last executing test programs: 3.720066947s ago: executing program 3 (id=126): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0xfffffffa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e23, 0xfffffff7, @rand_addr=' \x01\x00', 0x6}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000000040)=0x55) 3.548350817s ago: executing program 2 (id=129): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x40086603, &(0x7f0000000040)) 3.394920611s ago: executing program 2 (id=130): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @loopback, 0x3}}, 0x24) 3.179598998s ago: executing program 3 (id=132): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.976127579s ago: executing program 2 (id=135): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x240, 0xffffffff, 0x1a0, 0x0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) 2.692591759s ago: executing program 2 (id=139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 2.350913352s ago: executing program 2 (id=142): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0x1, 0x6216, &(0x7f000000cb40)="$eJzs3c2OHFfZB/Cn+ms+/CaxsojyRghNEgMJIf4MxhAgyQIWbFggb5GtySSycADZBjmWhSeaDQsuAoTEEhBLVlxAFmzZcQFYspGArFKoZs4Z1zTT7rGd7uqZ8/tJk6qnTtX0qfy7prtdVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvffcHZ6qIuPTztOB4xP9FP6IXsdLUaxGxsnY8rz+IiOdjuzmei4jhUkSVG5+JeCMiPn464t792+vNorMH7Md3/vi33/7w2Pf/+vvhqX//6Ub/zUnr3bz5q3/9+c7j7y8AAACUqK7rukof819In+97XXcKAJiL/PpfJ3m5euHqzQXrj1qtVqsPYd1W7+9Ou4iIzfY2zXsGp+MB4JDZjE+67gIdkn/RBhFxrOtOAAut6roDzMS9+7fXq5Rv1X49WNtpz9eC7Ml/s9q9v2PSdJrxa0zm9fzain48O6E/K3PqwyLJ+ffG87+00z5K6806/3mZlP9o59an4uT8++P5jzk6+ff2zb9UOf/BI+Xflz8AAAAAACyw/O//xzs+/7v05LtyIA87/7s2pz4AAAAAAAAAwGftScf/21UZ/w8AAAAWVfNZvfHrpx8sm/RdbM3yi1XEU2PrA4VJN8usdt0PAAAAAAAAAAAAACjJYOca3otVxDAinlpdreu6+Wkbrx/Vk25/2JW+/1Cyrv/IAwDAjo+fHruXv4pYjoiL6bv+hqurq3W9vLJar9YrS/n97GhpuV5pfa7N02bZ0ugAb4gHo7r5Zcut7dqmfV6e1j7++5rHGtX9A3RsPjoMHAAiYufV6J5XpCOmrp+Jrt/lcDg4/o8exz8H0fXzFAAAAJi9uq7rKn2d9wvpnH+v604BAHORX//Hzwuo1Wq1Wq0+enVbvb877SIiNtvbNO8ZDMcPAIfMZnzSdRfokPyLNoiI57vuBLDQqq47wEzcu397vUr5Vu3XgzS+e74WZE/+m9X2dnn7/abTjF9jMq/n11b049kJ/XluTn1YJDn/3nj+l3baR2m9Wec/L5Pyb/bzeAf96VrOvz+e/5ijk39v3/xLlfMfPFL+ffkDAAAAAMACy//+f3yhzv+OHnd3pnrY+d+1mT0qAAAAAAAAAMzWvfu31/N9r/n8/+f2Wc/9n0dTzr+Sf5Fy/un+/90Lb14ZW6/fmr/7zoP8/3n/9vrvbvzj//P0oPkv5ZkqPbOq9Iyo0iNVgzR9zB2bYGvYHzWPNKx6/UG65qcevhdX4mpsxOk96/bS8fCg/cye9qanw+32ur/TfnZP+2C3PW9/bk/7MF3pVK/k9pOxHj+Jq/HudnvTtjRl/5entNdT2nP+fcd/kXL+g9ZPk/9qaq/Gpo27H/X+57hvT/d7nLevfP6Xp2e/O1NtRX9339qa/Xupg/5s/z85disiNq6dvHn5xo1rZyJNjo3iZ9fz0rORJp+xnP8w/eT8X3l5pz3/3W8fr3c/Gj1y/otiKwYT83+5Nd/s76tz7lsXcv6j9JPzfze173/8H+b8Jx//r3XQHwAAAAAAAAAAAAAAAHiYuq63bxF9OyLOp/t/uro3EwCYr/z6Xyd5+bzq/uNu/4e9+9FV/9XqOdfVgvVnrvWn9WL1R72Q9X8WrD8LV7fV+3urXUTEX9rbNO8ZfrHfLwMAFtmnEfH3rjtBZ+RfsPx9f830RNedAebq+oe3fnT56tWNa9e77gkAAAAAAAAA8Ljy+J9rrfGfT9R1fWdsvT3jv74Ta086/ucgz+wOMDphoOr+o+/Tw2z1Rv1ea7jxF2PS+N/D3bmHjf89mPJ4wyntoyntS1Pal6e073ujR0vO/8XWeOcnIuKFseHXSxj/dXzM+xLk/F9qPZ+b/L80tl47//o3hzn/3p78T9344Kenrn946/UrH1x+f+P9jR+fO3Pm9Lnz5y9cuHDqvStXN07v/LfDHs9Wzj+Pfe060LLk/HPm8i9Lzv8LqZZ/WXL+X0y1/MuS88/v9+Rflpx//uwj/7Lk/F9NtfzLkvP/cqrlX5ac/2upln9Zcv5fSbX8y5Lzfz3V8i9Lzv9kquVflpz/qVQfMP+VWfeL+cj55zNcjv+y5PzzlQ3yL0vO/2yq5V+WnP+5VMu/LDn/N1It/7Lk/L+aavmXJed/PtXyL0vO/2upln9Zcv4XUi3/suT8v55q+Zcl5/+NVMu/LDn/N1Mt/7Lk/L+ZavmXJef/rVTLvyw5/2+nWv5lyfm/lWr5l+XB9/+bMWNmRjODw3egdf2XCQAAAAAAAAAAAAAYN4/LibveRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe/cWI9dd3wH8zN68diA2EFInNWHtGGOcTXZ9iS+0LiZcG24lIRR6wXa9a7PgG167BBrVjgIlEkZFFW3DQ1tAqM1LhVXxQKuA8oBaVapE2gf6gqhQeYiqgAJSVVpBtpo5//9/Z2ZnZ3a9483Zcz4fKfllZ87MOXPmP7P7tfPdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg2dY3TX+mlmVZrVbLL9iUZS+pz/VjmxqXvP7FPT4AAABg5X7R+PfzG9MFR5Zwo6Zt/umO73x9bm5uLvvA4J8Of2FuLl0xlmXD67KscV107QcfrDVvEzyWjdYGmr4e6LH7wR7XD/W4frjH9SM9rl/X4/rRHtcvOAELrM9q6c62N/5zU35Ks1uy4cZ12zvc6rHauoH6uUu3zWqN28wNn8xmstPZdDbZsn2+ba2x/VNb6/t6exb3NdC0ry31FfKTR07EY6iFc7y9ZV/z9xn96I3Z2E9/8siJv7743G2dZs/T0HJ/+XHu3FY/zk+FS/JjrWXr0jmJxznQdJxbOjwngy3HWWvcrv7f7cf5/BKPc3D+MFdV+3M+mg00/vuZxnkaqmUdztOWcNnP7syy7Mr8Ybdvs2Bf2UC2oeWSgfnnZzRfkfX7qC+ll2dDy1qnW5ewTutzanvrOm1/TcTnf2u43dAix9D8NP3o0ZGm5/3nc9ezTqP6o17stdK+Bvv9WinKGozr4pnGg3684xrcHh7/IzsWX4Md106HNZged9Ma3NZrDQ6MDDaOOT0JtcZt5tfg7pbtBxt7qjXmszu6r8GJi2fOT8x+4pN3z5w5fmr61PTZvbt3T+7dv//gwYMTJ2dOT0/m/77Os118G7KB9BrYFs5dfA28tm3b5qU69+WRBe+/1/s6HO3yOtzUtm2/X4dD7Q+utjovyIVrOn9tvK9+0kevDmSLvMYaz8+ulb8O0+Nueh0ONb0OO35P6fA6HFrC67C+zfldS/uZZajpn07HsPj3gpWtwU1Na7D955H2Ndjvn0eKsgZHw7r43q7FvxdsCcf7+Phyfx4ZXLAG08MN7z31S9LP+6MHG6PTury9fsVNI9ml2ekL9zx8/OLFC7uzMFbFK5rWSvt63dD0mLIF63Vg2ev1yMwdj9/e4fJN4VyN3l3/1+iiz1V9m333dH+uGt/dOp/Plkv3ZGH02Wqfz07fzevncyTLvvjtRx/45iNffNOi57OeNz81sfKfxVMubXr/HV7k/Tfm/hfy/aW7emxweCh//Q6mszPc8n7c+lQNNd67ao19Pz+xtPfj4fDPar8f39Ll/Xhz27b9fj8ebn9w8f241utPO1am/fkcDevk9GT39+P6Npv3LHdNDnV9P74zzFo4/68LSSHloqa1s9i6TfsaGhoOj2so7qF1ne5t2X44ZLP6vp7cc33rdOed+X0Npkc3b7XW6Vjbtv1ep+nPvhZbp7Vef/p2fdqfz9GwLm7Z232d1rd5et/K3zvXx/9seu8c6bUGhwdH6sc8nBZh4/0+m1sf1+A92YnsXHY6m2pcO9JYT7XGvsbvXdoaHAn/rPZ75eYua3Bn27b9XoPp+9hia682tPDB90H78zka1sUT93Zfg/Vt3nygvz+77gyXpG2afnZt//O1xf7M6/a203Sj1spQOM5vH+j+Z7P1bU4fXG7O7H6e7gqX3NThPLW/fhd7TU1lq3OeNofjfO7g4uepfjz1bb5waInr6UiWZZc/dl/jz3vD36/83aXvfr3l7106/Z3O5Y/d9+OXnvzH5Rw/AGvfC/nYkH+va/qbqaX8/T8AAACwJsTcPxBmIv8DAABAacTcH/+v8ET+BwAAgNKIuX8ozKQi+X/zm5+beeFylpr5c0G8Pp2G+/PtYsd1Mnw9Njevfvl9X53+73+4vLR9D2RZ9vP7/6Dj9pvvj8eVGwvHee0trZcv8PW7l7TvYw9dTvtt7q9/Kdx/fDxLXQadKriTWZY9tfFzjf2MffBqYz59/7HGfODK44/Vt3n+UP51vP2zr8i3/4tQ/j1y8njL7Z8N5+GHYU6+o/P5iLf72tXXbTnw/vn9xdvVtt3ceNhPfCi/3/h7cj7/WL59PM+LHf83P/vk1+rbP/yazsd/eaDz8T8Z7verYf7vq/Ltm5+D+tfxdp8Oxx/3F293z1e+1fH4r30m3/78W/PtjoUZ978zfL39rc/NNJ+vh2vHWx5X9rZ8u7j/ye/+ceP6eH/x/tuPf/To1Zbz0b4+nv63/H4m2raPl8f9RH/ftv/6/TSvz7j/J//oWMt57rX/aw88+6r6/bbv/6627c5/bFdj//P31/obm/7y05/ruL94PEf+9nzL4zny3vA6Dvt/4kNhPYbr/+9afn/tv13h2Htb33/i9l/adLnl8URv/2m+/2tvONWY60bXb7jpJS+9+cqr6+cuy55Zl99fr/2f+qtzLcf/5Vvz8xGvjx399v0vJu7/wsfHz56bvTQzlc7qIxsbvzvnnfnxxOPdGN5b278+eu7ih6cvjE2OTWbZWHl/hd51+0qYP87Hle5bzy14B931UHg+b//zpzbs+NfPxsv//X355VffkX/fem3Y7vPh8k3h+Vve/hd6Yuutjdd37elwhHMLf1/wSmzZ/l8Hl7RhePztPxfE9X7+lR9unIf6dY3vG/F1vcLj//5Ufj/fCOd1Lvxm5m23zu+vefv4uxGuPpi/3ld8/sLbXHxe/yY83+/6YX7/8bji4/1++DnmW5tb3+/i+vjG5YH2+2/8Fo8r4f0ku5JfH7eK5/vq87d2PLz4e0iyK7c1vv6TdD+3LethLmb2E7MTp2fOXnp44uL07MWJ2U988uiZc5fOXjza+F2eRz/S6/bz708bGu9PU9P792WNd6tz+bjBXuzjP//QiakDkzumpk8ev3Ty4kPnpy+cOjE7e2J6anbH8ZMnpz/e6/YzU4d37zm098Ce8VMzU4cPHjq099D4zNlz9cPID6qH/ZMfHT974WjjJrOH9x3afe+9+ybHz5ybmj58YHJy/FKv2ze+N43Xb/374xemTx+/OHNmenx25pPTh3cf2r9/T8/fBnjm/MnZsYkLl85OXJqdvjCRP5axi42L69/7et2ecpr9j/zn2Xa1/BfxZe+5a3/6/ax1X3100bvKN2n7BaLPhd9F888vO39wKV/H3D8cZlKR/A8AAABVEHP/SJiJ/A8AAAClEXP/ujAT+R8AAABKI+b+0TCTiuT/0vX/N19e0v71//X/m8+X/n/F+v8PFq3/n79f6P/3x0r79/r/gf6//r/+v/6//j99ULT+f8z967OskvkfAAAAqiDm/g1hJvI/AAAAlEbM/TeFmcj/AAAAUBox978kzKQi+V//X/9f/1//X/+/8/71/9cm/f/u9P970P+fyKrV/7/Sz+PX/9f/Z6Gi9f9j7n9pmElF8j8AAABUQcz9N4eZyP8AAABQGjH3bwwzkf8BAACgNGLu3xRmUpH8r//ftf/fXkNelP5/6/Hr/3deH/r/+v/6/zee/n93+v896P/7/H/9f/1/+qpo/f+Y+18WZlKR/A8AAABVEHP/y8NM5H8AAAAonqHru1nM/a8IM1mQ/69zBwAAAMCLLub+W7K2InhF/v5f/9/n/xe//78uXaf/r/+fFbL/P5jp/xeH/n93+v896P/r/+v/6//TV0Xr/zdyfzaavTLMpCL5HwAAAKog5v5bw0zkfwAAACiNmPt/KcxE/gcAAIDSiLl/c5hJRfK//r/+f/H7/z7/X/+/6P1/n/9fJPr/3en/96D/r/+v/6//T18Vrf8fc/9tYSYVyf8AAABQBTH33x5mIv8DAABAacTc/8thJvI/AAAAlEbM/VvCTCqS//X/C97/j81R/X/9f/1//X/9/yXR/+9O/78H/X/9f/1//X/6qmj9/5j7XxVmUpH8DwAAAFUQc/8dYSbyPwAAAJRGzP2vDjOR/wEAAKA0Yu4fCzOpSP7X/y94/z/vwY/4/H/9f/1//X/9/6XR/+9O/78H/X/9/770/+cu6//r/5MrWv8/5v6tYSYVyf8AAABQBTH3bwszkf8BAACgNGLuvzPMRP4HAACA0oi5f3uYSUXyv/7/muj/Z/r/+v/6//r/+v9Lo//fnf5/D/r/+v8+/1//n74qWv8/5v7XhJlUJP8DAABAFcTcvyPMRP4HAACA0oi5/7VhJvI/AAAAlEbM/TvDTCqS//X/9f/1//X/9f8771//f23S/+9O/78H/X/9f/1//X/6qmj9/5j7XxdmUpH8DwAAAFUQc/+uMBP5HwAAAEoj5v67wkzkfwAAACiNmPvHw0wqkv/1//X/9f/1//X/O+9f/39t0v/vTv+/B/1//X/9f/1/+qpo/f+Y++8OM6lI/gcAAIAqiLn/njAT+R8AAABKI+b+iTAT+R8AAABKI+b+yTCTiuR//X/9f/1//f9l9f9fPX+/+v85/f9i0f/vTv+/B/1//f8Xvf8/rP9PqRSt/x9z/+4wk4rkfwAAAKiCmPv3hJnI/wAAAFAaMffvDTOR/wEAAKA0Yu7fF2ZSkfyv/6//r/+v/+/z/zvvX/9/bdL/767//f/4EPX/9f/1/33+v/4/CxWt/x9z/71hJhXJ/wAAAFAFMffvDzOR/wEAAKA0Yu4/EGYi/wMAAEBpxNx/MMykIvlf/1//X/9f/1//v/P+9f/XJv3/7nz+fw/6//r/+v/6/6zQg3/Y/FXR+v8x9x8KM6lI/gcAAIAqiLn/9WEm8j8AAACURsz9vxJmIv8DAABAacTc/6thJhXJ//r/Ld3z+sPV/9f/1//X/2/Q/1+b9P+70//vQf9f/1//X/+fvlq0/x+i92r3/2PuPxxmUpH8DwAAAFUQc/+vhZnI/wAAAFAaMfe/IcxE/gcAAIDSiLn/SJhJRfK//r/P/9f/1//X/++8/9Xu/4/E+9X/XxH9/+70/3vQ/9f/1//X/6evivb5/zH3vzHMpCL5HwAAAKog5v77wkzkfwAAACiNmPvfFGYi/wMAAEBpxNz/5jCTiuR//X/9f/1//X/9/8779/n/a5P+f3f6/8GdGzsfgP6//r/+v/4/fVW0/n/M/W8JM6lI/gcAAIAqiLn/rWEm8j8AAACURsz9bwszkf8BAACgNGLuf3uYSUXyv/6//r/+v/6//n/n/ev/r036/93p//eg/6//r/+v/09fFa3/H3P/r4eZVCT/AwAAQBXE3H9/mIn8DwAAAKURc/87wkzkfwAAACiNmPvfGWZSkfyv/6//r/+v/6//33n/+v9rk/5/d2us//+Lm8Pl+v85/f9iH/9y+/9DbV/fkP7/Dxbr/8+ta7+9/j83QtH6/zH3vyvMpCL5HwAAAKog5v53h5nI/wAAAFAaMfe/J8xE/gcAAIDSiLn/N8JMKpL/9f/rxzHfXtb/L2v/f0D/X/9f/78i9P+7W2P9f5//30b/v9jH7/P/9f9ZqGj9/5j73xtmUpH8DwAAAFUQc/8DYSbyPwAAAJRGzP0PhpnI/wAAAFAaMfe/L8ykIvlf/9/n/1ej/+/z/zP9f/3/itD/707/vwf9f/3/ovX//1P/n7WtaP3/mPsfCjOpSP4HAACAKoi5//1hJvI/AAAAlEbM/b8ZZiL/AwAAQGnE3P+BMJOK5H/9/7XS/x9bo/3/R/X/b2D//46b8+30//X/maf/353+fw/6//r/Rev/+/x/1rii9f9j7v9gmMnS8//okrcEAAAAXhQx9/9WmElF/v4fAAAAqiDm/t8OM5H/AQAAoDRi7v+dMJOK5H/9/7XS//f5/5n+v8//b3s8+v/6/52sXv8/vvPo/+v/6/9H+v/6//r/tCta/z/m/t8NM6lI/gcAAIAqiLn/Q2Em8j8AAACsCZ3+n+x2MfcfDTOR/wEAAKA0Yu4/FmZSkfyv/6//r/9f0P7/n237l+99593Hduv/6//r/y/Lqn7+f/3F7/P/9f/1/xP9f/1//X/aFa3/H3P/8TCTiuR/AAAAqIKY+38vzET+BwAAgNKIuf9EmIn8DwAAAKURc/9UmElF8r/+v/6//n9B+/9r+PP/4/nQ/2/Vt/5/fNPV/+8o79+nVXRj+//vn++J6/8vt/8/0vFS/X/9/7V8/Pr/+v8sVLT+f8z902EmFcn/AAAAUAUh9w+czOf8FfI/AAAAlEbM/afCTOR/AAAAKI2Y+z8cZlKR/K//r/+v/6//7/P/O++/W/+/NuTz/4sq9e9/1nih6P+3KU7/vzP9f/3/tXz8+v/6/yxUtP5/zP0zYSYVyf8AAABQBTH3fyTMRP4HAACA0oi5/6NhJvI/AAAAlEbM/afDTCqS//X/9f/1//X/9f8777+wn/+v/9/VSvv3+v+B/n+1+///o/+v/6//T38Urf8fc/+ZMJOK5H8AAACogv9n706aLKvLPI7f7C66soJe9K4X3YuO6N71S2DRve5+AS7cuDHCcIEKKs4UziOKirMiOA84gCCigvMATiiKA6g4izNOiBJlkPU8T1Vmnjw3s+pm5jn//+ezqEfSSu6VqKjiV1lfT+7+8+MW+x8AAACakbv/UXGL/Q8AAADNyN3/6Lilk/2v/z+b/v9Upaz/3/z+J9H//4/+f6fX1//r/1um/x+n/19C/+/5//p//T8rNbX+P3f/Y+KWTvY/AAAA9CB3/wVxi/0PAAAAzcjdf2HcYv8DAABAM3L3PzZu6WT/b+n/1xZ99v+Z8Xr+f0v9v+f/7/j6+n/9f8sOtv+/5MGf+fT/+n/9f9D/76r/P7rT5+v/adHU+v/c/Y+LWzrZ/wAAANCD3P2Pj1vsfwAAAGhG7v6L4hb7HwAAAJqRu/8JcUsn+391z/8/tvHxmfb/Rf+v/9/4gP5f/6//ny3P/x/XU/9/4e3nnn/v9f92w15eX/+v//f8f/0/qzW1/j93/xPjlk72PwAAAPQgd/+T4hb7HwAAAJqRu//JcYv9DwAAAM3I3f+UuKWT/b+6/n/Wz/8v+n/9/8YH9P/6f/3/bOn/x/XU/5/J6+v/9f/6f/0/qzW1/j93/1Pjlk72PwAAAPQgd//T4hb7HwAAAJqRu//iuMX+BwAAgGbk7j8et3Sy//X/+9//P6D/1//H1f/r//X/+0//P07/v4T+X/+v/9f/s1JT6/9z918St3Sy/wEAAKAHufufHrfY/wAAANCM3P3PiFvsfwAAAGhG7v5nxi2d7H/9v+f/6/+X9/8X6P+D/l//P336/3H6/yX0/2fbz5+j/9f/6/853R77//tHftpeSf+fu/9ZcUsn+x8AAAB6kLv/2XGL/Q8AAADNyN3/nLjF/gcAAIBm5O5/btzSyf7X/+v/9f+e/3/G/f/2H3ob9P/D9P8HQ/8/bjL9/9qRwQ/r/2ff/3v+v/5f/88mU3v+f+7+58Utnex/AAAA6EHu/ufHLSP7f8+/mQ8AAAAcqtz9L4hbfP0fAAAAZi+rs9z9L4xbOtn/+n/9v/5f/+/5/8OvP9b/33Da+9P/T4v+f9xk+v8d6P/1/3N+//p//T/bTa3/z93/orilk/0PAAAAPcjdf2ncYv8DAABAM3L3vzhusf8BAACgGbn7XxK3dLL/h/v/U/+9/n939P+b37/+f/jHx6r6//w76v9H+///9fz/Pun/xx18/39U/7/576//30eH/f4b7/+PLft8/T9Dptb/5+6/LG7pZP8DAABAD3L3vzRusf8BAACgGbn7Xxa32P8AAADQjNz9L49bOtn/nv+v/9f/z6//9/z/kw7z+f+LA+//j+j/d0n/P87z/5fQ/+v/9f+e/89KTa3/z91/edzSyf4HAACAHlx+32Jj979isbD/AQAAYI5O/7MDW/9Aacjd/8q4xf4HAACAZuTuf1Xc0sn+1//r//X/+n/9//DrT6v/9/z/3dL/j9P/L6H/349+/khj/f8VO33+FPr/i/X/TMym/v+mUx8/rP4/d/+r45ZO9j8AAAD0IHf/a+IW+x8AAACakbv/tXGL/Q8AAADNyN3/urilk/2/7/3/sZ1fe+b9/6byRP+/+f3r/zfT/8ePB/2//v8A6P/H6f+X0P97/r/n/+v/WalT/f/mnw8Pq//P3f/6uKWT/Q8AAAA9yN3/hrjF/gcAAIBm5O6/Im6x/wEAAKAZufvfGLd0sv89/9/z//X/+n/9//Dr6//nSf8/Tv+/hP5f/6//1/+zUpue/3+aw+r/c/dfGbd0sv8BAACgB7n7r4pb7H8AAABoRu7+N8Ut9j8AAAA0I3f/m+OWTva//n9/+//8uP5f/7/Q/+v/9f8Hotv+f23oV6Ltduj/b33E8f/f/BH9v/5f/6//1/+zApPo/0+c+rfL3P1viVs62f8AAADQg9z9b41b7H8AAABoRu7+t8Ut9j8AAAA0I3f/2+OWPe7/f1npuzo4+n/P/9f/6//1/8Ovr/+fp277/13y/P8l9P/6f/2//p+VmkT/f9pf5+5/R9zi6/8AAADQjNz974xb7H8AAABoRu7+d8Ut9j8AAAA0I3f/u+OWTva//l//r/+fZf9/XnwX/f8E+//1xTD9/8HQ/4/T/y+h/9f/6//1/6zU1Pr/3P1Xxy2d7H8AAADoQe7+98Qt9j8AAAA0I3f/e+MW+x8AAACakbv/fXFLJ/tf/6//1//Psv/3/P8J9/870f8fDP3/OP3/YrG4ZuQNDPX/J47q//X/+n/9P2doav1/7v73xy2d7H8AAADoQe7+a+IW+x8AAACakbv/2rjF/gcAAIBm5O7/QNzSyf7X/+v/9f/6f/3/8Ovr/+dJ/z9O/7+E5//r//X/+n9Wamr9f+7+6+KWTvY/AAAA9CB3//Vxi/0PAAAAzcjd/8G4xf4HAACAZuTuvyFu6WT/6//1//p//f++9P/H9f9b6f8Pxv71/wv9v/5f/7+E/l//r/9nq4Pq/++Pn++X9f+5+z8Ut3Sy/wEAAKAHuftvjFvsfwAAAGhG7v4Pxy32PwAAADQjd/9H4pZO9r/+X/+v/9f/e/7/8Ovr/+fJ8//H6f+X0P/r//X/+n9W6qD6/516/61/nbv/o3FLJ/sfAAAAepC7/6a4xf4HAACAZuTuvzlusf8BAACgGbn7Pxa3dLL/9f/6/839/2Kh/9f/6/9POoD+f32h/185/f84/f8S+v82+/9/WDTU/x/b8fP1/0zR1Pr/3P0fj1s62f8AAADQg9z9n4hb7H8AAABoRu7+T8Yt9j8AAAA0I3f/p+KWlvb/Azunb/Pv/49u+UT9/2KxuPMiz//X/4+8vv5/Mv1//VPV/6+O/n/cv//XPXes7+Y76v/1/y31/57/r//n0Eyt/8/d/+m4paX9DwAAAJ3L3f+ZuMX+BwAAgGbk7v9s3GL/AwAAQDNy938ubulk/8+//9/6ifr/xVk9/1//v/EB/b/+X/8/W2fb31+5Hr+mtdv/e/7/GP3/0n5+bYd/71no//X/+n8GTK3/z93/+bilk/0PAAAAPcjdf0vcYv8DAABAM3L33xq32P8AAADQjNz9X4hbOtn/+n/9/5z6/3X9f/X/6/p//b/+f9BUnv9/3nn/d5v+X//fYv8/Rv+v/9f/s9XU+v/c/V+MWzrZ/wAAANCD3P1filvsfwAAAGhG7v4vxy32PwAAADQjd/9X4pZO9v/2/v+cxclC9aSh/j8aNf3/afT/m9+/5/8P//jw/H/9v/5//02l//f8/zN7//p//f+c3/+e+v//2P75+n9aNLX+P3f/bXFLJ/sfAAAAepC7/6txi/0PAAAAzcjd/7W4xf4HAACAZuTuvz1u6WT/e/6//l//r//X/w+/vv5/nvT/4/T/S+j/z76fz59V9f/zff7/P+r/WZ2p9f+5+78et2wMv//85zP8nwkAAABMSO7+b8QtnXz9HwAAAHqQu/+OuMX+BwAAgGbk7v9m3NLJ/tf/6//1//p//f/w6+v/50n/P07/v0Q//f/60AcPu58/W4f9/pvp/z3/nxWaWv+fu/9bcUsn+x8AAADadt/Gt7n7vx232P8AAADQjNz934lb7H8AAABoRu7+O+OWTva//l//337//zD9/5bX1//r/1um/89f0Yfp/5fop/8fdNj9/Nzfv/5f/892U+v/c/ffFbd0sv8BAACgB7n7vxu32P8AAADQjNz934tb7H8AAABoRu7+78ctnex//X9f/f/aosf+3/P/9f/6/57Mp/+/6sjQRz3/X/+v/5/v+9f/6//Zbmr9f+7+u9eOdLn/AQAAYK4e8t+PvGu33/fujW/XFz+IW+x/AAAAaEbu/h/GLfY/AAAANCN3/4/ilk72v/6/r/6/z+f/6//1//r/nsyn/x+m/9f/6//n+/576P//aeTz9f8MmVr/n7v/x3HLacNv8P+gBwAAADg8Y78pNSB3/0/ilk6+/g8AAAA9yN3/07hl2/4/scs/1Q4AAABMTe7+n8UtnXz9X/8/8f5/sU/9f3w//f9J+n/9/9Dr6//nSf8/7iz7/xNr+n/9/wj9f/v9/xj9P0Om1v/n7r/xukWX+x8AAAAatel3FH6+8e364p64xf4HAACAZuTu/0XcYv8DAABAM3L3/zJu6WT/6/8n3v+f0fP/j9V/8vz/zvv/S9cHX1//r/9vmf5/nOf/L6H/1//r//X/rNQe+v+NQbrf/X/u/l/FLZ3sfwAAAOhB7v5fxy32PwAAADQjd/9v4hb7HwAAAJqRu/+3cUsn+1//fwj9/2VHF4t97f938fx//X8f/f8Or99O//+v5x6/5aEPv/Zq/T+nHGT/nz8W9P/6f/3/Sfp//b/+n62m9vz/3P2/i1s62f8AAADQg9z998Yt9j8AAAA0I3f/7+OWB/f/zYf1rgAAAIBVyt3/h7ilk6//6/9bfP7/PPv//Gd9CP3/8fn1/9kU997/e/6//n87z/8fp/9fQv+v/9f/6/9Zqan1/7n7/xi3dLL/AQAAoAe5+/8Ut+T+X9vzb90DAAAAE5O7/89xi6//AwAAQDNy998Xt3Sy//X/+v+p9P/J8/9PfZ7n/5+k/9f/74X+f5z+fwn9v/5f/6//Z6Wm1v/n7v9L3NLJ/gcAAIAe5O6/P26x/wEAAKAZufv/GrfY/wAAANCM3P1/i1s62f/6f/2//l//r/8ffn39/zzp/8fp/5fQ/+v/9f/6f1Zqav1/7v6/BwAA//+l7G5O") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 2.212377184s ago: executing program 5 (id=144): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000180)=@l={0x92, 0x4, 0xc0, 0x19, 0xbe, 0xf, 0x8000}) 1.823572692s ago: executing program 1 (id=147): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0x108, 0x108, 0x108, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0x0, 0xff000000, 0xff], 0x4e24, 0x4e21, 0x4e21, 0x4e21, 0x3a, 0xf0, 0x3ff, 0xf, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0x0, 0xffffff00], [0xffffff00, 0xff, 0x0, 0xffffff00], 'team0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x0, 0xee, 0x4, 0x44}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x4, 0x6}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 1.780947135s ago: executing program 5 (id=148): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x3f, 0x0, &(0x7f0000000040)=0x60) 1.770985032s ago: executing program 0 (id=150): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680)) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4) 1.5167766s ago: executing program 5 (id=151): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x24, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 1.514592273s ago: executing program 4 (id=152): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000001880)=0x5) 1.500012344s ago: executing program 1 (id=153): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newtaction={0x4c, 0x30, 0x48b, 0x70bd2d, 0x0, {}, [{0x38, 0x1, [@m_simple={0x34, 0x1, 0x0, 0x0, {{0xb}, {0x8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x4c}}, 0x0) 1.434586471s ago: executing program 0 (id=154): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x20000) ioctl$EVIOCSCLOCKID(r0, 0x40084504, &(0x7f0000ffcffc)) 1.234661082s ago: executing program 3 (id=155): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x4, 0x0, &(0x7f0000000500)=[@exit_looper], 0x0, 0x0, 0x0}) 1.232197502s ago: executing program 4 (id=156): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000007f00), 0x42000, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000007f40)) 1.209080047s ago: executing program 1 (id=157): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x2000000b, 0xc5, &(0x7f0000000240)={0x3, 0x12, 0xfffa, 0x4360}, 0xfffffffffffffe76, 0x6, 0x4, 0x0, 0x1, 0x101, 0x0}) 1.202969521s ago: executing program 0 (id=158): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.185735195s ago: executing program 5 (id=159): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x10000, &(0x7f0000000080)=ANY=[], 0xed, 0x153, &(0x7f00000001c0)="$eJzsz79LG2Ecx/H300subZq0KaTQFloKLTSkpL2kZOyQhIZmaA+ULK7JiYE7ExIIAQd/zA7+ATcogpM4iKODxikaQRT/jGyC48mTu6gZ3Z/X8tx9vl8+99yf3+cpEqDhKzWdVtvqdKz65xnzX3l2/+DwlcwjwPPxhtNqy+W6v39UgAV5hiZzOIk/A2zrR61py7VRAVJA8SXMN8IYMluFqMySMrOtbJClvkD/LZrMctPZeO9XkH0IQXFUgoZtyT5vC77JvjcPfTdAzw0Ht8qkdz5qheCFnvt9b/f0/3BQyaQ/Weu58vvt2DuNqqUDQs6vfg4yF5NfMj3PfzCyhpG/NM+GlfzKBqG/sS7MLelTfbrsqMKaDq7wlv3vjY5FHOhvCtN5HUm+ABYTIB5Nbk1HXEcnVxQ9t/a1yz0RnB6KoiiKoiiKoiiK8kR3AQAA//9CRlo5") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) 967.416756ms ago: executing program 4 (id=160): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 932.398083ms ago: executing program 0 (id=161): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000300)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)="e8b1"}) 932.012496ms ago: executing program 3 (id=162): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001640)={0x18, 0x78, 0x601, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x7, 0x124, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x2000}, 0x4000880) 858.77106ms ago: executing program 1 (id=163): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) 550.423052ms ago: executing program 0 (id=164): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000017c0)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0xf00}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000010) 549.77117ms ago: executing program 3 (id=165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20004000) 526.916463ms ago: executing program 4 (id=166): r0 = io_uring_setup(0x171f, &(0x7f0000000040)={0x0, 0xc8a1, 0x80, 0x8, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 526.737161ms ago: executing program 1 (id=167): r0 = fsopen(&(0x7f0000000200)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab\x16\x9c{\x8c\x97\xcc\xe7\xa5\xf5\xeb2\x9a\xed%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u', 0xfeffffff00000000) 525.45614ms ago: executing program 5 (id=168): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) 332.133352ms ago: executing program 0 (id=169): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20b01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) 187.410253ms ago: executing program 3 (id=170): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2) 179.776965ms ago: executing program 1 (id=171): r0 = socket(0x10, 0x80002, 0x2) connect$netlink(r0, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc) 141.311437ms ago: executing program 4 (id=172): r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x145, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 110.958028ms ago: executing program 2 (id=173): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x141000) select(0x40, &(0x7f0000000300)={0x1, 0xfff, 0x7, 0xd, 0x2, 0x81, 0x1, 0xf}, &(0x7f0000000400)={0x8, 0x3, 0xd, 0x6, 0xffff, 0x101, 0x2f0a0ca4, 0x6}, 0x0, &(0x7f0000000480)={0x0, 0x2710}) 31.938073ms ago: executing program 4 (id=174): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 0s ago: executing program 5 (id=175): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r0, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts. [ 94.617440][ T5810] cgroup: Unknown subsys name 'net' [ 94.765702][ T5810] cgroup: Unknown subsys name 'cpuset' [ 94.775811][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.520029][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.943477][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.952191][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.960850][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.971596][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.980176][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.001579][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.008836][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.020986][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 101.023038][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.028615][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.035917][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.043770][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.057145][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.066318][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.074566][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 101.082713][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 101.091220][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.098992][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 101.115213][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.123235][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.124959][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 101.132005][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.140822][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.144626][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.152098][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.159847][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.166808][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.173284][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.182326][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.188097][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.413818][ T10] cfg80211: failed to load regulatory.db [ 102.146798][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 102.282009][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 102.316253][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 102.366135][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 102.415063][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 102.618077][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.625433][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.634079][ T5835] bridge_slave_0: entered allmulticast mode [ 102.641935][ T5835] bridge_slave_0: entered promiscuous mode [ 102.724644][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.731996][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.739211][ T5835] bridge_slave_1: entered allmulticast mode [ 102.747478][ T5835] bridge_slave_1: entered promiscuous mode [ 102.777489][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 102.810812][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.817989][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.825419][ T5824] bridge_slave_0: entered allmulticast mode [ 102.833111][ T5824] bridge_slave_0: entered promiscuous mode [ 102.841845][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.848998][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.856842][ T5824] bridge_slave_1: entered allmulticast mode [ 102.864537][ T5824] bridge_slave_1: entered promiscuous mode [ 102.954195][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.983077][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.990254][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.997590][ T5823] bridge_slave_0: entered allmulticast mode [ 103.005979][ T5823] bridge_slave_0: entered promiscuous mode [ 103.049043][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.061532][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.100507][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.108110][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.115679][ T5823] bridge_slave_1: entered allmulticast mode [ 103.123373][ T5823] bridge_slave_1: entered promiscuous mode [ 103.130107][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.137450][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.144926][ T5828] bridge_slave_0: entered allmulticast mode [ 103.152685][ T5828] bridge_slave_0: entered promiscuous mode [ 103.163176][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.173538][ T5845] Bluetooth: hci0: command tx timeout [ 103.240992][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.248241][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.256255][ T5845] Bluetooth: hci2: command tx timeout [ 103.256275][ T5832] Bluetooth: hci4: command tx timeout [ 103.256475][ T5832] Bluetooth: hci3: command tx timeout [ 103.262044][ T5845] Bluetooth: hci5: command tx timeout [ 103.267537][ T5840] Bluetooth: hci1: command tx timeout [ 103.273711][ T5828] bridge_slave_1: entered allmulticast mode [ 103.292123][ T5828] bridge_slave_1: entered promiscuous mode [ 103.328074][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.335558][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.343349][ T5825] bridge_slave_0: entered allmulticast mode [ 103.351631][ T5825] bridge_slave_0: entered promiscuous mode [ 103.398672][ T5824] team0: Port device team_slave_0 added [ 103.407152][ T5835] team0: Port device team_slave_0 added [ 103.414623][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.421870][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.429011][ T5825] bridge_slave_1: entered allmulticast mode [ 103.437531][ T5825] bridge_slave_1: entered promiscuous mode [ 103.454016][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.480328][ T5824] team0: Port device team_slave_1 added [ 103.488240][ T5835] team0: Port device team_slave_1 added [ 103.527282][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.556632][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.645341][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.687325][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.698290][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.705673][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.712936][ T5826] bridge_slave_0: entered allmulticast mode [ 103.720543][ T5826] bridge_slave_0: entered promiscuous mode [ 103.728987][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.736185][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.743419][ T5826] bridge_slave_1: entered allmulticast mode [ 103.751503][ T5826] bridge_slave_1: entered promiscuous mode [ 103.760521][ T5823] team0: Port device team_slave_0 added [ 103.782248][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.789190][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.815207][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.828131][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.835361][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.861602][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.875753][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.902242][ T5823] team0: Port device team_slave_1 added [ 103.938214][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.945332][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.971923][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.992803][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.999738][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.025773][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.069367][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.081797][ T5828] team0: Port device team_slave_0 added [ 104.090670][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.148574][ T5828] team0: Port device team_slave_1 added [ 104.191165][ T5825] team0: Port device team_slave_0 added [ 104.198313][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.205659][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.231916][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.273850][ T5826] team0: Port device team_slave_0 added [ 104.283071][ T5826] team0: Port device team_slave_1 added [ 104.290754][ T5825] team0: Port device team_slave_1 added [ 104.312565][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.319521][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.345857][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.444952][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.451998][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.478582][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.496636][ T5824] hsr_slave_0: entered promiscuous mode [ 104.503297][ T5824] hsr_slave_1: entered promiscuous mode [ 104.583455][ T5835] hsr_slave_0: entered promiscuous mode [ 104.590011][ T5835] hsr_slave_1: entered promiscuous mode [ 104.596655][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 104.602459][ T5835] Cannot create hsr debugfs directory [ 104.635822][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.642837][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.668850][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.681986][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.688915][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.714938][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.728043][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.735748][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.762427][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.775322][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.782282][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.808212][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.838110][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.845795][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.873422][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.971222][ T5823] hsr_slave_0: entered promiscuous mode [ 104.977784][ T5823] hsr_slave_1: entered promiscuous mode [ 104.984523][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 104.990245][ T5823] Cannot create hsr debugfs directory [ 105.164781][ T5828] hsr_slave_0: entered promiscuous mode [ 105.171502][ T5828] hsr_slave_1: entered promiscuous mode [ 105.177746][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 105.184704][ T5828] Cannot create hsr debugfs directory [ 105.202659][ T5826] hsr_slave_0: entered promiscuous mode [ 105.209366][ T5826] hsr_slave_1: entered promiscuous mode [ 105.215821][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 105.221707][ T5826] Cannot create hsr debugfs directory [ 105.233863][ T5825] hsr_slave_0: entered promiscuous mode [ 105.240385][ T5825] hsr_slave_1: entered promiscuous mode [ 105.246748][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 105.252580][ T5832] Bluetooth: hci0: command tx timeout [ 105.258094][ T5825] Cannot create hsr debugfs directory [ 105.331061][ T5840] Bluetooth: hci2: command tx timeout [ 105.336940][ T5840] Bluetooth: hci4: command tx timeout [ 105.341047][ T5832] Bluetooth: hci5: command tx timeout [ 105.343107][ T5829] Bluetooth: hci3: command tx timeout [ 105.347753][ T5845] Bluetooth: hci1: command tx timeout [ 105.924814][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.940392][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.952229][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.989486][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.086417][ T5823] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.101895][ T5823] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.117237][ T5823] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.142165][ T5823] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.218786][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.231754][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.254112][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.267019][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.384178][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.397193][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.409240][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.423742][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.559188][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.587888][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.626914][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.634274][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.647848][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.684964][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.692149][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.712727][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.728718][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.739658][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.786379][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.816812][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.900728][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.913150][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.925911][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.952148][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.962318][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.976936][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.034993][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.042184][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.055201][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.062403][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.084008][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.091182][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.148087][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.155274][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.248813][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.333376][ T5845] Bluetooth: hci0: command tx timeout [ 107.354630][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.411469][ T5845] Bluetooth: hci1: command tx timeout [ 107.416933][ T5845] Bluetooth: hci5: command tx timeout [ 107.420699][ T5832] Bluetooth: hci4: command tx timeout [ 107.425375][ T5845] Bluetooth: hci3: command tx timeout [ 107.427773][ T5832] Bluetooth: hci2: command tx timeout [ 107.448033][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.520299][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.527510][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.577997][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.585229][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.616037][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.679829][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.687075][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.763674][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.772503][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.828367][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.937600][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.958501][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.023951][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.031162][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.042386][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.049572][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.096786][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.226876][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.314528][ T5824] veth0_vlan: entered promiscuous mode [ 108.415746][ T5824] veth1_vlan: entered promiscuous mode [ 108.438501][ T5835] veth0_vlan: entered promiscuous mode [ 108.522921][ T5835] veth1_vlan: entered promiscuous mode [ 108.618581][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.674396][ T5824] veth0_macvtap: entered promiscuous mode [ 108.708028][ T5824] veth1_macvtap: entered promiscuous mode [ 108.797245][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.842698][ T5835] veth0_macvtap: entered promiscuous mode [ 108.865302][ T5835] veth1_macvtap: entered promiscuous mode [ 108.895766][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.950824][ T5828] veth0_vlan: entered promiscuous mode [ 108.995262][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.034391][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.047781][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.063352][ T5828] veth1_vlan: entered promiscuous mode [ 109.118732][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.135386][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.156328][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.165725][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.185105][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.204663][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.214403][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.248728][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.258457][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.347027][ T5823] veth0_vlan: entered promiscuous mode [ 109.411243][ T5832] Bluetooth: hci0: command tx timeout [ 109.417149][ T5823] veth1_vlan: entered promiscuous mode [ 109.454341][ T5828] veth0_macvtap: entered promiscuous mode [ 109.491034][ T5832] Bluetooth: hci2: command tx timeout [ 109.496502][ T5840] Bluetooth: hci3: command tx timeout [ 109.496593][ T5845] Bluetooth: hci4: command tx timeout [ 109.501999][ T5829] Bluetooth: hci5: command tx timeout [ 109.507470][ T5845] Bluetooth: hci1: command tx timeout [ 109.523245][ T5828] veth1_macvtap: entered promiscuous mode [ 109.562593][ T5826] veth0_vlan: entered promiscuous mode [ 109.618939][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.638648][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.644694][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.653692][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.663542][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.669335][ T5826] veth1_vlan: entered promiscuous mode [ 109.699440][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.711805][ T5825] veth0_vlan: entered promiscuous mode [ 109.724416][ T5823] veth0_macvtap: entered promiscuous mode [ 109.782823][ T1146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.798610][ T1146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.814753][ T5825] veth1_vlan: entered promiscuous mode [ 109.828175][ T5823] veth1_macvtap: entered promiscuous mode [ 109.836420][ T1146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.845588][ T1146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.861630][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.869474][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.871145][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.886197][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.963529][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.988329][ T5825] veth0_macvtap: entered promiscuous mode [ 110.007891][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.020439][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.025656][ T5826] veth0_macvtap: entered promiscuous mode [ 110.048933][ T5826] veth1_macvtap: entered promiscuous mode [ 110.088252][ T5825] veth1_macvtap: entered promiscuous mode [ 110.146857][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.168713][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.218723][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.293535][ T5974] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 110.311575][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.322072][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.359141][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.367585][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.388143][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.512448][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.532837][ T1146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.639782][ T30] audit: type=1326 audit(1760700888.733:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa58efc9 code=0x7ffc0000 [ 110.641016][ T1146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.694364][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.708118][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.714907][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.722391][ T30] audit: type=1326 audit(1760700888.773:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fb2aa58efc9 code=0x7ffc0000 [ 110.747077][ T30] audit: type=1326 audit(1760700888.773:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa58efc9 code=0x7ffc0000 [ 110.762146][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.794800][ T30] audit: type=1326 audit(1760700888.773:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa58efc9 code=0x7ffc0000 [ 110.851205][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.868112][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.904447][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.923792][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.944020][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.960360][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.021477][ T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 111.041613][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.049879][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.071067][ T10] usb 2-1: Product: syz [ 111.080969][ T10] usb 2-1: Manufacturer: syz [ 111.086884][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.096670][ T10] usb 2-1: SerialNumber: syz [ 111.126314][ T10] usb 2-1: config 0 descriptor?? [ 111.260569][ T5990] loop2: detected capacity change from 0 to 1024 [ 111.271167][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.295370][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.423016][ T5990] hfsplus: hfsplus: Invalid key length: 29235 [ 111.459820][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.499149][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.623838][ T5933] usb 2-1: USB disconnect, device number 2 [ 111.644641][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.673067][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.729050][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 111.764501][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 111.828769][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.869891][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.026719][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.046368][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.132831][ T6003] deleting an unspecified loop device is not supported. [ 112.423859][ T6009] Illegal XDP return value 4294967262 on prog (id 3) dev N/A, expect packet loss! [ 112.871865][ T6022] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.24'. [ 112.939703][ T6022] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 112.985304][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 113.055840][ T6026] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 113.596327][ T6046] loop5: detected capacity change from 0 to 256 [ 113.614692][ T6038] loop3: detected capacity change from 0 to 4096 [ 113.726570][ T6048] netlink: 'syz.0.36': attribute type 11 has an invalid length. [ 113.790438][ T6048] netlink: 'syz.0.36': attribute type 5 has an invalid length. [ 113.828691][ T6050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.37'. [ 113.842328][ T6048] netlink: 4112 bytes leftover after parsing attributes in process `syz.0.36'. [ 113.885429][ T6050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.37'. [ 115.916928][ T6098] loop3: detected capacity change from 0 to 4096 [ 115.935203][ T978] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.992646][ T6111] openvswitch: netlink: Flow key attribute not present in set flow. [ 116.101114][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 116.121634][ T978] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 116.146025][ T978] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 116.180462][ T978] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 116.247927][ T978] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 116.311026][ T978] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 116.388498][ T978] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.419042][ T978] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 116.430553][ T6119] loop5: detected capacity change from 0 to 512 [ 116.452676][ T978] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 116.472880][ T978] usb 1-1: Product: syz [ 116.498550][ T978] usb 1-1: Manufacturer: syz [ 116.505203][ T6119] EXT4-fs: Ignoring removed oldalloc option [ 116.528528][ T978] usb 1-1: SerialNumber: syz [ 116.545905][ T978] usb 1-1: config 0 descriptor?? [ 116.553845][ T6119] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.586999][ T978] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 116.606990][ T6119] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 116.631400][ T978] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 116.643432][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.697605][ T6119] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #16: comm syz.5.71: invalid indirect mapped block 4294967295 (level 0) [ 116.770086][ T6119] EXT4-fs (loop5): Remounting filesystem read-only [ 116.793950][ T6119] EXT4-fs (loop5): 1 orphan inode deleted [ 116.818332][ T43] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.835220][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.852300][ T6119] EXT4-fs (loop5): 1 truncate cleaned up [ 116.852648][ T43] usb 2-1: Product: syz [ 116.880958][ T43] usb 2-1: Manufacturer: syz [ 116.885739][ T43] usb 2-1: SerialNumber: syz [ 116.888204][ T6119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.930522][ T43] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 116.953272][ T6103] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 116.976512][ T5815] usb 1-1: USB disconnect, device number 2 [ 117.004710][ T978] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 117.014752][ T5815] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 117.202097][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.511408][ T5815] usb 2-1: USB disconnect, device number 3 [ 117.676434][ T6149] nbd: illegal input index -2146435068 [ 118.084143][ T6161] netlink: 20 bytes leftover after parsing attributes in process `syz.5.91'. [ 118.134424][ T6161] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 118.143144][ T978] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 118.163094][ T978] ath9k_htc: Failed to initialize the device [ 118.180994][ T5815] usb 2-1: ath9k_htc: USB layer deinitialized [ 118.491846][ T6173] loop0: detected capacity change from 0 to 2048 [ 118.518700][ T6173] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 118.595637][ T6176] ALSA: mixer_oss: invalid OSS volume '' [ 118.648475][ T6173] syz.0.97: attempt to access beyond end of device [ 118.648475][ T6173] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 118.664946][ T6180] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.798229][ T6173] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 118.879794][ T6173] Remounting filesystem read-only [ 118.914828][ T6186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.081683][ T6190] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.153002][ T6190] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 119.899065][ T6213] loop4: detected capacity change from 0 to 2048 [ 119.914442][ T6219] futex_wake_op: syz.3.119 tries to shift op by 32; fix this program [ 119.982948][ T5933] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.041719][ T6223] loop1: detected capacity change from 0 to 512 [ 120.086514][ T6213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.125153][ T6223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.143152][ T6223] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.164288][ T6213] EXT4-fs error (device loop4): ext4_iget_extra_inode:5074: inode #12: comm syz.4.117: corrupted in-inode xattr: e_name out of bounds [ 120.181070][ T5933] usb 1-1: Using ep0 maxpacket: 8 [ 120.214317][ T6230] tmpfs: Bad value for 'mpol' [ 120.220063][ T5933] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.283356][ T5933] usb 1-1: config 8 has an invalid interface number: 255 but max is 0 [ 120.315056][ T5933] usb 1-1: config 8 has no interface number 0 [ 120.368987][ T5933] usb 1-1: config 8 interface 255 has no altsetting 0 [ 120.413902][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.466570][ T5933] usb 1-1: string descriptor 0 read error: -22 [ 120.473332][ T5933] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 120.507058][ T5933] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 120.699992][ T6235] loop4: detected capacity change from 0 to 64 [ 120.713906][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.086248][ T5933] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.0-1, 00:00:00:00:00:00. [ 121.202890][ T5933] usb 1-1: USB disconnect, device number 3 [ 121.290328][ T6253] loop1: detected capacity change from 0 to 512 [ 121.322139][ T6252] netlink: 'syz.4.133': attribute type 7 has an invalid length. [ 121.353255][ T6253] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 121.391043][ T6253] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.134: iget: bogus i_mode (755) [ 121.405638][ T6253] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.134: couldn't read orphan inode 15 (err -117) [ 121.427697][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.459235][ T6253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.543586][ T6263] openvswitch: netlink: Message has 8 unknown bytes. [ 121.588063][ T6253] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 4: comm syz.1.134: lblock 0 mapped to illegal pblock 4 (length 1) [ 121.631059][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 121.653570][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.693549][ T9] usb 4-1: Product: syz [ 121.712786][ T9] usb 4-1: Manufacturer: syz [ 121.717492][ T9] usb 4-1: SerialNumber: syz [ 121.789389][ T9] usb 4-1: config 0 descriptor?? [ 121.924420][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.185678][ T6273] ieee802154 phy0 wpan0: encryption failed: -22 [ 122.255078][ T9] usb 4-1: f81604_write: reg: 105 data: 8a failed: -EPROTO [ 122.274025][ T9] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 122.294643][ T9] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 122.330991][ T9] usb 4-1: USB disconnect, device number 2 [ 122.561408][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 122.571298][ T6286] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 122.846943][ T6293] netlink: 'syz.5.151': attribute type 1 has an invalid length. [ 123.191984][ T6305] loop5: detected capacity change from 0 to 8 [ 123.223230][ T6305] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 123.308980][ T6305] cramfs: Error -3 while decompressing! [ 123.351009][ T6305] cramfs: ffffffff9ac0e7a8(1306)->ffff88806c1bd000(4096) [ 123.381017][ T6305] cramfs: bad data blocksize 3221485966 [ 123.394050][ T6305] cramfs: Error -3 while decompressing! [ 123.405917][ T6271] loop2: detected capacity change from 0 to 32768 [ 123.412208][ T6305] cramfs: ffffffff9ac0e7a8(1306)->ffff88806c1bd000(4096) [ 123.453920][ T6271] ======================================================= [ 123.453920][ T6271] WARNING: The mand mount option has been deprecated and [ 123.453920][ T6271] and is ignored by this kernel. Remove the mand [ 123.453920][ T6271] option from the mount to silence this warning. [ 123.453920][ T6271] ======================================================= [ 123.457462][ T30] audit: type=1800 audit(1760700901.543:6): pid=6305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.159" name="file3" dev="loop5" ino=348 res=0 errno=0 [ 123.532770][ T6000] udevd[6000]: incorrect cramfs checksum on /dev/loop5 [ 123.632189][ T6044] udevd[6044]: incorrect cramfs checksum on /dev/loop5 [ 123.751500][ T6271] [ 123.751500][ T6271] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.751500][ T6271] [ 123.846245][ T6321] kAFS: unable to lookup cell ' [ 123.846245][ T6321] $)-.ײfYǝa2s [ 123.846245][ T6321] ' [ 124.099244][ T6328] Scaler: ================= START STATUS ================= [ 124.106751][ T6328] Scaler: ================== END STATUS ================== [ 124.144424][ T50] [ 124.144424][ T50] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.144424][ T50] [ 124.199414][ T6330] loop4: detected capacity change from 0 to 512 [ 124.207819][ T6330] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.222563][ T6325] bond1: entered promiscuous mode [ 124.249499][ T50] [ 124.249499][ T50] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.249499][ T50] [ 124.271421][ T6325] bond1: entered allmulticast mode [ 124.286785][ T6330] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 124.293714][ T6325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.311484][ T5828] [ 124.311484][ T5828] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.311484][ T5828] [ 124.326740][ T5828] [ 124.326740][ T5828] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.326740][ T5828] [ 124.340062][ T6330] EXT4-fs (loop4): 1 truncate cleaned up [ 124.380570][ T111] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 124.392695][ T111] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 124.401217][ T111] CPU: 1 UID: 0 PID: 111 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 124.410341][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.420492][ T111] RIP: 0010:write_special_inodes+0xa9/0x170 [ 124.426416][ T111] Code: 2e e8 cb af 17 08 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 93 af 17 08 48 8d [ 124.446036][ T111] RSP: 0018:ffffc90002db7bc8 EFLAGS: 00010216 [ 124.452112][ T111] RAX: 0000000000000006 RBX: ffff888032568800 RCX: ffffffff81f4006e [ 124.460084][ T111] RDX: 0000000000000000 RSI: ffffffff81f40021 RDI: 0000000000000030 [ 124.468059][ T111] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 124.476030][ T111] R10: 0000000000000000 R11: 0000000000002bd1 R12: ffffffff81f4d650 [ 124.484000][ T111] R13: 0000000000000000 R14: ffff888052138800 R15: ffffc90002709112 [ 124.492009][ T111] FS: 0000000000000000(0000) GS:ffff888124ad9000(0000) knlGS:0000000000000000 [ 124.500950][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.507544][ T111] CR2: 00007f9376284112 CR3: 0000000058c96000 CR4: 0000000000350ef0 [ 124.515514][ T111] Call Trace: [ 124.518785][ T111] [ 124.521709][ T111] lmLogSync+0xd2/0x820 [ 124.525887][ T111] ? __pfx_lmLogSync+0x10/0x10 [ 124.530666][ T111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.536307][ T111] ? find_held_lock+0x2b/0x80 [ 124.540993][ T111] jfs_syncpt+0x89/0xa0 [ 124.545164][ T111] txEnd+0x30a/0x5a0 [ 124.549075][ T111] jfs_lazycommit+0x783/0xb30 [ 124.553868][ T111] ? __pfx_jfs_lazycommit+0x10/0x10 [ 124.559086][ T111] ? __pfx_default_wake_function+0x10/0x10 [ 124.564915][ T111] ? lockdep_hardirqs_on+0x7c/0x110 [ 124.570137][ T111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.575783][ T111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.581424][ T111] ? __kthread_parkme+0x19e/0x250 [ 124.586457][ T111] ? __pfx_jfs_lazycommit+0x10/0x10 [ 124.591679][ T111] kthread+0x3c5/0x780 [ 124.595766][ T111] ? __pfx_kthread+0x10/0x10 [ 124.600369][ T111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.606025][ T111] ? rcu_is_watching+0x12/0xc0 [ 124.610789][ T111] ? __pfx_kthread+0x10/0x10 [ 124.615390][ T111] ret_from_fork+0x675/0x7d0 [ 124.619993][ T111] ? __pfx_kthread+0x10/0x10 [ 124.624595][ T111] ret_from_fork_asm+0x1a/0x30 [ 124.629390][ T111] [ 124.632398][ T111] Modules linked in: [ 124.640781][ T111] ---[ end trace 0000000000000000 ]--- [ 124.688583][ T111] RIP: 0010:write_special_inodes+0xa9/0x170 [ 124.698901][ T111] Code: 2e e8 cb af 17 08 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 93 af 17 08 48 8d [ 124.699388][ T6330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.736539][ T111] RSP: 0018:ffffc90002db7bc8 EFLAGS: 00010216 [ 124.742810][ T111] RAX: 0000000000000006 RBX: ffff888032568800 RCX: ffffffff81f4006e [ 124.750796][ T111] RDX: 0000000000000000 RSI: ffffffff81f40021 RDI: 0000000000000030 [ 124.766810][ T111] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 124.777935][ T111] R10: 0000000000000000 R11: 0000000000002bd1 R12: ffffffff81f4d650 [ 124.786015][ T111] R13: 0000000000000000 R14: ffff888052138800 R15: ffffc90002709112 [ 124.798230][ T111] FS: 0000000000000000(0000) GS:ffff8881249d9000(0000) knlGS:0000000000000000 [ 124.827117][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.842898][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.849543][ T111] CR2: 0000001b30e03ff8 CR3: 0000000078c8f000 CR4: 0000000000350ef0 [ 124.879246][ T111] Kernel panic - not syncing: Fatal exception [ 124.885602][ T111] Kernel Offset: disabled [ 124.889922][ T111] Rebooting in 86400 seconds..