last executing test programs: 1m40.636323193s ago: executing program 5 (id=2654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r8, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x341b}}]}, 0x40}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x9, 0x0, 0x4, 0x9, 0x20, 0x1, 0xbe7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000b80)=[{&(0x7f0000000dc0)="cc", 0x1}, {&(0x7f0000000140)="1a", 0x1}, {&(0x7f0000000480)="e6", 0x1}, {&(0x7f00000009c0)='A', 0x1}, {&(0x7f0000000100)="fb", 0x1}, {&(0x7f0000000ac0)='=', 0x1}], 0x6, 0x0) write$binfmt_script(r11, &(0x7f0000000180)={'#! ', './file0'}, 0xb) ioctl$sock_inet_udp_SIOCINQ(r11, 0x541b, &(0x7f00000000c0)) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x200, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0xb, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_val={0x18, 0x6, 0x2, 0x0, r4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000600)='GPL\x00', 0xb2ff, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x0, 0x5e50, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[r9, r10, r11, 0xffffffffffffffff, r12], &(0x7f0000000840)=[{0x2, 0x2, 0xe, 0x7}, {0x5, 0x1, 0x2, 0xe}, {0x3, 0x2, 0xe, 0x8}, {0x0, 0x2, 0x8, 0x2}], 0x10, 0x200}, 0x90) 1m38.246199768s ago: executing program 5 (id=2664): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15}, 0x90) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map=r1, r0, 0x15, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) 1m37.800837026s ago: executing program 5 (id=2666): socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x280400a, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x3, 0x294, &(0x7f0000000500)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwritev(r4, &(0x7f00000008c0)=[{&(0x7f0000000180)="a7", 0x1}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r6, 0x103, 0x2, 0x0, &(0x7f00000000c0)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) brk(0x0) kcmp(r0, r0, 0x0, r3, 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200), 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m36.521037505s ago: executing program 5 (id=2671): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0/../file0/file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b050600e0ff020006004788aa96a13bb1000011000088ca1a00", 0x1001a, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) fcntl$notify(r6, 0x402, 0x80000008) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0000100000000000"], 0x24}}, 0x104) landlock_create_ruleset(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='./file0/../file0/file0\x00', 0x0, 0x2809c11, 0x0) mount$bind(&(0x7f00000006c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xadc51, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r9, &(0x7f000000c1c0)={0x2020}, 0x2020) 1m34.906947015s ago: executing program 5 (id=2677): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) 1m32.705242155s ago: executing program 5 (id=2689): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), 0x4) 58.042407925s ago: executing program 4 (id=2795): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlinkat(&(0x7f00000001c0)='./bus\x00', r0, &(0x7f0000000180)='./file2\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='cruft,block=0x0000000000000400\x00session=0x0000000000000006,check=relaxed,utf8,cruftAuid=', @ANYRES64, @ANYBLOB="2c8ef6fff25f71854bb02441c2edff2c66736dbdda08da0968bf8783e49a23113d3078303030303030303030303001003066581c000000000000bd2551db78fc65240062c543fd92499a55c4676e4ab57351fab1f21354c2000000000000a36961e03f1f9b339e1208fe76adf824d531e4f11e82cd11bccd3e4d4cd5b4502ba9708a2827923cada4e88ec20e806b355ece7f4afbdb8475f9b71f1eafd72d05729520434e51cc55317bb19441bd11c979ca9786b51118d9b1c2246f0b407eaa2083113d1bab6700000000000000", @ANYRES16, @ANYRESHEX=0x0, @ANYRESDEC], 0x0, 0x63b, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='./file0\x00', &(0x7f0000002340)='virtiofs\x00', 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x3231564e}}) 57.623795055s ago: executing program 4 (id=2797): socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/166, 0xa6}], 0x1, 0x0, 0x0) 57.198837246s ago: executing program 4 (id=2799): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x341b}}]}, 0x40}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x9, 0x0, 0x4, 0x9, 0x20, 0x1, 0xbe7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000b80)=[{&(0x7f0000000dc0)="cc", 0x1}, {&(0x7f0000000140)="1a", 0x1}, {&(0x7f0000000480)="e6", 0x1}, {&(0x7f00000009c0)='A', 0x1}, {&(0x7f0000000100)="fb", 0x1}, {&(0x7f0000000ac0)='=', 0x1}], 0x6, 0x0) write$binfmt_script(r10, &(0x7f0000000180)={'#! ', './file0'}, 0xb) ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, &(0x7f00000000c0)) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x200, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0xb, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_val={0x18, 0x6, 0x2, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000600)='GPL\x00', 0xb2ff, 0x0, 0x0, 0x41100, 0x0, '\x00', r7, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x0, 0x5e50, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[r8, r9, r10, 0xffffffffffffffff, r11], &(0x7f0000000840)=[{0x2, 0x2, 0xe, 0x7}, {0x5, 0x1, 0x2, 0xe}, {0x3, 0x2, 0xe, 0x8}, {0x0, 0x2, 0x8, 0x2}], 0x10, 0x200}, 0x90) 56.261369771s ago: executing program 4 (id=2800): r0 = openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_FREEZE(r4, 0x400c620e, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x18, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRESDEC], 0x0, 0x1, 0xa1, &(0x7f0000000880)=""/161, 0x40f00, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, &(0x7f00000008c0), 0x0, 0x10, 0x200}, 0x90) r7 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) sendto$inet6(r7, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000080), 0x4) 56.169259858s ago: executing program 2 (id=2801): syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) unshare(0x480) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 54.914482288s ago: executing program 4 (id=2802): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000001000)=ANY=[@ANYBLOB="588c90aadaedde6a2e64f465b0fcbcb8b6449c2f317140214a9be29c9e467325a38e1b43cd"], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 54.76848567s ago: executing program 4 (id=2803): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="b00000000314010027bd7000ffdbdf250900020073797a310000000008004100727865001400330070696d726567000000000000000000000900020073797a300000000008004100736977001400330076657468315f746f5f627269646765000900020073797a310000000008004100727865001400330076657468315f766c616e0000000000000900"], 0xb0}}, 0x0) 53.049507473s ago: executing program 2 (id=2805): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001480)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "5233f503dd8ad31feb7649d2f36f51602148f233d2f07c46d48811538630ce115cef7c3020ee1e44c7efd31fcaa4954cbbd4afdbc4"}, 0x2000) 27.14197736s ago: executing program 1 (id=2860): r0 = socket$rds(0x15, 0x5, 0x0) connect(r0, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) landlock_restrict_self(r2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) dup3(r5, r4, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mknod$loop(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0\x00') r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r7 = dup(r6) syz_open_procfs$userns(r1, &(0x7f0000000040)) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r7, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 26.845686998s ago: executing program 1 (id=2861): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)=ANY=[], 0x12, 0x9ef, &(0x7f0000004cc0)="$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") open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271b, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 25.600284278s ago: executing program 1 (id=2862): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/166, 0xa6}], 0x1, 0x0, 0x0) 24.880224928s ago: executing program 1 (id=2863): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000580)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@extent_cache}, {@noinline_data}, {@inline_dentry}, {@extent_cache}, {@jqfmt_vfsv1}, {@flush_merge}, {@noextent_cache}]}, 0x1e, 0x552d, &(0x7f000000abc0)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}]}}) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x101800, 0x0) brk(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) 23.721491179s ago: executing program 1 (id=2864): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x90) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/address_bits', 0x100, 0xd9) lseek(r2, 0x8000000000000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x890b, &(0x7f0000001d00)={{0x0, 0x2, 0x0, 0x0, 0xb8300000000}}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049dc) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file0'}, 0xb) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffb6, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1a00010, &(0x7f0000000540)=ANY=[], 0x2, 0x564, &(0x7f00000010c0)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0) 21.417466143s ago: executing program 1 (id=2866): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x50, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PORT={0x4f2a44fb10e95572}, @FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_AF={0x5}]}, 0x50}}, 0x0) 2.326578021s ago: executing program 0 (id=2901): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x1, 0x0, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x0, 0x8000, 0x8, 0x6, {{0xd, 0x4, 0x3, 0x9, 0x34, 0x0, 0x0, 0x1, 0x50, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x20, 0x8f, 0x0, 0xd, [0x8, 0x0, 0x3, 0x7, 0x5, 0x6, 0x5759ea6b]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r1, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x10, 0x803, 0x0) connect$netlink(r3, &(0x7f0000000280)=@proc, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) 1.718800514s ago: executing program 2 (id=2806): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@dstopts={{0x18}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x30}}], 0x2, 0x0) 1.693025855s ago: executing program 0 (id=2902): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001480)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) 1.196412952s ago: executing program 3 (id=2903): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x2c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.115310133s ago: executing program 2 (id=2904): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000e40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2c93497d9ae41ebc6099d95fea5e764494873e0d82a172b3bb54f35039c7d81e9ab07f2fb4dad61bd50c4b2c861c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d0200000050685e0f4f079d2d8e79be174ef9355b70739c712c5d3f739f01dfbf5eb2772052", 0xc2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)="d06e8c35c885a29d9b5a4c0cdc701c0a29e04f23da2f06f1fcee213a12f86890989871329666c46b0e5b3e71ddb8f3f8924d7d7d77b71e600e99648aa395517e23d2573a7198197ba0b1a521fee111ba01f31f4f9da5f59419c186adfe0d633a44c48c9887d489d3700b966100e64d1a025c512d7ad598ce01f097021eebe4f9e82a7e611b030000003deb364bd0f60d207a0daf", 0x94}], 0x1}}], 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x138, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1a, 0x3, "650b190f9349cee7a89f0baefa15e35e8fddc2480dc0"}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "9c3db97f6ba02f46568e1b445699c3b27057ee488b0c13520e6acbc35e"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "2a73b8b4821f3e9256d41613bb521e6da4b1e138"}}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x138}}, 0x0) 967.805198ms ago: executing program 2 (id=2905): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000a40)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d1f48007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbda53ec51ae0f0f927a2db0a4", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)=""/244, 0xf4}, {&(0x7f0000001300)=""/4077, 0xfed}, {&(0x7f0000000440)=""/129, 0x81}], 0x3}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 922.406492ms ago: executing program 3 (id=2906): socketpair(0x0, 0x0, 0x3ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0) 890.893958ms ago: executing program 0 (id=2907): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) 721.3231ms ago: executing program 3 (id=2908): setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000440)="ed3e4bf3d7fa8f8452f3e788b7e9d798dc7804c393ecdc08dd00b86e84d135553da0405dcb9c995d9438b9ed9511217f355da97cec073ccc664f682ac188ad6d84a3a3", 0x43, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) r4 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000180)={0x1, r4}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000400)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xfffffffe}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000140)={0x1, r4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x12, r1, 0x0) unshare(0x20000600) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fstat(r5, &(0x7f0000000280)) sendto$inet6(r1, &(0x7f0000000500)="966051e70145b3824f5535b289697f43c7d61e4f16b21d406e07438752390db2b64cbde37d8ddb4c6c1fe357e56da90d95941aa271c1a1595dfef884aa53884093b2f9af63184a44ab7c90b7e60fc150278fb97ea5331297a650a9be90bc71dc60aa76cde53b4697e35c926b87ca3074ff13a3bdff3393dde0ddad6763bc87e585950ad354fb31b99e2e74fddf786f2a7fd5fb3018666fe03577df664c5782e7fd11a4d08e98ee7e811e071431134d8a36f755421c5111611ac5982bedba9bcef8f7a688bba5a1a91f8e5a2b24d5255eb76d5595306023ce906300aef00501da41f5ed7e9294ec24af77ec98", 0xec, 0x8000, &(0x7f0000000200)={0xa, 0x4e23, 0x200, @local}, 0x1c) socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r7, 0x81009431, &(0x7f0000000080)) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f0000000040)=0x9, 0x4) 720.054581ms ago: executing program 0 (id=2909): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0}) 563.803875ms ago: executing program 0 (id=2910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="f4", 0x1}], 0x1, 0x0, 0x0, 0x14) 529.744014ms ago: executing program 3 (id=2911): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="0000800000000000180034800500"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 403.880716ms ago: executing program 2 (id=2912): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000000000), 0x11, 0x991b, &(0x7f0000009880)="$eJzs3QXYZHXBuP9nl6UbCwNZGotuDEJBBAEJKSWkJQWUMAARBEQBSUERUKREkBJREOnu7u7u5n8tuwvresOr/997iS/3fV/X88zMmTPnOfP9zDnPM3tmZ1ZcZNmFBgYmGRjeyNM3O/T5jx+95fML7XTs1Uc8t+jhix89YvJYw0+GDB1xOtWI06kHBgYGjVjOoOHTBg858aTBA+MMDAwedbkTjDv+oAkGBtYacXGBEadzDz+Z8IqR8702Wryiw1Zj0K7Dv4b/0IGBgXGHnXliYOYVRl3OiPWa5Z/uqLQVF1x0kTet3nAbNn5DRpwf9Wus4V8TXjQwMOGFA/z4GPTO3qPXf/4ke5+z0srv8Hr8n2jFBRddbDT/YdviGCOmzT1sGx99GzQ2+uN86Ny3jNwHDcId5/+RVlxwkSXevLTd6Pv5gVVfPWjz117fbw4eb2Bg8PgDA4MnGBgYPOHAwOCJBgYGT/xOu9T/W+/Qw66qqqrewRZcaPaFhj3fG+3vgXFG/l1Lz/9XeWWpWwYGBsYcPs/guUY+F6yqqqqqqqqq/84WXGj2heH5/yRv9/z/hFNfnLHn/1VVVVVVVVX/d1pswYVmH/Y8frTn/5O/3fP/7e55dsMRr/2fe/itXn1n70RVVVVVVVVVvW3LfPn15//jj/b8f+jbPf+/f/5d7h0x38h/N3hllEUOGuX1BC+NMn2MUeZ/cZTpQ0aZPur8Yw0MDB4yYvrLb04ePN6w6/55/sGTDFvvEdNfGGX6LG/+/+Yh044yfdZRpk8/yvTZRqzrsOkzjDJ9zlHmn/FfGduqqqqqqqqqqqqqqqqqqqr/VK8+curpb77n+0cHRnn/9jfex33E6wIGHXfG5Ze/Yyv639Ggf349xHbv9Dr9vzbMeZyjhg4MbLz8O70q9Q70Tn9eQ72z5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4t7i+P8b7/8/xeFrjfw/83MfuvuUE4162/VHOT/Of3St37Hercf/B9YfNDAwwneSYa5LLrjMcjMODAxMNOXuh84x8MZ18wy7bv7JxhjxBgnD3wZhuiG84O1GfCr6diNmHbGM415f/mKvHTLGoNFWYpQmPfmww9Zb8bk5Rj+d/q3vx+CRZ953wVYLj3wvi8GjzfRWj9ORyx95X0Z3HrHuMw5b95m32GjTmTffeptPrb/RGuuuve7aG88799zzzDn3XPPONvM662+49izDv7/VmA19/fs0/8qYTT76mD2y4KhjNvp9e6sxG/r2Y/b6Esfea7UNRo7Z6Kv2P43ZNG8/ZkPXH/GDhgwdc2D118dm0MDAkGnHHNhq2IVZxx4YGDLdiHknHzbvpycbPDCwx5t3dNi5sd94DA7abtg8Ky6y7EJvfuz+P3/8Pr1vyfD3FHn9Ho4YkiFTjTideviPmWTgzYfi4CEnnjR42H3/h2GeYNzxB00wMLDWiIsLjDidd8S1l46c7y0+Z320FX39bVZ2Hf71hse4w84cs/TE1426nLcg+N/o/9fv/3/ymmfQGwM1aMTXiHmGey246GJv/qzXh2GBke8JM+x3yzCT/4ePsf8f+6f1HTrO629y+1br+zbvizv8/sPja/qHzhr6v/W+uLzvWOL170P/lX3HwNvvO8Z48+ybU9e+ZIrR9x2Lv/Uq/sN2MXKMxh5tprfad8y4/4Lbvr5vevt9xxLrj/igoTf3HYMHBoZMM3LfMWxHMv2YA3sMuzDbsAszjDlwxLALs79+YdyBM4ZdmGnNTTZca9Drb9szYrmzDFvuApMNev3OXz7zgkePsfdrr007Yl1mGW3HOuLxMXTU348LTjZ82EbelpZ7+xbDr5t+xHJn/TeWO/K2tNx5Nht+3QwjljvbaMsd422WO/K2I7eHYbO+vj3MOOgfXvgJ2+8io22/g0bu1ke5ycivsYZ/TXjRyM+Ggu3l39rv0PY7ydus79t8rhU+3oZN22HJS0793/pcK1rfcd5+fd/qc7jfcn03GHerpf4X1nfQKOv7D4+zTecb/liZccTjbM5/4/E78raj78fGfP3a4Qwz/iv7sQX+aT+2/RiDR1v5UXqrv4HWgvmHn5/8jaXNe+QYE48c+zFHW+7/9DfQjG+/H5tk/dFut8jBA4NozO9/+LD1xv4fxnzMgX/8W33kmI+87duN+Qz/POaD/mnM53n7Mf9X/+6ccZrh14/xNmM+eOfNlxw55mP9m2M+w7875gsMjEFjvscBw8ft7fanbzXmI2/7j2M+ZOALAwMD044Y8+n/lcf5LP87j/PxYP7h5+95Y9IFU5y22yj7mEH/zphP/++O+dA3HufTvn7d1IMHxhprYKs1tthis1mHfx95cbbh33lf9Pjdw8f57X6XvpXRyNu+3XYx7b9iNPR/x+hDQ/55/pFPOkZeXv6MYyb9/7svmvbfMxq0yADvi045b/i4vd3fRW815iNvS78Hh45y+9Gf173N+1HifRo2bb/997l55CJH3Kz3o/zX+4eH7ch/41t/9J18vVvr3//d5e8uf3f5u8tf3Fsc/3/j/f/vn2TZh0Y8SR5zz/nWXfOdXt93uHf18f8Rvv9w/H/Ndefbc9hTwRHXve3x2eHz/Fcen517+MmEV4ycb/Tjg7yib318doa9Zlpm4D9zfPb/VyO31X/heXz7f3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4tzj+P/I1ykMPfOXu7UYcCB1z333WfOWdXt93uHf18f8Rvv9w/P+VNffZd/DAG9e97fH/4fM4jv8vdeDeJw38Fx//H7mtdvy//ofyd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xb3H8f4GRrwOYa7V1dh35eoCNZ/3cju/0+r7DvVuP//f5/97a/7vL313+7vJ3N+i/7sWL9Z+s7d9d/u7yd5e/u/zd5e8uf3f5u8tf3Ijj/wOjfazj0j0uMDj+/3+7t/D/Sv6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/L+aP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP5fyx+z+H89f8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+38gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfy/mT9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfy/lT9m8d8sf8ziv3n+mMV/i/wxi/+388cs/t/JH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/d/PHhvuPO/Bu9/9e/phl+/9+/pjF/wf5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zB/zOK/Q/6Yxf9H+WMW/x3zxyz+O+WPWfx/nD9m8d85f8ziv0v+mMV/1/wxi/9P8scs/rvlj1n8f5o/ZvH/Wf6YxX/3/DGL/x75Yxb/PfPHLP4/zx+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP6/yB+z+B+QP2bxPzB/zOL/y/wxi/+v8scs/gflj1n8f50/ZvE/OH/M4n9I/pjF/9D8MYv/b/LHLP6/zR+z+B+WP2bx/13+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+P8+f8zif0z+mMX/D/ljFv9j88cs/sflj1n8/5g/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/n/KH7P4n5I/ZvH/c/6Yxf/U/DGL/1/yxyz+f80fs/iflj9m8T89f8zi/7f8MYv/GfljFv+/549Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P6X1H/dtr7X4P631f/ss/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WPybxHzSQP2bxH5Q/ZvEfnD9m8R8jf8ziPyR/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8J8sfs/i/J3/M4v/e/DGL//vyxyz+788fs/h/YFT/Ie/Aev2XZvGfvO0fs/h/MH/M4v+h/DGL/4fzxyz+H8kfs/hPkT9m8f9o/pjFf8r8MYv/0Pwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/8fyxyz+H88fs/h/In/M4v/J/DGL/6fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/p/PHLP6fyR971/qP+w9TB302f+xd6z/a9v+5/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4fz5/zOL/hfwxi/8i+WMW/0Xzxyz+X8wfs/gvlj9m8f9S/pjFf/H8MYv/EvljFv8v549Z/JfMH7P4L5U/ZvFfOn/M4v+V/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4fzV/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/L+WP2bx/3r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfy/kT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+H8zf8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfw3zR+z+H8rf8ziv1n+mMV/8/wxi/8W+WMW/2/nj1n8v5M/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv/v5o9Z/L+XP2bx/37+mMX/B/ljFv9t88cs/tvlj1n8t88fs/j/MH/M4r9D/pjF/0f5Yxb/HfPHLP475Y9Z/H+cP2bx3zl/zOK/S/6YxX/X/DGL/0/yxyz+u+WPWfx/mj9m8f9Z/pjFf/f8MYv/HvljFv8988cs/j/PH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/r/IH7P4H5A/ZvE/MH/M4v/L/DGL/6/yxyz+B+WPWfx/nT9m8T84f8zif0j+mMX/0Pwxi/9v8scs/r/NH7P4H5Y/ZvH/Xf6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4/z5/zOJ/TP6Yxf8P+WMW/2Pzxyz+x+WPWfz/mD9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+f8ofs/ifkj9m8f9z/pjF/9T8MYv/X/LHLP5/zR+z+J+WP2bxPz1/zOL/t/wxi/8Z+WMW/7/nj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b95hP8479R6/Zdm8b+l7R+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8n+jIaOct/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYn/62fz/+fe9B9zYGDg3es/KH/Msv0Pzh+z+I8xqn87gzey+A+JHLP4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+78kfs/i/N3/M4v++/DGL//vzxyz+H8gfs/hPnj9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8Z8if8zi/9H8MYv/lPljFv+h+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv9P549Z/D+TP2bx/2z+mMX/c/ljFv8F8scs/gvmj1n8F8ofs/gvnD9m8f98/pjF/wv5Yxb/RfLHLP6L5o9Z/L+YP2bxXyx/zOL/JYv/2P/e7Bb/xd/C/9b/1Hr9l2bxX8Ky/f+bWfy/nD9m8V8yf8ziv1T+mMV/6fwxi/9X8scs/svkj1n8l80fs/gvlz9m8V8+f8zi/9X8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8f9a/pjF/+v5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvH/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v/N/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4v+t/DGL/2b5Yxb/zfPHLP5b5I9Z/L+dP2bx/07+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy/mz9m8f9e/pjF//v5Yxb/H+SPWfy3zR+z+G+XP2bx3z5/zOL/w/wxi/8O+WMW/x/lj1n8d8wfs/jvlD9m8f9x/pjFf+f8MYv/LvljFv9d88cs/j/JH7P475Y/ZvH/af6Yxf9n+WMW/93zxyz+e+SPWfz3zB+z+P88f8ziv1f+mMV/7/wxi/8+Nv+x/rXZLP772vz/xSz+++WPWfz3zx+z+P8if8zif0D+mMX/wPwxi/8v88cs/r/KH7P4H5Q/ZvH/df6Yxf/g/DGL/yH5Yxb/Q/PHLP6/yR+z+P82f8zif1j+mMX/d/ljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zi//v8MYv/MfljFv8/5I9Z/I/NH7P4H5c/ZvH/Y/6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4/yl/zOJ/Sv6Yxf/P+WMW/1Pzxyz+f8kfs/j/NX/M4n9a/pjF//T8MYv/3/LHLP5n5I9Z/P+eP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v/Sm/6vbfuOrNh/Zxb/l9v+MYv/K/ljFv9X88cs/q/lj0n8xxjIH7P4D8ofs/gPzh+z+I+RP2bxH5I/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfzfkz9m8X9v/pjF/335Yxb/9+ePWfw/kD9m8Z88f8zi/8H8MYv/h/LHLP4fzh+z+H8kf8ziP0X+mMX/o/ljFv8p88cs/kPzxyz+U+WPWfynzh+z+E+TPzbo0OfHGRgYeNf7T5s/Ztn+p8sfs/hPnz9m8Z8hf8ziP2P+mMX/Y/ljFv+P549Z/D+RP2bx/2T+mMX/U/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6Yxf/T+WMW/8/kj1n8P5s/ZvH/XP6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/D+fP2bx/0L+mMV/kfwxi/+i+WMW/y/mj1n8F8sfs/h/KX/M4r94/pjFf4n8MYv/l/PHLP5L5o9Z/JfKH7P4L50/ZvH/Sv6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/L+aP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP5fyx+z+H89f8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+38gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfy/mT9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfy/lT9m8d8sf8ziv3n+mMV/i/wxi/+388cs/t/JH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/d/PHLP7fyx+z+H8/f8zi/4P8MYv/tvljFv/t8scs/tvnj1n8f5g/ZvHfIX/M4v+j/DGL/475Yxb/nfLHLP4/zh+z+O+cP2bx3yV/zOK/a/6Yxf8n+WMW/93yxyz+P80fs/j/LH/M4r97/pjFf4/8MYv/nvljFv+f549Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv9f5I9Z/A/IH7P4H5g/ZvH/Zf6Yxf9X+WMW/4Pyxyz+v84fs/gfnD9m8T8kf8zif2j+mMX/N/ljFv/f5o9Z/A/LH7P4/y5/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/H+fP2bxPyZ/zOL/h/wxi/+x+WMW/+Pyxyz+f8wfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/z/lj1n8T8kfs/j/OX/M4n9q/pjF/y/5Yxb/v+aPWfxPyx+z+J+eP2bx/1v+mMX/jPwxi//f88cs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGJ/5CB/DGL/6D8MYv/4Pwxi/8Y+WMW/yH5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8ziP1n+mMX/PfljFv/35o9Z/N+XP2bxf3/+mMX/A/ljFv/J88cs/h/MH7P4fyh/zOL/4fwxi/9H8scs/lPkj1n8P5o/ZvGfMn/M4j80f8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M/whv+Qd2a9/kuz+M/Y9o9Z/D+WP2bx/3j+mMX/E/ljFv9P5o9Z/D+V/1g00eI/U/6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/gvkD9m8V8wf8ziv1D+mMV/4fwxi//n88cs/l/IH7P4L5I/ZvFfNH/M4v/F/DGL/2L5Yxb/L+WPWfwXzx+z+C+RP2bx/3L+mMV/yfwxi/9S+WMW/6Xzxyz+X8kfs/gvkz9m8V82f8ziv1z+mMV/+fwxi/9X88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMX/a/ljFv+v549Z/FfNH7P4r5Y/ZvFfPf9Rm2XkGYv/GvljFv9v5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/t/MH7P4b5A/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv9N88cs/t/KH7P4b5Y/ZvHfPH/M4r9F/pjF/9v5Yxb/7+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6Yxf+7+WMW/+/lj1n8v58/ZvH/Qf6YxX/b/DGL/3b5Yxb/7fPHLP4/zB+z+O+QP2bx/1H+mMV/x/wxi/9O+WMW/x/nj1n8d84fs/jvkj9m8d81f8zi/5P8MYv/bvljFv+f5o9Z/H+WP2bx3z1/zOK/R/6YxX/P/DGL/8/zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/y/yxyz+B+SPWfwPzB+z+P8yf8zi/6v8MYv/QfljFv9f549Z/A/OH7P4H5I/ZvE/NH/M4v+b/DGL/2/zxyz+h+WPWfx/lz9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+v88fs/gfkz9m8f9D/pjF/9j8MYv/cfljFv8/5o9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/n/LHLP6n5I9Z/P+c/4i2+4dLFv9T88cs/n/JH7P4/zV/zOJ/Wv6Yxf/0/DGL/9/yxyz+Z+SPWfz/nj9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9J/MccyB+z+A/KH7P4D84fs/iPkT9m8R+SP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/pPlj1n835M/ZvF/b/6Yxf99+WMW//fnj1n8P5A/ZvGfPH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4j9F/pjF/6P5Yxb/KfPHLP5D88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+H8sfs/h/PH/M4v+J/DGL/yfzxyz+n8ofs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP6fzh+z+H8mf8zi/9n8MYv/5/LHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4v/5/DGL/xfyxyz+i+SPWfwXzR+z+H8xf8ziv1j+mMX/S/ljFv/F88cs/kvkj1n8v5w/ZvFfMn/M4r9U/pjFf+n8MYv/V/LHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v/V/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvH/Wv6Yxf/r+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bx/0b+mMV/zfwxi/9a+WMW/7WF/uP+C/NY/NcR+v8rWfzXzR+z+K+XP2bxXz9/zOL/zfwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOL/rfwxi/9m+WMW/83zxyz+W+SPWfy/nT9m8f9O/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8v5s/ZvH/Xv6Yxf/7+WMW/x/kj1n8t80fs/hvlz9m8d8+f8zi/8P8MYv/DvljFv8f5Y9Z/HfMH7P475Q/ZvH/cf6YxX/n/DGL/y75Yxb/XfPHLP4/yR+z+O+WP2bx/2n+mMX/Z/ljFv/d88cs/nvkj1n898wfs/j/PH/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/j/In/M4n9A/pjF/8D8MYv/L/PHLP6/yh+z+B+UP2bx/3X+mMX/4Pwxi/8h+WMW/0Pzxyz+v8kfs/j/Nn/M4n9Y/pjF/3f5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4v/7/DGL/zH5Yxb/P+SPWfyPzR+z+B+XP2bx/2P+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+P8pf8zif0r+mMX/z/ljFv9T88cs/n/JH7P4/zV/zOJ/Wv6Yxf/0/DGL/9/yxyz+Z+SPWfz/nj9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9J/McayB+z+A/KH7P4D84fs/iPkT9m8R+SP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/pPlj1n835M/ZvF/b/6Yxf99+WMW//fnj1n8P5A/ZvGfPH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4j9F/pjF/6P5Yxb/KfPHLP5D88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+H8sfs/h/PH/M4v+J/DGL/yfzxyz+n8ofs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP6fzh+z+H8mf8zi/9n8MYv/5/LHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4v/5/DGL/xfyxyz+i+SPWfwXzR+z+H8xf8ziv1j+mMX/S/ljFv/F88cs/kvkj1n8v5w/ZvFfMn/M4r9U/pjFf+n8MYv/V/LHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v/V/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvH/Wv6Yxf/r+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bx/0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOL/zfwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOL/rfwxi/9m+WMW/83zxyz+W+SPWfy/nT9m8f9O/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8v5s/ZvH/Xv6Yxf/7+WMW/x/kj1n8t80fs/hvN5r/axP/p1fsvzOL//Zt/5jF/4f5Yxb/HfLHLP4/yh+z+O+YP2bx3yl/zOL/4/wxi//O+WMW/13yxyz+u+aPWfx/kj9m8d8tf8zi/9P8MYv/z/LHLP67549Z/PfIH7P475k/ZvH/ef6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvH/Rf6Yxf+A/DGL/4H5Yxb/X+aPWfx/lT9m8T8of8zi/+v8MYv/wfljFv9D8scs/ofmj1n8f5M/ZvH/bf6Yxf+w/DGL/+/yxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf/3+WMW/2Pyxyz+f8gfs/gfmz9m8T8uf8zi/8f8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8f9T/pjF/5T8MYv/n/PHLP6n5o9Z/P+SP2bx/2v+mMX/tPwxi//p+WMW/7/lj1n8z8gfs/j/PX/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R4bd17HfqZX6783i/2jbP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf0zi//orv/L/5yz+g/LHLP6D88cs/mPkj1n8h+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/ZPljFv/35I9Z/N+bP2bxf1/+mMX//fljFv8P5I9Z/CfPH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P4T5E/ZvH/aP6YxX/K/DGL/9D8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi//H8scs/h/PH7P4fyJ/zOL/yfwxi/+n8scs/jPlj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4fz5/zOL/hfwxi/8i+WMW/0Xzxyz+X8wfs/gvlj9m8f9S/pjFf/H8MYv/EvljFv8v549Z/JfMH7P4L5U/ZvFfOn/M4v+V/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4fzV/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/L+WP2bx/3r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfy/kT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+H8zf8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfw3zR+z+H8rf8ziv1n+mMV/8/wxi/8W+WMW/2/nj1n8v5M/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv/v5o9Z/L+XP2bx/37+mMX/B/ljFv9t88cs/tvlj1n8t88fs/j/MH/M4r9D/pjF/0f5Yxb/HfPHLP475Y9Z/H+cP2bx3zl/zOK/S/6YxX/X/DGL/0/yxyz+u+WPWfx/mj9m8f9Z/pjFf/f8MYv/HvljFv8988cs/j/PH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/r/IH7P4H5A/ZvE/MH/M4v/L/DGL/6/yxyz+B+WPWfx/nT9m8T84f8zif0j+mMX/0Pwxi/9v8scs/r/NH7P4H5Y/ZvH/Xf6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4/z5/zOJ/TP6Yxf8P+WMW/2Pzxyz+x+WPWfz/mD9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+f8ofs/ifkj9m8f9z/pjF/9T8MYv/X/LHLP5/zR+z+J+WP2bxPz1/zOL/t/wxi/8Z+WMW/7/nj1n8z8wfs/iflT9m8T87f8zif07+mMX/XI//oCH/zswS//M8/v9WFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP7Yu9N/uPyo/o/mj707/Yc3qv9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljEv9xBvLHLP6D8scs/oPzxyz+Y+SPWfyH5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi/9k+WMW//fkj1n835s/ZvF/X/6Yxf/9+WMW/w/kj1n8J88fs/h/MH/M4v+h/DGL/4fzxyz+H8kfs/hPkT9m8f9o/pjFf8r8MYv/0Pwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/8fyxyz+H88fs/h/In/M4v/J/DGL/6fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/p/PHLP6fyR+z+H82f8zi/7n8MYv/AvljFv8F88cs/gvlj1n8F84fs/h/Pn/M4v+F/DGL/yL5Yxb/RfPHLP5fzB+z+C+WP2bx/1L+mMV/8fwxi/8S+WMW/y/nj1n8l8wfs/gvlT9m8V86f8zi/5X8MYv/MvljFv9l88cs/svlj1n8l88fs/h/NX/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8v5Y/ZvH/ev6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/L+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4fzN/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4fyt/zOK/Wf6YxX/z/DGL/xb5Yxb/b+ePWfy/kz9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/+/mj1n8v5c/ZvH/fv6Yxf8H+WMW/23zxyz+2+WPWfy3zx+z+P8wf8ziv0P+mMX/R/ljFv8d88cs/jvlj1n8f5w/ZvHfOX/M4r9L/pjFf9f8MYv/T/LHLP675Y9Z/H+aP2bx/1n+mMV/9/wxi/8e+WMW/z3zxyz+P88fs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zx4b5Tzz5E1u92/1/kT9m2f4PyB+z+B+YP2bx/2X+mMX/V/ljFv+D8scs/r/OH7P4H5w/ZvE/JH/M4n9o/pjF/zf5Yxb/3+aPWfwPyx+z+P8uf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfx/nz9m8T8mf8zi/4f8MYv/sfljFv/j8scs/n/MH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv8/5Y9Z/E/JH7P4/zl/zOJ/av6Yxf8v+WMW/7/mj1n8T8sfs/ifnj9m8f9b/pjF/4z8MYv/3/PHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/s3ee/zvMjz47q/2z+2LvPn7f/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8sck/uMO5I9Z/Aflj1n8B+ePWfzHyB+z+A/JH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+78kfs/i/N3/M4v++/DGL//vzxyz+H8gfs/hPnj9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8Z8if8zi/9H8MYv/lPljFv+h+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv9P549Z/D+TP2bx/2z+mMX/c/ljFv8F8scs/gvmj1n8F8ofs/gvnD9m8f98/pjF/wv5Yxb/RfLHLP6L5o9Z/L+YP2bxXyx/zOL/pfwxi//i+WMW/yXyxyz+X84fs/gvmT9m8V8qf8ziv3T+mMX/K/ljFv9l8scs/svmj1n8l8sfs/gvnz9m8f9q/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/h/LX/M4v/1/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4fyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Zv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvH/Vv6YxX+z/DGL/+b5Yxb/LfLHLP7fzh+z+H8nf8ziv2X+mMV/q/wxi//W+WMW/23yxyz+380fs/h/L3/M4v/9/DGL/w/yxyz+2+aPWfy3yx+z+G+fP2bx/2H+mMV/h/wxi/+P8scs/jvmj1n8d8ofs/j/OH/M4r9z/pjFf5f8MYv/rvljFv+f5I9Z/HfLH7P4/zR/zOL/s/wxi//u+WMW/z3yxyz+e+aPWfx/nj9m8d/rn/wH/2fX6780i//ebf+YxX+f/DGL/775Yxb//fLHLP77549Z/H+RP2bxPyB/zOJ/YP6Yxf+X+WMW/1/lj1n8D8ofs/j/On/M4n9w/pjF/5D8MYv/ofljFv/f5I9Z/H+bP2bxPyx/zOL/u/wxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bx/33+mMX/mPwxi/8f8scs/sfmj1n8j8sfs/j/MX/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8/5Q/ZvE/JX/M4v/n/DGL/6n5Yxb/v+SPWfz/mj9m8T8tf8zif3r+mMX/b/ljFv8z8scs/n/PH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyT+4w3kj1n8B+WPWfwH549Z/MfIH7P4D8kfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/yfLHLP7vyR+z+L83f8zi/778MYv/+/PHLP4fyB+z+E+eP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bxnyJ/zOL/0fwxi/+U+WMW/6H5Yxb/qfLHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv+P5Y9Z/D/+pv+478h6/Zdm8f9E2z9m8f9k/pjF/1P5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMX/0/ljFv/P5I9Z/D+bP2bx/1z+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfw/nz9m8f9C/pjFf5H8MYv/ovljFv8v5o9Z/BfLH7P4fyl/zOK/eP6YxX+J/DGL/5fzxyz+S+aPWfyXyh+z+C+dP2bx/0r+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfy/mj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+X8sfs/h/PX/M4r9q/pjFf7X8MYv/6vljFv818scs/t/IH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8v5k/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8v5U/ZvHfLH/M4r95/pjFf4v8MYv/t/PHLP7fyR+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/3fzxyz+38sfs/h/P3/M4v+D/DGL/7b5Yxb/7fLHLP7b549Z/H+YP2bx3yF/zOL/o/wxi/+O+WMW/53yxyz+P84fs/jvnD9m8d8lf8ziv2v+mMX/J/ljFv/d8scs/j/NH7P4/yx/zOK/e/6YxX+P/DGL/575Yxb/n+ePWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/X+SPWfwPyB+z+B+YP2bx/2X+mMX/V/ljFv+D8scs/r/OH7P4H5w/ZvE/JH/M4n9o/pjF/zf5Yxb/3+aPWfwPyx+z+P8uf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfx/nz9m8T8mf8zi/4f8MYv/sfljFv/j8scs/n/MH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv8/5Y9Z/E/JH7P4//mf/Qf1kPD4nxo2ZvH/S/6Yxf+v+WMW/9Pyxyz+p+ePWfz/lj9m8T8jf8zi//f8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj/2rvcf+/Wz492WP/au9x/eeLfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyT+4w/kj1n8B+WPWfwH549Z/MfIH7P4D8kfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/yfLHLP7vyR+z+L83f8zi/778MYv/+/PHLP4fyB+z+E+eP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bxnyJ/zOL/0fwxi/+U+WMW/6H5Yxb/qfLHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv+P5Y9Z/D+eP2bx/0T+mMX/k/ljFv9P5Y9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjFf7b8MYv/7PljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/0/nj1n8P5M/ZvH/bP6Yxf9z+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bx/3z+mMX/C/ljFv9F8scs/ovmj1n8v5g/ZvFfLH/M4v+l/DGL/+L5Yxb/JfLHLP5fzh+z+C+ZP2bxXyp/zOK/dP6Yxf8r+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bx/2r+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+H8tf8zi//X8MYv/qvljFv/V8scs/qvnj1n818gfs/h/I3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8f9m/pjFf4P8MYv/hvljFv+N8scs/hvnj1n8N8kfs/hvmj9m8f9W/pjFf7P8MYv/5vljFv8t8scs/t/OH7P4fyd/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7fzR+z+H8vf8zi//38MYv/D/LHLP7b5o9Z/LfLH7P4b58/ZvH/Yf6YxX+H/DGL/4/yxyz+O+aPWfx3yh+z+P84f8ziv3P+mMV/l/wxi/+u+WMW/5/kj1n8d8sfs/j/NH/M4v+z/DGL/+75Yxb/PfLHLP575o9Z/H+eP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/H+RP2bxPyB/zOJ/YP6Yxf+X+WMW/1/lj1n8D8ofs/j/On/M4n9w/pjF/5D8MYv/ofljFv/f5I9Z/H+bP2bxPyx/zOL/u/wxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bx/33+mMX/mPwxi/8f8scs/sfmj1n8j8sfs/j/MX/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8/5Q/ZvE/JX/M4v/n/DGL/6n5Yxb/v+SPWfz/mj9m8T8tf8zif3r+mMX/b/ljFv8z8scs/n/PH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyT+Ewzkj1n8B+WPWfwH549Z/MfIH7P4D8kfs/iPqfYf6y2vsfiPpfZ/6yz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvGfLH/M4v+e/DGL/3vzxyz+78sfs/i/P3/M4v+B/DGL/+T5Yxb/D+aPWfw/lD9m8f9w/pjF/yP5Yxb/KfLHLP4fzR+z+E+ZP2bxH5o/ZvGfKn/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9Y/pjF/+P5Yxb/T+SPWfw/mT9m8f9U/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bx/3T+mMX/M/ljFv/P5o9Z/D+XP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/z+ePWfy/kD9m8V8kf8ziv2j+mMX/i/ljFv/F8scs/l/KH7P4L54/ZvFfIn/M4v/l/DGL/5L5Yxb/pfLHLP5L549Z/L+SP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/r+aPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/9fyxyz+X88fs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/838scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/2/mj1n8N8gfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+m+WMW/2/lj1n8N8sfs/hvnj9m8d8if8zi/+38MYv/d/LHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4v/d/DGL//fyxyz+388fs/j/IH/M4r9t/pjFf7v8MYv/9vljFv8f5o9Z/HfIH7P4/yh/zOK/Y/6YxX+n/DGL/4/zxyz+O+ePWfx3yR+z+O+aP2bx/0n+mMV/t/wxi/9P88cs/j/LH7P4754/ZvHfI3/M4r9n/pjF/+f5Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/xf5Yxb/A/LHLP4H5o8J/Lcb5v/L/DGB/7Am+FX+mMX/oPwxi/+v88cs/gfnj1n8D8kfs/gfmj9m8f9N/pjF/7f5Yxb/w/LHLP6/yx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/3+ePWfyPyR+z+P8hf8zif2z+mMX/uPwxi/8f88cs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/T/ljFv9T8scs/n/OH7P4n5o/ZvH/S/6Yxf+v+WMW/9Pyxyz+p+ePWfz/lj9m8T8jf8zi//f8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+a/yg999rwPP6v5Y9J/CccyB+z+A/KH7P4D84fs/iPkT9m8R+SP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/pPlj1n835M/ZvF/b/6Yxf99+WMW//fnj1n8P5A/ZvGfPH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4j9F/pjF/6P5Yxb/KfPHLP5D88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+H8sfs/h/PH/M4v+J/DGL/yfzxyz+n8ofs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP6fzh+z+H8mf8zi/9n8MYv/5/LHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4v/5/DGL/xfyxyz+i+SPWfwXzR+z+H8xf8ziv1j+mMX/S/ljFv/F88cs/kvkj1n8v5w/ZvFfMn/M4r9U/pjFf+n8MYv/V/LHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v/V/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvH/Wv6Yxf/r+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bx/0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOL/zfwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOL/rfwxi/9m+WMW/83zxyz+W+SPWfy/nT9m8f9O/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8v5s/ZvH/Xv6Yxf/7+WMW/x/kj1n8t80fs/hvlz9m8d8+f8zi/8P8MYv/DvljFv8f5Y9Z/HfMH7P475Q/ZvH/cf6YxX/n/DGL/y75Yxb/XfPHLP4/yR+z+O+WP2bx/2n+mMX/Z/ljFv/d88cs/nvkj1n898wfs/j/PH/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/j/In/M4n9A/pjF/8D8MYv/L/PHLP6/yh+z+B+UP2bx/3X+mMX/4Pyxd6P/oIGB7QZG8z8kf+zd6E/b/6H5Yxb/3+SPWfx/mz9m8T8sf8zi/7v8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8f99/pjF/5j8MYv/H/LHLP7H5o9Z/I/LH7P4/zF/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/P+UP2bxPyV/zOL/5/wxi/+p+WMW/7/kj1n8/5o/ZvE/LX/M4n96/pjF/2/5Yxb/M/LHLP5/zx+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8sck/hMN5I9Z/Aflj1n8B+ePWfzHyB+z+A/JH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+78kfs/i/N3/M4v++/DGL//vzxyz+H8gfs/hPnj9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8Z8if8zi/9H8MYv/lPljFv+h+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv9P549Z/D+TP2bx/2z+mMX/c/ljFv8F8scs/gvmj1n8F8ofs/gvnD9m8f98/pjF/wv5Yxb/RfLHLP6L5o9Z/L+YP2bxXyx/zOL/pfwxi//i+WMW/yXyxyz+X84fs/gvmT9m8V8qf8ziv3T+mMX/K/ljFv9l8scs/svmj1n8l8sfs/gvnz9m8f9q/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/h/LX/M4v/1/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4fyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Zv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvH/Vv6YxX+z/DGL/+b5Yxb/LfLHLP7fzh+z+H8nf8ziv2X+mMV/q/wxi//W+WMW/23yxyz+380fs/h/L3/M4v/9/DGL/w/yxyz+2+aPWfy3yx+z+G+fP2bx/2H+mMV/h/wxi/+P8scs/jvmj1n8d8ofs/j/OH/M4r9z/pjFf5f8MYv/rvljFv+f5I9Z/HfLH7P4/zR/zOL/s/wxi//u+WMW/z3yxyz+e+aPWfx/nj9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfx/kT9m8T8gf8zif2D+mMX/l/ljFv9f5Y9Z/A/KH7P4/zp/zOJ/cP6Yxf+Q/DGL/6H5Yxb/3+SPWfx/mz9m8T8sf8zi/7v8MYv/4fljFv8j8sdG8z/+3ep/ZP6YZfs/Kn/M4n90/pjF//f5Yxb/Y/LHLP5/yB+z+B+bP2bxPy5/zOL/x/wxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bx/1P+mMX/lPwxi/+f88cs/qfmj1n8/5I/ZvH/a/6Yxf+0/DGL/+n5Yxb/v+WPWfzPyB+z+P89f8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/LH/j527j9e6ru84/jvw5UZUjs7VQsMIRNFUEFQk8wYt9Qgc7cZSEpQUbyYoUwp0pWQ31lbOcpVrK82b1JlaOmuu6SjnnC6bldU2m3Mz51rpspy6pbLHJecQnD6eh+fnbz83Ps/nH3Cu6/S5Ql6PenMdHscs/Z/WP5Sl/zP6h7L0f1b/UJb+a/QPJenfXekfytK/S/9Qlv7D9A9l6T9c/1CW/kX/UJb+I/QPZek/Uv9Qlv6j9A9l6T9a/9DG2r9rQP9N9A9trP2rAf3H6B/K0n9T/UNZ+m+mfyhL/831D2XpP1b/UJb+3fqHsvTfQv9Qlv5b6h/K0v/X9A9l6b+V/qEs/X9d/1CW/i/TP5Sl/8v1D2Xp/xv6h7L0f4X+oSz9x+kfytJ/a/1DWfpvo38oS/9X6h/K0n+8/qEs/bfVP5Sl/6v0D2XpP0H/UJb+r9Y/lKX/RP1DWfpP0j+Upf92+oey9J+sfyhL/+31D2Xpv4P+oSz9p+gfytJ/R/1DWfrvpH8oS//X6B/K0n9n/UNZ+u+ifyhL/131D2XpP1X/UJb+0/QPZem/m/6hLP2n6x/K0n+G/qEs/XfXP5Sl/x76h7L031P/UJb+M/UPZem/l/6hLP1n6R/K0v+1+oey9N9b/1CW/q/TP5Sl/z76h7L031f/UJb+++kfytJ/f/1DWfrP1j+Upf8B+oey9D9Q/1CW/q/XP5Sl/xv0D2Xpf5D+oSz9D9Y/lKX/IfqHsvTv0T+Upf+h+oey9J+jfyhL/7n6h7L0n6d/KEv/Xv1DWfofpn8oS//D9Q9l6f9G/UNZ+r9J/1CW/m/WP5Sl/1v0D2Xpf4T+oSz936p/KEv/t+kfytL/SP1DWfofpX8oS//5+oey9H+7/qEs/Y/WP5Sl/wL9Q1n6L9Q/lKX/MfqHsvQ/Vv9Qlv6L9A9l6f8O/UNZ+h+nfyhL/+P1D2Xpv1j/UJb+J+gfytL/RP1DWfqfpH8oS/+T9Q9l6f+b+oey9D9F/1CW/kv0D2Xpv1T/UJb+p+ofytL/NP1DWfov0z+Upf9v6R/K0v90/UNZ+p+hfyhL/+X6h7L0f6f+oSz936V/KEv/FfqHsvRfqX8oS/8z9Q9l6X+W/qEs/X9b/1CW/u/WP5Sl/3v0D2Xpf7b+oSz9z9E/lKX/Kv1DWfq/V/9Qlv7n6h/K0v99+oey9H+//qEs/T+gfyhL/w/qH8rS/zz9Q1n6f0j/UJb+H9Y/lKX/7+gfytL/d/UPZen/Ef1DWfp/VP9Qlv7n6x/K0v/39A9l6X+B/qEs/T+mfyhL/4/rH8rS/0L9Q1n6/77+oSz9P6F/KEv/T+ofytL/U/qHsvS/SP9Qlv5/oH8oS/9P6x/K0v8P9Q9l6f9H+oey9P+M/qEs/T+rfyhL/4v1D2Xpf4n+oSz9P6d/KEv/S/UPZel/mf6hLP0v1z+Upf8V+oey9P+8/qEs/a/UP5Sl/1X6h7L0v1r/UJb+f6x/KEv/a/QPZen/Bf1DWfpfq38oS//r9A9l6X+9/qGNvP/wvg+7v6h/aCPv36/7S/qHsvS/Qf9Qlv436h/K0v9P9A9l6X+T/qEs/b+sfyhL/6/oH8rS/08H6V/a+HX9H5Wl/83+9x/K0v/P9A9l6f9V/UNZ+v+5/qEs/W/RP5Sl/636h7L0/wv9Q1n6r9Y/lKX/1/QPZen/df1DWfrfpn8oS/+/1D+Upf/t+oey9P8r/UNZ+t+hfyhL/7/WP5Sl/536h7L0v0v/UJb+f6N/KEv/b+gfytL/bv1DWfp/U/9Qlv5/q38oS/979A9l6f8t/UNZ+n9b/1CW/t/RP5Sl/736h7L0/67+oSz9v6d/KEv/7+sfytL/7/QPZen/9/qHsvT/B/1DWfrfp38oS/8f6B/K0v8f9Q9l6X+//qEs/f9J/1CW/g/oH8rS/5/1D2Xp/y/6h7L0f1D/UJb+P9Q/lKX/Q/qHsvT/V/1DWfo/rH8oS/9/0z+Upf+P9A9l6f/v+oey9P+x/qEs/X+ifyhL/0f0D2Xp/6j+oSz9/0P/UJb+P9U/lKX/Y/qHsvT/mf6hLP1/rn8oS//H9Q9l6f+f+oey9H9C/1CW/k/qH8rS/yn9Q1n6/5f+oSz9/1v/UJb+v9A/lKX/0/qHsvR/Rv9Qlv7P6h/K0n+N/qEk/beo9A9l6d+lfyhL/2H6h7L0H65/KEv/on8oS/8R+oey9B+pfyhL/1H6h7L0H61/KEv/TfQPZek/Rv9Qlv6b6h/K0n8z/UNZ+m+ufyhL/7H6h7L079Y/tNH1BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACqqqd39iPDuzZ4avj6D8bfvfi5n3d/8siTrrjiy1v2/9z36TnBSw5b/8GaNWvWDHu8+kbfw1FVVXX+27boezx64HHn9c+ZfdGUtY/KhEuf2umaFU8d8MHr773qyYOvnHPNiOeeHVEde8LJSxZPG1ZVZdKIamXnwW5dVVW2H1Fd0HkwvfNghxHVVZ0HM557sEm1uvNg1+NOW3J854kptX/PAOD/u57eVdXwDRa72uBPA+vv/zmzb1zV//MgL9n/aqXq2/+bb9jqXQM+1+959r//9curB+7/kP8BAYBfMbT9v21C/8+DvOSvvP+fd+on740+9/z73//6ZaL9B4DmBV//32CjB37df8DX/6M/B6y7P+WYC0d19v/KJ49Y3vdUeSFf///l65dJA/d/2AZf/++qqrJd/9f/R1VVmfwifzsAIIWe3vc+Mtj7/8H3v2w94KZr/f3f8trVR3T2//4x17+876kRQ9z/7QZ7/3/QgF8rAPDC9PR+bs2A9/9D2P9q++Al1+3/gSvvfFln/791/w8nrPe5oez/5IH7P3X50mVTzzjzrF1OXrroxMUnLj511syZe+0xc89Z06c+9xWBtT++yN8UANjIvbj3/9WYATddVfXQuvuP3DL+zs7+T//0ISf1PTV6iPu//aDv/yd4/w8AG5g4rBo5slq5aPny03db+2P/w+lrf1z7Hwv2fwh//z+p/5vo+r9nsKuqXrHuvveMDw3r7P9lk7a+pe+pkUPc/x0G3f/9N/xeRQDghXmR7/+PH3Czwf53D796Vmf/D52843l9Tw317/+nDLr/l3j/DwB19PRW/6tvojv7f+5mz1xc77rs6Pv/AKB5bez/o+PfN7HeddnJ/gNA89rY/8X7bX5TvevyGvsPAM1rY//v6LlwQb3rsrP9B4DmtbH/c08Zf1e967KL/QeA5rWx/xPOOm5Fveuyq/0HgOa1sf/XHPnIA/Wuy1T7DwDNa2P/jx59/2P1rss0+w8AzWtj/7+/0+En1Lsuu9l/AGheG/v/1b13va/edZlu/wGgec+z/92jGnr9zv5PG3fJ3HrXZYb9B4DmtfH+/+On7Xt5veuyu/0HgOa1sf/j5n1xRr3rsof9B4DmtbH/7zz6m+fXuy572n8AaF4b+//s2fuPq3ddZtp/AGheG/u/+o5t59e7LnvZfwBoXhv7P+ehC+6ud11m2X8AaF4b+7/D448uq3ddXmv/AaB5bez/F7537MP1rsve9h8AmtfG/o+95NnuetfldfYfAJrXxv5/4NxlF9W7LvvYfwBoXhv7/6MLx06ud132tf8A0Lw29v8dX1p1Q73rsp/9B4DmtbH/335wxpx612V/+w8AzWtj/4/62i0/qHddZtt/AGheG/u/xz23Lap3XQ6w/wDQvDb2/9afzXui3nU50P4DQPPa2P9Xvv8729a7Lq+3/wDQvDb2/1OfX/DhetflDfYfAJrXxv7/4iuTdq93XQ6y/wDQvDb2f9knrr2s3nU52P4DQPPa2P/enX/+QL3rcoj9B4DmtbH/t499z4p616XH/gNA89rY/6tfNfyuetflUPsPAM1rY/8n7vPRBfWuyxz7DwDNa2P/V83Z6qZ612Wu/QeA5rWx/5ue/JmJ9a7LPPsPAM1rY/9PXPngxfWuS6/9B4DmtbH/P5m/dHS963KY/QeA5rWx/9uMWTiu3nU53P4DQPPa2P8Lptxzfr3r8kb7DwDNa2P/n5513Yx61+VN9h8AmtfG/q/YZsLl9a7Lm+0/ADSvjf3/7tJb59a7Lm+x/wDQvDb2f+Fh0+6rd12OsP8A0Lw29n/6wt4T6l2Xt9p/AGheG/t/87tXP1bvurzN/gNA89rY//Nu/+wN9a7LkfYfAJrXxv5v9vAWk+tdl6PsPwA0r439P/aJUy+qd13m238AaF4b+//jex/orndd3m7/AaB5bex/z6VnP1zvuhxt/wGgeW3s/9dX/XRZveuywP4DQPPa2P/rPnb+3fWuy0L7DwDNa2P/J99Yza93XY6x/wDQvDPOPOuURUuWLD7dBz7wgQ/WffBS/z8TAADQtF/+of+l/pUAAAAAAAAAAAAAAAAAAABAXm3868Re6n9GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9hBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAAEH+1isMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8BQAA///P8tSK") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file1\x00', &(0x7f0000000280), &(0x7f0000000540)=ANY=[], 0xff68, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) 337.495561ms ago: executing program 0 (id=2913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="03", 0x1, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/address_bits', 0x0, 0x0) getdents(r3, &(0x7f0000000240)=""/118, 0x76) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r4) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) getdents(r3, &(0x7f00000009c0)=""/4096, 0x1000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000380)=""/125, 0x1b, 0x7d, 0x0, 0x3}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) io_setup(0x8, &(0x7f0000000600)) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000000c0)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x4}}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) 336.923314ms ago: executing program 3 (id=2914): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000e40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2c93497d9ae41ebc6099d95fea5e764494873e0d82a172b3bb54f35039c7d81e9ab07f2fb4dad61bd50c4b2c861c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d0200000050685e0f4f079d2d8e79be174ef9355b70739c712c5d3f739f01dfbf5eb2772052b215", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)="d06e8c35c885a29d9b5a4c0cdc701c0a29e04f23da2f06f1fcee213a12f86890989871329666c46b0e5b3e71ddb8f3f8924d7d7d77b71e600e99648aa395517e23d2573a7198197ba0b1a521fee111ba01f31f4f9da5f59419c186adfe0d633a44c48c9887d489d3700b966100e64d1a025c512d7ad598ce01f097021eebe4f9e82a7e611b030000003deb364bd0f60d207a0daf", 0x94}], 0x1}}], 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x138, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1a, 0x3, "650b190f9349cee7a89f0baefa15e35e8fddc2480dc0"}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "9c3db97f6ba02f46568e1b445699c3b27057ee488b0c13520e6acbc35e"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "2a73b8b4821f3e9256d41613bb521e6da4b1e138"}}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x138}}, 0x0) 0s ago: executing program 3 (id=2915): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x2c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): 329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.515586][ T29] audit: type=1804 audit(2000000278.349:1008): pid=16257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2594" name="/root/syzkaller.Ng2u4d/170/cgroup.controllers" dev="sda1" ino=2108 res=1 errno=0 [ 1055.749776][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.853553][T16124] team0: Port device team_slave_0 added [ 1055.877721][T16124] team0: Port device team_slave_1 added [ 1055.913382][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.062733][T12685] Bluetooth: hci5: command tx timeout [ 1056.117490][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.146810][T16124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.162838][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.210099][T16124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.342930][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.365499][T16124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.377934][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.441558][T16124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.720417][T15600] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1056.752416][T16124] hsr_slave_0: entered promiscuous mode [ 1056.767215][T16124] hsr_slave_1: entered promiscuous mode [ 1056.774933][T16124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1056.789655][T16124] Cannot create hsr debugfs directory [ 1056.921878][T15600] usb 6-1: Using ep0 maxpacket: 32 [ 1056.951985][T15600] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.970935][T15600] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.000646][T15600] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1057.032043][T15600] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1057.049817][T15999] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1057.056148][T15600] usb 6-1: config 128 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1057.087539][T15600] usb 6-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1057.146742][T15600] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.264213][ T51] bridge_slave_1: left allmulticast mode [ 1057.269953][ T51] bridge_slave_1: left promiscuous mode [ 1057.290241][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.306476][ T51] bridge_slave_0: left allmulticast mode [ 1057.317233][ T51] bridge_slave_0: left promiscuous mode [ 1057.323168][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.421950][T12685] Bluetooth: hci1: command tx timeout [ 1057.656250][T15600] ntrig 0003:1B96:000A.000F: unknown main item tag 0x0 [ 1057.680401][T15600] ntrig 0003:1B96:000A.000F: unknown main item tag 0x0 [ 1057.687312][T15600] ntrig 0003:1B96:000A.000F: unknown main item tag 0x0 [ 1057.695259][T15600] ntrig 0003:1B96:000A.000F: unknown main item tag 0x0 [ 1057.703583][T15600] ntrig 0003:1B96:000A.000F: unknown main item tag 0x0 [ 1057.732276][T15600] ntrig 0003:1B96:000A.000F: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.5-1/input0 [ 1057.883170][T15600] usb 6-1: USB disconnect, device number 24 [ 1058.140660][T12685] Bluetooth: hci5: command tx timeout [ 1058.836325][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.859870][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.893312][ T51] bond0 (unregistering): Released all slaves [ 1058.917608][T15999] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1059.116666][T15999] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1059.503128][T12685] Bluetooth: hci1: command tx timeout [ 1059.527526][T15999] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1059.741854][T16236] chnl_net:caif_netlink_parms(): no params data found [ 1060.220914][T12685] Bluetooth: hci5: command tx timeout [ 1060.404810][T16124] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.588369][T16253] chnl_net:caif_netlink_parms(): no params data found [ 1060.670790][ T51] hsr_slave_0: left promiscuous mode [ 1060.686140][ T51] hsr_slave_1: left promiscuous mode [ 1060.728532][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.736576][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.768652][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.785467][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.879677][ T51] veth1_macvtap: left promiscuous mode [ 1060.891836][ T51] veth0_macvtap: left promiscuous mode [ 1060.897560][ T51] veth1_vlan: left promiscuous mode [ 1060.913623][ T51] veth0_vlan: left promiscuous mode [ 1061.660521][T12685] Bluetooth: hci1: command tx timeout [ 1062.546810][T12685] Bluetooth: hci5: command tx timeout [ 1063.334191][T16321] loop5: detected capacity change from 0 to 128 [ 1063.765609][T12685] Bluetooth: hci1: command tx timeout [ 1064.908656][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1065.061613][ T5091] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1065.080609][ T5091] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1065.088579][ T5091] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1065.113764][ T5091] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1065.122899][ T5091] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1065.130299][ T5091] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1065.819002][T16124] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.078050][ T29] audit: type=1804 audit(2000000288.899:1009): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2603" name="/root/syzkaller.Ng2u4d/178/cgroup.controllers" dev="sda1" ino=2108 res=1 errno=0 [ 1066.095129][T15340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.216939][T16124] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.239163][T16236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.251289][T16236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.258538][T16236] bridge_slave_0: entered allmulticast mode [ 1066.267760][T16236] bridge_slave_0: entered promiscuous mode [ 1066.521595][T16124] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.559808][T16236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.567533][T16236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.575352][T16236] bridge_slave_1: entered allmulticast mode [ 1066.592129][T16236] bridge_slave_1: entered promiscuous mode [ 1066.747145][T16253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.759933][T16253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.777368][T16253] bridge_slave_0: entered allmulticast mode [ 1066.787952][T16253] bridge_slave_0: entered promiscuous mode [ 1066.808589][T16253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.824278][T16253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.849329][T16253] bridge_slave_1: entered allmulticast mode [ 1066.868705][T16253] bridge_slave_1: entered promiscuous mode [ 1066.905391][T16236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.982717][T16236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.132750][T16253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.181159][T12685] Bluetooth: hci6: command tx timeout [ 1067.250068][T16253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.328493][T16236] team0: Port device team_slave_0 added [ 1067.394293][T16253] team0: Port device team_slave_0 added [ 1067.413267][T16236] team0: Port device team_slave_1 added [ 1067.473801][T16253] team0: Port device team_slave_1 added [ 1067.569712][T16236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.577001][T16236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1067.603878][T16236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.617406][T16236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.625127][T16236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1067.652896][T16236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.677398][T16124] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1067.754529][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.817985][T16124] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1067.841895][T16124] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1067.878523][T16253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.886147][T16253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1067.928270][T16253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.951998][T16253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.958963][T16253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1067.988670][T16253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1068.097635][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.123824][T16124] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1068.265621][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.342407][T16236] hsr_slave_0: entered promiscuous mode [ 1068.359505][T16236] hsr_slave_1: entered promiscuous mode [ 1068.369176][T16236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1068.387759][T16236] Cannot create hsr debugfs directory [ 1068.697247][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.805228][T15999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.839518][T16253] hsr_slave_0: entered promiscuous mode [ 1068.846362][T16253] hsr_slave_1: entered promiscuous mode [ 1068.857204][T16253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1068.865711][T16253] Cannot create hsr debugfs directory [ 1069.178878][T15999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.214655][T16331] chnl_net:caif_netlink_parms(): no params data found [ 1069.260918][T12685] Bluetooth: hci6: command tx timeout [ 1069.675107][T15600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.682334][T15600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.696294][T15600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.703495][T15600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.102827][T16331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.110103][T16331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.120739][T16331] bridge_slave_0: entered allmulticast mode [ 1070.141673][T16331] bridge_slave_0: entered promiscuous mode [ 1070.396655][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.442087][T16398] loop5: detected capacity change from 0 to 4096 [ 1070.454184][T16398] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 1070.521242][T16331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.528418][T16331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.547721][T16398] ntfs3: loop5: Failed to initialize $Secure::$SII (-22). [ 1070.553463][T16331] bridge_slave_1: entered allmulticast mode [ 1070.557618][T16398] ntfs3: loop5: Failed to initialize $Secure (-22). [ 1070.563505][T16331] bridge_slave_1: entered promiscuous mode [ 1070.685004][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.340476][T12685] Bluetooth: hci6: command tx timeout [ 1071.548004][T16124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.598427][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.794812][T16331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.906544][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.964996][T16331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.998317][T16124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.210974][T16331] team0: Port device team_slave_0 added [ 1072.223116][T16331] team0: Port device team_slave_1 added [ 1072.255526][T15600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.262776][T15600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.292232][T15600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.299489][T15600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.444805][T16331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.490280][T16331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.524292][T16331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.603910][T16331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.614934][T16331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.646905][T16331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.870782][T16331] hsr_slave_0: entered promiscuous mode [ 1072.882945][T16331] hsr_slave_1: entered promiscuous mode [ 1072.890299][T16331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1072.901492][T16331] Cannot create hsr debugfs directory [ 1072.929170][ T51] bridge_slave_1: left allmulticast mode [ 1072.940425][ T51] bridge_slave_1: left promiscuous mode [ 1072.953827][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.978195][ T51] bridge_slave_0: left allmulticast mode [ 1073.000460][ T51] bridge_slave_0: left promiscuous mode [ 1073.006306][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.052556][ T51] bridge_slave_1: left allmulticast mode [ 1073.058235][ T51] bridge_slave_1: left promiscuous mode [ 1073.065394][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.076219][ T51] bridge_slave_0: left allmulticast mode [ 1073.083178][ T51] bridge_slave_0: left promiscuous mode [ 1073.088942][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.158987][T16418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2612'. [ 1073.433877][T12685] Bluetooth: hci6: command tx timeout [ 1073.944879][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1073.958349][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1073.970232][ T51] bond0 (unregistering): Released all slaves [ 1074.117488][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.136571][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.148796][ T51] bond0 (unregistering): Released all slaves [ 1074.198828][T16419] team0: entered promiscuous mode [ 1074.210538][T16419] team_slave_1: entered promiscuous mode [ 1074.216688][T16419] team0: left promiscuous mode [ 1074.242460][T16419] team_slave_1: left promiscuous mode [ 1074.405845][T16236] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1074.475411][T16236] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1074.683338][T16236] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1074.811873][T16236] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1074.901556][T15999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.783421][T16124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.977674][ T51] hsr_slave_0: left promiscuous mode [ 1075.984672][ T51] hsr_slave_1: left promiscuous mode [ 1076.001607][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.009043][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.032101][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.050042][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.079021][ T51] hsr_slave_0: left promiscuous mode [ 1076.099354][ T51] hsr_slave_1: left promiscuous mode [ 1076.107252][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.125291][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.134201][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.150471][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.268420][ T51] veth1_macvtap: left promiscuous mode [ 1076.279019][ T51] veth0_macvtap: left promiscuous mode [ 1076.296155][ T51] veth1_vlan: left promiscuous mode [ 1076.309544][ T51] veth0_vlan: left promiscuous mode [ 1076.327394][ T51] veth1_macvtap: left promiscuous mode [ 1076.340691][ T51] veth0_macvtap: left promiscuous mode [ 1076.350702][ T51] veth1_vlan: left promiscuous mode [ 1076.360685][ T51] veth0_vlan: left promiscuous mode [ 1076.971047][T15600] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1077.169925][T15600] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1077.179287][T15600] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.194501][T15600] usb 6-1: config 0 descriptor?? [ 1077.583678][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1078.009846][T15600] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 1078.904755][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1079.850503][T16253] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1080.028401][T16253] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1080.044177][T16253] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1080.098668][ T8] usb 6-1: USB disconnect, device number 25 [ 1080.218073][T16253] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1080.309431][T15999] veth0_vlan: entered promiscuous mode [ 1080.515448][T15999] veth1_vlan: entered promiscuous mode [ 1080.562217][T16124] veth0_vlan: entered promiscuous mode [ 1080.831066][T16236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.976954][T16124] veth1_vlan: entered promiscuous mode [ 1081.278498][T16236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.325808][T15999] veth0_macvtap: entered promiscuous mode [ 1081.492050][T15999] veth1_macvtap: entered promiscuous mode [ 1081.551583][T16124] veth0_macvtap: entered promiscuous mode [ 1081.588818][T15193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.596070][T15193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.694542][T15600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.701820][T15600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.767831][T16124] veth1_macvtap: entered promiscuous mode [ 1081.783113][T16253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.937637][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.972655][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.995265][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.008752][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.027048][T15999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.083971][T16253] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.100999][T16124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.120505][T16124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.140418][T16124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.158497][T16124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.168531][T16124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.188734][T16124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.214796][T16124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.235791][T16331] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1082.285582][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.297944][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.324096][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.340617][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.360683][T15999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.412892][T16124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.444042][T16124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.459505][T16124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.480393][T16124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.490244][T16124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.509245][T16124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.534577][T16124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.582877][T16331] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1082.624269][T16331] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1082.678839][T15600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.686270][T15600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.707186][T15600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.714474][T15600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.759974][T16124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.800461][T16124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.820385][T16124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.845474][T16124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.873869][T16331] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1082.905605][T15999] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.915156][T15999] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.924256][T15999] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.934866][T15999] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.476636][T16253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1083.648915][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.683898][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.834023][T16236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.891100][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.891211][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.898945][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.917986][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.125176][T16331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.138267][T16253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.181871][ T5342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.189763][ T5342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.274753][T16521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.359673][T16520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.622569][T16521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1085.873374][T16331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.963301][T16236] veth0_vlan: entered promiscuous mode [ 1086.067568][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.074808][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.237137][T16236] veth1_vlan: entered promiscuous mode [ 1086.270953][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.280707][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.463993][T16253] veth0_vlan: entered promiscuous mode [ 1086.649347][T16253] veth1_vlan: entered promiscuous mode [ 1086.691870][ T29] audit: type=1800 audit(2000000309.529:1010): pid=16544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2626" name="file1" dev="sda1" ino=2118 res=0 errno=0 [ 1086.872561][T16547] loop5: detected capacity change from 0 to 4096 [ 1086.938046][T16547] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1086.948336][T16236] veth0_macvtap: entered promiscuous mode [ 1087.043398][T16236] veth1_macvtap: entered promiscuous mode [ 1087.084144][T16552] loop1: detected capacity change from 0 to 64 [ 1087.152821][T16547] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 1087.219065][T16236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.252792][T16236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.306668][T16236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.332801][T16547] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1087.339365][T16236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.357269][T16236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.371084][T16236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.385350][T16236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.419897][T16236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.446353][T16236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.456221][T16253] veth0_macvtap: entered promiscuous mode [ 1087.473595][T16236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.488190][T16236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.498751][T16236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.518121][T16236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.528604][T16236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.543456][T16236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.553946][T16236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.566536][T16236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.588259][T16236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.638194][T16253] veth1_macvtap: entered promiscuous mode [ 1087.707709][T16236] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.736968][T16236] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.769897][T16236] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.791066][T16236] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.908562][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.938423][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.978766][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.001658][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.042751][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.060048][T16565] loop5: detected capacity change from 0 to 16 [ 1088.078249][T16566] loop1: detected capacity change from 0 to 512 [ 1088.092526][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.103225][T16565] erofs: (device loop5): mounted with root inode @ nid 36. [ 1088.113006][T16566] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1088.125342][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.149814][T16565] erofs: Unknown parameter 'fscontext' [ 1088.165274][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.218493][T16566] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.2631: invalid indirect mapped block 4294967295 (level 0) [ 1088.250425][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.288558][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.301990][T16566] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.2631: invalid indirect mapped block 4294967295 (level 1) [ 1088.313157][T16253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.337413][T14092] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 46 [ 1088.367069][T16566] EXT4-fs (loop1): 1 orphan inode deleted [ 1088.374482][T14092] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1088.376202][T16566] EXT4-fs (loop1): 1 truncate cleaned up [ 1088.404099][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.416424][T16566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.429870][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.444839][T14092] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1088.447576][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.490381][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.510190][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.524878][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.539774][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.556660][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.580525][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.595645][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.608500][T16253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.634846][T16331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.654312][T15999] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.683219][T16253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.695335][T16253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.749290][T16253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.774421][T16253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.059918][T15968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.086731][T15968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.261525][ T8] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1089.354521][T15968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.387047][T15968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.482119][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 1089.509683][ T8] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1089.555050][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1089.591103][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.627982][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1089.643161][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.673790][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1089.717580][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1089.772793][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1089.813074][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.842719][T15968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.851791][T15968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.103249][T16590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1090.139900][ T8] usb 6-1: usb_control_msg returned -32 [ 1090.170424][ T8] usbtmc 6-1:16.0: can't read capabilities [ 1090.173160][T16331] veth0_vlan: entered promiscuous mode [ 1090.192796][T16588] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1090.224101][T16590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1090.307109][T16331] veth1_vlan: entered promiscuous mode [ 1090.315863][T16598] loop1: detected capacity change from 0 to 256 [ 1090.340143][T16590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1090.389189][T16597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2589'. [ 1090.407248][T16597] netlink: 'syz.2.2589': attribute type 14 has an invalid length. [ 1090.416084][T16597] netlink: 'syz.2.2589': attribute type 12 has an invalid length. [ 1090.425668][T16598] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1090.446171][T16597] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1090.455325][T16597] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1090.464589][T16597] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1090.473346][T16597] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1090.486301][T16597] vxlan0: entered promiscuous mode [ 1090.510230][T15600] kernel write not supported for file /vcsa1 (pid: 15600 comm: kworker/0:5) [ 1090.576362][T16331] veth0_macvtap: entered promiscuous mode [ 1090.596093][T16331] veth1_macvtap: entered promiscuous mode [ 1090.700921][T16331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.724575][T16331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.734629][T16331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.745374][T16331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.755608][T16331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.766719][T16331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.776834][T16331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.809702][T16331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.850691][T16331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.868455][T16604] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0 [ 1090.881355][T16331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.904422][T16331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.922979][T16331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.938359][T16331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.024940][T16331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.080490][T16331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.128205][T16331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.155015][T16331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.190279][T16331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.225132][T16331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.241964][T16331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.266573][T16331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.295108][T16331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.310872][T16331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.338238][T16331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.342643][T16619] Bluetooth: MGMT ver 1.22 [ 1091.363056][T16331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.402171][T16331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.485934][T16331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.501078][T16331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.535348][T16331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.557364][T16331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.581310][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2648'. [ 1091.703952][T16624] team_slave_0: entered promiscuous mode [ 1091.709671][T16624] team_slave_0: entered allmulticast mode [ 1091.729395][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'. [ 1091.817258][T16624] team0: Port device team_slave_0 removed [ 1091.854395][T16631] team_slave_0: entered promiscuous mode [ 1091.871794][T16631] team_slave_0: entered allmulticast mode [ 1092.018148][T16631] team0: Port device team_slave_0 removed [ 1092.045386][T16630] team0: entered promiscuous mode [ 1092.066240][T16630] team_slave_1: entered promiscuous mode [ 1092.096218][T16637] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1092.108993][T16626] team0: left promiscuous mode [ 1092.119370][T16626] team_slave_1: left promiscuous mode [ 1092.236130][T15600] usb 6-1: USB disconnect, device number 26 [ 1092.433345][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.465000][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.582270][T16642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.621623][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.652702][T16620] loop1: detected capacity change from 0 to 32768 [ 1092.664316][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.724145][T16652] loop0: detected capacity change from 0 to 128 [ 1092.771786][T16642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.791497][T16652] udf: Unknown parameter '' [ 1092.872445][T16620] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1093.135609][T16620] XFS (loop1): Ending clean mount [ 1093.182519][T16620] capability: warning: `syz.1.2646' uses deprecated v2 capabilities in a way that may be insecure [ 1093.421375][ T5091] Bluetooth: hci0: command 0x0c1a tx timeout [ 1093.427710][T12685] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1094.190180][T15999] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1095.561846][ T5150] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1095.649254][T16692] loop5: detected capacity change from 0 to 256 [ 1095.923761][ T5150] usb 3-1: Using ep0 maxpacket: 8 [ 1096.090986][ T5150] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1096.134578][ T5150] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1096.263260][ T5150] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1096.369364][ T5150] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1096.420563][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2669'. [ 1096.430454][ T5150] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1096.459161][T16695] team0: entered promiscuous mode [ 1096.479201][T16695] team_slave_1: entered promiscuous mode [ 1096.498681][ T5150] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1096.536141][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.568499][T16694] team0: left promiscuous mode [ 1096.605298][T16694] team_slave_1: left promiscuous mode [ 1097.005533][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2671'. [ 1097.076538][T16705] loop5: detected capacity change from 0 to 512 [ 1097.146841][ T5091] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1097.157263][ T5091] Bluetooth: hci5: Injecting HCI hardware error event [ 1097.177133][ T5091] Bluetooth: hci2: command 0x0406 tx timeout [ 1097.189900][ T5091] Bluetooth: hci5: hardware error 0x00 [ 1097.464095][T16705] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1097.574232][ T5150] usb 3-1: usb_control_msg returned -32 [ 1097.580134][ T5150] usbtmc 3-1:16.0: can't read capabilities [ 1097.597976][T16705] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1097.623605][T16705] EXT4-fs (loop5): 1 truncate cleaned up [ 1097.631017][T16705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.719882][T16711] loop1: detected capacity change from 0 to 512 [ 1097.816616][T16711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.894059][T16711] ext4 filesystem being mounted at /root/syzkaller.CtYrWG/16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1098.017238][T14092] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor: path /root/syzkaller.Ng2u4d/206/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 1098.096593][T14092] EXT4-fs error (device loop5): empty_inline_dir:1829: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 1098.171955][T16722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.195309][T14092] EXT4-fs warning (device loop5): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 1098.211046][T14092] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor: path /root/syzkaller.Ng2u4d/206/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 1098.270820][T14092] EXT4-fs error (device loop5): empty_inline_dir:1829: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 1098.294229][T14092] EXT4-fs warning (device loop5): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 1098.301644][T16722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.319990][T14092] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor: path /root/syzkaller.Ng2u4d/206/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 1098.380289][T16728] usbtmc 3-1:16.0: INITIATE_CLEAR returned 0 [ 1098.414716][T16722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.430194][T14092] EXT4-fs error (device loop5): empty_inline_dir:1829: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 1098.475194][T14092] EXT4-fs warning (device loop5): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 1098.512878][T15999] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.527843][T14092] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor: path /root/syzkaller.Ng2u4d/206/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 1098.546503][T16730] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1098.556503][T14092] EXT4-fs error (device loop5): empty_inline_dir:1829: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 1098.612244][T14092] EXT4-fs warning (device loop5): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 1098.632127][T16730] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1098.645069][T14092] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor: path /root/syzkaller.Ng2u4d/206/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 1098.672601][T14092] EXT4-fs error (device loop5): empty_inline_dir:1829: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 1098.733812][T14092] EXT4-fs warning (device loop5): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 1098.779954][T14092] EXT4-fs warning (device loop5): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 1098.843427][T14092] EXT4-fs warning (device loop5): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 1098.863748][T14092] EXT4-fs warning (device loop5): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 1098.883047][T14092] EXT4-fs warning (device loop5): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 1098.899625][T14092] EXT4-fs warning (device loop5): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 1099.020200][T16734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2681'. [ 1099.124259][T16734] team_slave_0: entered promiscuous mode [ 1099.150208][T16734] team_slave_0: entered allmulticast mode [ 1099.264252][T16734] team0: Port device team_slave_0 removed [ 1099.323506][T16739] netlink: 'syz.4.2683': attribute type 4 has an invalid length. [ 1099.421537][ T5091] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1099.701539][T15193] usb 3-1: USB disconnect, device number 39 [ 1100.011173][T14092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.228561][T15600] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1100.255484][ T5342] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1100.291038][ T5342] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.450468][T15600] usb 5-1: Using ep0 maxpacket: 32 [ 1100.475481][T15600] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1100.500450][T15600] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1100.534785][T15600] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1100.594582][T15600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1100.620521][T15600] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1100.640821][T15600] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1100.671417][T15600] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1100.702646][T15600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.735531][ T5342] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1100.761182][T15600] usb 5-1: config 0 descriptor?? [ 1100.820539][ T5342] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.924828][T16755] netlink: 'syz.1.2692': attribute type 5 has an invalid length. [ 1100.987311][T15600] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1101.039123][T15600] usb 5-1: USB disconnect, device number 14 [ 1101.090028][T15600] usblp0: removed [ 1101.093978][T16755] : entered promiscuous mode [ 1101.115109][T16757] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2692'. [ 1101.175759][T16757] bridge_slave_1: left allmulticast mode [ 1101.221962][T16757] bridge_slave_1: left promiscuous mode [ 1101.228024][T16757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.305464][T16757] bridge_slave_0: left allmulticast mode [ 1101.330662][T16757] bridge_slave_0: left promiscuous mode [ 1101.356986][T16757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.383568][T16751] loop2: detected capacity change from 0 to 32768 [ 1101.560642][T15600] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1101.763735][ T5342] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.442807][ T5342] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.658814][T16751] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 1102.692440][T15600] usb 5-1: Using ep0 maxpacket: 32 [ 1102.700251][T15600] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1102.727885][T15600] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1102.737688][T15600] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1102.747272][T15600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1102.755628][T16751] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 1102.758117][T15600] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1102.785225][T15600] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1102.801695][T15600] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1102.821927][T15600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.832841][T12685] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1102.859019][T15600] usb 5-1: config 0 descriptor?? [ 1102.869596][T12685] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1102.872454][ T29] audit: type=1326 audit(2000000325.689:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16774 comm="syz.1.2696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff73bf75ae9 code=0x0 [ 1102.917852][ T5342] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.928629][T12685] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1102.939468][ T5342] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.955303][T16751] bcachefs (loop2): alloc_read... done [ 1102.962220][T12685] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1102.967927][T16751] bcachefs (loop2): stripes_read... done [ 1102.978942][T12685] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1102.993615][T12685] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1103.005513][T16751] bcachefs (loop2): snapshots_read... done [ 1103.041251][T15600] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1103.064801][T15600] usb 5-1: USB disconnect, device number 15 [ 1103.074534][T15600] usblp0: removed [ 1103.087644][T16751] bcachefs (loop2): going read-write [ 1103.098993][T16751] bcachefs (loop2): journal_replay... [ 1103.132466][T16751] bcachefs (loop2): bch2_journal_replay(): error ERESTARTSYS [ 1103.158498][T16751] bcachefs (loop2): bch2_fs_recovery(): error ERESTARTSYS [ 1103.215855][T16751] bcachefs (loop2): bch2_fs_start(): error starting filesystem ERESTARTSYS [ 1103.398346][ T5159] bcachefs (loop2): going read-only [ 1103.404475][T16751] bcachefs (loop2): shutting down [ 1103.444489][ T5159] bcachefs (loop2): finished waiting for writes to stop [ 1103.552413][T16788] loop0: detected capacity change from 0 to 256 [ 1104.115326][T16787] netlink: 'syz.3.2697': attribute type 4 has an invalid length. [ 1104.312826][ T5159] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 1104.325188][ T5159] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11 [ 1104.362311][ T5159] bcachefs (loop2): unshutdown complete, journal seq 11 [ 1104.381877][ T5159] bcachefs (loop2): done going read-only, filesystem not clean [ 1104.545886][T16751] bcachefs (loop2): shutdown complete [ 1104.669156][ T5342] bridge_slave_1: left allmulticast mode [ 1104.675008][ T5342] bridge_slave_1: left promiscuous mode [ 1104.704758][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.851657][ T5342] bridge_slave_0: left allmulticast mode [ 1104.857352][ T5342] bridge_slave_0: left promiscuous mode [ 1104.923481][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.028057][T16809] loop1: detected capacity change from 0 to 128 [ 1105.051255][T16809] udf: Unknown parameter '' [ 1105.100931][T12685] Bluetooth: hci3: command tx timeout [ 1105.141194][T16810] netlink: 'syz.3.2708': attribute type 5 has an invalid length. [ 1105.151170][T16426] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1105.179858][T16809] loop1: detected capacity change from 0 to 512 [ 1105.315169][T16809] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1105.504224][T16809] EXT4-fs (loop1): 1 truncate cleaned up [ 1105.532459][T16809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1105.707934][T12685] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 1105.728166][ T29] audit: type=1326 audit(2000000328.559:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16823 comm="syz.2.2710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc643775ae9 code=0x0 [ 1106.356867][T15999] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.490872][ T29] audit: type=1326 audit(2000000329.319:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16829 comm="syz.0.2713" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f246ad75ae9 code=0x0 [ 1106.619286][ T5342] bridge0 (unregistering): left allmulticast mode [ 1107.182792][T12685] Bluetooth: hci3: command tx timeout [ 1107.286859][T16844] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1107.366472][ T5342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1107.397675][ T5342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1107.432778][ T5342] bond0 (unregistering): Released all slaves [ 1107.528801][T16810] : entered promiscuous mode [ 1107.569000][T16814] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2708'. [ 1107.588349][T16814] bridge_slave_1: left allmulticast mode [ 1107.613180][T16814] bridge_slave_1: left promiscuous mode [ 1107.630881][T16814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.673323][T16814] bridge_slave_0: left allmulticast mode [ 1107.679006][T16814] bridge_slave_0: left promiscuous mode [ 1107.700742][T16814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.855599][T16838] netlink: 'syz.1.2715': attribute type 4 has an invalid length. [ 1108.157552][ T29] audit: type=1326 audit(2000000330.989:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73bf75ae9 code=0x7ffc0000 [ 1108.260502][ T29] audit: type=1326 audit(2000000331.029:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff73bf75ae9 code=0x7ffc0000 [ 1108.387943][ T29] audit: type=1326 audit(2000000331.029:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73bf75ae9 code=0x7ffc0000 [ 1108.482390][ T29] audit: type=1326 audit(2000000331.029:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73bf75ae9 code=0x7ffc0000 [ 1108.773023][ T29] audit: type=1326 audit(2000000331.029:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff73bf75ae9 code=0x7ffc0000 [ 1108.868278][ T29] audit: type=1326 audit(2000000331.029:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73bf75ae9 code=0x7ffc0000 [ 1109.265960][T12685] Bluetooth: hci3: command tx timeout [ 1109.465600][ T29] audit: type=1326 audit(2000000331.029:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73bf75ae9 code=0x7ffc0000 [ 1109.640567][ T29] audit: type=1326 audit(2000000331.029:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7ff73bf75ae9 code=0x7ffc0000 [ 1109.741626][T12685] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1109.753095][T12685] Bluetooth: hci0: Injecting HCI hardware error event [ 1109.767262][ T5091] Bluetooth: hci0: hardware error 0x00 [ 1109.816428][T16562] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1109.867523][ T29] audit: type=1326 audit(2000000331.029:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73bf75ae9 code=0x7ffc0000 [ 1109.936860][ T29] audit: type=1326 audit(2000000331.029:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73bf75ae9 code=0x7ffc0000 [ 1109.971428][T16852] loop0: detected capacity change from 0 to 32768 [ 1110.023791][T16562] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1110.033215][T16562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.061813][T16562] usb 5-1: config 0 descriptor?? [ 1110.345683][T16852] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 1110.357488][T16852] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 1110.532843][T16901] netlink: 'syz.3.2734': attribute type 4 has an invalid length. [ 1110.543565][T16910] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1110.571430][T16852] bcachefs (loop0): alloc_read... done [ 1110.586777][T16775] chnl_net:caif_netlink_parms(): no params data found [ 1110.600474][T16852] bcachefs (loop0): stripes_read... done [ 1110.614887][T16852] bcachefs (loop0): snapshots_read... done [ 1110.742543][T16852] bcachefs (loop0): going read-write [ 1110.782238][T16852] bcachefs (loop0): journal_replay... done [ 1110.822768][T16852] bcachefs (loop0): bch2_fs_recovery(): error ERESTARTSYS [ 1110.857468][T16852] bcachefs (loop0): bch2_fs_start(): error starting filesystem ERESTARTSYS [ 1110.884145][T16562] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 1110.930832][T15193] bcachefs (loop0): going read-only [ 1110.936294][T15193] bcachefs (loop0): finished waiting for writes to stop [ 1110.951370][T16852] bcachefs (loop0): shutting down [ 1110.957499][T15193] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 1110.967181][ T5342] hsr_slave_0: left promiscuous mode [ 1110.967409][T15193] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11 [ 1110.988211][T15193] bcachefs (loop0): unshutdown complete, journal seq 11 [ 1110.997508][T15193] bcachefs (loop0): done going read-only, filesystem not clean [ 1111.006796][ T5342] hsr_slave_1: left promiscuous mode [ 1111.026142][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.040529][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.101528][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.122245][T16852] bcachefs (loop0): shutdown complete [ 1111.129389][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.168553][ T5155] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1111.340830][T12685] Bluetooth: hci3: command tx timeout [ 1111.349235][ T5342] veth1_macvtap: left promiscuous mode [ 1111.401706][ T5342] veth0_macvtap: left promiscuous mode [ 1111.440662][ T5342] veth1_vlan: left promiscuous mode [ 1111.472082][ T5155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.499207][ T5342] veth0_vlan: left promiscuous mode [ 1111.513701][ T5155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.564164][ T5155] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1111.640507][ T5155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.690834][ T5155] usb 4-1: config 0 descriptor?? [ 1111.982515][ T5091] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1112.383352][ T5155] usb 4-1: string descriptor 0 read error: -71 [ 1112.410850][ T5155] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #200: -71 [ 1112.441437][ T5155] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 1112.464209][ T5155] uclogic 0003:256C:006D.0010: failed probing pen v2 parameters: -71 [ 1112.499975][ T5155] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 1112.560540][ T5155] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 1112.619450][ T5155] usb 4-1: USB disconnect, device number 35 [ 1112.839174][T16924] loop2: detected capacity change from 0 to 32768 [ 1112.878970][T16924] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2738 (16924) [ 1112.882679][T16948] loop0: detected capacity change from 0 to 128 [ 1112.926947][T16948] udf: Unknown parameter '' [ 1112.960539][T16924] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1112.998763][T16948] loop0: detected capacity change from 0 to 512 [ 1113.007065][T16924] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1113.065372][T16924] BTRFS info (device loop2): using free-space-tree [ 1113.065729][T16948] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1113.184750][T16948] EXT4-fs (loop0): 1 truncate cleaned up [ 1113.221765][T16948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1114.063338][T16948] loop0: detected capacity change from 512 to 407 [ 1114.168857][T16253] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1114.277704][T16236] EXT4-fs error (device loop0): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1114.419631][T16236] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.817888][T16980] loop2: detected capacity change from 0 to 2048 [ 1114.837643][T16980] NILFS (loop2): invalid segment: Sequence number mismatch [ 1114.845113][T16980] NILFS (loop2): trying rollback from an earlier position [ 1114.888139][T16980] NILFS (loop2): recovery complete [ 1114.902907][T16981] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1114.982633][ T5342] team0 (unregistering): Port device team_slave_1 removed [ 1115.451446][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.457826][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.242729][T16958] netlink: 'syz.3.2747': attribute type 4 has an invalid length. [ 1116.251494][T16973] team0: entered promiscuous mode [ 1116.293238][T16973] team_slave_1: entered promiscuous mode [ 1116.516125][T16973] team0: left promiscuous mode [ 1116.536387][T16973] team_slave_1: left promiscuous mode [ 1116.848122][ T5150] usb 5-1: USB disconnect, device number 16 [ 1117.422850][T16775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.430031][T16775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.202179][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1118.202205][ T29] audit: type=1804 audit(2000000340.329:1048): pid=17007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2755" name="/root/syzkaller.J1uydZ/27/bus" dev="sda1" ino=2144 res=1 errno=0 [ 1118.209538][T17007] Invalid ELF header magic: != ELF [ 1118.299659][T16775] bridge_slave_0: entered allmulticast mode [ 1118.371228][T16775] bridge_slave_0: entered promiscuous mode [ 1118.446280][ T29] audit: type=1800 audit(2000000340.329:1049): pid=17007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2755" name="bus" dev="sda1" ino=2144 res=0 errno=0 [ 1118.478447][T16775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.512685][T16775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.566720][T16775] bridge_slave_1: entered allmulticast mode [ 1118.610632][T16775] bridge_slave_1: entered promiscuous mode [ 1119.225241][T16775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.952980][T16775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.958780][T17022] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 1120.021624][T17022] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 1120.193330][T12685] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1120.265423][T12685] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1120.277480][T12685] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1120.290123][T12685] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1120.296856][T17033] loop2: detected capacity change from 0 to 1024 [ 1120.313235][T12685] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1120.321882][T12685] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1120.374254][T16775] team0: Port device team_slave_0 added [ 1120.383120][T17034] netlink: 'syz.3.2762': attribute type 4 has an invalid length. [ 1120.396573][T17033] hfsplus: failed to load root directory [ 1120.506255][T16775] team0: Port device team_slave_1 added [ 1120.539040][ T5342] IPVS: stop unused estimator thread 0... [ 1120.773031][T17044] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2354 [ 1120.911144][T17048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2765'. [ 1121.010044][T16775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.050685][T16775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.110497][T16775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.158049][T17053] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1121.178775][T16775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.215700][T16775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.284444][T16775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.310140][T17048] team0: entered promiscuous mode [ 1121.371135][T17048] team_slave_1: entered promiscuous mode [ 1121.648379][T17047] team0: left promiscuous mode [ 1121.665487][T17047] team_slave_1: left promiscuous mode [ 1121.914950][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.364888][T17070] loop4: detected capacity change from 0 to 1764 [ 1122.391221][T12685] Bluetooth: hci5: command tx timeout [ 1123.157091][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.326832][T16775] hsr_slave_0: entered promiscuous mode [ 1123.428420][T16775] hsr_slave_1: entered promiscuous mode [ 1123.608488][T16775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1123.635443][T16775] Cannot create hsr debugfs directory [ 1123.725393][T17081] loop4: detected capacity change from 0 to 128 [ 1123.836390][T17081] udf: Unknown parameter '' [ 1123.934915][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2772'. [ 1124.029682][T17081] loop4: detected capacity change from 0 to 512 [ 1124.087316][T17081] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1124.150722][T17081] EXT4-fs (loop4): 1 truncate cleaned up [ 1124.177568][T17081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.190661][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.248925][T12685] Bluetooth: hci6: unexpected event for opcode 0x2012 [ 1124.527435][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.722536][T17094] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1124.729070][T17094] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1124.830031][T17094] vhci_hcd vhci_hcd.0: Device attached [ 1124.870461][T12685] Bluetooth: hci5: command tx timeout [ 1125.100763][ T5154] usb 15-1: new high-speed USB device number 5 using vhci_hcd [ 1125.163983][T15600] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1125.590947][T15600] usb 4-1: Using ep0 maxpacket: 32 [ 1126.433336][T15600] usb 4-1: config 0 has no interfaces? [ 1126.440546][T15600] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1126.469856][T15600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.490173][T15600] usb 4-1: config 0 descriptor?? [ 1126.662960][T16331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.813576][T17095] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 2 [ 1126.868158][ T51] vhci_hcd: stop threads [ 1126.887426][ T51] vhci_hcd: release socket [ 1126.911997][ T51] vhci_hcd: disconnect device [ 1126.918671][T17029] chnl_net:caif_netlink_parms(): no params data found [ 1126.941404][ T5091] Bluetooth: hci5: command tx timeout [ 1127.296812][ T35] bridge_slave_1: left allmulticast mode [ 1127.391424][ T35] bridge_slave_1: left promiscuous mode [ 1127.480755][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.529426][T17100] loop2: detected capacity change from 0 to 40427 [ 1127.561466][ T35] bridge_slave_0: left allmulticast mode [ 1127.664818][T17100] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1127.673363][T17100] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1127.715147][ T35] bridge_slave_0: left promiscuous mode [ 1127.772679][T17100] F2FS-fs (loop2): invalid crc value [ 1127.951047][T17100] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 1127.969689][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.202889][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2779'. [ 1128.241041][ T5155] usb 4-1: USB disconnect, device number 36 [ 1128.305075][ T5091] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1128.316078][ T5091] Bluetooth: hci6: Injecting HCI hardware error event [ 1128.328100][T12685] Bluetooth: hci6: hardware error 0x00 [ 1129.021559][ T5091] Bluetooth: hci5: command tx timeout [ 1129.261383][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.306814][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.334471][ T35] bond0 (unregistering): Released all slaves [ 1129.398033][T17120] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 1129.440864][T17120] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 1129.672265][T17133] team0: entered promiscuous mode [ 1129.690524][T17133] team_slave_0: entered promiscuous mode [ 1129.704546][T17133] team_slave_1: entered promiscuous mode [ 1129.745615][T17133] team0: left promiscuous mode [ 1129.759769][T17133] team_slave_0: left promiscuous mode [ 1129.779610][T17133] team_slave_1: left promiscuous mode [ 1130.242078][ T5154] vhci_hcd: vhci_device speed not set [ 1130.463250][T12685] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1130.791251][T17152] loop4: detected capacity change from 0 to 1024 [ 1130.845876][T17152] hfsplus: failed to load root directory [ 1131.189977][T17160] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 1131.201922][T17160] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 1134.942429][T17029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.964633][T17029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.990593][T17029] bridge_slave_0: entered allmulticast mode [ 1135.013627][T17029] bridge_slave_0: entered promiscuous mode [ 1135.040731][T17199] loop4: detected capacity change from 0 to 164 [ 1135.045183][T17029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.081179][T17029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.089145][T17199] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1135.112793][T17199] virtio-fs: tag not found [ 1135.121755][T17029] bridge_slave_1: entered allmulticast mode [ 1135.134752][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2796'. [ 1135.142154][T17029] bridge_slave_1: entered promiscuous mode [ 1135.243043][T17207] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1135.249620][T17207] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1135.274545][T17207] vhci_hcd vhci_hcd.0: Device attached [ 1135.302266][ T35] hsr_slave_0: left promiscuous mode [ 1135.338920][ T35] hsr_slave_1: left promiscuous mode [ 1135.368792][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1135.391675][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.425966][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.441082][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.518585][ T35] veth1_macvtap: left promiscuous mode [ 1135.540091][ T35] veth0_macvtap: left promiscuous mode [ 1135.547112][ T35] veth1_vlan: left promiscuous mode [ 1135.563524][T15193] usb 11-1: new high-speed USB device number 3 using vhci_hcd [ 1135.571315][ T35] veth0_vlan: left promiscuous mode [ 1135.580877][T16562] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1135.780597][T16562] usb 2-1: Using ep0 maxpacket: 32 [ 1135.788281][T16562] usb 2-1: config 0 has no interfaces? [ 1135.793627][T17218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1135.800612][T16562] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1135.835135][T16562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.861514][T16562] usb 2-1: config 0 descriptor?? [ 1135.895206][T17219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1135.989810][T17219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1136.084863][T17209] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 1136.130668][T14576] vhci_hcd: stop threads [ 1136.134956][T14576] vhci_hcd: release socket [ 1136.153440][T14576] vhci_hcd: disconnect device [ 1136.264652][T17216] loop2: detected capacity change from 0 to 40427 [ 1136.284538][T17216] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1136.317809][T17216] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1136.343735][T17216] F2FS-fs (loop2): invalid crc value [ 1136.372888][T17216] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1136.464727][T17216] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1136.471973][T17216] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1136.671588][ C1] vkms_vblank_simulate: vblank timer overrun [ 1136.698485][T16253] syz-executor: attempt to access beyond end of device [ 1136.698485][T16253] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1136.746238][T16253] syz-executor: attempt to access beyond end of device [ 1136.746238][T16253] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1136.939238][T16253] syz-executor: attempt to access beyond end of device [ 1136.939238][T16253] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1136.964291][T16253] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1137.099960][T17227] binder: 17224:17227 ioctl 400c620e 0 returned -14 [ 1137.350725][ C1] vkms_vblank_simulate: vblank timer overrun [ 1137.748061][ C1] vkms_vblank_simulate: vblank timer overrun [ 1138.168277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1138.195719][T17231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2803'. [ 1138.379060][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1139.215759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1139.253808][ C1] vkms_vblank_simulate: vblank timer overrun [ 1139.494200][T17208] team0: entered promiscuous mode [ 1139.499314][T17208] team_slave_1: entered promiscuous mode [ 1139.507341][T17208] team0: left promiscuous mode [ 1139.520501][T17208] team_slave_1: left promiscuous mode [ 1139.589245][ T5235] usb 2-1: USB disconnect, device number 24 [ 1139.728960][T17235] fuse: Bad value for 'fd' [ 1139.944583][T17029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.015511][T17029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.052289][ C1] vkms_vblank_simulate: vblank timer overrun [ 1140.152944][ C1] vkms_vblank_simulate: vblank timer overrun [ 1140.301345][T17029] team0: Port device team_slave_0 added [ 1140.336621][ C1] vkms_vblank_simulate: vblank timer overrun [ 1140.338805][T17029] team0: Port device team_slave_1 added [ 1140.369981][T16775] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1140.458708][T16775] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1140.467473][T17231] infiniband syz1: set active [ 1140.482148][T17231] infiniband syz1: added veth1_vlan [ 1140.509447][T17231] syz1: rxe_create_cq: returned err = -12 [ 1140.569103][T17231] infiniband syz1: Couldn't create ib_mad CQ [ 1140.585675][T17231] infiniband syz1: Couldn't open port 1 [ 1140.642982][T17241] loop1: detected capacity change from 0 to 164 [ 1140.713378][T17029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.722539][T15193] vhci_hcd: vhci_device speed not set [ 1140.729781][T17241] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1140.737344][T17029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.768646][T17231] RDS/IB: syz1: added [ 1140.781466][T17241] virtio-fs: tag not found [ 1140.801576][T17231] smc: adding ib device syz1 with port count 1 [ 1140.815554][T17231] smc: ib device syz1 port 1 has pnetid [ 1140.830774][T17029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.954457][T16775] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1141.009940][T16775] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1141.070867][T17029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.090833][T17029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.171049][T17029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.892480][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1141.922633][ T5091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1141.935538][ T5091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1141.960058][ T5091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1141.994585][ T5091] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1142.007551][ T5091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1142.545252][T17029] hsr_slave_0: entered promiscuous mode [ 1142.627709][T17265] binder: 17259:17265 ioctl 400c620e 0 returned -14 [ 1142.847017][T17029] hsr_slave_1: entered promiscuous mode [ 1142.996349][T17029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1143.295205][T17029] Cannot create hsr debugfs directory [ 1143.894674][T17276] loop1: detected capacity change from 0 to 4096 [ 1143.930597][T17276] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1144.012708][T17276] ntfs3: loop1: Failed to initialize $Secure::$SII (-22). [ 1144.034820][T17271] loop3: detected capacity change from 32768 to 32663 [ 1144.036830][T17276] ntfs3: loop1: Failed to initialize $Secure (-22). [ 1144.125269][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.140710][T12685] Bluetooth: hci1: command tx timeout [ 1144.183260][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.311831][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1145.337982][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.542643][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1145.560740][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.646772][T17291] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1145.653341][T17291] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1145.675714][T17291] vhci_hcd vhci_hcd.0: Device attached [ 1145.779055][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1145.789685][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.959599][T16775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.973011][ T5159] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1145.980985][T16562] usb 11-1: new high-speed USB device number 4 using vhci_hcd [ 1146.193845][ T5159] usb 2-1: Using ep0 maxpacket: 32 [ 1146.213436][ T5159] usb 2-1: config 0 has no interfaces? [ 1146.219005][ T5159] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1146.229955][T12685] Bluetooth: hci1: command tx timeout [ 1146.299348][ T5159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.332335][ T5159] usb 2-1: config 0 descriptor?? [ 1146.398102][T16775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.502800][T15600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.509983][T15600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.530208][T15600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.537415][T15600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.549365][T17294] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 2 [ 1146.587403][T15968] vhci_hcd: stop threads [ 1146.613983][T15968] vhci_hcd: release socket [ 1146.667797][T15968] vhci_hcd: disconnect device [ 1146.686411][ T35] bridge_slave_1: left allmulticast mode [ 1146.741671][ T35] bridge_slave_1: left promiscuous mode [ 1146.753049][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.786057][ T35] bridge_slave_0: left allmulticast mode [ 1146.791876][ T35] bridge_slave_0: left promiscuous mode [ 1146.799045][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.817300][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.863153][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.894852][ T35] bond0 (unregistering): Released all slaves [ 1148.117237][T17254] chnl_net:caif_netlink_parms(): no params data found [ 1148.316281][T12685] Bluetooth: hci1: command tx timeout [ 1148.503924][ T5150] usb 2-1: USB disconnect, device number 25 [ 1148.726386][T16775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1150.382747][ T5091] Bluetooth: hci1: command tx timeout [ 1150.393474][ T5091] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1150.407228][ T5091] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1150.417939][ T5091] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1150.427491][ T5091] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1150.440785][ T5091] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1150.448350][ T5091] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1150.518722][T17254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.689083][T17254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.785791][T17254] bridge_slave_0: entered allmulticast mode [ 1150.793447][T17254] bridge_slave_0: entered promiscuous mode [ 1150.803075][T17254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.810437][T17254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.820240][T17254] bridge_slave_1: entered allmulticast mode [ 1150.828457][T17254] bridge_slave_1: entered promiscuous mode [ 1150.835354][T17029] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1150.888722][T17029] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1151.016634][T17029] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1151.127772][T16562] vhci_hcd: vhci_device speed not set [ 1151.216321][T17254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.244438][T17254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.313783][T17029] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1151.636550][T17254] team0: Port device team_slave_0 added [ 1151.982397][T17254] team0: Port device team_slave_1 added [ 1152.693804][ T5091] Bluetooth: hci7: command tx timeout [ 1153.428268][T17254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.463558][T17254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.528079][T17254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.548707][T17254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.577528][T17254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.650587][T17254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.721355][ T35] hsr_slave_0: left promiscuous mode [ 1153.728096][ T35] hsr_slave_1: left promiscuous mode [ 1153.786422][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.819169][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1153.859987][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.883464][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.948074][ T35] veth1_macvtap: left promiscuous mode [ 1153.964423][ T35] veth0_macvtap: left promiscuous mode [ 1153.976961][ T35] veth1_vlan: left promiscuous mode [ 1153.997532][ T35] veth0_vlan: left promiscuous mode [ 1154.466729][ T5091] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1154.475864][ T5091] Bluetooth: hci4: Injecting HCI hardware error event [ 1154.488099][T12685] Bluetooth: hci4: hardware error 0x00 [ 1154.701989][ T5091] Bluetooth: hci7: command tx timeout [ 1154.957256][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1155.049191][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1156.316951][T16775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1156.593264][T12685] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1156.691793][T17381] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 1156.701429][T17381] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 1156.843705][T12685] Bluetooth: hci7: command tx timeout [ 1157.426248][T17254] hsr_slave_0: entered promiscuous mode [ 1157.482520][T17254] hsr_slave_1: entered promiscuous mode [ 1157.502151][T17254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1157.530390][T17254] Cannot create hsr debugfs directory [ 1157.859310][T17029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.901553][T17411] loop1: detected capacity change from 0 to 512 [ 1158.252564][T17411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1158.423534][T17411] ext4 filesystem being mounted at /root/syzkaller.CtYrWG/59/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 1158.774009][T15999] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.870844][T12685] Bluetooth: hci7: command tx timeout [ 1158.954938][T17325] chnl_net:caif_netlink_parms(): no params data found [ 1159.004729][T17029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.350556][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.418712][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.426040][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.454734][T17429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2840'. [ 1159.709195][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.883093][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.890447][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.153777][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.667670][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.742101][T16775] veth0_vlan: entered promiscuous mode [ 1161.093609][T17325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.111948][T17325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.149875][T17325] bridge_slave_0: entered allmulticast mode [ 1161.182608][T17325] bridge_slave_0: entered promiscuous mode [ 1161.211582][T17474] team0: entered promiscuous mode [ 1161.216656][T17474] team_slave_1: entered promiscuous mode [ 1161.343347][T17325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.371565][T17325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.378969][T17325] bridge_slave_1: entered allmulticast mode [ 1161.417574][T17325] bridge_slave_1: entered promiscuous mode [ 1161.557389][T17473] team0: left promiscuous mode [ 1161.569328][T17473] team_slave_1: left promiscuous mode [ 1161.786619][ T5091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1161.795578][ T5091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1161.817466][ T5091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1161.855876][T17325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.872790][T17325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.890909][ T5091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1161.898778][ T5091] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1161.915235][ T5091] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1162.275477][T17477] loop1: detected capacity change from 0 to 32768 [ 1162.331104][T17325] team0: Port device team_slave_0 added [ 1162.385011][T17477] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1162.414756][T17325] team0: Port device team_slave_1 added [ 1162.587399][T17477] XFS (loop1): Ending clean mount [ 1162.640133][T17511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2852'. [ 1162.669463][ T5235] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 [ 1162.690875][ T5235] XFS (loop1): Unmount and run xfs_repair [ 1162.698460][ T5235] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1162.744187][ T5235] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86 XAFL............ [ 1162.758582][ T5235] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00 ....G.K......... [ 1162.783045][T17325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.790002][T17325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.822260][ T5235] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b ^..s............ [ 1162.831958][ T5235] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f ................ [ 1162.842211][ T5235] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1162.851378][ T5235] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1162.860245][ T5235] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1162.870853][ T5235] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1162.874256][T17325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.879756][T17477] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74 [ 1162.908196][T17477] XFS (loop1): page discard on page ffffea00013c9000, inode 0x429, pos 0. [ 1162.962052][T17519] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 [ 1163.012335][T17519] XFS (loop1): Unmount and run xfs_repair [ 1163.076063][T17519] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1163.115072][T17519] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86 XAFL............ [ 1163.141471][T17325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1163.148423][T17325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1163.200902][T17519] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00 ....G.K......... [ 1163.228362][T17325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1163.239314][T17519] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b ^..s............ [ 1163.256245][ T35] bridge_slave_1: left allmulticast mode [ 1163.259580][T17519] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f ................ [ 1163.313761][ T35] bridge_slave_1: left promiscuous mode [ 1163.319663][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.327410][T17519] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1163.338545][T17519] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1163.348502][T17519] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1163.358094][T17519] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1163.370394][T17519] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74 [ 1163.431508][ T35] bridge_slave_0: left allmulticast mode [ 1163.437376][ T35] bridge_slave_0: left promiscuous mode [ 1163.451218][T17519] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1163.473422][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.500493][T17519] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 1163.602055][T15999] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1163.994370][T12685] Bluetooth: hci3: command tx timeout [ 1164.927962][T17547] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1164.934561][T17547] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1164.942481][T17547] vhci_hcd vhci_hcd.0: Device attached [ 1165.004201][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.023286][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.035760][ T35] bond0 (unregistering): Released all slaves [ 1165.149866][T17254] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1165.230541][T16562] usb 15-1: new high-speed USB device number 6 using vhci_hcd [ 1165.244905][ T5150] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1165.413879][T17254] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1165.435873][T17254] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1165.455836][T17254] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1165.464862][ T5150] usb 4-1: Using ep0 maxpacket: 32 [ 1165.496044][ T5150] usb 4-1: config 0 has no interfaces? [ 1165.516065][ T5150] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1165.539497][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.567562][T17325] hsr_slave_0: entered promiscuous mode [ 1165.574736][ T5150] usb 4-1: config 0 descriptor?? [ 1165.597595][T17325] hsr_slave_1: entered promiscuous mode [ 1165.604846][T17325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1165.620453][T17325] Cannot create hsr debugfs directory [ 1165.808887][T17548] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 3 [ 1165.834992][T14576] vhci_hcd: stop threads [ 1165.839258][T14576] vhci_hcd: release socket [ 1165.863098][T14576] vhci_hcd: disconnect device [ 1166.066157][T12685] Bluetooth: hci3: command tx timeout [ 1166.084823][T17029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.665901][T17573] loop1: detected capacity change from 0 to 1764 [ 1167.806403][ T8] usb 4-1: USB disconnect, device number 37 [ 1168.077173][ T35] hsr_slave_0: left promiscuous mode [ 1168.095669][ T35] hsr_slave_1: left promiscuous mode [ 1168.108022][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.133104][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.141416][T12685] Bluetooth: hci3: command tx timeout [ 1168.181691][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1168.189270][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.311235][ T35] veth1_macvtap: left promiscuous mode [ 1168.316855][ T35] veth0_macvtap: left promiscuous mode [ 1168.331685][ T35] veth1_vlan: left promiscuous mode [ 1168.337070][ T35] veth0_vlan: left promiscuous mode [ 1168.441250][ T35] infiniband syz1: set down [ 1168.804326][T17589] loop1: detected capacity change from 0 to 40427 [ 1168.815581][T17589] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1168.823244][T17589] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1168.845968][T17589] F2FS-fs (loop1): invalid crc value [ 1168.886639][T17589] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1169.075423][T17589] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1169.084489][T17589] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1169.141602][T15999] syz-executor: attempt to access beyond end of device [ 1169.141602][T15999] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1169.158191][T15999] syz-executor: attempt to access beyond end of device [ 1169.158191][T15999] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1169.233952][T15999] syz-executor: attempt to access beyond end of device [ 1169.233952][T15999] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1169.290878][T15999] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1169.563594][T15968] smc: removing ib device syz1 [ 1170.004088][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1170.097895][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1170.224019][T12685] Bluetooth: hci3: command tx timeout [ 1170.410935][T16562] vhci_hcd: vhci_device speed not set [ 1171.076390][T17029] veth0_vlan: entered promiscuous mode [ 1171.098187][T17615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2865'. [ 1171.100773][ T5159] infiniband syz1: ib_query_port failed (-19) [ 1171.665702][T17029] veth1_vlan: entered promiscuous mode [ 1172.037919][T17254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.063761][T17488] chnl_net:caif_netlink_parms(): no params data found [ 1172.289413][T17254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.894376][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.901621][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.923934][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.931129][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.938052][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1172.950397][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1172.958964][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1172.967778][ T5091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1172.981386][ T5091] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1172.988771][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1173.125655][T17488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.164778][T17488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.185051][T17488] bridge_slave_0: entered allmulticast mode [ 1173.238754][T17488] bridge_slave_0: entered promiscuous mode [ 1173.279218][T17029] veth0_macvtap: entered promiscuous mode [ 1173.470226][T17488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.477616][T17488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.486783][T17488] bridge_slave_1: entered allmulticast mode [ 1173.503740][T17488] bridge_slave_1: entered promiscuous mode [ 1173.590468][ T5159] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1173.758134][T17029] veth1_macvtap: entered promiscuous mode [ 1173.800563][ T5159] usb 4-1: Using ep0 maxpacket: 32 [ 1173.836019][ T5159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 27424, setting to 1024 [ 1173.858479][ T5159] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1173.884285][ T5159] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1173.904020][ T5159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.930422][ T5159] usb 4-1: Product: syz [ 1173.934936][ T5159] usb 4-1: Manufacturer: syz [ 1173.940254][ T5159] usb 4-1: SerialNumber: syz [ 1173.980725][ T5159] usb 4-1: config 0 descriptor?? [ 1173.988712][T17488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.008837][T17629] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1174.072058][T17488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.208486][T17325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1174.245028][T17325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1174.336627][ T5159] usb 4-1: USB disconnect, device number 38 [ 1174.425321][T17488] team0: Port device team_slave_0 added [ 1174.426500][T17191] udevd[17191]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1174.466550][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1174.478517][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.490539][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1174.501739][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.519210][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1174.530919][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.553030][T17029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1174.599635][T17325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1174.624272][T17488] team0: Port device team_slave_1 added [ 1174.660526][T17325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1174.717605][T17488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.724977][T17488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.752310][T17488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.777079][T17488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.791572][T17488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.817977][T17488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.853488][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.868124][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.888364][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.910433][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.926414][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.960709][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.000315][T17029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.105641][ T5091] Bluetooth: hci0: command tx timeout [ 1175.115735][T17029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.125077][T17029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.134654][T17029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.153406][T17029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.235691][T17488] hsr_slave_0: entered promiscuous mode [ 1175.244660][T17488] hsr_slave_1: entered promiscuous mode [ 1175.254003][T17488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1175.261922][T17488] Cannot create hsr debugfs directory [ 1175.402641][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.539898][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.583703][T17254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1175.721348][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.827935][T15968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.851525][T15968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.939393][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.055776][T17626] chnl_net:caif_netlink_parms(): no params data found [ 1176.353467][T15968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.369470][T15968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.618873][T17626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.643941][T17626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.661254][T17626] bridge_slave_0: entered allmulticast mode [ 1176.682484][T17626] bridge_slave_0: entered promiscuous mode [ 1176.693884][T17626] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.709506][T17626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.736208][T17626] bridge_slave_1: entered allmulticast mode [ 1176.752214][T17626] bridge_slave_1: entered promiscuous mode [ 1176.867392][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.880543][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.077238][T17254] veth0_vlan: entered promiscuous mode [ 1177.130796][T17626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.181162][ T5091] Bluetooth: hci0: command tx timeout [ 1177.356592][T17626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.514171][T17656] loop0: detected capacity change from 0 to 164 [ 1177.534224][T17656] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 1177.934143][T17325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1178.012250][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'. [ 1178.098518][T17626] team0: Port device team_slave_0 added [ 1178.143227][T17626] team0: Port device team_slave_1 added [ 1178.365553][T17626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1178.401887][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.449248][T17626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1178.474583][T17254] veth1_vlan: entered promiscuous mode [ 1178.561143][T17626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.607138][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.690617][T17626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.782928][T17325] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.949603][T17626] hsr_slave_0: entered promiscuous mode [ 1178.989805][T17626] hsr_slave_1: entered promiscuous mode [ 1179.023604][T17626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1179.037439][T17626] Cannot create hsr debugfs directory [ 1179.053738][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.061003][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.252328][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.259521][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.272269][ T5091] Bluetooth: hci0: command tx timeout [ 1179.294804][T17254] veth0_macvtap: entered promiscuous mode [ 1179.316471][T17254] veth1_macvtap: entered promiscuous mode [ 1179.534991][T17675] loop0: detected capacity change from 0 to 32768 [ 1179.568271][T17675] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2877 (17675) [ 1179.617240][ T35] bridge_slave_1: left allmulticast mode [ 1179.640532][ T35] bridge_slave_1: left promiscuous mode [ 1179.646849][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.673234][T17675] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1179.685891][ T35] bridge_slave_0: left allmulticast mode [ 1179.692514][ T35] bridge_slave_0: left promiscuous mode [ 1179.699055][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.713040][T17675] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1179.866842][T17675] BTRFS info (device loop0): rebuilding free space tree [ 1179.939146][T17675] BTRFS info (device loop0): disabling free space tree [ 1179.970493][T17675] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1179.980252][T17675] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1180.133013][ T29] audit: type=1800 audit(2000000402.969:1050): pid=17675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2877" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 1180.395713][T17029] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1181.361569][ T5091] Bluetooth: hci0: command tx timeout [ 1181.634401][T15193] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1181.667510][T17719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2884'. [ 1181.808824][T15193] usb 1-1: device descriptor read/64, error -71 [ 1182.066706][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1182.079252][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1182.092021][ T35] bond0 (unregistering): Released all slaves [ 1182.100519][T15193] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1182.280598][T15193] usb 1-1: device descriptor read/64, error -71 [ 1182.306134][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1182.319321][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1182.331595][ T35] bond0 (unregistering): Released all slaves [ 1182.401245][T15193] usb usb1-port1: attempt power cycle [ 1182.495403][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.524706][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.556446][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.578208][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.605859][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.718528][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.739111][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.759587][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.774951][T17254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.885377][ T35] : left promiscuous mode [ 1182.942364][T15193] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1183.001191][T15193] usb 1-1: device descriptor read/8, error -71 [ 1183.030271][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.080460][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.107906][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.118598][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.128812][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.151905][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.170451][T17254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.216954][T17254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.229527][T17254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.290582][T15193] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1183.351814][T15193] usb 1-1: device descriptor read/8, error -71 [ 1183.372383][T17254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.404271][T17254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.422111][T17254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.440747][T17254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.505981][T15193] usb usb1-port1: unable to enumerate USB device [ 1184.339414][ T35] hsr_slave_0: left promiscuous mode [ 1184.407078][ T35] hsr_slave_1: left promiscuous mode [ 1184.436375][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1184.444018][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1184.465556][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1184.480763][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.552787][ T35] hsr_slave_0: left promiscuous mode [ 1184.582097][ T35] hsr_slave_1: left promiscuous mode [ 1184.607123][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1184.631800][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.733075][ T35] veth1_macvtap: left promiscuous mode [ 1184.739359][ T35] veth0_macvtap: left promiscuous mode [ 1184.745813][ T35] veth1_vlan: left promiscuous mode [ 1184.751215][ T35] veth0_vlan: left promiscuous mode [ 1184.767734][ T35] veth0_vlan: left promiscuous mode [ 1185.740681][ T5150] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1185.912086][ T5150] usb 4-1: device descriptor read/64, error -71 [ 1186.190742][ T5150] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1186.233684][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1186.340716][ T5150] usb 4-1: device descriptor read/64, error -71 [ 1186.471015][ T5150] usb usb4-port1: attempt power cycle [ 1186.915005][ T5150] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1186.958422][ T5150] usb 4-1: device descriptor read/8, error -71 [ 1187.246802][ T5150] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1187.288438][ T5150] usb 4-1: device descriptor read/8, error -71 [ 1187.416286][ T5150] usb usb4-port1: unable to enumerate USB device [ 1187.839227][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1187.944943][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1188.583467][ T29] audit: type=1800 audit(2000000411.399:1051): pid=17770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2895" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1189.682150][T17765] team_slave_0: entered promiscuous mode [ 1189.687861][T17765] team_slave_0: entered allmulticast mode [ 1189.779385][T17765] team0: Port device team_slave_0 removed [ 1190.002099][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.009959][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.061062][T17325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1190.390835][ T5235] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1190.505641][T17488] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1190.575866][T17488] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1190.625330][ T5235] usb 4-1: Using ep0 maxpacket: 16 [ 1190.642312][ T5235] usb 4-1: config 0 has no interfaces? [ 1190.647910][ T5235] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1190.712063][ T5235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.725787][T10601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.756482][T10601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.789097][ T5235] usb 4-1: config 0 descriptor?? [ 1191.039764][T17488] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1191.062184][ T5155] usb 4-1: USB disconnect, device number 43 [ 1191.084213][T17488] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1191.918551][T17325] veth0_vlan: entered promiscuous mode [ 1191.943102][T17626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1192.012265][T17626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1192.037253][T17626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1192.064243][T17823] netlink: 'syz.2.2905': attribute type 29 has an invalid length. [ 1192.126913][T17488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.189904][T17325] veth1_vlan: entered promiscuous mode [ 1192.235980][T17823] netlink: 'syz.2.2905': attribute type 29 has an invalid length. [ 1192.260983][T17827] netlink: 'syz.2.2905': attribute type 29 has an invalid length. [ 1192.276606][T17626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1192.350505][T17828] netlink: 'syz.2.2905': attribute type 29 has an invalid length. [ 1192.468504][T17488] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.608231][T17325] veth0_macvtap: entered promiscuous mode [ 1192.629457][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.636683][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.663975][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.671188][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.783183][T17845] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 1192.812690][T17325] veth1_macvtap: entered promiscuous mode [ 1192.830063][T17845] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 1192.862217][ T30] INFO: task kworker/1:4:11501 blocked for more than 143 seconds. [ 1192.870039][ T30] Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 1192.909470][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1192.942443][ T30] task:kworker/1:4 state:D stack:20912 pid:11501 tgid:11501 ppid:2 flags:0x00004000 [ 1192.963605][ T30] Workqueue: events_long bch2_fs_read_only_work [ 1192.970046][ T30] Call Trace: [ 1193.013535][ T30] [ 1193.016988][ T30] __schedule+0x17e8/0x4a20 [ 1193.038382][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.054907][ T30] ? __pfx___schedule+0x10/0x10 [ 1193.063972][ T30] ? __pfx_lock_release+0x10/0x10 [ 1193.079320][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1193.087429][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.091806][T17325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.106714][ T30] ? kthread_data+0x52/0xd0 [ 1193.118218][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.128855][T17325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.137284][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1193.149040][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.165590][T17325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.165642][ T30] ? schedule+0x90/0x320 [ 1193.215794][ T30] schedule+0x14b/0x320 [ 1193.228031][ T30] journal_quiesce+0x205/0x2e0 [ 1193.229372][T17325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.255143][ T30] ? bch2_fs_journal_stop+0x12e/0x590 [ 1193.261691][T17325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.276935][ T30] ? __pfx_journal_quiesce+0x10/0x10 [ 1193.286072][T17325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.301792][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1193.327992][T17325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.328043][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.352291][ T30] bch2_fs_journal_stop+0x3af/0x590 [ 1193.358547][ T30] ? __pfx_bch2_fs_journal_stop+0x10/0x10 [ 1193.365073][ T30] ? __pfx___bch2_print+0x10/0x10 [ 1193.373082][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.379185][ T30] ? __bch2_btree_flush_all+0x6dc/0x700 [ 1193.385675][ T30] ? __bch2_btree_flush_all+0x6f/0x700 [ 1193.399590][ T30] __bch2_fs_read_only+0x30c/0x430 [ 1193.406181][ T30] bch2_fs_read_only+0xb52/0x1210 [ 1193.423042][ T30] ? __pfx_bch2_fs_read_only+0x10/0x10 [ 1193.431926][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.437926][ T30] ? __down_write_common+0x162/0x200 [ 1193.444232][ T30] ? __pfx___down_write_common+0x10/0x10 [ 1193.450449][ T30] ? process_scheduled_works+0x945/0x1830 [ 1193.456667][ T30] bch2_fs_read_only_work+0x2d/0x40 [ 1193.462184][T17325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.463386][ T30] process_scheduled_works+0xa2e/0x1830 [ 1193.497747][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1193.514133][ T30] ? assign_work+0x364/0x3d0 [ 1193.521566][T17325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.526712][ T30] worker_thread+0x86d/0xd70 [ 1193.555795][T17626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.580251][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1193.600428][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1193.605584][ T30] kthread+0x2f2/0x390 [ 1193.655166][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1193.662748][T17488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1193.690281][ T30] ? __pfx_kthread+0x10/0x10 [ 1193.697460][ T30] ret_from_fork+0x4d/0x80 [ 1193.707461][ T30] ? __pfx_kthread+0x10/0x10 [ 1193.716114][T17325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.740565][ T30] ret_from_fork_asm+0x1a/0x30 [ 1193.745522][ T30] [ 1193.748663][T17325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.759393][ T30] INFO: task syz.3.2530:15995 blocked for more than 144 seconds. [ 1193.780553][ T30] Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 1193.788721][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1193.797593][T17325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.820593][T17325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.841174][ T30] task:syz.3.2530 state:D stack:18128 pid:15995 tgid:15994 ppid:15362 flags:0x00004006 [ 1193.851720][T17325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.870636][ T30] Call Trace: [ 1193.873938][ T30] [ 1193.875444][T17325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.876868][ T30] __schedule+0x17e8/0x4a20 [ 1193.907411][T17325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.910535][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.935785][T17325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.945687][ T30] ? __pfx___schedule+0x10/0x10 [ 1193.945732][ T30] ? __pfx_lock_release+0x10/0x10 [ 1193.945768][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1193.945806][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1193.961712][T17325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.977977][T17842] loop2: detected capacity change from 0 to 32768 [ 1193.994349][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1193.999793][ T30] ? schedule+0x90/0x320 [ 1194.014530][ T30] schedule+0x14b/0x320 [ 1194.027208][ T30] schedule_preempt_disabled+0x13/0x30 [ 1194.057778][ T30] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 1194.059057][T17325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.079597][T17325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.088908][T17325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.088989][ T30] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 1194.099585][T17325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.153769][T17842] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1194.169056][T17626] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.169893][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1194.199166][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.206417][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.226378][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.233731][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.243455][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1194.248527][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.256942][ T30] __down_write_common+0x1af/0x200 [ 1194.263551][ T30] ? __pfx___bch2_print+0x10/0x10 [ 1194.268661][ T30] ? __pfx___down_write_common+0x10/0x10 [ 1194.280395][ T30] ? wake_up_q+0xdc/0x120 [ 1194.284811][ T30] __bch2_fs_stop+0xfd/0x540 [ 1194.289449][ T30] ? __pfx_up_write+0x10/0x10 [ 1194.297664][T17842] XFS (loop2): Ending clean mount [ 1194.310613][ T30] ? __pfx___bch2_fs_stop+0x10/0x10 [ 1194.315863][ T30] ? llist_reverse_order+0x72/0x90 [ 1194.330891][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.336571][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.360173][ T30] ? bch2_fs_start+0x2c7/0x5b0 [ 1194.366884][ T30] bch2_fs_open+0xb4f/0xdf0 [ 1194.372808][ T30] ? __pfx_bch2_fs_open+0x10/0x10 [ 1194.378127][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1194.385887][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.392568][ T30] ? __pfx_bch2_test_super+0x10/0x10 [ 1194.397899][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.403350][ T5153] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 [ 1194.403562][ T5153] XFS (loop2): Unmount and run xfs_repair [ 1194.403583][ T5153] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1194.403608][ T5153] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86 XAFL............ [ 1194.403631][ T5153] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00 ....G.K......... [ 1194.423520][ T30] ? sget+0x2b8/0x620 [ 1194.446117][ T5153] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b ^..s............ [ 1194.459627][ T5153] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f ................ [ 1194.468988][ T30] ? __pfx_bch2_noset_super+0x10/0x10 [ 1194.469038][ T30] bch2_mount+0x6b0/0x13a0 [ 1194.469116][ T30] ? __pfx_bch2_mount+0x10/0x10 [ 1194.469175][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.469205][ T30] ? aa_get_newest_label+0xff/0x6f0 [ 1194.469249][ T30] ? vfs_parse_fs_string+0x190/0x230 [ 1194.469285][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.469316][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.469344][ T30] ? kfree+0x4e/0x360 [ 1194.469389][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.469424][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.469453][ T30] ? vfs_parse_fs_string+0x190/0x230 [ 1194.469501][ T30] legacy_get_tree+0xf0/0x190 [ 1194.469536][ T30] ? __pfx_bch2_mount+0x10/0x10 [ 1194.493595][ T5153] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1194.531586][ T30] vfs_get_tree+0x92/0x2a0 [ 1194.561055][ T5153] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1194.570099][ T5153] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1194.577688][ T30] do_new_mount+0x2be/0xb40 [ 1194.593177][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.598943][ T30] ? __pfx_do_new_mount+0x10/0x10 [ 1194.604043][ T5153] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1194.604117][T17842] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74 [ 1194.634582][T17842] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1194.634641][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.634683][ T30] __se_sys_mount+0x2d9/0x3c0 [ 1194.661333][ T30] ? __pfx___se_sys_mount+0x10/0x10 [ 1194.666574][ T30] ? exc_page_fault+0x590/0x8c0 [ 1194.669405][T17842] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 1194.671531][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.671574][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.671603][ T30] ? __x64_sys_mount+0x20/0xc0 [ 1194.671648][ T30] do_syscall_64+0xf3/0x230 [ 1194.671702][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.671749][ T30] RIP: 0033:0x7f73371771ea [ 1194.722807][ T30] RSP: 002b:00007f7337edde78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1194.740473][ T30] RAX: ffffffffffffffda RBX: 00007f7337eddf00 RCX: 00007f73371771ea [ 1194.751963][ T30] RDX: 0000000020001b00 RSI: 000000002003f600 RDI: 00007f7337eddec0 [ 1194.760042][ T30] RBP: 0000000020001b00 R08: 00007f7337eddf00 R09: 0000000001200014 [ 1194.769691][ T30] R10: 0000000001200014 R11: 0000000000000206 R12: 000000002003f600 [ 1194.778244][ T30] R13: 00007f7337eddec0 R14: 0000000000011a01 R15: 0000000020000200 [ 1194.788371][ T30] [ 1194.809052][T17254] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1194.846613][ T30] [ 1194.846613][ T30] Showing all locks held in the system: [ 1194.866833][ T30] 2 locks held by kworker/u8:1/12: [ 1194.878288][ T30] 1 lock held by khungtaskd/30: [ 1194.884705][ T30] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1194.895057][ T30] 3 locks held by kworker/u8:2/35: [ 1194.900540][ T30] 2 locks held by getty/4843: [ 1194.905376][ T30] #0: ffff88807d9000a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1194.920762][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1194.931583][ T30] 3 locks held by kworker/1:4/11501: [ 1194.936967][ T30] #0: ffff888015079148 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1194.983995][ T30] #1: ffffc9001083fd00 ((work_completion)(&c->read_only_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1195.022269][ T30] #2: ffff88804b880278 (&c->state_lock){+.+.}-{3:3}, at: bch2_fs_read_only_work+0x25/0x40 [ 1195.049352][ T30] 1 lock held by syz.3.2530/15995: [ 1195.070402][ T30] #0: ffff88804b880278 (&c->state_lock){+.+.}-{3:3}, at: __bch2_fs_stop+0xfd/0x540 [ 1195.079917][ T30] 3 locks held by syz-executor/17325: [ 1195.100882][ T30] #0: ffffffff8f5e6f48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1195.110935][ T30] #1: ffff88802aef5408 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x22d/0x420 [ 1195.121072][ T30] #2: ffffffff8e339378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1195.135154][ T30] 1 lock held by syz-executor/17626: [ 1195.140770][ T30] #0: ffffffff8f5e6f48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1195.150703][ T30] 1 lock held by dhcpcd-run-hook/17877: [ 1195.158952][ T30] #0: ffff8880b943e798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 1195.171646][ T30] 4 locks held by dhcpcd-run-hook/17887: [ 1195.177455][ T30] [ 1195.195107][ T30] ============================================= [ 1195.195107][ T30] [ 1195.260818][ T30] NMI backtrace for cpu 1 [ 1195.265196][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 1195.275091][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1195.285144][ T30] Call Trace: [ 1195.288418][ T30] [ 1195.291346][ T30] dump_stack_lvl+0x241/0x360 [ 1195.296054][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1195.301270][ T30] ? __pfx__printk+0x10/0x10 [ 1195.305874][ T30] ? vprintk_emit+0x631/0x770 [ 1195.310592][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1195.315725][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1195.320678][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1195.326135][ T30] ? _printk+0xd5/0x120 [ 1195.330299][ T30] ? __pfx__printk+0x10/0x10 [ 1195.334905][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1195.339770][ T30] ? __pfx__printk+0x10/0x10 [ 1195.344372][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.350013][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1195.355066][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1195.361064][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1195.367058][ T30] watchdog+0xfde/0x1020 [ 1195.371319][ T30] ? watchdog+0x1ea/0x1020 [ 1195.375749][ T30] ? __pfx_watchdog+0x10/0x10 [ 1195.380429][ T30] kthread+0x2f2/0x390 [ 1195.384518][ T30] ? __pfx_watchdog+0x10/0x10 [ 1195.389198][ T30] ? __pfx_kthread+0x10/0x10 [ 1195.393796][ T30] ret_from_fork+0x4d/0x80 [ 1195.398228][ T30] ? __pfx_kthread+0x10/0x10 [ 1195.402824][ T30] ret_from_fork_asm+0x1a/0x30 [ 1195.407621][ T30] [ 1195.411957][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1195.417186][ C0] NMI backtrace for cpu 0 [ 1195.417201][ C0] CPU: 0 PID: 5154 Comm: kworker/0:7 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 1195.417226][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1195.417241][ C0] Workqueue: events nsim_dev_trap_report_work [ 1195.417285][ C0] RIP: 0010:__read_once_word_nocheck+0xc/0x20 [ 1195.417332][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 53 48 89 fb e8 07 fe 54 00 48 8b 03 <5b> e9 79 19 6f 0a 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 [ 1195.417353][ C0] RSP: 0018:ffffc9000478f478 EFLAGS: 00000293 [ 1195.417373][ C0] RAX: ffff888022b30400 RBX: ffffc9000478fed0 RCX: ffff888029c93c00 [ 1195.417392][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc9000478fed0 [ 1195.417408][ C0] RBP: ffffc9000478fed0 R08: ffffffff81411deb R09: ffffffff8141095f [ 1195.417427][ C0] R10: 0000000000000003 R11: ffff888029c93c00 R12: 1ffff920008f1eb9 [ 1195.417444][ C0] R13: 1ffff920008f1eba R14: 1ffff920008f1eb8 R15: ffffc90004790000 [ 1195.417466][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1195.417486][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1195.417504][ C0] CR2: 00007f22e1b65ba8 CR3: 000000006c746000 CR4: 0000000000350ef0 [ 1195.417523][ C0] Call Trace: [ 1195.417533][ C0] [ 1195.417543][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1195.417568][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1195.417599][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1195.417624][ C0] ? nmi_handle+0x2a/0x5a0 [ 1195.417678][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1195.417708][ C0] ? nmi_handle+0x151/0x5a0 [ 1195.417744][ C0] ? nmi_handle+0x2a/0x5a0 [ 1195.417781][ C0] ? __read_once_word_nocheck+0xc/0x20 [ 1195.417814][ C0] ? default_do_nmi+0x63/0x160 [ 1195.417842][ C0] ? exc_nmi+0x123/0x1f0 [ 1195.417867][ C0] ? end_repeat_nmi+0xf/0x53 [ 1195.417914][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 1195.417946][ C0] ? deref_stack_reg+0xab/0x260 [ 1195.417981][ C0] ? __read_once_word_nocheck+0xc/0x20 [ 1195.418016][ C0] ? __read_once_word_nocheck+0xc/0x20 [ 1195.418052][ C0] ? __read_once_word_nocheck+0xc/0x20 [ 1195.418087][ C0] [ 1195.418096][ C0] [ 1195.418104][ C0] deref_stack_reg+0x1c7/0x260 [ 1195.418143][ C0] unwind_next_frame+0x1ab8/0x2a00 [ 1195.418185][ C0] ? worker_thread+0x86d/0xd70 [ 1195.418215][ C0] ? worker_thread+0x86d/0xd70 [ 1195.418239][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1195.418266][ C0] arch_stack_walk+0x151/0x1b0 [ 1195.418313][ C0] ? kthread+0x2f2/0x390 [ 1195.418350][ C0] stack_trace_save+0x118/0x1d0 [ 1195.418372][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.418398][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1195.418423][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1195.418462][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.418488][ C0] kasan_save_track+0x3f/0x80 [ 1195.418516][ C0] ? kasan_save_track+0x3f/0x80 [ 1195.418540][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 1195.418569][ C0] ? kmem_cache_alloc_node_noprof+0x16b/0x320 [ 1195.418612][ C0] ? __alloc_skb+0x1c3/0x440 [ 1195.418637][ C0] ? nsim_dev_trap_report_work+0x254/0xaa0 [ 1195.418671][ C0] ? process_scheduled_works+0xa2e/0x1830 [ 1195.418694][ C0] ? worker_thread+0x86d/0xd70 [ 1195.418755][ C0] ? mark_lock+0x9a/0x350 [ 1195.418781][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.418806][ C0] __kasan_slab_alloc+0x66/0x80 [ 1195.418834][ C0] ? __alloc_skb+0x1c3/0x440 [ 1195.418859][ C0] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 1195.418902][ C0] __alloc_skb+0x1c3/0x440 [ 1195.418932][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1195.418956][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.418983][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.419005][ C0] ? kmem_cache_free+0x145/0x350 [ 1195.419046][ C0] nsim_dev_trap_report_work+0x254/0xaa0 [ 1195.419095][ C0] ? process_scheduled_works+0x945/0x1830 [ 1195.419119][ C0] process_scheduled_works+0xa2e/0x1830 [ 1195.419167][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1195.419200][ C0] ? assign_work+0x364/0x3d0 [ 1195.419228][ C0] worker_thread+0x86d/0xd70 [ 1195.419261][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1195.419307][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1195.419340][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1195.419367][ C0] kthread+0x2f2/0x390 [ 1195.419395][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1195.419421][ C0] ? __pfx_kthread+0x10/0x10 [ 1195.419451][ C0] ret_from_fork+0x4d/0x80 [ 1195.419485][ C0] ? __pfx_kthread+0x10/0x10 [ 1195.419514][ C0] ret_from_fork_asm+0x1a/0x30 [ 1195.419561][ C0] [ 1195.872714][T17325] ieee80211 phy98: Selected rate control algorithm 'minstrel_ht' [ 1195.914661][T17325] ieee80211 phy99: Selected rate control algorithm 'minstrel_ht' [ 1195.934722][ T8341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.960490][ T8341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.961572][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1195.961590][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 1195.961618][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1195.961635][ T30] Call Trace: [ 1195.961648][ T30] [ 1195.961660][ T30] dump_stack_lvl+0x241/0x360 [ 1195.961713][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1195.961753][ T30] ? __pfx__printk+0x10/0x10 [ 1195.961789][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1195.961830][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.961858][ T30] ? vscnprintf+0x5d/0x90 [ 1195.961889][ T30] panic+0x349/0x860 [ 1195.961923][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.961952][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1195.961984][ T30] ? __pfx_panic+0x10/0x10 [ 1195.962017][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1195.962061][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.962087][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1195.962120][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.962145][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1195.962177][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1195.962205][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1195.962236][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.962262][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1195.962295][ T30] watchdog+0x101d/0x1020 [ 1195.962335][ T30] ? watchdog+0x1ea/0x1020 [ 1195.962374][ T30] ? __pfx_watchdog+0x10/0x10 [ 1195.962408][ T30] kthread+0x2f2/0x390 [ 1195.962445][ T30] ? __pfx_watchdog+0x10/0x10 [ 1195.962475][ T30] ? __pfx_kthread+0x10/0x10 [ 1195.962510][ T30] ret_from_fork+0x4d/0x80 [ 1195.962550][ T30] ? __pfx_kthread+0x10/0x10 [ 1195.962583][ T30] ret_from_fork_asm+0x1a/0x30 [ 1195.962645][ T30] [ 1195.968191][ T30] Kernel Offset: disabled