [ 260.728873][ T3222] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 260.892944][ T3751] dvb-usb: bulk message failed: -22 (1/0) [ 260.899164][ T3751] dvb-usb: error while querying for an remote control event. [ 260.908860][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.824457][ T3751] dvb-usb: bulk message failed: -22 (1/0) [ 261.830249][ T3751] dvb-usb: error while querying for an remote control event. [ 261.871713][ T3796] usb 4-1: USB disconnect, device number 6 [ 261.930852][ T3796] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 261.944695][ T6229] loop1: detected capacity change from 0 to 1024 [ 261.959541][ T6221] device syzkaller0 entered promiscuous mode [ 261.985396][ T6092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.159571][ T6092] team0: Port device team_slave_0 added [ 264.117182][ T41] hfsplus: b-tree write err: -5, ino 4 [ 264.840280][ T6236] loop1: detected capacity change from 0 to 32768 [ 264.894223][ T6236] XFS: noikeep mount option is deprecated. [ 264.986996][ T6236] XFS (loop1): Mounting V5 Filesystem [ 265.199892][ T6236] XFS (loop1): Ending clean mount [ 265.224386][ T6236] XFS (loop1): Quotacheck needed: Please wait. [ 265.328437][ T6236] XFS (loop1): Quotacheck: Done. [ 266.235793][ T3647] XFS (loop1): Unmounting Filesystem [ 266.756319][ T6252] kAFS: No cell specified [ 268.472794][ T6092] team0: Port device team_slave_1 added [ 268.481420][ T6088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.584894][ T6088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.623068][ T6092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.630050][ T6092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.704641][ T6092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.723616][ T6092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.730798][ T6092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.800951][ T6092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.973299][ T3751] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 268.981930][ T6088] team0: Port device team_slave_0 added [ 269.041088][ T3640] Bluetooth: Wrong link type (-22) [ 269.046822][ T3640] Bluetooth: Wrong link type (-22) [ 269.051989][ T3640] Bluetooth: Wrong link type (-22) [ 269.057547][ T3640] Bluetooth: hci3: link tx timeout [ 269.063722][ T3640] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 269.071536][ T3640] Bluetooth: hci3: link tx timeout [ 269.082786][ T3640] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 269.121525][ T6088] team0: Port device team_slave_1 added [ 269.293977][ T6092] device hsr_slave_0 entered promiscuous mode [ 269.319825][ T6092] device hsr_slave_1 entered promiscuous mode [ 269.360478][ T6092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.402062][ T6092] Cannot create hsr debugfs directory [ 269.412794][ T3751] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.452649][ T3751] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 269.462039][ T3751] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 269.491921][ T3751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.534606][ T3751] usb 1-1: config 0 descriptor?? [ 269.577329][ T3751] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 269.623670][ T3751] dvb-usb: bulk message failed: -22 (3/0) [ 269.697907][ T3751] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 269.713731][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.724366][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.774577][ T6262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.780101][ T6269] loop3: detected capacity change from 0 to 32768 [ 269.789972][ T3751] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 269.802933][ T3751] usb 1-1: media controller created [ 269.809388][ T3751] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.823222][ T6269] XFS: noikeep mount option is deprecated. [ 269.832527][ T6088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.868837][ T6262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.897030][ T6269] XFS (loop3): Mounting V5 Filesystem [ 269.931144][ T3751] dvb-usb: bulk message failed: -22 (6/0) [ 269.961981][ T3751] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 270.008182][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.019189][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.054497][ T3751] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 270.068007][ T6269] XFS (loop3): Ending clean mount [ 270.075620][ T6088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.107218][ T6269] XFS (loop3): Quotacheck needed: Please wait. [ 270.163049][ T3751] dvb-usb: schedule remote query interval to 150 msecs. [ 270.171486][ T3751] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 270.201853][ T3751] usb 1-1: USB disconnect, device number 3 [ 270.293953][ T6269] XFS (loop3): Quotacheck: Done. [ 270.313165][ T3751] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 270.394589][ T6088] device hsr_slave_0 entered promiscuous mode [ 270.409478][ T6088] device hsr_slave_1 entered promiscuous mode [ 270.418100][ T6088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.437338][ T6088] Cannot create hsr debugfs directory [ 271.252548][ T3639] XFS (loop3): Unmounting Filesystem [ 271.367041][ T6303] kAFS: No cell specified [ 273.228015][ T6316] device syzkaller0 entered promiscuous mode [ 273.482517][ T3716] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 273.913554][ T3716] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.940610][ T3716] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 273.967050][ T3716] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 273.976599][ T3716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.013169][ T3716] usb 4-1: config 0 descriptor?? [ 274.071060][ T3716] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 274.080222][ T3716] dvb-usb: bulk message failed: -22 (3/0) [ 274.100983][ T3716] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 274.132707][ T3716] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 274.139829][ T3716] usb 4-1: media controller created [ 274.151803][ T3716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.173940][ T3716] dvb-usb: bulk message failed: -22 (6/0) [ 274.186372][ T3716] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 274.236297][ T3716] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 274.253765][ T3716] dvb-usb: schedule remote query interval to 150 msecs. [ 274.262379][ T3716] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 274.272647][ T6335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.424249][ T3716] dvb-usb: bulk message failed: -22 (1/0) [ 274.430046][ T3716] dvb-usb: error while querying for an remote control event. [ 274.439037][ T6335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.492561][ T3716] usb 4-1: USB disconnect, device number 7 [ 275.368494][ T3716] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 275.534500][ T6343] kAFS: No cell specified [ 275.794111][ T3640] Bluetooth: Wrong link type (-22) [ 275.800687][ T3640] Bluetooth: Wrong link type (-22) [ 275.804063][ T6349] loop3: detected capacity change from 0 to 1024 [ 275.805991][ T3640] Bluetooth: Wrong link type (-22) [ 275.830200][ T3640] Bluetooth: hci5: link tx timeout [ 275.835976][ T3640] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 276.267168][ T3987] hfsplus: b-tree write err: -5, ino 4 [ 276.597935][ T6354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.543'. [ 276.656001][ T6355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.543'. [ 277.872571][ T3646] Bluetooth: hci5: command 0x0406 tx timeout [ 278.777808][ T6088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.699902][ T6088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.873946][ T3865] device hsr_slave_0 left promiscuous mode [ 279.893226][ T3865] device hsr_slave_1 left promiscuous mode [ 279.928881][ T3865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.944786][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.952488][ T3848] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 279.960931][ T3865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.974051][ T6380] loop0: detected capacity change from 0 to 128 [ 279.984810][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.013350][ T3865] device bridge_slave_1 left promiscuous mode [ 280.019654][ T3865] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.043617][ T3865] device bridge_slave_0 left promiscuous mode [ 280.062949][ T3865] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.176588][ T3865] device veth1_macvtap left promiscuous mode [ 280.196763][ T3865] device veth0_macvtap left promiscuous mode [ 280.222717][ T3865] device veth1_vlan left promiscuous mode [ 280.244083][ T3865] device veth0_vlan left promiscuous mode [ 280.282091][ T6387] loop0: detected capacity change from 0 to 1024 [ 280.352668][ T3848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.403519][ T3848] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 280.420103][ T3848] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 280.462084][ T3848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.505884][ T3848] usb 4-1: config 0 descriptor?? [ 280.516864][ T4901] hfsplus: b-tree write err: -5, ino 4 [ 280.544945][ T3848] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 280.561901][ T3848] dvb-usb: bulk message failed: -22 (3/0) [ 280.648987][ T3848] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 280.682743][ T3848] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 280.700109][ T3848] usb 4-1: media controller created [ 280.707082][ T3848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.718333][ T6375] loop1: detected capacity change from 0 to 32768 [ 280.745107][ T6369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.756403][ T3848] dvb-usb: bulk message failed: -22 (6/0) [ 280.785271][ T6375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.550 (6375) [ 280.821799][ T3848] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 280.868842][ T6369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.897352][ T6375] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.921092][ T3848] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 280.946724][ T6375] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 280.957623][ T3640] Bluetooth: Wrong link type (-22) [ 280.963098][ T3640] Bluetooth: Wrong link type (-22) [ 280.965109][ T6375] BTRFS info (device loop1): using free space tree [ 280.968239][ T3640] Bluetooth: Wrong link type (-22) [ 280.968375][ T3640] Bluetooth: hci5: link tx timeout [ 280.985934][ T3640] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.013676][ T3848] dvb-usb: schedule remote query interval to 150 msecs. [ 281.047116][ T3848] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 281.096162][ T3848] usb 4-1: USB disconnect, device number 8 [ 281.192639][ T3848] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 281.250660][ T6375] BTRFS info (device loop1): enabling ssd optimizations [ 281.479303][ T3647] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 282.685257][ T6420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.555'. [ 282.738133][ T6421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.555'. [ 283.072748][ T3640] Bluetooth: hci5: command 0x0406 tx timeout [ 283.349856][ T3865] team0 (unregistering): Port device team_slave_1 removed [ 283.511439][ T3865] team0 (unregistering): Port device team_slave_0 removed [ 283.704400][ T3865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.843323][ T3865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.942430][ T3797] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 284.316318][ T3797] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 284.331703][ T3797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.355843][ T3797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.371474][ T3797] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 284.379328][ T6432] loop0: detected capacity change from 0 to 128 [ 284.477955][ T3797] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 284.487892][ T3797] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 284.497284][ T3797] usb 2-1: Manufacturer: syz [ 284.505300][ T3797] usb 2-1: config 0 descriptor?? [ 284.943000][ T3865] bond0 (unregistering): Released all slaves [ 285.509183][ T3797] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 285.517497][ T3797] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 285.529123][ T3797] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 285.662123][ T6088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.790166][ T6088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.901949][ T6442] loop0: detected capacity change from 0 to 1024 [ 285.909661][ T6442] EXT4-fs: Ignoring removed bh option [ 286.554622][ T6442] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 286.565809][ T6442] EXT4-fs warning (device loop0): ext4_enable_quotas:7035: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 286.582147][ T6442] EXT4-fs (loop0): mount failed [ 286.811744][ T6088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 286.893001][ T6088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 286.902541][ T3797] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 286.949917][ T6088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 287.055222][ T6088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 287.094797][ T6092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 287.131503][ T6092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 287.163796][ T6092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 287.212501][ T6092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 287.314684][ T3640] Bluetooth: Wrong link type (-22) [ 287.320785][ T3640] Bluetooth: Wrong link type (-22) [ 287.328267][ T3640] Bluetooth: Wrong link type (-22) [ 287.336873][ T3640] Bluetooth: hci5: link tx timeout [ 287.345032][ T3640] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.384677][ T6460] hub 9-0:1.0: USB hub found [ 287.390800][ T6460] hub 9-0:1.0: 8 ports detected [ 287.572923][ T3797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.622905][ T3797] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 287.650570][ T7] usb 2-1: USB disconnect, device number 5 [ 287.880998][ T3797] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 287.929686][ T3797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.983249][ T3797] usb 4-1: config 0 descriptor?? [ 288.064699][ T3797] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 288.089828][ T3797] dvb-usb: bulk message failed: -22 (3/0) [ 288.132987][ T3797] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 288.192977][ T3797] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 288.241042][ T3797] usb 4-1: media controller created [ 288.269188][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.306857][ T3797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.358848][ T6088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.378005][ T3640] Bluetooth: Wrong link type (-22) [ 288.384227][ T3640] Bluetooth: Wrong link type (-22) [ 288.389463][ T3640] Bluetooth: Wrong link type (-22) [ 288.394986][ T3640] Bluetooth: hci3: link tx timeout [ 288.400123][ T3640] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 288.408724][ T3640] Bluetooth: hci3: link tx timeout [ 288.413986][ T3640] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 288.430455][ T3797] dvb-usb: bulk message failed: -22 (6/0) [ 288.437859][ T3797] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 288.448907][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.484931][ T3797] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 288.531320][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.550276][ T3797] dvb-usb: schedule remote query interval to 150 msecs. [ 288.581559][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.621653][ T3797] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 288.643773][ T6088] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.697458][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.712043][ T3797] usb 4-1: USB disconnect, device number 9 [ 288.737757][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.813314][ T3797] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 288.825237][ T3865] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.832470][ T3865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.887960][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.926392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.949685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.971846][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.979150][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.996400][ T6092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.054135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.073656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.104137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.139219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.167326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.195462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.229056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.259874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.290264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.339183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.365125][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.425940][ T6092] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.464085][ T6088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.485812][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.628992][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.673190][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.748011][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.763489][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.790204][ T4901] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.797499][ T4901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.822770][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.845222][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.870803][ T4901] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.877998][ T4901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.985863][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.053030][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.085624][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.153739][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.227968][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.293795][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.340542][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.396270][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.433278][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.459658][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.484510][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.506918][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.539078][ T6092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 290.612684][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.620693][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.635663][ T6088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.685386][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.695364][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.915224][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.945306][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.136232][ T6088] device veth0_vlan entered promiscuous mode [ 291.218505][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 291.287546][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 291.479715][ T6088] device veth1_vlan entered promiscuous mode [ 291.640915][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 291.660144][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 291.733520][ T6088] device veth0_macvtap entered promiscuous mode [ 291.769418][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 291.790105][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 291.818907][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 291.840549][ T26] audit: type=1800 audit(1726843017.816:57): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.568" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 291.876300][ T6088] device veth1_macvtap entered promiscuous mode [ 291.926141][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 291.954450][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.962012][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.999955][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.013149][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.023506][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.036343][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.048594][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.069385][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.087843][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.113018][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.158707][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.180065][ T6092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.188124][ T6504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.570'. [ 292.196672][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 292.220097][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 292.240904][ T6506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.570'. [ 292.256315][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.277173][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.305165][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.340392][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.375136][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.396993][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.408729][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.431447][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.460200][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.477009][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 292.493268][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 292.527670][ T6088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.543910][ T6088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.560639][ T6088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.572031][ T6088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.792878][ T3904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.801138][ T3904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.879881][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 292.899446][ T3904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.928323][ T3904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.079739][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.407389][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.434298][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.823684][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.843397][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.863476][ T6092] device veth0_vlan entered promiscuous mode [ 293.876287][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.906391][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.951307][ T6092] device veth1_vlan entered promiscuous mode [ 294.002345][ T3222] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 294.043788][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.057692][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.069806][ T6092] device veth0_macvtap entered promiscuous mode [ 294.090139][ T6092] device veth1_macvtap entered promiscuous mode [ 294.128843][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.155528][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.188189][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.228087][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.242608][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.253246][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.263854][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.274460][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.284417][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.295055][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.047938][ T6092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.122887][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.142816][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.164586][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.178803][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.204817][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.234984][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.260756][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.298898][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.329895][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.361196][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.404625][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.504393][ T6537] RDS: rds_bind could not find a transport for ::4006:20:0:0, load rds_tcp or rds_rdma? [ 296.063474][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.115634][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.166980][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.181703][ T3222] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.193995][ T3222] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 296.203135][ T3222] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 296.212215][ T3222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.233732][ T3222] usb 4-1: config 0 descriptor?? [ 296.240893][ T6092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.252539][ T3222] usb 4-1: can't set config #0, error -71 [ 296.266530][ T3222] usb 4-1: USB disconnect, device number 10 [ 296.276079][ T6092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.419515][ T6092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.428730][ T6092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.437862][ T6092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.454829][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.535154][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.901754][ T3704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.926348][ T3704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.936572][ T6533] loop2: detected capacity change from 0 to 32768 [ 296.945091][ T6533] XFS: noikeep mount option is deprecated. [ 297.010499][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 297.031413][ T6533] XFS (loop2): Mounting V5 Filesystem [ 297.106404][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.120152][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.216926][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 297.304445][ T6533] XFS (loop2): Ending clean mount [ 297.326424][ T6533] XFS (loop2): Quotacheck needed: Please wait. [ 297.416770][ T6533] XFS (loop2): Quotacheck: Done. [ 297.641847][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.581'. [ 297.773608][ T6560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.581'. [ 298.318343][ T6088] XFS (loop2): Unmounting Filesystem [ 298.844542][ T6571] loop3: detected capacity change from 0 to 2048 [ 298.911867][ T6571] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.038575][ T6571] ================================================================== [ 299.046700][ T6571] BUG: KASAN: slab-out-of-bounds in udf_write_aext+0x5e9/0x7a0 [ 299.054303][ T6571] Write of size 4 at addr ffff888058cf13f0 by task syz.3.585/6571 [ 299.062138][ T6571] [ 299.064488][ T6571] CPU: 1 PID: 6571 Comm: syz.3.585 Not tainted 6.1.111-syzkaller #0 [ 299.072490][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 299.082582][ T6571] Call Trace: [ 299.085883][ T6571] [ 299.088837][ T6571] dump_stack_lvl+0x1e3/0x2cb [ 299.093562][ T6571] ? nf_tcp_handle_invalid+0x642/0x642 [ 299.099057][ T6571] ? panic+0x764/0x764 [ 299.103157][ T6571] ? _printk+0xd1/0x111 [ 299.107344][ T6571] ? __virt_addr_valid+0x17f/0x530 [ 299.112489][ T6571] ? __virt_addr_valid+0x17f/0x530 [ 299.117639][ T6571] print_report+0x15f/0x4f0 [ 299.122169][ T6571] ? __virt_addr_valid+0x17f/0x530 [ 299.127331][ T6571] ? __virt_addr_valid+0x17f/0x530 [ 299.132472][ T6571] ? __virt_addr_valid+0x45b/0x530 [ 299.137616][ T6571] ? __phys_addr+0xb6/0x170 [ 299.142152][ T6571] ? udf_write_aext+0x5e9/0x7a0 [ 299.147050][ T6571] kasan_report+0x136/0x160 [ 299.151568][ T6571] ? udf_write_aext+0x5e9/0x7a0 [ 299.156437][ T6571] udf_write_aext+0x5e9/0x7a0 [ 299.161138][ T6571] udf_add_entry+0x17b7/0x3350 [ 299.165925][ T6571] ? rcu_is_watching+0x11/0xb0 [ 299.170700][ T6571] ? udf_add_nondir+0x5d0/0x5d0 [ 299.175587][ T6571] ? udf_new_inode+0xaf9/0xf10 [ 299.180367][ T6571] ? aa_get_newest_label+0xfb/0x6e0 [ 299.185576][ T6571] ? lockdep_softirqs_off+0x420/0x420 [ 299.190958][ T6571] udf_mkdir+0x1a8/0xaa0 [ 299.195230][ T6571] ? make_kgid+0x6f0/0x6f0 [ 299.199654][ T6571] ? apparmor_capable+0x12e/0x190 [ 299.204686][ T6571] ? bpf_lsm_capable+0x5/0x10 [ 299.209367][ T6571] ? udf_symlink+0x1690/0x1690 [ 299.214145][ T6571] ? privileged_wrt_inode_uidgid+0x210/0x260 [ 299.220134][ T6571] ? inode_permission+0xf7/0x450 [ 299.225078][ T6571] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 299.230190][ T6571] ? security_inode_mkdir+0xb4/0x100 [ 299.235489][ T6571] vfs_mkdir+0x3b6/0x590 [ 299.239738][ T6571] do_mkdirat+0x225/0x360 [ 299.244076][ T6571] ? vfs_mkdir+0x590/0x590 [ 299.248496][ T6571] ? getname_flags+0x1f9/0x4f0 [ 299.253261][ T6571] ? lockdep_hardirqs_on+0x94/0x130 [ 299.258464][ T6571] __x64_sys_mkdir+0x6a/0x80 [ 299.263062][ T6571] do_syscall_64+0x3b/0xb0 [ 299.267486][ T6571] ? clear_bhb_loop+0x45/0xa0 [ 299.272172][ T6571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.278076][ T6571] RIP: 0033:0x7fb302d7def9 [ 299.282594][ T6571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.302209][ T6571] RSP: 002b:00007fb303aa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 299.310668][ T6571] RAX: ffffffffffffffda RBX: 00007fb302f35f80 RCX: 00007fb302d7def9 [ 299.318656][ T6571] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020002bc0 [ 299.326628][ T6571] RBP: 00007fb302df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 299.334600][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.342576][ T6571] R13: 0000000000000000 R14: 00007fb302f35f80 R15: 00007ffd729b0f58 [ 299.350559][ T6571] [ 299.353578][ T6571] [ 299.355900][ T6571] Allocated by task 3638: [ 299.360223][ T6571] kasan_set_track+0x4b/0x70 [ 299.364828][ T6571] __kasan_kmalloc+0x97/0xb0 [ 299.369417][ T6571] __kmalloc_node+0xb3/0x230 [ 299.374008][ T6571] memcg_alloc_slab_cgroups+0x7d/0x120 [ 299.379471][ T6571] slab_post_alloc_hook+0xb5/0x3a0 [ 299.384594][ T6571] kmem_cache_alloc+0x10c/0x2d0 [ 299.389447][ T6571] anon_vma_clone+0x94/0x4d0 [ 299.394038][ T6571] anon_vma_fork+0x83/0x580 [ 299.398544][ T6571] copy_mm+0xc83/0x1990 [ 299.402697][ T6571] copy_process+0x19d5/0x4060 [ 299.407388][ T6571] kernel_clone+0x222/0x920 [ 299.411889][ T6571] __x64_sys_clone+0x231/0x280 [ 299.416667][ T6571] do_syscall_64+0x3b/0xb0 [ 299.421089][ T6571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.426993][ T6571] [ 299.429308][ T6571] The buggy address belongs to the object at ffff888058cf1000 [ 299.429308][ T6571] which belongs to the cache kmalloc-512 of size 512 [ 299.443392][ T6571] The buggy address is located 496 bytes to the right of [ 299.443392][ T6571] 512-byte region [ffff888058cf1000, ffff888058cf1200) [ 299.457190][ T6571] [ 299.459516][ T6571] The buggy address belongs to the physical page: [ 299.465932][ T6571] page:ffffea0001633c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58cf0 [ 299.476089][ T6571] head:ffffea0001633c00 order:2 compound_mapcount:0 compound_pincount:0 [ 299.484410][ T6571] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 299.492417][ T6571] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017c41c80 [ 299.500999][ T6571] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 299.509579][ T6571] page dumped because: kasan: bad access detected [ 299.515989][ T6571] page_owner tracks the page as allocated [ 299.521698][ T6571] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3652, tgid 3652 (syz-executor), ts 59216144777, free_ts 13358347223 [ 299.540972][ T6571] post_alloc_hook+0x18d/0x1b0 [ 299.545736][ T6571] get_page_from_freelist+0x322e/0x33b0 [ 299.551305][ T6571] __alloc_pages+0x28d/0x770 [ 299.555892][ T6571] alloc_slab_page+0x6a/0x150 [ 299.560573][ T6571] new_slab+0x84/0x2d0 [ 299.564643][ T6571] ___slab_alloc+0xc20/0x1270 [ 299.569322][ T6571] __kmem_cache_alloc_node+0x19f/0x260 [ 299.574783][ T6571] __kmalloc+0xa1/0x230 [ 299.578939][ T6571] fib6_info_alloc+0x2c/0xd0 [ 299.583536][ T6571] ip6_route_info_create+0x446/0x12c0 [ 299.588911][ T6571] ip6_route_add+0x22/0x120 [ 299.593418][ T6571] addrconf_add_linklocal+0x625/0xae0 [ 299.598798][ T6571] addrconf_addr_gen+0x856/0xbe0 [ 299.603734][ T6571] addrconf_init_auto_addrs+0x945/0xe60 [ 299.609280][ T6571] addrconf_notify+0xade/0xf60 [ 299.614045][ T6571] raw_notifier_call_chain+0xd0/0x170 [ 299.619418][ T6571] page last free stack trace: [ 299.624082][ T6571] free_unref_page_prepare+0xf63/0x1120 [ 299.629654][ T6571] free_unref_page+0x33/0x3e0 [ 299.634353][ T6571] free_contig_range+0x9a/0x150 [ 299.639205][ T6571] destroy_args+0xfe/0x997 [ 299.643621][ T6571] debug_vm_pgtable+0x416/0x46b [ 299.648472][ T6571] do_one_initcall+0x265/0x8f0 [ 299.653240][ T6571] do_initcall_level+0x157/0x207 [ 299.658184][ T6571] do_initcalls+0x49/0x86 [ 299.662518][ T6571] kernel_init_freeable+0x45c/0x60f [ 299.667723][ T6571] kernel_init+0x19/0x290 [ 299.672051][ T6571] ret_from_fork+0x1f/0x30 [ 299.676474][ T6571] [ 299.678790][ T6571] Memory state around the buggy address: [ 299.684441][ T6571] ffff888058cf1280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 299.692497][ T6571] ffff888058cf1300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 299.700553][ T6571] >ffff888058cf1380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 299.708609][ T6571] ^ [ 299.716324][ T6571] ffff888058cf1400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 299.724380][ T6571] ffff888058cf1480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 299.732435][ T6571] ================================================================== [ 299.838516][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.850972][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.862972][ T6571] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 299.870227][ T6571] CPU: 0 PID: 6571 Comm: syz.3.585 Not tainted 6.1.111-syzkaller #0 [ 299.878262][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 299.888345][ T6571] Call Trace: [ 299.891642][ T6571] [ 299.894598][ T6571] dump_stack_lvl+0x1e3/0x2cb [ 299.899410][ T6571] ? nf_tcp_handle_invalid+0x642/0x642 [ 299.904924][ T6571] ? panic+0x764/0x764 [ 299.909042][ T6571] ? preempt_schedule_common+0xa6/0xd0 [ 299.914561][ T6571] ? vscnprintf+0x59/0x80 [ 299.918916][ T6571] panic+0x318/0x764 [ 299.922835][ T6571] ? check_panic_on_warn+0x1d/0xa0 [ 299.927973][ T6571] ? memcpy_page_flushcache+0xfc/0xfc [ 299.933377][ T6571] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 299.939399][ T6571] ? _raw_spin_unlock+0x40/0x40 [ 299.944278][ T6571] ? print_report+0x4a3/0x4f0 [ 299.948985][ T6571] check_panic_on_warn+0x7e/0xa0 [ 299.953974][ T6571] ? udf_write_aext+0x5e9/0x7a0 [ 299.958862][ T6571] end_report+0x66/0x110 [ 299.963136][ T6571] kasan_report+0x143/0x160 [ 299.967669][ T6571] ? udf_write_aext+0x5e9/0x7a0 [ 299.972562][ T6571] udf_write_aext+0x5e9/0x7a0 [ 299.977279][ T6571] udf_add_entry+0x17b7/0x3350 [ 299.979802][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.989027][ T6571] ? rcu_is_watching+0x11/0xb0 [ 299.993926][ T6571] ? udf_add_nondir+0x5d0/0x5d0 [ 299.998827][ T6571] ? udf_new_inode+0xaf9/0xf10 [ 300.003626][ T6571] ? aa_get_newest_label+0xfb/0x6e0 [ 300.008854][ T6571] ? lockdep_softirqs_off+0x420/0x420 [ 300.014259][ T6571] udf_mkdir+0x1a8/0xaa0 [ 300.018534][ T6571] ? make_kgid+0x6f0/0x6f0 [ 300.022974][ T6571] ? apparmor_capable+0x12e/0x190 [ 300.028025][ T6571] ? bpf_lsm_capable+0x5/0x10 [ 300.032725][ T6571] ? udf_symlink+0x1690/0x1690 [ 300.037536][ T6571] ? privileged_wrt_inode_uidgid+0x210/0x260 [ 300.043566][ T6571] ? inode_permission+0xf7/0x450 [ 300.048531][ T6571] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 300.053588][ T6571] ? security_inode_mkdir+0xb4/0x100 [ 300.058913][ T6571] vfs_mkdir+0x3b6/0x590 [ 300.063214][ T6571] do_mkdirat+0x225/0x360 [ 300.067584][ T6571] ? vfs_mkdir+0x590/0x590 [ 300.072031][ T6571] ? getname_flags+0x1f9/0x4f0 [ 300.076822][ T6571] ? lockdep_hardirqs_on+0x94/0x130 [ 300.082065][ T6571] __x64_sys_mkdir+0x6a/0x80 [ 300.086685][ T6571] do_syscall_64+0x3b/0xb0 [ 300.091127][ T6571] ? clear_bhb_loop+0x45/0xa0 [ 300.095833][ T6571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.101749][ T6571] RIP: 0033:0x7fb302d7def9 [ 300.106892][ T6571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.126566][ T6571] RSP: 002b:00007fb303aa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 300.135013][ T6571] RAX: ffffffffffffffda RBX: 00007fb302f35f80 RCX: 00007fb302d7def9 [ 300.143016][ T6571] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020002bc0 [ 300.151004][ T6571] RBP: 00007fb302df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 300.158992][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.166986][ T6571] R13: 0000000000000000 R14: 00007fb302f35f80 R15: 00007ffd729b0f58 [ 300.175080][ T6571] [ 300.178417][ T6571] Kernel Offset: disabled [ 300.182747][ T6571] Rebooting in 86400 seconds..