last executing test programs:

1m55.681326498s ago: executing program 4 (id=489):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, &(0x7f00000000c0))
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x140}}, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x12, &(0x7f0000000180)=0x7a, 0x4)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x8, 0x200)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x33, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xffffffffffffffb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
fcntl$setstatus(r0, 0x4, 0x4000)
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x2000, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0)
ioctl$FBIOBLANK(r10, 0x4611, 0x2)

1m54.678768437s ago: executing program 4 (id=490):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]})
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000300)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0xfffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

1m49.66196695s ago: executing program 4 (id=500):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
socket(0x8, 0x5, 0x80000001)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
sendmsg$nl_generic(r0, 0x0, 0xc000)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = socket(0x10, 0x3, 0xa)
socket$kcm(0x29, 0x2, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x7fffffffffffffff)

1m42.990418444s ago: executing program 4 (id=515):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000400)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@grpjquota}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(0xffffffffffffff9c, 0x0, r0, &(0x7f0000000100)='./file0\x00', 0x204)

1m40.895964889s ago: executing program 4 (id=523):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x1, 0x8010000000000084)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)

1m38.887137167s ago: executing program 4 (id=530):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, &(0x7f00000000c0))
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x140}}, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x12, &(0x7f0000000180)=0x7a, 0x4)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x8, 0x200)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x33, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xffffffffffffffb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
fcntl$setstatus(r0, 0x4, 0x4000)
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x2c020400)
msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x2000, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0)
ioctl$FBIOBLANK(r10, 0x4611, 0x2)

1m38.524188022s ago: executing program 32 (id=530):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, &(0x7f00000000c0))
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x140}}, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x12, &(0x7f0000000180)=0x7a, 0x4)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x8, 0x200)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x33, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xffffffffffffffb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
fcntl$setstatus(r0, 0x4, 0x4000)
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x2c020400)
msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x2000, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0)
ioctl$FBIOBLANK(r10, 0x4611, 0x2)

11.724518899s ago: executing program 1 (id=726):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=', @ANYRESDEC=0x0])

11.31232197s ago: executing program 1 (id=728):
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x2, 0x32314742, 0x2, @discrete={0x7, 0xbe78}})
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sched_setscheduler(0x0, 0x5, &(0x7f000000d380))
ioprio_set$pid(0x3, 0x0, 0x0)
ioprio_get$pid(0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cuse(0xffffff9c, 0x0, 0x2, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0)

9.519859855s ago: executing program 3 (id=733):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002001800000000000000000008500"], 0x0, 0x4}, 0x94)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000c40)={0x20, r3, 0x539, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040840}, 0xc840)

9.361560951s ago: executing program 5 (id=734):
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffdfe, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x2})
fstat(0xffffffffffffffff, 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000810)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x42, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x1, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x8001, 0x7, 0x9, 0x800e8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x1, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x7fff, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0xf5c1, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x8320fb05, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x8, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x744, 0x4, 0x12, 0x4, 0x10, 0x7fff, 0x2, 0xfffffff8, 0x401, 0xf, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, &(0x7f0000000080))

8.303869305s ago: executing program 3 (id=735):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

7.996342185s ago: executing program 3 (id=736):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r3)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
rmdir(&(0x7f00000002c0)='./control\x00')
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000040)="1a000000", 0x4)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0)
socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005c80)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x12, r7, {0x0, 0xfff3}, {0xe, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x74)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
write$cgroup_int(r11, &(0x7f0000000000)=0x8, 0x12)
close(r11)

7.899122735s ago: executing program 1 (id=737):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$inet6(r3, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc})
add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
socket(0x1, 0x803, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x20001)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(0xffffffffffffffff, 0x2)

7.558278138s ago: executing program 3 (id=738):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1)

6.226020669s ago: executing program 2 (id=740):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
dup(0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x7a6f938d2aadffed, 0x300)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000)
recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x5, 0x10000, 0x2f, 0x66, 0xcc7, 0x5, 0x80007, 0xa, 0x100, 0x9, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]})
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)

5.428487597s ago: executing program 2 (id=741):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x81, @local}, 0x1c)

5.343769505s ago: executing program 2 (id=743):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbf8, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0)

5.184564011s ago: executing program 2 (id=745):
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2)

5.116132227s ago: executing program 1 (id=746):
socket$kcm(0x2, 0x5, 0x84)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
socket$kcm(0x10, 0x2, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x40000)
openat$audio1(0xffffffffffffff9c, 0x0, 0x80, 0x0)
syz_pidfd_open(0x0, 0x0)

5.031508216s ago: executing program 2 (id=748):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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")
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000d00)=""/65, 0x41)

4.167315691s ago: executing program 2 (id=749):
syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={[{@pqnoenforce}, {@nolargeio}, {@uquota}]}, 0x1, 0xb8f1, &(0x7f0000017140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20100, 0x4)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd6f0, 0x0, 0x0, 0xfffffffd})
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)

4.052080432s ago: executing program 1 (id=750):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x721701, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a8, 0x8, 0x0, 0x0}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x0)
recvmmsg(r5, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
write(r2, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r7=>0x0})
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x4800}, 0x5)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r8, &(0x7f0000000640), 0x0}, 0x20)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r6, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010)

3.798697057s ago: executing program 5 (id=751):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000180), 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x100)
chown(0x0, r2, r3)

3.111304154s ago: executing program 1 (id=752):
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file2\x00', 0x2000048, &(0x7f0000000540)={[{@discard}, {@noalign}, {@gqnoenforce}]}, 0x9, 0xb98b, &(0x7f0000000840)="$eJzs3QtsXXUdwPHTru1WUFlEoxEJZYMNhFHaznU8lLaMjTIoyASq4zWgjMlghi0Kg0jRGFBCphJfIUZeIgbiA2d8gGFqYCCBjSAMRAUTGWDCa5gNNVBzes/t2ruuof/t/6+jn0+ynnvO7e/s9n77P5eSte2eu6Ajy2qykt6s0g3Lj32u8cb2H3xz2n2HL7626vXS0bZJxd0NxXbfYjsl6z9ZW367unSo5jurf1Gd71QPPu9u9fVV78my9xW7bcW2tbS5vKn8fn0VisOTy/dXDzyMqq+W/gyoz998ec6U8wafJ3/HLMsO3eYDHae62+fNLZ6TbFC3CcXdVVvv69/WlP4c9ccsO2pttt3PjzGVP87JZ6z6wpNj/UB2Bd3t8zor+rcVnauK9dhQuQbHo8rP83PPbFpWPIVVg69Hu5ru9rnHZyOs43/+5Ru9faXrZm2WZXVZlk3MsmzSWPdg52jvaOnIr/nl/SJ7ef1PHu7z4s7/Xv2zLMveXbxOHFZ+LQB2Le0dLUcPs/7rRlr/dx23/ibrH3Z9ne0dLflar1j/k0Za/9PuPmZh8UV3a2nqrbH9IAAAAACAYS2/bOWFi5Yu7bnEDTfccGPgxlhfmYDYti76sX4kQGop/nNirD9GAAAAGO86u9pfmlA15NCEwTt7P9zTv525pfuClXfPOaG8Le6eP8wph3yff19fX9/q05eeU+xOrPh+2UmVw/n5l9y36NJit6Hy+w9q+4/WZmefv2Rpz6H5XzW1Nrs032nKzzutNvtavtOc70yvzW7Pd1r6d+qzNfnOIecuW3pefuCAwGfsnaWzqzebMKRYNuSzYXD/Jff1/qq8HeGU5bP1/1CJvP/mplvuqrivbDv9B86/7//hzxd4Rxld/2uuKW9HOOU263/94llNw923/f4D55+if1zDXP+HNKq87ldc/xuGOeXA/K9P+/pzef8ZP113bXGo5u1c/wedf2pl//6TD1z/81PtV77+568t++/QkzEOdXZd9dJI63/k/jUfKt6tetDswNla+m77TN7/nuvaHi8O1Y6y/34jrf+qhm2uJ4xSZ9dNfRXrfxT9s+nDnHKgybvmdK7O+7/25iOPDrpvNP33r+zfuOKizzYuv2zljCUXLVrcs7jn4pbmWa3NrU2zZ89q7L8klN7u2JMyjuzY+s92q5ipyrL9B+ZnX3HMhrz/n28+9dbi0KRR9p824vo/e+hjZZAp1VldXXbpohUrLmkqvS3vNpfelt5tmP6jeP2fWv4iqr7YVmXZBwfmD7zy9YPz/ndu2HRLcahulP2nj9S/buvfS6AdXP/nVcwM6f/QIz035/2XH/ThC4tDo339P2DE9d9r/e+ozq6K/+Gzk+X9T958xMbA8QN9/RdXiv71G1tXBY5/RP+4UvRf82LL7YHjB+kfV4r+997feEbg+MH6x5Wi/+cePGhl4PgM/eNK0X/GU9P3DBw/RP+4UvT/xxNTZwaON+ofV4r+Jz174dWB44fqH1eK/t99ZdmNgeNN+seVov/v+859MHC8Wf+4UvTf/dXFLweOt+gfV4r+K565fK/A8Zn6x5Wi/2/XX3lk4PhH9Y8rRf+Na5afEjg+S/+4UvRvXPf5SwLHW/WPK0X/F1/44W8Cx2frH1eK/g3P3/K9wPHD9I8rRf/Lt/zkX4Hjh+sfV4r+d71xx2OB40foH1eK/g9v+OW0wPEj9Y8rRf+aJ38e+u80P6Z/XCn6n/XAvRcEjn9c/7hS9P/W2rtPDBw/avv9a3bWQxzXUvTve/bEZwPH26z/uFL0n/XK/NDfD9uuf1wp+l/UN+/HgeMd+seVov+trx79lcDxo/WPK0X/p58564rA8Tn6x5Wi/3vXL1wYOH6M/nGl6N+55rTmwPG5+seVon/vugXvDxyfp39cQ/vX7fTz5/3nvvClvwaOH6t/XCnW/6rnr/5P4Hin/nGl6P+nLddeHzh+nP5xpei/9xurVgeOz9c/rhT9z9lwfXvg+PH6x5Wi/x1Pfvv8wPET9I8rRf9XH7hhj8DxLv3jStH/sLXfD/1h6yfqH1eK/te9tuGGwPGT9I8rRf85bz12T+D4J/SPK0X/fV5+5vHA8ZP1jytF/yf+/vSmwPEF+seVov+PHlk7MXD8k/rHlaL/2b/7w3C/J+TtOEX/uFL0P+LRdZ2B46fqH1eK/pv+9tDFgeOn6R9Xiv4z/73XbYHj3frHlaL/m5v3uSpw/FP6x5Wi/20b93whcPzT+seVov+yFz+wLnB8of5xpeg/+f7dDw8cP13/uFL0f+rBPfYOHD9D/7hS9P/iUxNWBI6fqX9cKfrPf2LigsDxs/QHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+xAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYe9O4C4dC/+Pn1kZO6mkaOyUXVlSWbKWFluILNllC9kLLbK0kBRpsRMtChWyVKSIrKlUSmlRkiSK+L/GLDG+o6ffvxrN9/1+veY52z3Hda7Pue7neO7nnAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApkWbrrXh6oPByAmXDn3K7Sftvc5dS5282hnHL3zVy3Y8etj9469ddfoJN499bDKDx+9s1XG3DR+/ycgTLjhj+LgLw594vzOMGTNslsGwOfOoDtrynwx7tolnxt/p2MFgMOyo8X8mGTPuyyp33nnrP7mvapuutvZa4yZv/J9J3UZMuHnC9ZPOjxz/Z+WtBoOVtxhM8fkx9W1w9+0PTO0x/C/YdLW1152s/2BC58e7T76+W03+PL/opl1Xnqrh/k02XW2t9ca1ntI6PmuTVc947PH9+siTB4ORpwwGI08dDEaeNrV78O+x2urLrT5unz/x8vjqh058QZD278Pm23CzGQaDwajx3ydGnj7xewHwv2W11Zd7VVj/oyfentb/KnfOMrf1D//71l1t9eUGT3idP/7aQyf+/31c/3eNWP/YqTdiAAAA4F/16D0XXzbhWN/wwWDewWTHex834ecCw8674oYbptpAnxnCcbKn/s7E/5hxnac/Z+xgsPvGU3soTAXDpvYAmKr076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9iUzj+P9vE09WO2+iVEzZdaIU5N7lg8r8/7rrp/+ujnmqm1eP/g52HjW85rvnOg8HgdattsNGig8Hggk3mXGH+waTbVhx328pzjJjwAQGLPv51oSnc8dgnns4w6T7Oe/z+133slBHDJhvEE7x2jUsO3GnTB18y+ekiU34ckz5f4oJ115hp4ntZhk+20ZSeqxPvf+JjmbzzhLEvOm7sS+2z255L7X3AgUvsvNs2O26/4/a7L7fs8issu8IyK664/FI77Lzr9kuP/zqFORs/KwsMZc5GTz5n96z2xDmb/LFNac7GPv2cPX6Pdx27yUUT52zkvzhnCzz9nI3deeJYx44abP341Iz7Ty44arD/uAvLTPeEfctc47Z9+RzDB4Nj/vFAx52bbtJzcNihO/8bPrdkwul8E07nj59bcuGUPrdkMPFzSyZ+YMJK40/2uXTidpO/z3rC1UP+3JL9Vn9k/sFT3pf1H/F/+v7/lF4rDps0URM/NGTCNuN7/eNzJiZO26pP+JyJFdJnyfw7PWW8Y4dPel6n8U54X9ywyeb/6d4XN9hxh4MXmhB1hfF/69H/c5S871jv8a9TWs9jJzt9un3HiH+c/ce12183z+T7jtdMeYhPWhcT52i6yTaa0r5j/22u2vmJ+6Yp7DvW23nCG43/se8Y959dYOK+Y9zYFx41OGbchWXHXVhk1ODscReWe/zCmMEV4y4sue0eu2437PHvV095Hiw67Em/8Biet2tN9rwdwufjrHLNYLDK1elxTXk6s/S8Hf00483v5x487fu5L99mvvMHg8HMEx7XShPH/n+Rxjvy6ccbPn9i8HSfPzE45YZ9T/s3j3fSOnv8uTZhN73oFP7Ok9bZbE9ZZ4eNeMLKGOrrmu3C9uPPzzXp3k7d/vprJ87RqMnu9599j574WFL/ia/5nmjYoYNhTzc3U3od9qS5meXp52aor18WnfACY8zTzM3i9x+y2MS5Gf0vzs0iU5ibJ74efqLRg8GYJ8/NyMGa417RTJibhYcyNzP9e543M4Ttx59faNJVt6158IoT5ybMRfz+P/H+F/4X52bY1pOeNws+ftv8wwejRw/232afffZaZvzXiReXHf/16dfggkOZy+n/PXM594S9zvCnTs6kq3Y587Hl/q9rcMF/dS7HDoZP/H/unSdfLP8+fv7TTf9u+nfTv5v+3fTvpn83/YtN4fj/2Ik/Fzxy2OkbTvhhzKgrH5x9n6k93qlsmj7+P6Hvk47/7zP7g1cOH0y67WmPz47f5hl5fHaF8ScHLTNxu8mPD064esjHZx84+urNBv+d47P/JxPX6hB+bmj/303/bvp307+b/t307zak/gueOOnsKv/JwfBfZ/1307+b/t3076Z/N/276V9sCsf/l574ewA37v3I6RMOhI7ae6OVH57a453Kpunj/xP6Pun4/8Mrb7T38MGk2572+P/4bTqO/698x4mHD57Bx/8nrlXH//kn9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/YlM4/r/qxN8DGLX7AgtM/H2Am+89YsTUHu9UNq0e//fv//ey/++mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvoXm3D8fzDZP3v4Bs+LKBz//982hf7r6x+19N9A/6il/4b6Ry39N9I/aum/sf5RS/836h+19N9E/6il/6b6Ry39N9M/aun/Jv2jlv6b6x+19N9C/6il/5v1j1r6b6l/1NJ/K/2jlv5b6x+19N9G/6il/1v0j1r6b6t/1NJ/O/2jlv7b6x+19N9B/6il/476Ry39d9I/aum/s/5RS/9d9I9a+r9V/6il/676Ry39d9M/aum/u/5RS/899I9a+u+pf9TS/236Ry3999I/aum/t/5RS/999I9a+r9d/6il/776Ry3999M/aum/v/5RS/8D9I9a+h+of9TS/yD9o5b+B+sftfR/h/5RS/936h+19D9E/6il/6H6Ry39D9M/aun/Lv2jlv7v1j9q6f8e/aOW/u/VP2rpf7j+UUv/9+kftfQ/Qv+opf+R+kct/Y/SP2rpf7T+UUv/9+sftfT/gP5RS/8P6h+19P+Q/lFL/2PK+o8e4nYt/Y8t6z9ULf0/rH/U0v84/aOW/h/RP2rpf7z+UUv/j+oftfT/mP5RS/8T9I9a+p+of9TS/+P6Ry39T9I/aun/Cf2jlv6f1D9q6f8p/aOW/p/WP2rpf7L+UUv/U/SPWvqfqn/U0v80/aOW/qfrH7X0P0P/qKX/mfpHLf3P0j9q6X+2/lFL/8/oH7X0P0f/qKX/ufpHLf0/q3/U0v9z+kct/T+vf9TS/wv6Ry39z9M/aun/Rf2jlv5f0j9q6X++/lFL/wv0j1r6X6h/1NL/y/pHLf2/on/U0v+r+kct/S/SP2rpf7H+UUv/S/SPWvp/Tf+opf+l+kct/S/TP2rpf7n+UUv/K/SPWvp/Xf+opf839I9a+n9T/6il/5X6Ry39r9I/aun/Lf2jlv5X6x+19P+2/lFL/+/oH7X0v0b/qKX/tWX9Vxridi39v1vWf6ha+l+nf9TS/3r9o5b+39M/aul/g/5RS/8b9Y9a+t+kf9TS/2b9o5b+t+gftfS/Vf+opf/39Y9a+t+mf9TS/wf6Ry39f6h/1NL/R/pHLf1v1z9q6f9j/aOW/j/RP2rp/1P9o5b+d+gftfT/mf5RS/+f6x+19L9T/6il/y/0j1r6/1L/qKX/XfpHLf1/pX/U0v/X+kct/X+jf9TS/7f6Ry3979Y/aun/O/2jlv6/1z9q6X+P/lFL/z/oH7X0v1f/qKX/H/WPWvrfp3/U0v9P+kct/e/XP2rp/2f9o5b+D+gftfT/i/5RS/8H9Y9a+j+kf9TS/6/6Ry39/6Z/VNJ/zED/qKT/4BH9o5b+f9c/aun/qP5RS//H9I9K+g8b6B+19B+mf9TSf7j+UUv/EfpHLf1H6h+19B+lf9TSf7T+UUv/6fSPWvpPr3/U0n+M/lFL/xn0j1r6z6h/1NJ/Jv2jlv4z6x+19J9F/6il/6z6Ry39Z9M/auk/u/5RS/859I9a+j9L/6il/5z6Ry39n61/1NL/OfpHLf2fq3/U0n8u/aOW/s/TP2rpP7f+UUv/5+sftfR/gf5RS/959I9a+s+rf9TS/4X6Ry39x+oftfSfT/+opf/8+kct/RfQP2rpv6D+UUv/hfSPWvovrH/U0n8R/aOW/ovqH7X0X0z/qKX/i/SPWvq/WP+opf/i+kct/ZfQP2rpv2R7/4cfG2+yq1v6L9Xefwpa+i+tf9TSfxn9o5b+y+oftfRfTv+opf9L9I9a+r9U/6il//L6Ry39V9A/aum/ov5RS/+V9I9a+r9M/6il/8r6Ry39X65/1NL/FfpHLf1fqX/U0n8V/aOW/qvqH7X0X03/qKX/6vpHLf1fpX/U0n8N/aOW/mvqH7X0X0v/qKX/2vpHLf3X0T9q6b+u/lFL/1frH7X0f43+UUv/9fSPWvq/Vv9osv6zTqv9X6d/1LL+X69/1NL/DfpHLf3X1z9q6b+B/lFL/w31j1r6b6R/1NJ/Y/2jlv5v1D9q6b+J/lFL/031j1r6b6Z/1NL/TfpHLf031z9q6b+F/lFL/zfrH7X031L/qKX/VvpHLf231j9q6b+N/lFL/7foH7X031b/qKX/dvpHLf231z9q6b+D/lFL/x31j1r676R/1NJ/Z/2jlv676B+19H+r/lFL/131j1r676Z/1NJ/d/2jlv576B+19N9zyv3H/FfG9QzV0v9t1n/U0n8v/aOW/nvrH7X030f/qKX/2/WPWvrvq3/U0n8//aOW/vvrH7X0P0D/qKX/gfpHLf0P0j9q6X+w/lFL/3foH7X0f6f+UUv/Q/SPWvof2tZ/iL/V0NL/sLb+Q9TS/136Ry39361/1NL/PfpHLf3fq3/U0v9w/aOW/u/TP2rpf4T+UUv/I/WPWvofpX/U0v9o/aOW/u/XP2rp/wH9o5b+H9Q/aun/If2jlv7H6B+19D9W/6il/4f1j1r6H6d/1NL/I/pHHf1nHna8/lFH/8Gwj+oftfT/mP5RS/8T9I9a+p+of9TS/+P6Ry39T/pn/af7D4/rGaql/yes/6il/yf1j1r6f0r/qKX/p/WPWvqfrH/U0v8U/aOW/qfqH7X0P03/qKX/6fpHLf3P0D9q6X+m/lFL/7P0j1r6n61/1NL/M/pHLf3P0T9q6X+u/lFL/8/qH7X0/5z+UUv/z+sftfT/gv5RS//z9I9a+n9R/6il/5f0j1r6n69/1NL/Av2jlv4X6h+19P+y/lFL/6/oH7X0/6r+UUv/i/SPWvpfrH/U0v8S/aOW/l/TP2rpf6n+UUv/y/SPWvpfrn/U0v8K/aOW/l/XP2rp/w39o5b+39Q/aul/pf5RS/+r9I9a+n9L/6il/9X6Ry39v61/1NL/O/pHLf2v0T9q6X+t/lFL/+/qH7X0v07/qKX/9fpHLf2/p3/U0v8G/aOW/jfqH7X0v0n/YMaa/jfrH7X0v0X/qKX/rfpHLf2/r3/U0v82/aOW/j8YDAajp9aYnsFa+v/Q+o9a+v9I/6il/+36Ry39f6x/1NL/J/pHLf1/qn/U0v8O/aOW/j/TP2rp/3P9o5b+d+oftfT/hf5RS/9f6h+19L9L/6il/6/0j1r6/1r/qKX/b/SPWvr/Vv+opf/ddf1HDWmrlv6/q+s/NC39f69/1NL/Hv2jlv5/0D9q6X+v/lFL/z/qH7X0v0//qKX/n/SPWvrfr3/U0v/P+kct/R/QP2rp/xf9o5b+D+oftfR/SP+opf9f9Y9a+v9N/6il/8P6Ry39H9E/aun/d/2jlv6P6h+19H9M/6ik/+Nn9X+qlv7D9I9a+g/XP2rpP0L/qKX/SP2jlv6j9I9a+o/WP2rpP53+UUv/6fWPWvqP0T9q6T+D/lFL/xn1j1r6z6R/1NJ/Zv2jlv6z6B+19J9V/6il/2z6Ry39Z9c/auk/h/5RS/9n6R+19J9T/6il/7P1j1r6P0f/qKX/c/WPWvrPpX/U0v95Vf1HD3nLlv5zV/Ufupb+z9c/aun/Av2jlv7z6B+19J9X/6il/wv1j1r6j9U/auk/n/5RS//59Y9a+i+gf9TSf0H9o5b+C+kftfRfWP+opf8i+kct/RfVP2rpv5j+UUv/F+kftfR/sf5RS//F9Y9a+i+hf9TSf0n9o5b+S+kftfRfWv+opf8y+kct/ZfVP2rpv5z+UUv/l+gftfR/qf5RS//l9Y9a+q+gf9TSf0X9o5b+K+kftfR/mf5RS/+V9Y9a+r9c/6il/yv0j1r6v1L/qKX/KkPov9R/clzPUC39V51C/zkaoz9BS//V7P+jlv6r6x+19H+V/lFL/zX0j1r6r6l/1NJ/Lf2jlv5r6x+19F9H/6il/7r6Ry39X61/1NL/NfpHLf3X0z9q6f9a/aOW/q/TP2rp/3r9o5b+b9A/aum/vv5RS/8N9I9a+m+of9TSfyP9o5b+G+sftfR/o/5RS/9N9I9a+m+qf9TSfzP9o5b+b9I/aum/uf5RS/8t9I9a+r9Z/6il/5b6Ry39t9I/aum/tf5RS/9t9I9a+r9F/6il/7b6Ry39t9M/aum/vf5RS/8d9I9a+u+of9TSfyf9o5b+O+sftfTfRf+opf9b9Y9a+u+qf9TSfzf9o5b+u+sftfTfQ/+opf+e+kct/d+mf9TSfy/9o5b+e+sftfTfR/+opf/b9Y9a+u+rf9TSfz/9o5b++xf2HzOEbVr6H1DYfyha+h+of9TS/yD9o5b+B+sftfR/h/5RS/936h+19D9E/6il/6H6Ry39D9M/aun/Lv2jlv7v1j9q6f8e/aOW/u/VP2rpf7j+UUv/9+kftfQ/Qv+opf+R+kct/Y/SP2rpf7T+UUv/9+sftfT/gP5RS/8P6h+19P+Q/lFL/2P0j1r6H6t/1NL/w/pHLf2P0z9q6f8R/aOW/sfrH7X0/6j+UUv/j5X1P3SI27X0P6Gs/1C19D9R/6il/8f1j1r6n6R/1NL/E/pHLf0/qX/U0v9T+kct/T+tf9TS/2T9o5b+p+gftfQ/Vf+opf9p+kct/U/XP2rpf4b+UUv/M/WPWvqfpX/U0v9s/aOW/p/RP2rpf47+UUv/c/WPWvp/Vv+opf/n9I9a+n9e/6il/xf0j1r6n6d/1NL/i/pHLf2/pH/U0v98/aOW/hfoH7X0v1D/qKX/l/WPWvp/Rf+opf9X9Y9a+l+kf9TS/2L9o5b+l+gftfT/mv5RS/9L9Y9a+l+mf9TS/3L9o5b+V+j/JPNOOG3p/3X9o5b+39A/aun/Tf2jlv5X6h+19L9K/6il/7f0j1r6X61/1NL/2/pHLf2/o3/U0v8a/aOW/tfqH7X0/67+UUv/6/SPWvpfr3/U0v97+kct/W/QP2rpf6P+UUv/m/SPWvrfrH/U0v8W/aOW/rfqH7X0/77+UUv/2/SPWvr/QP+opf8P9Y9a+v9I/6il/+36Ry39f6x/1NL/J/oHo2v6/1T/qKX/HfpHLf1/pn/U0v/n+kct/e/UP2rp/wv9o5b+v9Q/aul/l/5RS/9f6R+19P+1/lFL/9/oH7X0/63+UUv/u/WPWvr/Tv9o2El7T9fQ//f6Ry3r/x79o5b+f9A/aul/r/5RS/8/6h+19L9P/6il/5/0j1r6369/1NL/z/pHLf0f0D9q6f8X/aOW/g/qH7X0f0j/qKX/X/WPWvr/Tf+opf/D+kct/R/RP2rp/3f9o5b+j+oftfR/TP+opP+Igf5RS/9h+kct/YfrH7X0H6F/1NJ/pP5RS/9R+kct/UfrH7X0n07/qKX/9PpHLf3H6B+19J9B/6il/4z6Ry39Z9I/auk/s/5RS/9Z9I9a+s+qf9TSfzb9o5b+s+sftfSfI/Uf8V8c1zNUS/9nWf9RS/859Y9a+j9b/6il/3P0j1r6P1f/qKX/XPpHLf2fp3/U0n9u/aOW/s/XP2rp/wL9o5b+8+gftfSfV/+opf8L9Y9a+o/VP2rpP5/+UUv/+fWPWvovoH/U0n9B/aOW/gvpH7X0X1j/qKX/IvpHLf0X1X9yYwZF/RfTP2rp/yL9o5b+L9Y/aum/uP5RS/8l9I9a+i+pf9TSfyn9o5b+S+sftfRfRv+opf+y+kct/ZfTP2rp/xL9o5b+L9U/aum/vP5RS/8V9I9a+q/Y23+6p7uxpf9Kvf2fVkv/l+kftfRfWf+opf/L9Y9a+r9C/6il/yv1j1r6r6J/1NJ/Vf2jlv6r6R+19F9d/6il/6v0j1r6r6F/1NJ/Tf2jlv5r6R+19F9b/6il/zr6Ry3919U/aun/av2jlv6v0T9q6b+e/lFL/9fqH7X0f53+UUv/1+sftfR/g/5RS//19Y9a+m+gf9TSf0P9o5b+G+kftfTfWP+opf8b9Y9a+m+if9TSf1P9o/H9px9M6/030z9qWf9v0j9q6b+5/lFL/y30j1r6v1n/qKX/lvpHLf230j9q6b+1/lFL/230j1r6v0X/qKX/tvpHLf230z9q6b+9/lFL/x30j1r676h/1NJ/J/2jlv476x+19N9F/6il/1v1j1r676p/1NJ/N/2jlv676x+19N9D/6il/576Ry3936Z/1NJ/L/2jlv576x+19N9H/6il/9v1j1r676t/1NJ/P/2jlv776x+19D9A/6il/4H6Ry39D9I/aul/sP5RS/93PE3/Q/4b43qGaun/Tus/aul/iP5RS/9D9Y9a+h+mf9TS/136Ry39361/1NL/PVPoP8t/a1zPUC3932v9Ry39D9d/oscee8KFlv7v0z9q6X+E/lFL/yP1j1r6H6V/1NL/aP2jlv7v1z9q6f8B/aOW/h/UP2rp/yH9o5b+x+gftfQ/Vv+opf+H9Y9a+h+nf9TS/yP6Ry39j9c/aun/Uf2jlv4f0z9q6X+C/lFL/xP1j1r6f1z/qKX/SfpHLf0/oX/U0v+T+kct/T+lf9TS/9P6Ry39T9Y/aul/iv5RS/9T9Y9a+p+mf9TS/3T9o5b+Z+gftfQ/U/+opf9Z+kct/c/WP2rp/xn9o5b+5+gftfQ/V/+opf9n9Y9a+n9O/6il/+f1j1r6f0H/qKX/efpHLf2/qH/U0v9L+kct/c/XP2rpf4H+UUv/C/WPWvp/Wf+opf9X9I9a+n9V/6il/0X6Ry39L9Y/aul/if7RtNx/1X9cO+Jr+kfTcv8nrv9L9Y9a+l+mf9TS/3L9o5b+V+gftfT/uv5RS/9v6B+19P+m/lFL/yv1j1r6X6V/1NL/W/pHLf2v1j9q6f9t/aOW/t/RP2rpf43+UUv/a/WPWvp/V/+opf91+kct/a/XP2rp/z39o5b+N+gftfS/Uf+opf9N+kct/W/WP2rpf4v+UUv/W/WPWvp/X/+opf9t+kct/X+gf9TS/4f6Ry39f6R/1NL/dv2jlv4/1j9q6f8T/aOW/j/VP2rpf4f+UUv/n+kftfT/uf5RS/879Y9a+v9C/6il/y/1j1r636V/1NL/V/pHLf1/rX/U0v83+kct/X+rf9TS/279o5b+v9M/aun/e/2jlv736B+19P+D/lFL/3v1j1r6/1H/qKX/ffpHLf3/pH/U0v9+/aOW/n/WP2rp/4D+UUv/v+gftfR/UP+opf9D+kct/f+qf9TS/2/6Ry39H9Y/aun/iP5RS/+/6x+19H9U/6il/2P6RyX9Rw70j1r6D9M/auk//J/2H/GfHdczVEv/EdZ/1NJ/pP5RS/9R+kct/UfrH7X0n07/qKX/9PpHLf3H6B+19J9B/6il/4z6Ry39Z9I/auk/s/5RS/9Z9I9a+s+qf9TSfzb9o5b+s+sftfSfQ/+opf+z9I9a+s+pf9TS/9n6Ry39n6N/1NL/ufpHLf3n0j9q6f88/aOW/nPrH7X0f77+UUv/F+gftfSfR/+opf+8+kct/V+of9TSf6z+UUv/+fSPWvrPr3/U0n8B/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6b+o/lFL/8X0j1r6v0j/qKX/i/WPWvovrn/U0n8J/aOW/kvqH7X0X0r/qKX/0vpHLf2X0T9q6b+s/lFL/+X0j6bh/mOecO3Il+gfTcP9n7T+X6p/1NJ/ef2jlv4r6B+19F9R/6il/0r6Ry39X1bTf/p/aeuW/ivX9P/XtPR/uf5RS/9X6B+19H+l/lFL/1X0j1r6r6p/1NJ/Nf2jlv6r6x+19H+V/lFL/zX0j1r6r6l/1NJ/Lf2jlv5r6x+19F9H/6il/7r6Ry39X61/1NL/NfpHLf3X0z9q6f9a/aOW/q/TP2rp/3r9o5b+b9A/aum/vv5RS/8N9I9a+m+of9TSfyP9o5b+G+sftfR/o/5RS/9N9I9a+m+qf9TSfzP9o5b+b9I/aum/uf5RS/8t9I9a+r9Z/6il/5b6Ry39t9I/aum/tf5RS/9t9I9a+r9F/6il/7b6Ry39t9M/aum/vf5RS/8d9I9a+u+of9TSfyf9o5b+O+sftfTfRf+opf9b9Y9a+u+qf9TSfzf9o5b+u+sftfTfQ/+opf+e+kct/d+mf9TSfy/9o5b+e+sftfTfR/+opf/b9Y9a+u+rf9TSfz/9o5b+++sftfQ/QP+opf+B+kct/Q/SP2rpf7D+UUv/d+gftfR/p/5RS/9D9I9a+h+qf9TS/zD9o5b+79I/aun/bv2jlv7v0T9q6f9e/aOW/ofrH7X0f5/+UUv/I/SPWvofqX/U0v8o/aOW/kfrH7X0f7/+UUv/D+gftfT/oP5RS/8P6R+19D9G/6il/7H6Ry39P6x/1NL/OP2jlv4f0T9q6X+8/lFL/4/qH7X0/5j+UUv/E/SPWvqfqH/U0v/j+kct/U/SP2rp/wn9o5b+n9Q/aun/Kf2jlv6f1j9q6X+y/lFL/1P0j1r6n6p/1NL/NP2jlv6n6x+19D9D/6il/5n6Ry39z9I/aul/tv5RS//P6B9Ny/2n/8e1I8/RP5qW+z9x/Z+rf9TS/7P6Ry39P6d/1NL/8/pHLf2/oH/U0v88/aOW/l/UP2rp/yX9o5b+5+sftfS/QP+opf+F+kct/b+sf9TS/yv6Ry39v6p/1NL/Iv2jlv4X6x+19L9E/6il/9f0j1r6X6p/1NL/Mv2jlv6X6x+19L9C/6il/9f1j1r6f0P/qKX/N/WPWvpfqX/U0v8q/aOW/t/SP2rpf7X+UUv/b+sftfT/jv5RS/9r9I9a+l+rf9TS/7v6Ry39r9M/aul/vf5RS//v6R+19L9B/6il/436Ry39b9I/aul/c13/Wx8bylYt/W+p6z80Lf1v1T9q6f99/aOW/rfpH7X0/4H+UUv/H+oftfT/kf5RS//b9Y9a+v9Y/6il/0/0j1r6/1T/qKX/HfpHLf1/pn/U0v/n+kct/e/UP2rp/wv9o5b+v9Q/aul/l/5RS/9f6R+19P+1/lFL/9/oH7X0/63+UUv/u/WPWvr/Tv+opf/v9Y9a+t+jf9TS/w/6Ry3979U/aun/R/2jlv736R+19P+T/lFL//v1j1r6/1n/qKX/A/pHLf3/on/U0v9B/aOW/g/pH7X0/6v+UUv/v+kftfR/WP+opf8j+kct/f+uf9TS/1H9o5b+j+kflfQfNdA/auk/TP+opf9w/aOW/iP0j1r6j9Q/auk/Sv+opf9o/aOW/tPpH7X0n17/qKX/GP2jlv4z6B+19J9R/6il/0z6R5P6bz5sMJiG+8+sf9Sy/mfRP2rpP6v+UUv/2fSPWvrPrn/U0n8O/aOW/s/SP2rpP6f+UUv/Z+sftfR/jv5RS//n6h+19J9L/6il//MGg8HMU2tMz2At/ee2/qOW/s/XP2rp/wL9o5b+8+gftfSfV/+opf8L9Y9a+o/VP2rpP5/+UUv/+fWPWvovoH/U0n9B/aOW/gvpH7X0X1j/qKX/IvpHLf0X1T9q6b+Y/lFL/xfpH7X0f7H+UUv/xfWPWvovoX/U0n9J/aOW/kvpH7X0X1r/qKX/MvpHLf2X1T9q6b+c/lFL/5foH7X0f6n+UUv/5fWPWvqvoH/U0n9F/aOW/ivpH7X0f5n+UUv/lfWPWvq/XP+opf8r9I9a+r9S/6il/yr6Ry39V9U/aum/mv5RS//V9Y9a+r9K/6il/xqh//D/5rieoVr6r2n9Ry3919I/aum/tv5RS/919I9a+q+rf9TS/9X6Ry39X6N/1NJ/Pf2jlv6v1T9q6f86/aOW/q/XP2rp/wb9o5b+6+sfjet/y2AwmNb7b6B/1LL+N9Q/aum/kf5RS/+N9Y9a+r9R/6il/yb6Ry39N9U/aum/mf5RS/836R+19N9c/6il/xb6Ry3936x/1NJ/S/2jlv5b6R+19N9a/6il/zb6Ry3936J/1NJ/W/2jlv7b6R+19N9e/6il/w76Ry39d9Q/aum/k/5RS/+d9Y9a+u+if9TS/636Ry39d9U/aum/m/5RS//d9Y9a+u+hf9TSf0/9o5b+b9M/aum/l/5RS/+99Y9a+u+jf9TS/+36Ry3999U/aum/n/5RS//99Y9a+h+gf9TS/0D9o5b+B+kftfQ/WP+opf879I9a+r9T/6il/yH6Ry39D9U/aul/mP5RS/936R+19H+3/lFL//foH7X0f6/+UUv/w/WPWvq/T/+opf8R+kct/Y/UP2rpf5T+UUv/o/WPWvq/X/+opf8H9I9a+n9Q/6il/4f0j1r6H6N/1NL/WP2jlv4f1j9q6X+c/lFL/4/oH7X0P17/qKX/R/WPWvp/TP+opf8J+kct/U/UP2rp/3H9o5b+J+kftfT/hP5RS/9P6h+19P+U/lFL/0/rH7X0P1n/qKX/KfpHLf1P1T9q6X+a/lFL/9P1j1r6n6F/1NL/TP2jlv5n6R+19D9b/6il/2f0j1r6n6N/1NL/3Kr+6xw51C1b+n+2qv/QtfT/nP5RS//P6x+19P+C/lFL//P0j1r6f1H/qKX/l/SPWvqfr3/U0v8C/aOW/hfqH7X0/7L+UUv/r+gftfT/qv5RS/+L9I9a+l+sf9TS/xL9o5b+X9M/aul/qf5RS//L9I9a+l+uf9TS/wr9o5b+X9c/aun/Df2jlv7f1D9q6X+l/lFL/6v0j1r6f0v/qKX/1fpHLf2/rX/U0v87+kct/a/RP2rpf63+UUv/7+oftfS/Tv+opf/1+kct/b+nf9TS/wb9o5b+N+oftfS/Sf+opf/N+kct/W/RP2rpf6v+UUv/7+sftfS/Tf+opf8P9I9a+v9Q/6il/4/0j1r6365/1NL/x/pHLf1/on/U0v+n+kct/e/QP2rp/zP9o5b+P9c/aul/p/5RS/9f6B+19P+l/lFL/7v0j1r6/0r/qKX/r/WPWvr/Rv+opf9v9Y9a+t+tf9TS/3f6Ry39f69/1NL/Hv2jlv5/0D9q6X+v/lFL/z/qH7X0v0//qKX/n/SPWvrfr3/U0v/P+kct/R/QP2rp/xf9o5b+D+oftfR/SP+opf9f9Y9a+v9N/6il/8P6Ry39H9E/aun/d/2jlv6P6h+19H+sp//of2Xjkv6Pz0lJ/39JS/9h+kct/YfrH7X0H6F/1NJ/pP5RS/9R+kct/UfrH7X0n07/qKX/9PpHLf3H6B+19J9B/6il/4z6Ry39Z9I/auk/s/5RS/9Z9I9a+s+qf9TSfzb9o5b+s+sftfSfQ/+opf+z9I9a+s+pf9TS/9n6Ry39n6N/1NL/ufpHLf3n0j9q6f88/aOW/nPrH7X0f77+UUv/F+gftfSfR/+opf+8+kct/V+of9TSf6z+UUv/+fSPWvrP/6T+s/33x/UM1dJ/Aes/aum/oP5RS/+F9I9a+i+sf9TSfxH9o5b+i+oftfRfTP+opf+L9I9a+r9Y/6il/+L6Ry39l9A/aum/pP5RS/+l9I9a+i+tf9TSfxn9o5b+y+oftfRfTv+opf9L9I9a+r9U/6il//L6Ry39V9A/aum/ov5RS/+V9I9a+r9M/6il/8r6Ry39X65/1NL/FfpHLf1fqX/U0n8V/aOW/qvqH7X0X03/qKX/6vpHLf1fpX/U0n8N/aOW/mvqH7X0X0v/qKX/2vpHLf3Xedr+s/7nx/UM1dJ/Xes/aun/av2jlv6v0T9q6b+e/lFL/9fqH7X0f53+UUv/1+sftfR/g/5RS//19Y9a+m+gf9TSf0P9o5b+G+kftfTfWP+opf8b9Y9a+m+if9TSf1P9o5b+m+kftfR/k/5RS//N9Y9a+m+hf9TS/836Ry39t9Q/aum/lf5RS/+t9Y9a+m+jf9TS/y36Ry39t9U/aum/nf5RS//t9Y9a+u+gf9TSf0f9o5b+O+kftfTfWf+opf8u+kct/d+qf9TSf1f9o5b+u+kftfTfXf+opf8e+kct/ffUP2rp/zb9o5b+e+kftfTfW/+opf8++kct/d+uf9TSf1/9o5b+++kftfTfX/+opf8B+kct/Q/UP2rpf9BQ+o/5D47rGaql/8HWf9TS/x36Ry3936l/1NL/EP2jlv6H6h+19D9M/6il/7v0j1r6v1v/qKX/e/SPWvq/V/+opf/h+kct/d+nf9TS/wj9o5b+R+oftfQ/Sv+opf/R+kct/d+vf9TS/wP6Ry39P6h/1NL/Q/pHLf2P0T9q6X+s/lFL/w/rH7X0P07/qKX/R/SPWvofr3/U0v+j+kct/T+mf9TS/wT9o5b+J+oftfT/uP5RS/+T9I9a+n9C/6il/yf1j1r6f0r/qKX/p/WPWvqfrH/U0v8U/aOW/qfqH7X0P03/qKX/6fpHLf3P0D9q6X+m/lFL/7P0j1r6n61/1NL/M/pHLf3P0T9q6X+u/lFL/8/qH7X0/5z+UUv/z+sftfT/gv5RS//z9I9a+n9R/6il/5f0j1r6n69/1NL/Av2jlv4X6h+19P+y/lFL/6/oH7X0/6r+UUv/i/SPWvpfrH/U0v8S/aOW/l/TP2rpf6n+UUv/y/SPWvpfrn/U0v8K/aOW/l/XP2rp/w39o5b+39Q/aul/pf5RS/+r9I9a+n9L/6il/9X6Ry39v61/1NL/O/pHLf2v0T9q6X+t/lFL/+/qH7X0v07/qKX/9fpHLf2/p3/U0v8G/aOW/jfqH7X0v0n/qKX/zfpHLf1v0T9q6X+r/lFL/+/rH7X0v03/qKX/D/SPWvr/UP+opf+P9I9a+t+uf9TS/8f6Ry39f6J/1NL/p/pHLf3v0D9q6f8z/aOW/j/XP3qopP+d+kct6/8X+kct/X+pf9TS/y79o5b+v9I/aun/a/2jlv6/0T9q6f9b/aOW/nfrH7X0/53+UUv/3+sftfS/R/+opf8f9I9a+t+rf9TS/4/6Ry3979M/aun/J/2jlv736x+19P+z/lFL/wf0j1r6/0X/qKX/g/pHLf0f0j9q6f9X/aOW/n/TP2rp/7D+UUv/R/SPWvr/Xf+opf+j+kct/R/TPyrpP91A/6il/zD9o5b+w/WPWvqP0D9q6T9S/6il/yj9o5b+o/WPWvpPp3/U0n96/aOW/mP0j1r6z6B/1NJ/Rv2jlv4z6R+19J9Z/6il/yz6Ry39Z9U/auk/m/5RS//Z9Y9a+s+hf9TS/1n6Ry3959Q/aun/bP2jlv7P0T9q6f9c/aOW/nPpH7X0f57+UUv/ufWPWvo/X/+opf8L9I9a+s+jfzSt9h9+7pP7z6t/NK32H0y2/l+of9TSf6z+UUv/+fSPWvrPr3/U0n8B/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6b+o/lFL/8X0j1r6v0j/qKX/i/WPWvovrn/U0n8J/aOW/kvqH7X0X0r/qKX/0vpHLf2X0T9q6b+s/lFL/+X0j1r6v0T/qKX/S/WPWvovr3/U0n+FIfS/b5b/5MCemVr6r2j9Ry39V9I/aun/Mv2jlv4r6x+19H+5/lFL/1foH7X0f6X+UUv/VfSPWvqvqn/U0n81/aOW/qvrH7X0f5X+UUv/NfSPWvqvqX/U0n8t/aOW/mvrH7X0X0f/qKX/uvpHLf1frX/U0v81+kct/dfTP2rp/1r9o5b+r9M/aun/ev2jlv5v0D9q6b++/lFL/w30j1r6b6h/1NJ/I/2jlv4b6x+19H+j/lFL/030j1r6b6p/1NJ/M/2jlv5v0j9q6b+5/lFL/y30j1r6v1n/qKX/lvpHLf230j9q6b+1/lFL/230j1r6v0X/qKX/tvpHLf230z9q6b+9/lFL/x30j1r676h/1NJ/J/2jlv476x+19N9F/6il/1v1j1r676p/1NJ/N/2jlv676x+19N9D/6il/576Ry3936Z/1NJ/L/2jlv576x+19N9H/6il/9v1j1r676t/1NJ/P/2jlv776x+19D9A/6il/4H6Ry39D9I/aul/sP5RS/936B+19H+n/lFL/0P0j1r6H6p/1NL/MP2jlv7v0j9q6f9u/aOW/u/RP2rp/179o5b+h+sftfR/n/5RS/8j9I9a+h+pf9TS/yj9o5b+R+sftfR/v/5RS/8P6B+19P+g/lFL/w/pH7X0P0b/qKX/sfpHLf0/rH/U0v84/aOW/h/RP2rpf7z+UUv/j+oftfT/mP5RS/8T9I9a+p+of9TS/+P6Ry39T9I/aun/Cf2jlv6f1D9q6f8p/aOW/p/WP2rpf7L+UUv/U/SPWvqfqn/U0v80/aOW/qfrH7X0P0P/qKX/mfpHLf3P0j9q6X+2/lFL/8/oH7X0P0f/qKX/ufpHLf0/q3/U0v9z+kct/T+vf9TS/wv6Ry39z9M/aun/Rf2jlv5f0j9q6X++/lFL/wv0j1r6X6h/1NL/y/pHLf2/on/U0v+r+kct/S/SP2rpf7H+UUv/S/SPWvp/Tf+opf+l+kct/S/TP2rpf7n+UUv/K/SPWvp/Xf+opf839I9a+n9T/6il/5X6Ry39r9I/aun/Lf2jlv5X6x+19P+2/lFL/+/oH7X0v0b/qKX/tfpHLf2/q3/U0v86/aOW/tfrH7X0/57+UUv/G/SPWvrfqH/U0v8m/aOW/jfrH7X0v0X/qKX/rfpHLf2/r3/U0v82/aOW/j/QP2rp/0P9o5b+P9I/aul/u/5RS/8f6x+19P+J/lFL/5/qH7X0v0P/qKX/z/SPWvr/XP+opf+d+kct/X+hf9TS/5f6Ry3979I/mgb7z5j6/0r/aBrsH9f/r/WPWvr/Rv+opf9v9Y9a+t+tf9TS/3f6Ry39f69/1NL/Hv2jlv5/0D9q6X+v/lFL/z/29R81lI1a+t/X139IWvr/Sf+opf/9+kct/f+sf9TS/wH9o5b+f9E/aun/oP5RS/+H9I9a+v9V/6il/9/0j1r6P6x/1NL/Ef2jlv5/1z9q6f+o/lFL/8f0j0r6Tz/QP2rpP0z/qKX/cP2jlv4j9I9a+o/UP2rpP0r/qKX/aP2jlv7T6R+19J9e/6il/xj9o5b+M+gftfSfUf+opf9M+kct/WfWP2rpP4v+UUv/WfWPWvrPpn/U0n92/aOW/nPoH7X0f5b+UUv/OfWPWvo/W/+opf9z9I9a+j9X/6il/1z6Ry39n6d/1NJ/bv2jlv7P1z9q6f8C/aOW/vP09R8zlI1a+s/b139IWvq/UP+opf9Y/aOW/vPpH7X0n1//qKX/AvpHLf0X1D9q6b+Q/lFL/4X1j1r6L6J/1NJ/Uf2jlv6L6R+19H+R/lFL/xfrH7X0X1z/qKX/EvpHLf2X1D9q6b+U/lFL/6X1j1r6L6N/1NJ/Wf2jlv7L6R+19H9J7P8//2j/v7X0f6n1H7X0X17/qKX/CvpHLf1X1D9q6b+S/lFL/5fpH7X0X1n/qKX/y/WPWvq/Qv+opf8r9Y9a+q+if9TSf1X9o5b+q+kftfRfXf+opf+r9I9a+q+hf9TSf039o5b+a+kftfRfW/+opf86+kct/dfVP2rp/2r9o5b+r9E/aum/nv5RS//X6h+19H+d/lFL/9frH7X0f4P+UUv/9fWPWvpvoH/U0n9D/aOW/hvpH7X031j/qKX/G/WPWvpvon/U0n9T/aOW/pvpH7X0f5P+UUv/zfWPWvpvoX/U0v/N+kct/bfUP2rpv5X+UUv/rfWPWvpvo3/U0v8t+kct/bfVP2rpv53+UUv/7fWPWvrvoH/U0n9H/aOW/jvpH7X031n/qKX/LvpHLf3fqn/U0n9X/Z9gtknnWvrvpn/U0n93/aOW/nvoH7X031P/qKX/2/SPWvrvpX/U0n9v/aOW/vvoH7X0f7v+UUv/ffWPWvrvp3/U0n9//aOW/gfoH7X0P1D/qKX/QfpHLf0P1j9q6f8O/aOW/u/UP2rpf4j+UUv/Q/WPWvofpn/U0v9d+kct/d+tf9TS/z36Ry3936t/1NL/cP2jlv7v0z9q6X+E/lFL/yP1j1r6H6V/1NL/aP2jlv7v1z9q6f8B/aOW/h/UP2rp/yH9o5b+x+gftfQ/Vv+opf+H9Y9a+h+nf9TS/yP6Ry39j9c/aun/Uf2jlv4f0z9q6X+C/lFL/xP1j1r6f1z/qKX/SfpHLf0/oX/U0v+T+kct/T+lf9TS/9P6Ry39Ty7sP90Qtmnpf0ph/6Fo6X+q/lFL/9P0j1r6n65/1NL/DP2jlv5n6h+19D9L/6il/9n6Ry39P6N/1NL/HP2jlv7n6h+19P+s/lFL/8/pH7X0/7z+UUv/L+gftfQ/T/+opf8X9Y9a+n9J/6il//n6Ry39L9A/aul/of5RS/8v6x+19P+K/lFL/6/qH7X0v0j/qKX/xfpHLf0v0T9q6f81/aOW/pfqH7X0v0z/qKX/5fpHLf2v0D9q6f91/aOW/t/QP2rp/039o5b+V+oftfS/Sv+opf+39I9a+l+tf9TS/9v6Ry39v6N/1NL/Gv2jlv7X6h+19P+u/lFL/+v0j1r6X69/1NL/e/pHLf1v0D9q6X+j/lFL/5v0j1r636x/1NL/Fv2jlv636h+19P++/lFL/9v0j1r6/0D/qKX/D/WPWvr/SP+opf/t+kct/X+sf9TS/yf6Ry39f6p/1NL/Dv2jlv4/0z9q6f9z/aOW/nfqH7X0/4X+UUv/X+oftfS/S/+opf+v9I9a+v9a/6il/2/0j1r6/1b/qKX/3fpHLf1/p3/U0v/3+kct/e/RP2rp/wf9o5b+9+oftfT/o/5RS//79I9a+v9J/6il//36Ry39/6x/1NL/Af2jlv5/0T9q6f+g/lFL/4f0j1r6/1X/qKX/3/SPWvo/rH/U0v8R/aOW/n/XP2rp/6j+UUv/x/SPSvqPGegftfQfpv9TDC/qP1z/qKX/CP2jlv4j9Y9a+o/SP2rpP1r/qKX/dPpHLf2n1z9q6T9G/6il/wz6Ry39Z9Q/auk/k/5RS/+Z9Y9a+s+if9TSf1b9o5b+s+kftfSfXf+opf8c+kct/Z+lf9TSf079o5b+z9Y/aun/HP2jlv7P1T9q6T+X/lFL/+fpH7X0n1v/qKX/8/WPWvq/QP+opf88+kct/efVP2rp/0L9o5b+Y/WPWvrPp3/U0n9+/aOW/gvoH7X0X1D/qKX/QvpHLf0X1j9q6b+I/lFL/0X1j1r6L6Z/1NL/RfpHLf1frH/U0n9x/aOW/kvoH7X0X1L/qKX/UvpH01x/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/h87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduCABAAAAEDQ/9ftCBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//8MfANw")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0205826, &(0x7f0000000080)={0x4, 0x1003, 0x77, 0x0, 0x7, 0x8})

2.780352077s ago: executing program 3 (id=753):
capset(0x0, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0600120c"], 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x40)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000000d341)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x18, 0x0, 0xfffffffe, 0x0, 0xa1})
syz_open_dev$dri(&(0x7f00000000c0), 0x1fe, 0x6040)

2.64738113s ago: executing program 3 (id=754):
syz_usb_connect(0x0, 0x38, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x3e, 0xf6, 0x2e, 0x8, 0x424, 0xcf18, 0x3e73, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0xff, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9a, 0x0, 0x2, 0x37, 0xc3, 0xf, 0x0, [], [{{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x3, 0x6, 0x9, [@generic={0x2, 0x8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x2, 0x9, 0x9}}]}}]}}]}}, 0x0)

2.599161395s ago: executing program 5 (id=755):
syz_open_dev$dri(0x0, 0x1, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x1, 0x0, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
read$msr(0xffffffffffffffff, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x4f27, 0x7, 0x1, 0x16, 0x5, 0x5, 0x8, 0x3, 0xa, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x7, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xca9f, 0x3, 0x20001e58, 0xb, 0xe66, 0x3, 0x995d000, 0x4085, 0x0, 0xffffff53]})

2.424248832s ago: executing program 0 (id=756):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}}, 0x0)

2.418315792s ago: executing program 5 (id=757):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x40)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3, 0x2}, &(0x7f0000000100)=0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={<r9=>r3, 0x1, 0x4, 0x4, 0x7, 0x8}, &(0x7f00000001c0)=0x14)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x100, 0x0, 0x6, 0xfffffffd, r9}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x79}, 0x8)

2.349686509s ago: executing program 0 (id=758):
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2)

2.256692818s ago: executing program 0 (id=759):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)

2.025280391s ago: executing program 0 (id=760):
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
socket$netlink(0x10, 0x3, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x6080, 0x0)

1.471980926s ago: executing program 5 (id=761):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002001800000000000000000008500"], 0x0, 0x4}, 0x94)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000c40)={0x20, r3, 0x539, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040840}, 0xc840)

1.01577628s ago: executing program 0 (id=762):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x721701, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a8, 0x8, 0x0, 0x0}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x0)
recvmmsg(r5, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
write(r2, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r7=>0x0})
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x4800}, 0x5)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r8, &(0x7f0000000640), 0x0}, 0x20)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r6, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010)

29.693197ms ago: executing program 0 (id=763):
r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000001c0)=0xd0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"9f345503", 0x3, 0x1, 0x6, 0x40, 0x5, "3d020061dc30ebd968b2e3c55d8b8c", "40c8bfa4", "f6148202", "02113d0b", ["ee18a028537cc76301aafe32", "e279161f844c6214b275d758", "937b07d0a4cdf08a808a2cee", "395e8390111f44462429b244"]})

0s ago: executing program 5 (id=764):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000)

kernel console output (not intermixed with test programs):

 batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.485127][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.511188][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.524095][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.531197][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.557384][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.611804][    T7] Bluetooth: hci0: command 0x0409 tx timeout
[   63.611804][   T21] Bluetooth: hci1: command 0x0409 tx timeout
[   63.655437][ T4181] device hsr_slave_0 entered promiscuous mode
[   63.662378][ T4181] device hsr_slave_1 entered promiscuous mode
[   63.668939][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.677112][ T4181] Cannot create hsr debugfs directory
[   63.685725][ T4187] device hsr_slave_0 entered promiscuous mode
[   63.691014][   T21] Bluetooth: hci4: command 0x0409 tx timeout
[   63.698045][   T21] Bluetooth: hci2: command 0x0409 tx timeout
[   63.698308][ T4187] device hsr_slave_1 entered promiscuous mode
[   63.706061][   T21] Bluetooth: hci3: command 0x0409 tx timeout
[   63.716444][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.724379][ T4187] Cannot create hsr debugfs directory
[   63.749915][ T4182] device hsr_slave_0 entered promiscuous mode
[   63.758091][ T4182] device hsr_slave_1 entered promiscuous mode
[   63.764828][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.772696][ T4182] Cannot create hsr debugfs directory
[   64.080017][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   64.092019][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   64.104967][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   64.122344][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   64.159084][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.168838][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.184563][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.200415][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.282963][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.292848][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.302980][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.316965][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.402961][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.435199][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.445036][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.454588][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.464345][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.476881][ T4193] 8021q: adding VLAN 0 to HW filter on device team0
[   64.498970][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.508751][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.522516][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.532186][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.541762][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.548977][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.559145][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.589688][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.603434][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.614030][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.623264][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.630455][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.638307][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.658810][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.673611][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.680489][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.696227][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.709399][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.723221][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.749895][ T4192] 8021q: adding VLAN 0 to HW filter on device team0
[   64.776708][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.786670][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.799300][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.807900][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.820306][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.829970][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.839163][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.847848][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.857463][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.866891][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.875584][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.882710][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.890522][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.900325][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.908982][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.917126][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.928678][ T4181] 8021q: adding VLAN 0 to HW filter on device team0
[   64.939131][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.948485][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.957392][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.964509][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.981001][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.992634][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.034038][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.045080][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.058508][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.071665][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.080513][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.089898][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.097026][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.105067][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.151369][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.207161][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.217224][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.227930][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.236170][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.245099][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.254470][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.264289][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.273599][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.282935][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.292048][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.300622][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.309755][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.332792][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.340364][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.348295][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.357773][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.369375][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.378338][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.387682][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.397066][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.408674][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.426667][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.439141][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.449433][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.463124][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.473077][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.482051][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.490638][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.510187][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   65.526772][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.545286][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.556373][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.567782][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.579236][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.592147][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.619272][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.649736][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.659808][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.674855][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.682035][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.691800][ T4243] Bluetooth: hci0: command 0x041b tx timeout
[   65.697971][ T4243] Bluetooth: hci1: command 0x041b tx timeout
[   65.702249][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.717742][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.727088][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.734236][ T4264] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.760113][ T4182] 8021q: adding VLAN 0 to HW filter on device team0
[   65.774405][ T4243] Bluetooth: hci3: command 0x041b tx timeout
[   65.784529][ T4243] Bluetooth: hci2: command 0x041b tx timeout
[   65.794489][ T4243] Bluetooth: hci4: command 0x041b tx timeout
[   65.815072][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.824160][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.834824][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.843098][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.851765][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.860740][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.869615][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.881363][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.889992][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.915016][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.935975][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.971433][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.979752][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.998827][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.008353][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.015501][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.024993][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.034338][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.045116][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.053850][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.063153][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.072120][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.079604][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.088639][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.097384][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.104513][ T4264] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.112432][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.121726][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.131234][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.139134][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.163121][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.176981][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.189516][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.198664][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.214890][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.226539][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.237916][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.269882][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.295251][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.341986][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.351360][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.359891][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.368788][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.377699][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.387411][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.397825][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.407096][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.418250][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.427051][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.436656][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.444708][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.464352][ T4181] device veth0_vlan entered promiscuous mode
[   66.478877][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.502095][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.511293][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.519747][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.529302][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.538453][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.546329][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.555245][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.564817][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.586121][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.595376][ T4193] device veth0_vlan entered promiscuous mode
[   66.625435][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.634761][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.653577][ T4181] device veth1_vlan entered promiscuous mode
[   66.671499][ T4193] device veth1_vlan entered promiscuous mode
[   66.678522][ T4192] device veth0_vlan entered promiscuous mode
[   66.694322][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.704341][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.713844][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.722527][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.746965][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.763048][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.778094][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.787547][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.806803][ T4192] device veth1_vlan entered promiscuous mode
[   66.843225][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.852848][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.863210][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.870791][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.879314][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.908000][ T4187] device veth0_vlan entered promiscuous mode
[   66.915465][ T4181] device veth0_macvtap entered promiscuous mode
[   66.927062][ T4181] device veth1_macvtap entered promiscuous mode
[   66.939700][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.947905][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.957798][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.966357][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.975362][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.984121][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.993579][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.002292][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.011403][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.019267][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.042348][ T4193] device veth0_macvtap entered promiscuous mode
[   67.064858][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.073719][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.082955][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.094253][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.106331][ T4193] device veth1_macvtap entered promiscuous mode
[   67.115979][ T4192] device veth0_macvtap entered promiscuous mode
[   67.124246][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.133234][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.141653][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.150242][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.161667][ T4187] device veth1_vlan entered promiscuous mode
[   67.194837][ T4192] device veth1_macvtap entered promiscuous mode
[   67.214035][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.224844][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.237764][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.245691][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.257830][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.266827][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.275495][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.285264][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.294837][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.311056][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.318454][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.327349][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.335673][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.345270][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.374090][ T4182] device veth0_vlan entered promiscuous mode
[   67.385523][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.396713][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.408924][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.421252][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.430218][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.441073][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.449825][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.469896][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.482040][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.492693][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.503570][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.515787][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.524251][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.534145][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.543232][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.553390][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.562226][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.571078][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.582576][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.592334][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.602144][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.612788][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.634025][ T4182] device veth1_vlan entered promiscuous mode
[   67.663915][ T4187] device veth0_macvtap entered promiscuous mode
[   67.673402][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.685487][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.695815][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.706832][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.718289][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.744387][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.753090][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.762393][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.770527][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.780171][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.781315][ T4242] Bluetooth: hci1: command 0x040f tx timeout
[   67.800728][ T4242] Bluetooth: hci0: command 0x040f tx timeout
[   67.805269][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.815649][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.826453][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.835521][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.851882][ T4242] Bluetooth: hci4: command 0x040f tx timeout
[   67.860070][ T4187] device veth1_macvtap entered promiscuous mode
[   67.871845][ T4242] Bluetooth: hci2: command 0x040f tx timeout
[   67.884960][ T4242] Bluetooth: hci3: command 0x040f tx timeout
[   67.916096][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.925152][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.935292][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.949539][ T4182] device veth0_macvtap entered promiscuous mode
[   67.984817][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.995692][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.007156][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.018015][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.028603][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.039370][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.051585][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.061651][ T4182] device veth1_macvtap entered promiscuous mode
[   68.083909][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.094052][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.102938][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.112578][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.123847][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.135206][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.145192][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.156313][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.168544][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.183948][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.195243][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.225581][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.236428][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.247037][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.259567][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.269684][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.282103][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.292982][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.303881][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.315643][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.324843][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.334583][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.348214][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.357247][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.369566][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.378501][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.387769][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.397894][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.423226][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.441259][ T4258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.447893][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.449341][ T4258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.465889][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.478182][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.488088][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.499193][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.510323][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.521327][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.531403][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.541997][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.553824][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.580169][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.588726][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.597398][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.607228][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.623318][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.633918][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.643543][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.653965][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.686279][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.695300][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.708088][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.841691][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.847917][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.849721][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.868308][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.876570][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.891490][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.905649][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.916217][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.924808][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.952805][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.958055][ T4258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.969843][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.986901][ T4258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.993687][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.020070][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.081608][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.089842][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.093360][ T4288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.117588][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.132992][ T4288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.152366][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.270626][ T4293] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   69.313349][ T4294] loop0: detected capacity change from 0 to 1024
[   69.418481][ T4294] hfsplus: failed to load root directory
[   69.852955][ T4243] Bluetooth: hci0: command 0x0419 tx timeout
[   69.861348][ T4243] Bluetooth: hci1: command 0x0419 tx timeout
[   69.932449][ T4243] Bluetooth: hci3: command 0x0419 tx timeout
[   69.941874][ T4243] Bluetooth: hci2: command 0x0419 tx timeout
[   69.971081][ T4243] Bluetooth: hci4: command 0x0419 tx timeout
[   70.091294][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[   70.491332][ T4243] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   70.900996][ T4243] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[   70.931269][ T4243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.965468][ T4243] usb 4-1: config 0 descriptor??
[   71.047400][ T4243] gspca_main: cpia1-2.14.0 probing 0813:0001
[   71.454746][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[   71.462040][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[   71.481092][ T4243] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[   71.911974][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!!
[   72.092006][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0c!!!
[   72.103271][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0e!!!
[   72.116815][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18e!!!
[   72.129968][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18e!!!
[   72.140701][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18e!!!
[   72.149986][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18e!!!
[   72.161485][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18e!!!
[   72.170694][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18e!!!
[   72.171839][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   72.741552][ T4243] gspca_cpia1: usb_control_msg 02, error -110
[   72.763795][ T4243] gspca_cpia1: usb_control_msg 05, error -32
[   72.797450][ T4243] gspca_cpia1: usb_control_msg 05, error -32
[   72.840884][ T4243] gspca_cpia1: usb_control_msg 05, error -32
[   72.870919][ T4243] gspca_cpia1: usb_control_msg 05, error -32
[   72.883204][ T4243] cpia1 4-1:0.0: unexpected systemstate: 00
[   73.030815][   T23] usb 4-1: USB disconnect, device number 2
[   81.096430][ T4406] loop1: detected capacity change from 0 to 128
[   82.268329][ T4406] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[   82.351051][ T4406] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.015804][ T1108] cfg80211: failed to load regulatory.db
[   89.562673][ T4467] loop0: detected capacity change from 0 to 16
[   89.813726][ T4467] erofs: (device loop0): mounted with root inode @ nid 36.
[   92.472495][ T4490] loop3: detected capacity change from 0 to 4096
[   92.674373][ T4490] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[   93.107202][ T4490] EXT4-fs (loop3): Test dummy encryption mode enabled
[   93.178560][ T4490] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[   97.712144][ T4520] ubi0: attaching mtd0
[   97.728527][ T4520] ubi0: scanning is finished
[   97.756479][ T4520] ubi0: empty MTD device detected
[   99.444784][ T4520] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[   99.899191][ T4541] Zero length message leads to an empty skb
[  102.499335][ T4221] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  102.891679][ T4221] usb 5-1: Using ep0 maxpacket: 32
[  103.230870][ T4221] usb 5-1: config 8 has an invalid interface number: 203 but max is 0
[  103.239095][ T4221] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  103.337219][ T4221] usb 5-1: config 8 has no interface number 0
[  103.357592][ T4221] usb 5-1: config 8 interface 203 altsetting 1 has an invalid endpoint with address 0x93, skipping
[  103.451058][ T4221] usb 5-1: config 8 interface 203 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  103.501737][ T4221] usb 5-1: config 8 interface 203 has no altsetting 0
[  103.640868][ T4221] usb 5-1: string descriptor 0 read error: -71
[  103.648414][ T4221] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[  103.850047][ T4579] loop4: detected capacity change from 0 to 1024
[  103.863556][ T4221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.970868][ T4221] usb 5-1: can't set config #8, error -71
[  104.010959][ T4221] usb 5-1: USB disconnect, device number 2
[  104.291286][ T4378] hfsplus: b-tree write err: -5, ino 4
[  106.921765][ T4599] loop2: detected capacity change from 0 to 32768
[  106.988398][ T4599] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.81 (4599)
[  107.347798][ T4599] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  108.183417][ T4599] BTRFS info (device loop2): setting nodatacow, compression disabled
[  108.311088][ T4599] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  108.321289][ T4599] BTRFS info (device loop2): use lzo compression, level 0
[  108.373165][ T4599] BTRFS warning (device loop2): excessive commit interval 2147483647
[  108.435010][ T4599] BTRFS info (device loop2): turning on sync discard
[  108.467007][ T4599] BTRFS info (device loop2): enabling ssd optimizations
[  108.657829][ T4599] BTRFS info (device loop2): using spread ssd allocation scheme
[  108.670479][ T4622] ieee802154 phy0 wpan0: encryption failed: -22
[  108.690956][ T4599] BTRFS info (device loop2): setting nodatasum
[  108.697196][ T4599] BTRFS info (device loop2): force clearing of disk cache
[  108.770856][ T4599] BTRFS info (device loop2): using free space tree
[  110.316885][ T4599] BTRFS info (device loop2): has skinny extents
[  110.644848][ T4599] BTRFS error (device loop2): open_ctree failed: -12
[  113.391295][ T4663] loop2: detected capacity change from 0 to 32768
[  113.500842][ T4663] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.93 (4663)
[  113.688668][ T4663] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  113.736367][ T4663] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  113.750874][ T4663] BTRFS info (device loop2): use zstd compression, level 3
[  113.903853][ T4663] BTRFS info (device loop2): using free space tree
[  113.977553][ T4663] BTRFS info (device loop2): has skinny extents
[  115.464711][ T4663] BTRFS error (device loop2): open_ctree failed: -12
[  118.570816][ T4243] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  118.930990][ T4243] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  118.952869][ T4243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.997763][ T4243] usb 1-1: config 0 descriptor??
[  119.053891][ T4243] gspca_main: cpia1-2.14.0 probing 0813:0001
[  119.481035][ T4243] cpia1 1-1:0.0: unexpected state after lo power cmd: 00
[  120.520793][ T4243] gspca_cpia1: usb_control_msg 02, error -71
[  120.540837][ T4243] gspca_cpia1: usb_control_msg 05, error -71
[  120.546877][ T4243] cpia1 1-1:0.0: unexpected systemstate: 00
[  120.660427][ T4243] usb 1-1: USB disconnect, device number 2
[  121.362265][ T4742] overlayfs: failed to resolve './file1': -2
[  122.126546][ T4745] loop0: detected capacity change from 0 to 1024
[  122.205309][ T4745] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  122.369194][ T4745] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  126.085346][ T4243] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  126.196776][ T4781] overlayfs: failed to resolve './file1': -2
[  126.511808][ T4243] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  126.929167][ T4243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.032010][ T4243] usb 4-1: config 0 descriptor??
[  127.102944][ T4243] gspca_main: cpia1-2.14.0 probing 0813:0001
[  127.531348][ T4243] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  128.901161][ T4243] gspca_cpia1: usb_control_msg 02, error -110
[  129.991574][ T4243] gspca_cpia1: usb_control_msg 05, error -71
[  129.997631][ T4243] cpia1 4-1:0.0: unexpected systemstate: 00
[  130.077001][ T4243] usb 4-1: USB disconnect, device number 3
[  132.292107][ T4804] loop4: detected capacity change from 0 to 40427
[  132.467020][ T4804] F2FS-fs (loop4): invalid crc value
[  132.538985][ T4804] F2FS-fs (loop4): Found nat_bits in checkpoint
[  132.772208][ T4812] loop3: detected capacity change from 0 to 32768
[  132.799653][ T4812] =======================================================
[  132.799653][ T4812] WARNING: The mand mount option has been deprecated and
[  132.799653][ T4812]          and is ignored by this kernel. Remove the mand
[  132.799653][ T4812]          option from the mount to silence this warning.
[  132.799653][ T4812] =======================================================
[  132.902537][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  132.910808][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  132.939456][ T4804] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  133.209207][ T4812] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  133.687795][   T26] audit: type=1800 audit(1760956175.162:2): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.130" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  133.765399][   T26] audit: type=1800 audit(1760956175.242:3): pid=4812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.130" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  135.715456][ T4182] ocfs2: Unmounting device (7,3) on (node local)
[  136.132826][ T4695] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  139.903130][ T4695] usb 2-1: Using ep0 maxpacket: 8
[  140.000906][ T4695] usb 2-1: device descriptor read/all, error -71
[  140.014389][ T4870] loop2: detected capacity change from 0 to 256
[  140.129474][ T4870] exfat: Deprecated parameter 'utf8'
[  140.196802][ T4870] exfat: Unknown parameter 'keep_last_dots'
[  142.401680][ T4887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'.
[  142.677472][ T4887] xt_CT: You must specify a L4 protocol and not use inversions on it
[  145.422485][ T4915] loop1: detected capacity change from 0 to 64
[  146.200560][ T4904] loop0: detected capacity change from 0 to 32768
[  147.314996][ T4909] loop4: detected capacity change from 0 to 32768
[  147.489633][ T4909] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  147.528710][ T4909] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  147.676978][ T4909] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  147.729838][ T4650] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  147.741006][ T4650] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  148.045273][ T4650] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 304ms
[  148.090943][ T4650] gfs2: fsid=syz:syz.0: jid=0: Done
[  148.097279][ T4909] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  148.123028][ T4909] gfs2: fsid=syz:syz.0: can't start logd thread: -4
[  150.003558][ T4923] loop0: detected capacity change from 0 to 32768
[  150.886859][ T4923] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  150.925209][ T4923] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  151.201386][ T4923] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  151.251439][ T4287] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  151.278239][ T4287] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  151.892143][ T4287] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 613ms
[  151.907132][ T4287] gfs2: fsid=syz:syz.0: jid=0: Done
[  151.912885][ T4923] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  151.965564][ T4923] gfs2: fsid=syz:syz.0: can't start logd thread: -4
[  152.488949][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'.
[  158.310786][ T4652] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  158.472814][ T5009] loop4: detected capacity change from 0 to 64
[  158.700950][ T4652] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  158.718567][ T4652] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.821402][ T4652] usb 2-1: config 0 descriptor??
[  158.873168][ T5011] loop4: detected capacity change from 0 to 1764
[  158.883669][ T4652] gspca_main: cpia1-2.14.0 probing 0813:0001
[  159.232443][ T5011] loop4: detected capacity change from 0 to 2048
[  159.310899][ T4652] cpia1 2-1:0.0: unexpected state after lo power cmd: 00
[  159.318007][ T5011] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576
[  159.505575][ T5011] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.581260][ T4652] gspca_cpia1: usb_control_msg 02, error -110
[  160.611183][ T4652] gspca_cpia1: usb_control_msg 05, error -32
[  160.631218][ T4652] gspca_cpia1: usb_control_msg 05, error -32
[  160.671238][ T4652] gspca_cpia1: usb_control_msg 05, error -32
[  160.710950][ T4243] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  160.719159][ T4652] gspca_cpia1: usb_control_msg 05, error -32
[  160.725791][ T4652] cpia1 2-1:0.0: unexpected systemstate: 00
[  161.121250][ T4243] usb 3-1: config 0 has an invalid interface number: 229 but max is 0
[  161.129716][ T4243] usb 3-1: config 0 has no interface number 0
[  161.460908][ T4243] usb 3-1: New USB device found, idVendor=0557, idProduct=7820, bcdDevice=ea.6e
[  161.480495][ T4243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.760711][ T4243] usb 3-1: Product: syz
[  161.764971][ T4243] usb 3-1: Manufacturer: syz
[  161.769598][ T4243] usb 3-1: SerialNumber: syz
[  161.777582][ T4243] usb 3-1: config 0 descriptor??
[  161.832552][ T4243] mos7840 3-1:0.229: required endpoints missing
[  161.920870][ T4243] usb 2-1: USB disconnect, device number 4
[  162.037147][ T4652] usb 3-1: USB disconnect, device number 2
[  164.165657][ T5037] loop1: detected capacity change from 0 to 32768
[  164.209383][ T5037] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.195 (5037)
[  164.286509][ T5037] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  164.310230][ T5037] BTRFS info (device loop1): use zlib compression, level 3
[  164.330210][ T5037] BTRFS info (device loop1): using free space tree
[  164.347572][ T5037] BTRFS info (device loop1): has skinny extents
[  164.617154][ T5037] BTRFS info (device loop1): enabling ssd optimizations
[  165.220737][   T26] audit: type=1326 audit(1760956206.702:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccedce4fc9 code=0x7ffc0000
[  165.350476][   T26] audit: type=1326 audit(1760956206.712:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccedce4fc9 code=0x7ffc0000
[  165.942945][   T26] audit: type=1326 audit(1760956206.712:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fccedce4fc9 code=0x7ffc0000
[  165.976484][   T26] audit: type=1326 audit(1760956206.712:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccedce4fc9 code=0x7ffc0000
[  166.220771][   T26] audit: type=1326 audit(1760956206.712:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccedce4fc9 code=0x7ffc0000
[  166.322164][   T26] audit: type=1326 audit(1760956206.712:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fccedce4fc9 code=0x7ffc0000
[  166.440813][   T26] audit: type=1326 audit(1760956206.712:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccedce4fc9 code=0x7ffc0000
[  167.415442][   T26] audit: type=1326 audit(1760956206.712:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccedce4fc9 code=0x7ffc0000
[  171.580187][ T5126] loop2: detected capacity change from 0 to 2048
[  171.676869][ T5126] Alternate GPT is invalid, using primary GPT.
[  171.716066][ T5126]  loop2: p2 p3 p7
[  172.479335][ T5139] loop3: detected capacity change from 0 to 2048
[  172.519943][ T4298] udevd[4298]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[  172.522857][ T5139] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  172.534772][ T4285] udevd[4285]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  172.554390][ T5016] udevd[5016]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  172.650543][ T5139] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  174.566038][ T5142] loop2: detected capacity change from 0 to 32768
[  174.610806][ T5142] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.220 (5142)
[  174.758752][ T5142] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  174.844648][ T5142] BTRFS error (device loop2): unrecognized mount option 'async'
[  174.932941][ T5142] BTRFS error (device loop2): open_ctree failed: -22
[  176.542839][   T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  176.800768][   T13] usb 5-1: Using ep0 maxpacket: 32
[  176.930986][   T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.998191][   T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.089578][   T13] usb 5-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00
[  177.134205][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.181209][   T13] usb 5-1: config 0 descriptor??
[  177.211216][ T5164] loop0: detected capacity change from 0 to 32768
[  177.250407][ T5164] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.226 (5164)
[  177.329969][ T5164] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  177.349741][ T5164] BTRFS info (device loop0): use zlib compression, level 3
[  177.368950][ T5164] BTRFS info (device loop0): using free space tree
[  177.402212][ T5164] BTRFS info (device loop0): has skinny extents
[  177.431959][ T5182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'.
[  178.272466][   T13] hid-generic 0003:0C70:F014.0001: item fetching failed at offset 0/2
[  178.361649][   T13] hid-generic: probe of 0003:0C70:F014.0001 failed with error -22
[  178.603335][ T4695] usb 5-1: USB disconnect, device number 3
[  178.604432][ T5164] BTRFS error (device loop0): open_ctree failed: -12
[  178.925379][ T5182] syz.3.232 (5182) used greatest stack depth: 20672 bytes left
[  184.305793][ T5235] loop2: detected capacity change from 0 to 32768
[  184.377495][ T5235] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.245 (5235)
[  184.551040][ T5235] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  184.605286][ T5235] BTRFS info (device loop2): use zlib compression, level 3
[  184.650745][ T5235] BTRFS info (device loop2): using free space tree
[  184.670869][ T5235] BTRFS info (device loop2): has skinny extents
[  186.838797][ T5080] Bluetooth: hci1: command 0x0406 tx timeout
[  186.874327][ T5080] Bluetooth: hci3: command 0x0406 tx timeout
[  187.003263][ T5080] Bluetooth: hci0: command 0x0406 tx timeout
[  187.050841][ T5080] Bluetooth: hci4: command 0x0406 tx timeout
[  187.080749][ T5080] Bluetooth: hci2: command 0x0406 tx timeout
[  187.301197][ T5271] loop4: detected capacity change from 0 to 2048
[  187.372935][ T5271] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  187.406915][ T5271] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.421816][ T5235] BTRFS error (device loop2): open_ctree failed: -12
[  187.429010][ T4285] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4285)
[  188.721610][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.258'.
[  192.131548][ T5315] loop4: detected capacity change from 0 to 32768
[  192.235584][ T5315] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  192.299693][ T5315] BTRFS info (device loop4): use zlib compression, level 3
[  192.315794][ T5315] BTRFS info (device loop4): using free space tree
[  192.322858][ T5315] BTRFS info (device loop4): has skinny extents
[  192.447577][ T5329] loop0: detected capacity change from 0 to 2048
[  192.519155][ T5329] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  192.550771][ T5329] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  193.531953][ T5315] BTRFS info (device loop4): enabling ssd optimizations
[  194.336579][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  194.344220][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  195.040810][   T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  195.401979][ T5366] 9pnet_virtio: no channels available for device syz
[  195.442366][   T23] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  195.899936][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.959973][   T23] usb 5-1: config 0 descriptor??
[  196.591944][   T23] gspca_main: cpia1-2.14.0 probing 0813:0001
[  196.850870][   T23] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  197.695590][ T5391] capability: warning: `syz.2.282' uses deprecated v2 capabilities in a way that may be insecure
[  198.000860][   T23] gspca_cpia1: usb_control_msg 02, error -71
[  198.020837][   T23] gspca_cpia1: usb_control_msg 05, error -71
[  198.046622][   T23] cpia1 5-1:0.0: unexpected systemstate: 00
[  198.105291][   T23] usb 5-1: USB disconnect, device number 4
[  198.864435][ T5391] loop2: detected capacity change from 0 to 32768
[  199.124785][ T5391] XFS (loop2): Mounting V5 Filesystem
[  199.569444][ T5391] XFS (loop2): Ending clean mount
[  199.599985][ T5391] XFS (loop2): Quotacheck needed: Please wait.
[  199.747678][ T5391] XFS (loop2): Quotacheck: Done.
[  199.992811][ T4187] XFS (loop2): Unmounting Filesystem
[  200.558654][ T5438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'.
[  201.153389][ T5432] loop3: detected capacity change from 0 to 32768
[  201.206590][ T5432] XFS (loop3): Mounting V5 Filesystem
[  201.367066][ T5432] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  201.435916][ T5432] XFS (loop3): Starting recovery (logdev: internal)
[  201.489248][ T5432] XFS (loop3): Ending recovery (logdev: internal)
[  201.684652][ T5432] XFS (loop3): Quotacheck needed: Please wait.
[  201.996861][ T5432] XFS (loop3): Quotacheck: Done.
[  202.732512][ T4182] XFS (loop3): Unmounting Filesystem
[  206.540213][ T5498] loop3: detected capacity change from 0 to 1024
[  206.652890][ T5498] EXT4-fs (loop3): Ignoring removed orlov option
[  206.659424][ T5498] EXT4-fs (loop3): inline encryption not supported
[  206.693524][ T5498] EXT4-fs (loop3): Ignoring removed oldalloc option
[  206.730828][ T5498] EXT4-fs (loop3): blocks per group (0) and clusters per group (8192) inconsistent
[  206.749747][ T5503] loop1: detected capacity change from 0 to 2048
[  206.849146][ T5503] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  207.198643][ T5503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  208.049850][ T5513] loop2: detected capacity change from 0 to 4096
[  208.184905][   T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  208.861086][   T23] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  208.892775][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.949422][   T23] usb 4-1: config 0 descriptor??
[  209.012830][   T23] gspca_main: cpia1-2.14.0 probing 0813:0001
[  209.430802][   T23] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  210.523372][   T23] gspca_cpia1: usb_control_msg 02, error -71
[  210.680790][   T23] gspca_cpia1: usb_control_msg 05, error -71
[  210.700778][   T23] cpia1 4-1:0.0: unexpected systemstate: 00
[  211.432880][   T23] usb 4-1: USB disconnect, device number 4
[  213.924623][ T5564] loop3: detected capacity change from 0 to 2048
[  213.989318][ T5564] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  214.362876][ T5564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.060694][ T1111] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  215.554576][ T1111] usb 1-1: Using ep0 maxpacket: 8
[  215.779301][ T1111] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  215.964103][ T1111] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  215.994596][ T1111] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  216.034567][ T1111] usb 1-1: Product: syz
[  216.038799][ T1111] usb 1-1: Manufacturer: syz
[  216.090757][ T1111] usb 1-1: SerialNumber: syz
[  216.128688][ T5585] loop1: detected capacity change from 0 to 32768
[  216.254191][ T5585] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  216.370867][ T1111] usb 1-1: Invalid connection information received from device
[  216.493101][ T4181] ocfs2: Unmounting device (7,1) on (node local)
[  216.582416][ T5275] usb 1-1: USB disconnect, device number 3
[  218.196878][ T5601] loop1: detected capacity change from 0 to 32768
[  218.319430][ T5601] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  218.346386][ T5601] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  218.410800][ T5601] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  218.430136][ T5274] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  218.440819][ T5274] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  218.681058][ T5274] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 240ms
[  218.730078][ T5274] gfs2: fsid=syz:syz.0: jid=0: Done
[  218.738540][ T5601] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  221.795269][ T5642] loop0: detected capacity change from 0 to 2048
[  221.937910][ T5642] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  222.006568][ T5642] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  225.049778][ T5679] loop1: detected capacity change from 0 to 4096
[  225.084634][ T5679] ntfs3: Unknown parameter 'windows_names'
[  226.370022][ T5692] loop4: detected capacity change from 0 to 256
[  228.085021][ T5698] loop3: detected capacity change from 0 to 2048
[  228.304440][ T5698] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  228.488343][ T5698] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  232.085836][ T5733] loop1: detected capacity change from 0 to 2048
[  232.177333][ T5733] UDF-fs: bad mount option "gid=00000000000000060929" or missing value
[  232.565028][ T5711] loop0: detected capacity change from 0 to 32768
[  232.640789][ T5711] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.377 (5711)
[  232.764336][ T5744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'.
[  234.282540][ T5711] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  234.305858][ T5711] BTRFS info (device loop0): enabling auto defrag
[  234.350781][ T5711] BTRFS info (device loop0): turning on sync discard
[  234.357535][ T5711] BTRFS info (device loop0): force clearing of disk cache
[  234.451068][ T5711] BTRFS info (device loop0): max_inline at 2
[  234.457203][ T5711] BTRFS info (device loop0): disabling free space tree
[  234.484537][ T5752] loop2: detected capacity change from 0 to 2048
[  234.491589][ T5711] BTRFS info (device loop0): has skinny extents
[  234.637813][ T5752] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  234.674176][ T5752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  235.415755][ T5747] loop4: detected capacity change from 0 to 32768
[  235.462947][ T5747] (syz.4.386,5747,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  235.524649][ T5747] (syz.4.386,5747,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  235.628373][ T5747] JBD2: Ignoring recovery information on journal
[  235.635796][ T5711] BTRFS error (device loop0): open_ctree failed: -12
[  235.640769][ T4285] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4285)
[  235.747273][ T5747] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  237.030787][ T5769] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  237.627443][ T5769] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  237.638787][ T5769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.685858][ T5769] usb 4-1: config 0 descriptor??
[  237.756447][ T4193] ocfs2: Unmounting device (7,4) on (node local)
[  237.773553][ T5769] gspca_main: cpia1-2.14.0 probing 0813:0001
[  237.914831][ T5793] loop0: detected capacity change from 0 to 512
[  237.998941][ T5793] EXT4-fs (loop0): Test dummy encryption mode enabled
[  238.010696][ T5793] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  238.055272][ T5793] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  238.131048][ T5793] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.394: bad orphan inode 131083
[  238.190858][ T5769] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  238.225021][ T5793] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[  239.220757][ T5769] gspca_cpia1: usb_control_msg 02, error -71
[  239.402778][ T5769] gspca_cpia1: usb_control_msg 05, error -71
[  239.408923][ T5769] cpia1 4-1:0.0: unexpected systemstate: 00
[  239.438975][ T5793] fscrypt (loop0): Error allocating 'xts(aes)' transform: -4
[  239.771187][ T5769] usb 4-1: USB disconnect, device number 5
[  240.102220][ T5825] process 'syz.4.400' launched './file2' with NULL argv: empty string added
[  240.430541][ T5826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'.
[  248.959936][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'.
[  249.437948][ T5887] loop0: detected capacity change from 0 to 256
[  249.478271][ T5887] FAT-fs (loop0): Unrecognized mount option "nonumta�¿&hLJÑiliso8859-5" or missing value
[  250.535297][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'.
[  250.547062][ T5898] netlink: 80 bytes leftover after parsing attributes in process `syz.0.420'.
[  252.568833][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.651843][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  253.747967][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  253.760950][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.499829][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'.
[  255.772838][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  255.779182][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  256.202296][ T5935] loop2: detected capacity change from 0 to 128
[  258.193289][ T5953] wlan0 speed is unknown, defaulting to 1000
[  258.201134][ T5953] wlan0 speed is unknown, defaulting to 1000
[  258.219067][ T5953] wlan0 speed is unknown, defaulting to 1000
[  258.248356][ T5953] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  258.291211][ T5953] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  258.409501][ T5953] wlan0 speed is unknown, defaulting to 1000
[  258.421723][ T5953] wlan0 speed is unknown, defaulting to 1000
[  258.433679][ T5953] wlan0 speed is unknown, defaulting to 1000
[  258.447135][ T5953] wlan0 speed is unknown, defaulting to 1000
[  258.458637][ T5953] wlan0 speed is unknown, defaulting to 1000
[  261.435825][ T5979] netlink: 9 bytes leftover after parsing attributes in process `syz.2.446'.
[  261.490969][ T5979] device gretap0 entered promiscuous mode
[  261.536199][ T5963] loop0: detected capacity change from 0 to 32768
[  261.762685][ T5983] netlink: 5 bytes leftover after parsing attributes in process `syz.2.446'.
[  261.840867][ T5983] 0ªî{X¹¦: renamed from gretap0
[  261.938304][ T5983] device 
30ªî{X¹¦ left promiscuous mode
[  262.009267][ T5983] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  262.604671][ T5985] loop1: detected capacity change from 0 to 32768
[  262.782994][ T5997] 9pnet: Insufficient options for proto=fd
[  262.848446][ T5997] loop3: detected capacity change from 0 to 64
[  264.017990][ T5985] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  264.056078][ T5985] BTRFS info (device loop1): enabling auto defrag
[  264.066784][ T5985] BTRFS info (device loop1): force clearing of disk cache
[  264.076614][ T5985] BTRFS info (device loop1): max_inline at 0
[  264.224470][ T5985] BTRFS info (device loop1): turning on sync discard
[  264.244278][ T6007] loop3: detected capacity change from 0 to 2048
[  264.252404][ T5985] BTRFS info (device loop1): using free space tree
[  264.259086][ T5985] BTRFS info (device loop1): has skinny extents
[  264.298542][ T6007] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  264.353299][ T6007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  266.907037][ T5985] BTRFS error (device loop1): open_ctree failed: -12
[  267.139580][ T5806] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (5806)
[  268.685644][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'.
[  272.100627][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'.
[  272.112531][ T6077] netlink: 80 bytes leftover after parsing attributes in process `syz.2.466'.
[  273.485621][ T6083] wlan0 speed is unknown, defaulting to 1000
[  274.024680][ T6086] loop4: detected capacity change from 0 to 2048
[  274.116338][ T6086] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  274.183436][ T6086] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  275.130810][ T4695] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  276.327942][ T6105] loop3: detected capacity change from 0 to 256
[  276.515006][ T6105] exfat: Deprecated parameter 'utf8'
[  276.554533][ T6105] exfat: Unknown parameter 'keep_last_dots'
[  277.207303][ T6094] loop0: detected capacity change from 0 to 32768
[  277.224943][ T6111] loop4: detected capacity change from 0 to 2048
[  277.246343][ T6094] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.474 (6094)
[  277.291072][ T6094] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  277.330871][ T4695] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  277.350530][ T4695] usb 3-1: config 0 has no interface number 0
[  277.380937][ T4695] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  277.411645][ T4695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.452546][ T4695] usb 3-1: config 0 descriptor??
[  277.480928][ T6094] BTRFS info (device loop0): using free space tree
[  277.487502][ T6094] BTRFS info (device loop0): has skinny extents
[  277.522659][ T4695] usb 3-1: selecting invalid altsetting 1
[  277.640903][ T4695] dvb_ttusb_budget: ttusb_init_controller: error
[  277.903530][ T4695] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  278.211736][ T6094] BTRFS error (device loop0): open_ctree failed: -12
[  278.574503][ T4695] DVB: Unable to find symbol cx22700_attach()
[  278.750831][ T4695] DVB: Unable to find symbol tda10046_attach()
[  278.757057][ T4695] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  278.780824][ T4695] usb 3-1: USB disconnect, device number 3
[  279.250057][ T6145] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (6145)
[  281.825704][ T6174] loop3: detected capacity change from 0 to 32768
[  281.898399][ T6174] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.491 (6174)
[  281.999866][ T6174] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  282.060203][ T6174] BTRFS info (device loop3): using free space tree
[  282.125196][ T6174] BTRFS info (device loop3): has skinny extents
[  282.366166][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'.
[  284.142813][ T6198] loop2: detected capacity change from 0 to 720
[  284.487731][ T6174] BTRFS error (device loop3): open_ctree failed: -12
[  284.665132][   T26] audit: type=1326 audit(1760956326.102:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff107d21fc9 code=0x7ffc0000
[  285.043167][   T26] audit: type=1326 audit(1760956326.112:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff107d21fc9 code=0x7ffc0000
[  285.078588][ T6207] loop2: detected capacity change from 0 to 128
[  285.268646][ T6207] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,nojournal_checksum,barrier=0x0000000000000003,nolazytime,,errors=continue. Quota mode: none.
[  285.285993][ T6207] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  285.319634][   T26] audit: type=1326 audit(1760956326.122:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff107d21fc9 code=0x7ffc0000
[  285.340076][ T6207] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 20: comm syz.2.496: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  285.364056][ T6207] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem
[  285.407315][ T6207] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 20: comm syz.2.496: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1
[  285.436377][ T6213] loop1: detected capacity change from 0 to 2048
[  285.596507][   T26] audit: type=1326 audit(1760956326.122:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff107d21fc9 code=0x7ffc0000
[  285.631722][   T26] audit: type=1326 audit(1760956326.122:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff107d21fc9 code=0x7ffc0000
[  285.802426][   T26] audit: type=1326 audit(1760956326.122:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff107d23e5c code=0x7ffc0000
[  285.827026][   T26] audit: type=1326 audit(1760956326.122:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff107d23d94 code=0x7ffc0000
[  285.901814][ T6213] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  285.935919][ T6213] NILFS (loop1): mounting unchecked fs
[  285.957139][   T26] audit: type=1326 audit(1760956326.132:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff107d23d94 code=0x7ffc0000
[  286.098143][   T26] audit: type=1326 audit(1760956326.132:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff107d21fc9 code=0x7ffc0000
[  286.167833][ T6213] NILFS (loop1): recovery complete
[  286.377807][   T26] audit: type=1326 audit(1760956326.132:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff107d21fc9 code=0x7ffc0000
[  286.492464][ T6227] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  289.225091][ T6252] loop1: detected capacity change from 0 to 65
[  289.326240][ T6252] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  289.355856][ T6251] loop0: detected capacity change from 0 to 2048
[  291.954678][ T6268] loop2: detected capacity change from 0 to 256
[  291.978642][ T6270] loop4: detected capacity change from 0 to 512
[  292.023044][ T6268] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  292.214869][ T6273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.516'.
[  292.217850][ T6270] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  292.990197][ T6276] loop1: detected capacity change from 0 to 2048
[  293.038154][ T6270] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  293.078257][ T6270] EXT4-fs (loop4): 1 truncate cleaned up
[  293.110721][ T6270] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  293.261909][ T6276] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  293.359815][ T6276] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  294.093676][ T4193] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  294.330617][ T4193] EXT4-fs (loop4): Remounting filesystem read-only
[  294.338500][ T4193] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  294.395064][ T4193] EXT4-fs (loop4): Remounting filesystem read-only
[  294.439745][ T4193] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  294.485543][ T4193] EXT4-fs (loop4): Remounting filesystem read-only
[  294.496722][ T4193] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  294.612917][ T4193] EXT4-fs (loop4): Remounting filesystem read-only
[  294.621364][ T4193] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  294.649427][ T4193] EXT4-fs (loop4): Remounting filesystem read-only
[  294.671078][ T4193] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  294.700772][ T4286] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  294.740648][ T4193] EXT4-fs (loop4): Remounting filesystem read-only
[  294.747746][ T4193] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  294.816146][ T4193] EXT4-fs (loop4): Remounting filesystem read-only
[  294.833905][ T4193] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  294.860153][ T4193] EXT4-fs (loop4): Remounting filesystem read-only
[  294.867750][ T4193] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  294.909331][ T4193] EXT4-fs (loop4): Remounting filesystem read-only
[  294.916809][ T4193] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  294.945409][ T4193] EXT4-fs (loop4): Remounting filesystem read-only
[  295.131209][ T4286] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  295.160417][ T4286] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  295.185604][ T4286] usb 4-1: config 0 has no interface number 0
[  295.430892][ T5769] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  295.462045][ T4286] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=e7.f4
[  295.479243][ T4286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.489123][ T4286] usb 4-1: Product: syz
[  295.493668][ T4286] usb 4-1: Manufacturer: syz
[  295.498533][ T4286] usb 4-1: SerialNumber: syz
[  295.519456][ T4286] usb 4-1: config 0 descriptor??
[  295.676656][ T4286] asix: probe of 4-1:0.251 failed with error -22
[  295.691166][ T5769] usb 2-1: Using ep0 maxpacket: 8
[  295.851320][ T5769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  295.873269][ T5769] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  295.884931][ T5769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.902807][ T5769] usb 2-1: config 0 descriptor??
[  296.008448][ T4193] syz-executor (4193) used greatest stack depth: 19968 bytes left
[  296.194496][ T5769] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  296.299953][ T4288] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.356078][ T6307] loop2: detected capacity change from 0 to 32768
[  296.434253][ T5078] usb 2-1: USB disconnect, device number 5
[  296.454685][ T4288] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.478091][ T6307] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  296.687583][ T4288] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.611569][ T4288] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.053883][ T6158] usb 4-1: USB disconnect, device number 6
[  298.066526][ T4187] ocfs2: Unmounting device (7,2) on (node local)
[  298.203149][ T6320] loop1: detected capacity change from 0 to 1024
[  298.311714][ T6320] hfsplus: bad catalog entry type
[  298.599697][  T155] hfsplus: b-tree write err: -5, ino 4
[  299.485849][ T6323] wlan0 speed is unknown, defaulting to 1000
[  299.606846][ T6333] loop1: detected capacity change from 0 to 2048
[  299.741624][ T6333] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  299.772564][ T6333] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  300.170404][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'.
[  301.558401][ T5769] Bluetooth: hci3: command 0x0409 tx timeout
[  301.775089][ T6349] loop3: detected capacity change from 0 to 16
[  301.853554][ T6349] erofs: Unknown parameter './file0'
[  302.333488][ T6323] chnl_net:caif_netlink_parms(): no params data found
[  302.721292][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.830123][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.959381][ T6323] device bridge_slave_0 entered promiscuous mode
[  302.997340][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.004798][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.013290][ T6323] device bridge_slave_1 entered promiscuous mode
[  303.134325][ T6323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.166395][ T6358] loop1: detected capacity change from 0 to 32768
[  303.189235][ T6323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.208803][ T6358] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.541 (6358)
[  303.288654][ T6358] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  303.320882][ T6358] BTRFS info (device loop1): turning off barriers
[  303.327742][ T6358] BTRFS info (device loop1): setting nodatasum
[  303.365525][ T6323] team0: Port device team_slave_0 added
[  303.371835][ T6358] BTRFS info (device loop1): use zlib compression, level 3
[  303.379099][ T6358] BTRFS info (device loop1): using free space tree
[  303.423111][ T6358] BTRFS info (device loop1): has skinny extents
[  303.770707][ T4228] Bluetooth: hci3: command 0x041b tx timeout
[  304.194257][ T6323] team0: Port device team_slave_1 added
[  304.248810][ T6354] loop0: detected capacity change from 0 to 65536
[  304.449792][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  304.449808][   T26] audit: type=1800 audit(1760956345.932:32): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.541" name="file1" dev="loop1" ino=260 res=0 errno=0
[  304.483847][ T6354] XFS (loop0): Mounting V5 Filesystem
[  304.598395][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.671481][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.787641][ T6145] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (6145)
[  304.799924][ T6323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.020792][ T4248] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  305.106866][ T6354] XFS (loop0): Ending clean mount
[  305.205941][ T4192] XFS (loop0): Unmounting Filesystem
[  305.314898][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.325929][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.410892][ T4248] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  305.429643][ T4248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.505199][ T4248] usb 4-1: config 0 descriptor??
[  305.543128][ T6323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.601073][ T4248] gspca_main: cpia1-2.14.0 probing 0813:0001
[  305.744357][ T4288] device hsr_slave_0 left promiscuous mode
[  305.788866][ T4288] device hsr_slave_1 left promiscuous mode
[  305.826145][ T4288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.850738][ T4228] Bluetooth: hci3: command 0x040f tx timeout
[  305.881874][ T4288] batman_adv: batadv0: Removing interface: batadv_slave_0
[  305.928166][ T4288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.956031][ T4288] batman_adv: batadv0: Removing interface: batadv_slave_1
[  305.970952][ T4248] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  305.978708][ T4288] device bridge_slave_1 left promiscuous mode
[  306.069849][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.175771][ T4288] device bridge_slave_0 left promiscuous mode
[  306.193547][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.990261][ T4288] device veth1_vlan left promiscuous mode
[  307.002410][ T4288] device veth0_vlan left promiscuous mode
[  307.091130][ T4248] gspca_cpia1: usb_control_msg 01, error -110
[  307.097992][ T4248] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  307.930742][ T4248] Bluetooth: hci3: command 0x0419 tx timeout
[  308.213138][ T4288] team0 (unregistering): Port device team_slave_1 removed
[  308.234644][ T4288] team0 (unregistering): Port device team_slave_0 removed
[  308.250350][ T4288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.268656][ T4288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.347992][ T4288] bond0 (unregistering): Released all slaves
[  308.479429][ T4248] usb 4-1: USB disconnect, device number 7
[  308.563748][ T6323] device hsr_slave_0 entered promiscuous mode
[  308.744028][ T6323] device hsr_slave_1 entered promiscuous mode
[  308.771204][ T6323] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  308.815541][ T6323] Cannot create hsr debugfs directory
[  310.677044][ T6479] loop2: detected capacity change from 0 to 32768
[  310.767987][ T6323] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  310.775479][ T6465] loop0: detected capacity change from 0 to 32768
[  310.828169][ T6323] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  310.882415][ T6479] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  310.956977][ T6323] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  311.036953][ T6465] XFS (loop0): Mounting V5 Filesystem
[  311.194432][ T6323] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  311.239022][ T6465] XFS (loop0): Ending clean mount
[  311.290284][ T6465] XFS (loop0): Quotacheck needed: Please wait.
[  311.365339][ T4187] ocfs2: Unmounting device (7,2) on (node local)
[  311.437485][ T6465] XFS (loop0): Quotacheck: Done.
[  311.987215][ T4192] XFS (loop0): Unmounting Filesystem
[  312.222105][ T6323] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.348063][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  312.372686][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  312.415679][ T6323] 8021q: adding VLAN 0 to HW filter on device team0
[  312.591237][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  312.635236][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  312.658073][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.665312][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.721627][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  312.759789][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  313.015438][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  313.147456][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.154608][ T4258] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.229418][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  313.317404][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  313.407021][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  313.434204][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  313.589272][ T6323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  313.659456][ T6323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  313.760738][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  313.783397][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  313.838993][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  313.887496][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  313.946356][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  313.947410][ T6548] syz.0.574 uses obsolete (PF_INET,SOCK_PACKET)
[  313.969378][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  314.008971][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  314.063956][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  314.357335][ T6553] loop0: detected capacity change from 0 to 4096
[  314.559098][ T6553] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  314.766487][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  314.849387][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  314.937776][ T6323] 8021q: adding VLAN 0 to HW filter on device batadv0
[  315.383592][ T6576] loop3: detected capacity change from 0 to 8
[  315.975237][ T6576] SQUASHFS error: zlib decompression failed, data probably corrupt
[  315.983667][ T6576] SQUASHFS error: Failed to read block 0x4e8: -5
[  315.994594][ T6576] SQUASHFS error: zlib decompression failed, data probably corrupt
[  316.002765][ T6576] SQUASHFS error: Failed to read block 0x4ee: -5
[  316.019861][ T6576] SQUASHFS error: zlib decompression failed, data probably corrupt
[  316.028089][ T6576] SQUASHFS error: Failed to read block 0x4ef: -5
[  316.040591][   T26] audit: type=1800 audit(1760956357.522:33): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.578" name="file1" dev="loop3" ino=5 res=0 errno=0
[  317.224037][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  317.230514][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  318.111291][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  318.213697][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  318.327176][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  318.389303][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  318.473955][ T6323] device veth0_vlan entered promiscuous mode
[  318.505710][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  318.551136][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  318.593987][ T6323] device veth1_vlan entered promiscuous mode
[  318.697570][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  318.716381][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  318.720210][ T6599] loop3: detected capacity change from 0 to 4096
[  318.766057][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  318.787605][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  318.808613][ T6323] device veth0_macvtap entered promiscuous mode
[  318.849997][ T6323] device veth1_macvtap entered promiscuous mode
[  318.938749][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.967598][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.073383][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  319.140965][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.152867][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  319.164051][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.176172][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_0
[  320.019501][ T6591] loop1: detected capacity change from 0 to 32768
[  320.069382][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  320.094039][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  320.118953][ T6591] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  320.157052][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  320.167229][ T6591] BTRFS info (device loop1): metadata ratio 2
[  320.215329][ T6591] BTRFS info (device loop1): allowing degraded mounts
[  320.231448][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  320.260275][ T6591] BTRFS info (device loop1): force zlib compression, level 3
[  320.280559][    C0] sched: RT throttling activated
[  320.295585][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.374849][ T6591] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  320.434385][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.486748][ T6591] BTRFS info (device loop1): use zstd compression, level 3
[  320.524737][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.540752][ T6591] BTRFS info (device loop1): force clearing of disk cache
[  320.619143][ T6591] BTRFS info (device loop1): allowing degraded mounts
[  320.630658][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.659583][ T6591] BTRFS info (device loop1): max_inline at 0
[  320.696399][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.714107][ T6591] BTRFS info (device loop1): using free space tree
[  320.777893][ T6591] BTRFS info (device loop1): has skinny extents
[  320.784601][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.868475][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_1
[  320.951721][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  320.961551][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  321.019215][ T6598] loop2: detected capacity change from 0 to 32768
[  321.101817][ T6323] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.129026][ T6598] (syz.2.582,6598,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  321.154286][ T6591] BTRFS info (device loop1): enabling ssd optimizations
[  321.181683][ T6323] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.191415][ T6591] BTRFS info (device loop1): clearing free space tree
[  321.198734][ T6591] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  321.260692][ T6323] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.266109][ T6591] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  321.275727][ T6598] (syz.2.582,6598,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  321.340759][ T6323] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.542770][ T6591] BTRFS info (device loop1): creating free space tree
[  321.567714][ T6598] (syz.2.582,6598,0):ocfs2_initialize_super:2313 ERROR: status = -12
[  321.603217][ T6598] (syz.2.582,6598,0):ocfs2_fill_super:1177 ERROR: status = -12
[  321.624639][ T6591] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  321.710892][ T6591] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  321.904290][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.907935][ T4288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.921054][ T4288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.964652][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.071026][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  322.141033][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  323.779828][ T6679] loop3: detected capacity change from 0 to 2048
[  329.323490][ T6705] loop3: detected capacity change from 0 to 40427
[  329.396074][ T6705] F2FS-fs (loop3): invalid crc value
[  329.424844][ T6705] F2FS-fs (loop3): Found nat_bits in checkpoint
[  329.465181][ T6705] F2FS-fs (loop3): Start checkpoint disabled!
[  329.523847][ T6705] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  329.580679][ T5274] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  329.820674][ T5274] usb 6-1: Using ep0 maxpacket: 16
[  329.942925][ T5274] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 11
[  329.963556][ T5274] usb 6-1: config 5 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  330.012929][ T5274] usb 6-1: config 5 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  330.096018][ T4704] attempt to access beyond end of device
[  330.096018][ T4704] loop3: rw=2049, want=45104, limit=40427
[  330.110932][ T5274] usb 6-1: config 5 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  330.140264][ T5274] usb 6-1: config 5 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  330.195665][ T5274] usb 6-1: config 5 interface 0 has no altsetting 0
[  330.245703][ T5274] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice=1f.77
[  330.270971][ T5274] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.364582][ T5274] ums-sddr09 6-1:5.0: USB Mass Storage device detected
[  330.481072][ T5274] ums-sddr09: probe of 6-1:5.0 failed with error -22
[  330.611964][ T6706] loop1: detected capacity change from 0 to 32768
[  330.688585][ T5274] usb 6-1: USB disconnect, device number 2
[  330.761469][ T6706] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  330.770179][ T6706] BTRFS info (device loop1): using free space tree
[  330.811394][ T6706] BTRFS info (device loop1): has skinny extents
[  331.020932][ T6746] loop3: detected capacity change from 0 to 1764
[  331.121282][ T6706] BTRFS info (device loop1): enabling ssd optimizations
[  331.317859][ T6762] loop5: detected capacity change from 0 to 256
[  331.328114][ T6746] loop3: detected capacity change from 0 to 2048
[  331.405933][ T6746] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576
[  331.490236][ T6746] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  332.486910][ T5806] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5806)
[  334.281755][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'.
[  336.690696][ T4697] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  338.050713][ T4697] usb 6-1: device descriptor read/64, error -71
[  338.330819][ T4697] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  338.580716][ T4697] usb 6-1: Using ep0 maxpacket: 8
[  338.743555][ T4697] usb 6-1: unable to get BOS descriptor or descriptor too short
[  338.840860][ T4697] usb 6-1: config 4 interface 0 has no altsetting 0
[  339.030991][ T6835] loop3: detected capacity change from 0 to 40427
[  339.080740][ T4697] usb 6-1: string descriptor 0 read error: -22
[  339.166668][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'.
[  340.659422][ T6835] F2FS-fs (loop3): invalid crc value
[  340.669719][ T4697] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  340.686494][ T6835] F2FS-fs (loop3): Found nat_bits in checkpoint
[  340.719986][ T6835] F2FS-fs (loop3): Start checkpoint disabled!
[  340.752274][ T6835] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  340.850151][ T4697] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  340.990931][ T4697] usb 6-1: can't set config #4, error -71
[  341.074554][ T4697] usb 6-1: USB disconnect, device number 4
[  344.509548][ T4379] attempt to access beyond end of device
[  344.509548][ T4379] loop3: rw=2049, want=40976, limit=40427
[  345.183764][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'.
[  345.759189][ T6898] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  345.824614][ T4183] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  345.912072][ T4183] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  348.390615][ T6908] loop3: detected capacity change from 0 to 32768
[  348.457273][ T6908] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  348.466101][ T6908] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  348.556218][ T6908] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  348.584117][ T4338] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  348.810017][ T6940] loop0: detected capacity change from 0 to 2048
[  348.817238][ T4338] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  348.896600][ T6940] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  348.962047][ T6940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  349.141519][ T4338] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 324ms
[  349.149203][ T4338] gfs2: fsid=syz:syz.0: jid=0: Done
[  350.666165][   T26] audit: type=1326 audit(1760956391.612:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  350.847766][ T6908] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  350.936999][ T6908] gfs2: fsid=syz:syz.0: can't start logd thread: -4
[  350.953894][   T26] audit: type=1326 audit(1760956391.612:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  351.006432][   T26] audit: type=1326 audit(1760956391.712:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  351.244944][   T26] audit: type=1326 audit(1760956391.712:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  351.272571][   T26] audit: type=1326 audit(1760956391.712:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  351.303512][   T26] audit: type=1326 audit(1760956391.812:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8fe90efe5c code=0x7ffc0000
[  351.326560][   T26] audit: type=1326 audit(1760956391.812:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8fe90efd94 code=0x7ffc0000
[  351.349793][   T26] audit: type=1326 audit(1760956391.812:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8fe90efd94 code=0x7ffc0000
[  351.387842][   T26] audit: type=1326 audit(1760956391.812:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  351.410287][   T26] audit: type=1326 audit(1760956391.812:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  353.590631][ T6785] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  353.980869][ T6785] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  354.000293][ T6785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.045374][ T6785] usb 4-1: config 0 descriptor??
[  354.092916][ T6785] gspca_main: cpia1-2.14.0 probing 0813:0001
[  355.221688][ T6785] gspca_cpia1: usb_control_msg 05, error -110
[  355.313311][ T7010] loop2: detected capacity change from 0 to 2048
[  355.386283][ T7010] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  355.416760][ T7010] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  356.020718][ T6785] gspca_cpia1: usb_control_msg 02, error -71
[  356.061449][ T6785] gspca_cpia1: usb_control_msg 05, error -71
[  356.067583][ T6785] cpia1 4-1:0.0: unexpected systemstate: 00
[  356.176457][ T6785] usb 4-1: USB disconnect, device number 8
[  356.803319][ T7027] loop3: detected capacity change from 0 to 512
[  356.852477][ T7027] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  357.069032][ T7027] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.657: bad orphan inode 131083
[  357.231126][ T7027] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  357.902860][ T7027] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  357.947315][ T7017] loop5: detected capacity change from 0 to 32768
[  357.981951][ T7017] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.654 (7017)
[  358.041360][ T7017] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  358.095237][ T7017] BTRFS info (device loop5): using free space tree
[  358.125554][ T7017] BTRFS info (device loop5): has skinny extents
[  358.487205][ T7023] loop2: detected capacity change from 0 to 32768
[  358.652271][ T7017] BTRFS info (device loop5): enabling ssd optimizations
[  358.699251][ T7023] XFS (loop2): Mounting V5 Filesystem
[  359.036962][ T7023] XFS (loop2): Ending clean mount
[  359.079742][ T7023] XFS (loop2): Quotacheck needed: Please wait.
[  359.308435][ T7092] loop3: detected capacity change from 0 to 1024
[  359.443203][ T7023] XFS (loop2): Quotacheck: Done.
[  359.521452][ T4704] hfsplus: b-tree write err: -5, ino 4
[  359.627463][ T4187] XFS (loop2): Unmounting Filesystem
[  360.188388][ T7107] loop1: detected capacity change from 0 to 2048
[  362.813273][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.828734][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.130865][ T4421] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  363.344623][ T7147] loop3: detected capacity change from 0 to 512
[  363.412897][ T7133] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  363.550761][ T4421] usb 1-1: Using ep0 maxpacket: 32
[  363.600800][ T7147] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  363.836984][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.991000][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.029000][ T7147] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  364.500835][ T4421] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  364.510471][ T4421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.528097][ T4421] usb 1-1: config 0 descriptor??
[  364.540898][ T7133] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  364.550251][ T7133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.581868][ T7133] usb 6-1: config 0 descriptor??
[  364.592335][ T4421] hub 1-1:0.0: USB hub found
[  364.756307][ T7139] loop1: detected capacity change from 0 to 32768
[  364.786423][ T7133] gspca_main: cpia1-2.14.0 probing 0813:0001
[  364.826743][ T7170] loop3: detected capacity change from 0 to 512
[  364.831104][ T4421] hub 1-1:0.0: 1 port detected
[  365.387800][ T7139] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  365.441999][ T7139] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  365.503772][ T7139] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  365.514530][ T7170] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.675: casefold flag without casefold feature
[  365.567695][ T7170] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.675: couldn't read orphan inode 15 (err -117)
[  365.593440][ T4421] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  365.602015][ T4421] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  365.610965][ T7133] cpia1 6-1:0.0: unexpected state after lo power cmd: 01
[  365.651184][ T7170] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback.
[  365.821760][ T4421] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 219ms
[  365.833343][ T4697] hub 1-1:0.0: activate --> -90
[  366.086912][ T4421] gfs2: fsid=syz:syz.0: jid=0: Done
[  366.157832][ T7139] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  366.261029][ T7139] gfs2: fsid=syz:syz.0: can't start logd thread: -4
[  366.491106][ T4421] usb 1-1-port1: cannot disable (err = -71)
[  366.530698][ T7133] gspca_cpia1: usb_control_msg 01, error -71
[  366.540576][ T7133] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0)
[  366.803255][ T7133] usb 6-1: USB disconnect, device number 5
[  367.351615][ T4697] usb 1-1: USB disconnect, device number 4
[  367.373517][ T4421] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  367.445688][ T4421] Bluetooth: hci2: Injecting HCI hardware error event
[  367.500441][ T4188] Bluetooth: hci2: hardware error 0x00
[  367.538507][ T7207] loop0: detected capacity change from 0 to 1024
[  367.583395][ T7206] loop3: detected capacity change from 0 to 2048
[  368.579446][ T4288] hfsplus: b-tree write err: -5, ino 4
[  368.868666][ T7225] loop0: detected capacity change from 0 to 2048
[  368.966272][ T7194] loop1: detected capacity change from 0 to 32768
[  368.967612][ T7225] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  369.069042][ T7225] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  369.339867][ T7194] XFS (loop1): Mounting V5 Filesystem
[  369.564262][ T7200] loop2: detected capacity change from 0 to 40427
[  369.579601][ T7194] XFS (loop1): Ending clean mount
[  369.628002][ T7200] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  369.639421][ T7200] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  369.665002][ T7200] F2FS-fs (loop2): invalid crc value
[  369.726892][ T7200] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  369.759158][ T7194] XFS (loop1): Quotacheck needed: Please wait.
[  369.906530][ T7194] XFS (loop1): Quotacheck: Done.
[  370.403196][ T4181] XFS (loop1): Unmounting Filesystem
[  372.146473][ T7281] loop2: detected capacity change from 0 to 2048
[  373.916376][ T7292] loop3: detected capacity change from 0 to 2048
[  374.037867][ T5274] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  374.075965][ T7292] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  374.098161][ T5274] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  375.792922][ T7325] loop5: detected capacity change from 0 to 4096
[  375.877605][ T7325] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  377.105283][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'.
[  377.735543][ T5274] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  377.980649][ T5274] usb 6-1: Using ep0 maxpacket: 16
[  378.098351][ T7326] loop1: detected capacity change from 0 to 40427
[  378.105259][ T5274] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  378.147097][ T7326] F2FS-fs (loop1): invalid crc value
[  378.152547][ T5274] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  378.191745][ T7326] F2FS-fs (loop1): Found nat_bits in checkpoint
[  378.206614][ T5274] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  378.314147][ T5274] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  378.358051][ T5274] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  378.468567][ T7326] F2FS-fs (loop1): Start checkpoint disabled!
[  378.660479][ T7326] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  378.670067][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  378.670169][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  378.683408][ T5274] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  378.698060][ T5274] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  378.708195][ T5274] usb 6-1: Manufacturer: syz
[  378.723566][ T5274] usb 6-1: config 0 descriptor??
[  378.945686][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.717'.
[  378.967655][ T7354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.717'.
[  379.140684][ T5274] rc_core: IR keymap rc-hauppauge not found
[  379.153254][ T5274] Registered IR keymap rc-empty
[  379.190433][ T5274] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  379.251231][ T5274] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  379.317521][ T5274] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  379.663714][ T7361] input: syz1 as /devices/virtual/input/input6
[  379.707862][ T5274] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input5
[  380.131655][ T5274] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  380.251117][ T5274] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  380.411964][ T5274] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  380.561904][ T5274] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  380.640839][ T5274] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  380.700942][ T5274] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  380.715344][   T26] kauditd_printk_skb: 16 callbacks suppressed
[  380.715361][   T26] audit: type=1326 audit(1760956422.202:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  380.748964][ T5274] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  380.820683][ T5274] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  380.870710][ T5274] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  381.594218][ T5274] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  381.712703][ T5274] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  381.735968][ T5274] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  381.777995][ T5274] usb 6-1: USB disconnect, device number 6
[  381.795358][   T26] audit: type=1326 audit(1760956422.242:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  381.978640][   T26] audit: type=1326 audit(1760956422.242:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  382.034791][ T7374] loop1: detected capacity change from 0 to 2048
[  382.129442][   T26] audit: type=1326 audit(1760956422.242:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  382.159615][   T26] audit: type=1326 audit(1760956422.242:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  382.200030][ T7374] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  382.407929][   T26] audit: type=1326 audit(1760956422.252:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fe90efee7 code=0x7ffc0000
[  382.563769][   T26] audit: type=1326 audit(1760956422.252:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8fe90efe5c code=0x7ffc0000
[  382.727810][   T26] audit: type=1326 audit(1760956422.252:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8fe90efd94 code=0x7ffc0000
[  382.859963][   T26] audit: type=1326 audit(1760956422.252:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8fe90efd94 code=0x7ffc0000
[  383.029519][   T26] audit: type=1326 audit(1760956422.252:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8fe90ecc2a code=0x7ffc0000
[  383.369987][ T7399] tmpfs: Unknown parameter 'quota'
[  383.724297][ T7409] loop0: detected capacity change from 0 to 1764
[  383.856848][ T7388] loop2: detected capacity change from 0 to 32768
[  384.208404][ T7388] XFS (loop2): Mounting V5 Filesystem
[  384.253096][ T7425] loop3: detected capacity change from 0 to 256
[  384.356777][ T7419] loop0: detected capacity change from 0 to 2048
[  384.446564][ T7419] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  384.487070][ T7388] XFS (loop2): Ending clean mount
[  384.501599][ T7425] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  384.519499][ T7388] XFS (loop2): Quotacheck needed: Please wait.
[  384.549314][ T7419] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  384.907824][ T7388] XFS (loop2): Quotacheck: Done.
[  385.295219][ T4187] XFS (loop2): Unmounting Filesystem
[  386.480751][   T26] kauditd_printk_skb: 31 callbacks suppressed
[  386.480772][   T26] audit: type=1326 audit(1760956427.272:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccedce4fc9 code=0x7ffc0000
[  386.609268][   T26] audit: type=1326 audit(1760956427.272:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccedce4fc9 code=0x7ffc0000
[  386.729196][   T26] audit: type=1326 audit(1760956427.272:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccedce6ee7 code=0x7ffc0000
[  386.921117][   T26] audit: type=1326 audit(1760956427.272:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fccedce6e5c code=0x7ffc0000
[  386.992382][   T26] audit: type=1326 audit(1760956427.272:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fccedce6d94 code=0x7ffc0000
[  387.036126][   T26] audit: type=1326 audit(1760956427.272:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fccedce6d94 code=0x7ffc0000
[  387.060905][   T26] audit: type=1326 audit(1760956427.272:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fccedce3c2a code=0x7ffc0000
[  387.086007][   T26] audit: type=1326 audit(1760956427.272:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccedce4fc9 code=0x7ffc0000
[  387.311921][   T26] audit: type=1326 audit(1760956427.272:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccedce4fc9 code=0x7ffc0000
[  387.477064][   T26] audit: type=1326 audit(1760956427.272:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fccedce4fc9 code=0x7ffc0000
[  389.667881][ T7479] mip6: mip6_rthdr_init_state: state's mode is not 2: 4
[  390.015497][ T7489] loop2: detected capacity change from 0 to 512
[  390.239666][ T7489] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  390.529011][ T7489] EXT4-fs (loop2): 1 orphan inode deleted
[  390.540710][ T7489] EXT4-fs (loop2): 1 truncate cleaned up
[  390.546408][ T7489] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback.
[  390.585523][ T7489] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1447: inode #12: block 7: comm syz.2.748: path /161/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  390.655479][ T7489] EXT4-fs (loop2): Remounting filesystem read-only
[  392.550754][ T6157] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  392.861779][ T6157] usb 4-1: Using ep0 maxpacket: 8
[  393.005225][ T6157] usb 4-1: config 255 has an invalid interface number: 154 but max is 0
[  393.026934][ T7495] loop2: detected capacity change from 0 to 65536
[  393.039720][ T6157] usb 4-1: config 255 has no interface number 0
[  393.059996][ T6157] usb 4-1: config 255 interface 154 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  393.116322][ T6157] usb 4-1: config 255 interface 154 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64
[  393.621730][ T7495] XFS (loop2): Mounting V5 Filesystem
[  393.739077][ T6157] usb 4-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=3e.73
[  393.748245][ T6157] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.074019][ T7495] XFS (loop2): Ending clean mount
[  394.184325][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  394.184417][   T26] audit: type=1326 audit(1760956435.642:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  394.886507][ T6157] usb 4-1: USB disconnect, device number 9
[  394.950821][   T26] audit: type=1326 audit(1760956435.642:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  394.994015][ T6157] ==================================================================
[  395.002656][ T6157] BUG: KASAN: use-after-free in hdm_disconnect+0x109/0x1c0
[  395.009917][ T6157] Read of size 8 at addr ffff88801ec8d960 by task kworker/0:20/6157
[  395.017905][ T6157] 
[  395.020241][ T6157] CPU: 0 PID: 6157 Comm: kworker/0:20 Not tainted syzkaller #0
[  395.027790][ T6157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  395.032619][ T7506] loop1: detected capacity change from 0 to 65536
[  395.038013][ T6157] Workqueue: usb_hub_wq hub_event
[  395.049584][ T6157] Call Trace:
[  395.052892][ T6157]  <TASK>
[  395.055895][ T6157]  dump_stack_lvl+0x168/0x230
[  395.060724][ T6157]  ? show_regs_print_info+0x20/0x20
[  395.065972][ T6157]  ? load_image+0x3b0/0x3b0
[  395.070514][ T6157]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  395.075935][ T6157]  print_address_description+0x60/0x2d0
[  395.081537][ T6157]  ? hdm_disconnect+0x109/0x1c0
[  395.086417][ T6157]  kasan_report+0xdf/0x130
[  395.090867][ T6157]  ? hdm_disconnect+0x109/0x1c0
[  395.095743][ T6157]  hdm_disconnect+0x109/0x1c0
[  395.100451][ T6157]  usb_unbind_interface+0x1ee/0x860
[  395.105682][ T6157]  ? usb_driver_release_interface+0x1b0/0x1b0
[  395.111776][ T6157]  device_release_driver_internal+0x4b4/0x750
[  395.117926][ T6157]  bus_remove_device+0x2e2/0x400
[  395.122894][ T6157]  device_del+0x628/0xa70
[  395.127268][ T6157]  ? kill_device+0x160/0x160
[  395.131876][ T6157]  ? kobject_put+0x424/0x460
[  395.136486][ T6157]  usb_disable_device+0x3e2/0x890
[  395.141549][ T6157]  usb_disconnect+0x348/0x8a0
[  395.146273][ T6157]  hub_event+0x1e9f/0x5560
[  395.150747][ T6157]  ? hub_post_resume+0x120/0x120
[  395.155720][ T6157]  ? read_lock_is_recursive+0x10/0x10
[  395.161106][ T6157]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  395.167011][ T6157]  ? _raw_spin_unlock+0x40/0x40
[  395.171913][ T6157]  ? _raw_spin_unlock_irq+0x1f/0x40
[  395.177131][ T6157]  process_one_work+0x863/0x1000
[  395.182096][ T6157]  ? worker_detach_from_pool+0x240/0x240
[  395.187751][ T6157]  ? lockdep_hardirqs_off+0x70/0x100
[  395.193137][ T6157]  ? _raw_spin_lock_irq+0xab/0xe0
[  395.198174][ T6157]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  395.203557][ T6157]  ? wq_worker_running+0x97/0x170
[  395.208686][ T6157]  worker_thread+0xdca/0x12a0
[  395.213398][ T6157]  kthread+0x436/0x520
[  395.217473][ T6157]  ? rcu_lock_release+0x20/0x20
[  395.222354][ T6157]  ? kthread_blkcg+0xd0/0xd0
[  395.226966][ T6157]  ret_from_fork+0x1f/0x30
[  395.231405][ T6157]  </TASK>
[  395.234432][ T6157] 
[  395.236760][ T6157] Allocated by task 6157:
[  395.241085][ T6157]  __kasan_kmalloc+0xb5/0xf0
[  395.245680][ T6157]  hdm_probe+0x8f/0x13d0
[  395.249931][ T6157]  usb_probe_interface+0x5a0/0xaf0
[  395.255049][ T6157]  really_probe+0x284/0xc80
[  395.259562][ T6157]  __driver_probe_device+0x18c/0x330
[  395.264855][ T6157]  driver_probe_device+0x4f/0x420
[  395.269889][ T6157]  __device_attach_driver+0x2b0/0x500
[  395.275277][ T6157]  bus_for_each_drv+0x175/0x200
[  395.280220][ T6157]  __device_attach+0x29b/0x460
[  395.284987][ T6157]  bus_probe_device+0xbc/0x1e0
[  395.289760][ T6157]  device_add+0xa00/0xfb0
[  395.294102][ T6157]  usb_set_configuration+0x1991/0x1fd0
[  395.299567][ T6157]  usb_generic_driver_probe+0x89/0x150
[  395.305031][ T6157]  usb_probe_device+0x139/0x270
[  395.309972][ T6157]  really_probe+0x284/0xc80
[  395.314479][ T6157]  __driver_probe_device+0x18c/0x330
[  395.319769][ T6157]  driver_probe_device+0x4f/0x420
[  395.324802][ T6157]  __device_attach_driver+0x2b0/0x500
[  395.330192][ T6157]  bus_for_each_drv+0x175/0x200
[  395.335396][ T6157]  __device_attach+0x29b/0x460
[  395.340168][ T6157]  bus_probe_device+0xbc/0x1e0
[  395.344938][ T6157]  device_add+0xa00/0xfb0
[  395.349275][ T6157]  usb_new_device+0xd53/0x1640
[  395.354044][ T6157]  hub_event+0x2dd9/0x5560
[  395.358473][ T6157]  process_one_work+0x863/0x1000
[  395.363436][ T6157]  worker_thread+0xaa8/0x12a0
[  395.368120][ T6157]  kthread+0x436/0x520
[  395.372198][ T6157]  ret_from_fork+0x1f/0x30
[  395.376628][ T6157] 
[  395.378959][ T6157] Freed by task 6157:
[  395.382940][ T6157]  kasan_set_track+0x4b/0x70
[  395.387542][ T6157]  kasan_set_free_info+0x1f/0x40
[  395.392573][ T6157]  ____kasan_slab_free+0xd5/0x110
[  395.397614][ T6157]  slab_free_freelist_hook+0xea/0x170
[  395.402989][ T6157]  kfree+0xef/0x2a0
[  395.406805][ T6157]  device_release+0x92/0x1c0
[  395.411398][ T6157]  kobject_put+0x21d/0x460
[  395.415818][ T6157]  hdm_disconnect+0xef/0x1c0
[  395.420414][ T6157]  usb_unbind_interface+0x1ee/0x860
[  395.425621][ T6157]  device_release_driver_internal+0x4b4/0x750
[  395.431694][ T6157]  bus_remove_device+0x2e2/0x400
[  395.436640][ T6157]  device_del+0x628/0xa70
[  395.441084][ T6157]  usb_disable_device+0x3e2/0x890
[  395.446127][ T6157]  usb_disconnect+0x348/0x8a0
[  395.450809][ T6157]  hub_event+0x1e9f/0x5560
[  395.455244][ T6157]  process_one_work+0x863/0x1000
[  395.460194][ T6157]  worker_thread+0xdca/0x12a0
[  395.464875][ T6157]  kthread+0x436/0x520
[  395.468950][ T6157]  ret_from_fork+0x1f/0x30
[  395.473380][ T6157] 
[  395.475710][ T6157] The buggy address belongs to the object at ffff88801ec8c000
[  395.475710][ T6157]  which belongs to the cache kmalloc-8k of size 8192
[  395.489772][ T6157] The buggy address is located 6496 bytes inside of
[  395.489772][ T6157]  8192-byte region [ffff88801ec8c000, ffff88801ec8e000)
[  395.503348][ T6157] The buggy address belongs to the page:
[  395.509030][ T6157] page:ffffea00007b2200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ec88
[  395.519194][ T6157] head:ffffea00007b2200 order:3 compound_mapcount:0 compound_pincount:0
[  395.527619][ T6157] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  395.535635][ T6157] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016842280
[  395.544237][ T6157] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  395.552821][ T6157] page dumped because: kasan: bad access detected
[  395.559253][ T6157] page_owner tracks the page as allocated
[  395.564973][ T6157] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7546, ts 394182064674, free_ts 394163125288
[  395.585768][ T6157]  get_page_from_freelist+0x1b77/0x1c60
[  395.591370][ T6157]  __alloc_pages+0x1e1/0x470
[  395.595974][ T6157]  new_slab+0xc0/0x4b0
[  395.600050][ T6157]  ___slab_alloc+0x81e/0xdf0
[  395.604647][ T6157]  kmem_cache_alloc_trace+0x1a5/0x2a0
[  395.610030][ T6157]  audit_log_d_path+0xc0/0x260
[  395.614810][ T6157]  audit_log_d_path_exe+0x3e/0x70
[  395.619851][ T6157]  audit_log_task+0x20c/0x2d0
[  395.624538][ T6157]  audit_seccomp+0x81/0x180
[  395.629046][ T6157]  __seccomp_filter+0xa50/0x19d0
[  395.633988][ T6157]  syscall_trace_enter+0xcc/0x180
[  395.639173][ T6157]  do_syscall_64+0x24/0xa0
[  395.643617][ T6157]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  395.649554][ T6157] page last free stack trace:
[  395.654229][ T6157]  free_unref_page_prepare+0x637/0x6c0
[  395.659703][ T6157]  free_unref_page+0x94/0x280
[  395.664388][ T6157]  __unfreeze_partials+0x1a5/0x200
[  395.669510][ T6157]  put_cpu_partial+0x12d/0x190
[  395.674283][ T6157]  qlist_free_all+0x35/0x90
[  395.678803][ T6157]  kasan_quarantine_reduce+0x150/0x160
[  395.684273][ T6157]  __kasan_slab_alloc+0x2f/0xd0
[  395.689133][ T6157]  slab_post_alloc_hook+0x4c/0x380
[  395.694254][ T6157]  kmem_cache_alloc_node+0x12d/0x2d0
[  395.699644][ T6157]  __alloc_skb+0xf4/0x750
[  395.703983][ T6157]  netlink_sendmsg+0x645/0xbc0
[  395.708748][ T6157]  __sys_sendto+0x423/0x580
[  395.713260][ T6157]  __x64_sys_sendto+0xda/0xf0
[  395.717942][ T6157]  do_syscall_64+0x4c/0xa0
[  395.722368][ T6157]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  395.728267][ T6157] 
[  395.730596][ T6157] Memory state around the buggy address:
[  395.736229][ T6157]  ffff88801ec8d800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  395.744301][ T6157]  ffff88801ec8d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  395.752367][ T6157] >ffff88801ec8d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  395.760439][ T6157]                                                        ^
[  395.767656][ T6157]  ffff88801ec8d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  395.775749][ T6157]  ffff88801ec8da00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  395.783824][ T6157] ==================================================================
[  395.791980][ T6157] Disabling lock debugging due to kernel taint
[  395.819718][   T26] audit: type=1326 audit(1760956435.642:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fe90efee7 code=0x7ffc0000
[  395.850778][   T26] audit: type=1326 audit(1760956435.642:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8fe90efe5c code=0x7ffc0000
[  395.886759][   T26] audit: type=1326 audit(1760956435.652:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8fe90efd94 code=0x7ffc0000
[  395.909830][   T26] audit: type=1326 audit(1760956435.652:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8fe90efd94 code=0x7ffc0000
[  395.928123][ T6157] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  395.939229][ T6157] CPU: 0 PID: 6157 Comm: kworker/0:20 Tainted: G    B             syzkaller #0
[  395.948285][ T6157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  395.953813][   T26] audit: type=1326 audit(1760956435.652:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8fe90ecc2a code=0x7ffc0000
[  395.958448][ T6157] Workqueue: usb_hub_wq hub_event
[  395.958483][ T6157] Call Trace:
[  395.981366][   T26] audit: type=1326 audit(1760956435.652:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  395.985729][ T6157]  <TASK>
[  395.985740][ T6157]  dump_stack_lvl+0x168/0x230
[  395.989250][   T26] audit: type=1326 audit(1760956435.652:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  396.011377][ T6157]  ? show_regs_print_info+0x20/0x20
[  396.011406][ T6157]  ? load_image+0x3b0/0x3b0
[  396.011434][ T6157]  panic+0x2c9/0x7f0
[  396.011457][ T6157]  ? bpf_jit_dump+0xd0/0xd0
[  396.011480][ T6157]  ? _raw_spin_unlock_irqrestore+0xf6/0x100
[  396.011500][ T6157]  ? _raw_spin_unlock+0x40/0x40
[  396.011518][ T6157]  ? hdm_disconnect+0x109/0x1c0
[  396.011539][ T6157]  check_panic_on_warn+0x80/0xa0
[  396.011560][ T6157]  ? hdm_disconnect+0x109/0x1c0
[  396.011579][ T6157]  end_report+0x6d/0xf0
[  396.011599][ T6157]  kasan_report+0x102/0x130
[  396.011621][ T6157]  ? hdm_disconnect+0x109/0x1c0
[  396.011643][ T6157]  hdm_disconnect+0x109/0x1c0
[  396.011664][ T6157]  usb_unbind_interface+0x1ee/0x860
[  396.011691][ T6157]  ? usb_driver_release_interface+0x1b0/0x1b0
[  396.011733][ T6157]  device_release_driver_internal+0x4b4/0x750
[  396.016490][   T26] audit: type=1326 audit(1760956435.662:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8fe90edfc9 code=0x7ffc0000
[  396.019415][ T6157]  bus_remove_device+0x2e2/0x400
[  396.147776][ T6157]  device_del+0x628/0xa70
[  396.152143][ T6157]  ? kill_device+0x160/0x160
[  396.156888][ T6157]  ? kobject_put+0x424/0x460
[  396.161495][ T6157]  usb_disable_device+0x3e2/0x890
[  396.166531][ T6157]  usb_disconnect+0x348/0x8a0
[  396.171224][ T6157]  hub_event+0x1e9f/0x5560
[  396.175829][ T6157]  ? hub_post_resume+0x120/0x120
[  396.180880][ T6157]  ? read_lock_is_recursive+0x10/0x10
[  396.186263][ T6157]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  396.192161][ T6157]  ? _raw_spin_unlock+0x40/0x40
[  396.197152][ T6157]  ? _raw_spin_unlock_irq+0x1f/0x40
[  396.202371][ T6157]  process_one_work+0x863/0x1000
[  396.207332][ T6157]  ? worker_detach_from_pool+0x240/0x240
[  396.212988][ T6157]  ? lockdep_hardirqs_off+0x70/0x100
[  396.218397][ T6157]  ? _raw_spin_lock_irq+0xab/0xe0
[  396.223445][ T6157]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  396.228911][ T6157]  ? wq_worker_running+0x97/0x170
[  396.233945][ T6157]  worker_thread+0xdca/0x12a0
[  396.238756][ T6157]  kthread+0x436/0x520
[  396.242957][ T6157]  ? rcu_lock_release+0x20/0x20
[  396.247819][ T6157]  ? kthread_blkcg+0xd0/0xd0
[  396.252419][ T6157]  ret_from_fork+0x1f/0x30
[  396.256867][ T6157]  </TASK>
[  396.260240][ T6157] Kernel Offset: disabled
[  396.265671][ T6157] Rebooting in 86400 seconds..