last executing test programs: 2m9.763278205s ago: executing program 2 (id=258): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f00000002c0)='sockfs\x00', 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x50) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x1f74, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m8.621352076s ago: executing program 2 (id=262): socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x102}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 2m6.554680071s ago: executing program 2 (id=268): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r2, 0x3514, 0x9141, 0x69, 0x0, 0x0) 2m5.416776332s ago: executing program 2 (id=271): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r2, 0x9, 0x20}, 0xc) 2m5.164284155s ago: executing program 2 (id=273): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 2m2.97617139s ago: executing program 2 (id=275): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x80900, 0x10a) r3 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 1m47.528511618s ago: executing program 32 (id=275): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x80900, 0x10a) r3 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 26.576727829s ago: executing program 3 (id=467): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x627c, &(0x7f000000c700)="$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") chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 21.811567444s ago: executing program 3 (id=477): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1020, 0x6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x10, 0x4, 0x1, {0x22, 0x747}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0xf8, 0x53}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="170f"]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1a0000}, 0x94) 19.032726122s ago: executing program 3 (id=485): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)}, {0x0}, {&(0x7f0000000440)}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b437951913173b3187878dc29f77c7a9ec2bf03cada5b063cb819d7f8bf1dd40a6db89c1a2955a4cdde24c64c76d6020de2dd053d020203535947f", 0x5d}, {0x0}, {&(0x7f0000000300)="d4eb0cb9b5afe8a92397fd60", 0xc}], 0x6, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085000000b4"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 16.535939355s ago: executing program 3 (id=490): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13.965808704s ago: executing program 3 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x1a, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r4, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x740, 0x25, 0x2}, 0x18) fsopen(&(0x7f0000000180)='proc\x00', 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 12.67055275s ago: executing program 3 (id=496): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 10.815259945s ago: executing program 0 (id=497): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)}, {&(0x7f0000000380)}, {0x0}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b437951913173b3187878dc29f77c7a9ec2bf03cada5b063cb819d7f8bf1dd40a6db89c1a2955a4cdde24c64c76d6020de2dd053d020203535947f6c", 0x5e}, {0x0}, {&(0x7f0000000300)="d4eb0cb9b5afe8a92397fd60", 0xc}], 0x6}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.51218677s ago: executing program 1 (id=502): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 6.996208726s ago: executing program 0 (id=503): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x1a, 0x0, 0xa9, 0x3, 0x6}) 6.844956359s ago: executing program 0 (id=504): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031302c757466382c666d61736b3d30303030303030303030303030303030303030303030362c6572726f72733d636f6e74696e75652c7379735f747a2c616c6c6f775f7574696d653d30303030303030303030303030303030303134373036342c00968868822eaa4073da2a8bad3e75bf3fa58e5fe9023e2efe14b61e42154e792855b9c44517fcaf42990fa252a8fcc76df45041b88e383db02cc075636a6b415c49ee2ad1af7ecfc73f3809bce1541b2c780705cdd96cfb760a1f342582ee152abbe3f5828666937a5068d6170f62dc427b22ae7bd20a2fb9094ffaf7b7eda15af87283045448d6cabb51f8a411539d39a9d6db38d1"], 0x1, 0x1528, &(0x7f00000037c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000600)={0x9, 0x45, 0x0, 0x6, 0x5, 0x5, 0x9, 0x88001}, &(0x7f0000000540)=0x20) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_emit_ethernet(0x56, &(0x7f00000006c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1ff, {[@fastopen={0x1e, 0xc, "4d1f3200754292a1377c"}]}}}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1, 0x1, 0x2}, {0x6, 0x9, 0x5, 0x5}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newnexthop={0x24, 0x68, 0x521, 0x70bd28, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 6.844364249s ago: executing program 1 (id=505): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) socket(0x10, 0x6, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r6, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) 5.544092095s ago: executing program 1 (id=508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x91) mlockall(0x2) socket$pppoe(0x18, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x88}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x200400c0) 5.397929078s ago: executing program 1 (id=509): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x48f27000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) 4.392258218s ago: executing program 1 (id=510): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x82, 0x99}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f00000001c0)={0x20, 0x9, 0x4, "dc213092"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.234173292s ago: executing program 0 (id=511): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffff53, 0x0, 0x1}, 0x28) 4.124684142s ago: executing program 0 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x1010000, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x61d0, &(0x7f000000cb40)="$eJzs3c2OHFfZB/Cn+ms+8saxsojyWghNEgMJIf4MxhAgyQIWbFggb5GtySSycADZBjmRhSeaDQsuAoTEEhBLVlxAFmzZcQFYspGArFKoZs4Z1zTd7rGd6eqZ8/tJk6qnTtX0qfy7prtdVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvffcHZ6uIuPzztOB4xP9FP6IXsdLUaxGxsnY8rz+IiOdjuzmei4jhUkSVG5+JeD0iPj4Wce/+7fVm0bl99uM7f/zbb3/41Pf/+vvh6X//6Wb/jWnr3br1q3/9+c7j7y8AAACUqK7rukof80+kz/e9rjsFAMxFfv2vk7xcvXD15oL1R61Wq9WHsG6rJ7vTLiJis71N857B6XgAOGQ245Ouu0CH5F+0QUQ81XUngIVWdd0BDsS9+7fXq5Rv1X49WNtpz9eC7Ml/s9q9v2PadJbxa0zm9fzain48O6U/K3PqwyLJ+ffG87+80z5K6x10/vMyLf/Rzq1Pxcn598fzH3N08u9NzL9UOf/BI+Xflz8AAAAAACyw/O//xzs+/7v05LuyLw87/7s2pz4AAAAAAAAAwGftScf/21UZ/w8AAAAWVfNZvfHrYw+WTfsutmb5pSri6bH1gcKkm2VWu+4HAAAAAAAAAAAAAJRksHMN76UqYhgRT6+u1nXd/LSN14/qSbc/7ErffyhZ13/kAQBgx8fHxu7lryKWI+JS+q6/4erqal0vr6zWq/XKUn4/O1parldan2vztFm2NNrHG+LBqG5+2XJru7ZZn5dntY//vuaxRnV/Hx2bjw4DB4CI2Hk1uucV6Yip62ei63c5HA6O/6PH8c9+dP08BQAAAA5eXdd1lb7O+0Q659/rulMAwFzk1//x8wJqtVqtVquPXt1WT3anXUTEZnub5j2D4fgB4JDZjE+67gIdkn/RBhHxfNedABZa1XUHOBD37t9er1K+Vfv1II3vnq8F2ZP/ZrW9Xd5+0nSW8WtM5vX82op+PDulP8/NqQ+LJOffG8//8k77KK130PnPy7T8m/083kF/upbz74/nP+bo5N+bmH+pcv6DR8q/L38AAAAAAFhg+d//jy/U+d/R4+7OTA87/7t2YI8KAAAAAAAAAAfr3v3b6/m+13z+/3MT1nP/59GU86/kX6Scf7r/f/fCm5fH1uu35u++/SD/f96/vf67m//4/zzdb/5LeaZKz6wqPSOq9EjVIE0fc8em2Br2R80jDatef5Cu+amH78bVuBYbcWbPur10PDxoP7unvenpcLu97u+0n9vTPthtz9uf39M+TFc61Su5/VSsx0/iWryz3d60Lc3Y/+UZ7fWM9px/3/FfpJz/oPXT5L+a2quxaePuR73/Oe7b00mP89bVz//yzMHvzkxb0d/dt7Zm/17soD/b/0+eGsXPbmxcP3Xrys2b189GmuxZei7S5DOW8x+mn5z/yy/ttOe/++3j9e5Ho0fOf1FsxWBq/i+15pv9fWXOfetCzn+UfnL+76T2ycf/Yc5/+vH/agf9AQAAAAAAAAAAAAAAgIep63r7FtG3IuJCuv+nq3szAYD5yq//dZKXz6vuP+72f9i7H131X62ec10tWH/mWn9aL1Z/1AtZ/2fB+rNwdVs92ZvtIiL+0t6mec/wi0m/DABYZJ9GxN+77gSdkX/B8vf9NdOTXXcGmKsbH3z4oyvXrm1cv9F1TwAAAAAAAACAx5XH/1xrjf98sq7rO2Pr7Rn/9e1Ye9LxPwd5ZneA0SkDVfcffZ8eZqs36vdaw42/ENPG/x7uzj1s/O/BjMcbzmgfzWhfmtG+PKN94o0eLTn/F1rjnZ+MiBNjw6+XMP7r+Jj3Jcj5v9h6Pjf5f2lsvXb+9W8Oc/69Pfmfvvn+T0/f+ODD166+f+W9jfc2fnz+7Nkz5y9cuHjx4ul3r17bOLPz3w57fLBy/nnsa9eBliXnnzOXf1ly/l9ItfzLkvP/YqrlX5acf36/J/+y5PzzZx/5lyXn/0qq5V+WnP+XUy3/suT8X021/MuS8/9KquVflpz/a6mWf1ly/qdSLf+y5PxPp3qf+a8cdL+Yj5x/PsPl+C9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvN/PdXyL0vO/6upln9Zcv4XUi3/suT8v5Zq+Zcl538x1fIvS87/66mWf1ly/t9ItfzLkvN/I9XyL0vO/5upln9Zcv7fSrX8y5Lz/3aq5V+WnP+bqZZ/WR58/78ZM2bM5Jmu/zIBAAAAAAAAAAAAAOPmcTlx1/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9u4tRq67vgP4mb1540BiIKROasLGMcY4m+z6El9oXUy4NtxKQij0gu1612bBN7x2CTSqHQVKJIyKKtqGh7aAUJuXCqvigVaA8oBaVaoE7QN9QVSoPERVQAGpKq0gW82c//+/M7OzM7ve8ebMOZ+PlPyyM2fmnDnzn9n92vnuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM3ufMPsp2pZltVqtfyCTVn2ovq8YWJT45LXvrDHBwAAAKzdLxr/fu7mdMHhFdyoaZt/uuPbX11YWFjI3jf8p6OfW1hIV0xk2eiGLGtcF139wftrzdsEj2fjtaGmr4d67H64x/UjPa4f7XH9WI/rN/S4frzH9UtOwBI3ZLV0Z9sa/7kpP6XZLdlo47ptHW71eG3DUP3cpdtmtcZtFkZPZHPZqWw2m27ZPt+21tj+63fW9/XWLO5rqGlfW+or5CePHo/HUAvneFvLvhbvM/rR67OJn/7k0eN/feHZ2zrNnqeh5f7y49yxtX6cnwiX5MdayzakcxKPc6jpOLd0eE6GW46z1rhd/b/bj/O5FR7n8OJhrqv253w8G2r893ca52mklnU4T1vCZT+7K8uyy4uH3b7Nkn1lQ9nGlkuGFp+f8XxF1u+jvpRemo2sap3euYJ1Wp8z21rXaftrIj7/d4bbjSxzDM1P048eG2t63n++cC3rNKo/6uVeK+1rsN+vlaKswbguvtN40E90XIPbwuN/dPvya7Dj2umwBtPjblqDW3utwaGx4cYxpyeh1rjN4hrc1bL9cGNPtcZ8Znv3NTh14fS5qfmPffyeudPHTs6enD2zZ9eu6T379h04cGDqxNyp2en839d4totvYzaUXgNbw7mLr4FXt23bvFQXvji25P33Wl+H411eh5vatu3363Ck/cHV1ucFuXRN56+N99RP+viVoWyZ11jj+dm59tdhetxNr8ORptdhx+8pHV6HIyt4Hda3ObdzZT+zjDT90+kYlv9esLY1uKlpDbb/PNK+Bvv980hR1uB4WBff27n894It4XifmFztzyPDS9Zgerjhvad+Sfp5f/xAY3Ral7fXr7hxLLs4P3v+3keOXbhwflcWxrp4WdNaaV+vG5seU7ZkvQ6ter0enrvjids7XL4pnKvxe+r/Gl/2uapvs/fe7s9V47tb5/PZcunuLIw+W+/z2em7ef18jmXZ57/12IPfePTzb1j2fNbz5iem1v6zeMqlTe+/o8u8/8bc/3y+v3RXjw+PjuSv3+F0dkZb3o9bn6qRxntXrbHv56ZW9n48Gv5Z7/fjW7q8H29u27bf78ej7Q8uvh/Xev1px9q0P5/jYZ2cmu7+flzfZvPu1a7Jka7vx3eFWQvn/zUhKaRc1LR2llu3aV8jI6PhcY3EPbSu0z0t24+GbFbf11O7r22d7rgrv6/h9OgWrdc6nWjbtt/rNP3Z13LrtNbrT9+uTfvzOR7WxS17uq/T+jZP7137e+cN8T+b3jvHeq3B0eGx+jGPpkXYeL/PFm6Ia/De7Hh2NjuVzTSuHWusp1pjX5P3rWwNjoV/1vu9cnOXNbijbdt+r8H0fWy5tVcbWfrg+6D9+RwP6+LJ+7qvwfo2b9zf359dd4RL0jZNP7u2//nacn/mdXvbabpea2UkHOe39nf/s9n6NqcOrDZndj9Pd4dLbuxwntpfv8u9pmay9TlPm8NxPntg+fNUP576Np87uML1dDjLsksfub/x573h71f+7uJ3v9ry9y6d/k7n0kfu//GLT/zjao4fgMH3fD425t/rmv5maiV//w8AAAAMhJj7h8JM5H8AAAAojZj74/8Vnsj/AAAAUBox94+EmVQk/29+47Nzz1/KUjN/IYjXp9PwQL5d7LhOh68nFhbVL7//y7P//Q+XVrbvoSzLfv7AH3TcfvMD8bhyE+E4r76p9fIlvnrPivZ99OFLab/N/fUvhPuPj2ely6BTBXc6y7Kv3/yZxn4m3n+lMZ9+4GhjPnj5icfr2zx3MP863v6Zl+Xb/0Uo/x4+cazl9s+E8/DDMKff1vl8xNt95cprtux/7+L+4u1qW29qPOwnP5Dfb/w9OZ99PN8+nufljv8bn37qK/XtH3lV5+O/NNT5+J8K9/vlMP/3Ffn2zc9B/et4u0+G44/7i7e790vf7Hj8Vz+Vb3/uzfl2R8OM+98Rvt725mfnms/XI7VjLY8re0u+Xdz/9Hf/uHF9vL94/+3HP37kSsv5aF8fT/9bfj9TbdvHy+N+or9v23/9fprXZ9z/U390tOU899r/1QefeUX9ftv3f3fbduc+srOx/8X7a/2NTX/5yc903F88nsN/e67l8Rx+d3gdh/0/+YGwHsP1/3c1v7/2365w9N2t7z9x+y9sutTyeKK3/jTf/9XXnWzMDeM3bLzxRS++6fIr6+cuy76zIb+/Xvs/+VdnW47/i7fm5yNeHzv67ftfTtz/+Y9Onjk7f3FuJp3VR29u/O6ct+fHE4/35vDe2v71kbMXPjh7fmJ6YjrLJsr7K/Su2ZfC/HE+LnffemHJO+jOh8Pzefuff33j9n/9dLz839+TX37lbfn3rVeH7T4bLt8Unr/V7X+pJ++8tfH6rj0djnBh6e8LXost2/7rwIo2DI+//eeCuN7PvfyDjfNQv67xfSO+rtd4/N+fye/na+G8LoTfzLz11sX9NW8ffzfClYfy1/uaz194m4vP69+E5/sdP8zvPx5XfLzfDz/HfHNz6/tdXB9fuzTUfv+N3+JxObyfZJfz6+NW8Xxfee7WjocXfw9Jdvm2xtd/ku7ntlU9zOXMf2x+6tTcmYuPTF2Ynb8wNf+xjx85ffbimQtHGr/L88iHet1+8f1pY+P9aWZ2396s8W51Nh/X2Qt9/OcePj6zf3r7zOyJYxdPXHj43Oz5k8fn54/PzsxvP3bixOxHe91+bubQrt0H9+zfPXlybubQgYMH9xycnDtztn4Y+UH1sG/6w5Nnzh9p3GT+0N6Du+67b+/05OmzM7OH9k9PT17sdfvG96bJ+q1/f/L87KljF+ZOz07Oz3189tCug/v27e752wBPnzsxPzF1/uKZqYvzs+en8scycaFxcf17X6/bU07z/5H/PNuulv8ivuxdd+9Lv5+17suPLXtX+SZtv0D02fC7aP75JecOrOTrmPtHw0wqkv8BAACgCmLuHwszkf8BAACgNGLu3xBmIv8DAABAacTcPx5mUpH8X7r+/+ZLK9q//r/+f/P50v+vWP//oaL1//P3C/3//lhr/17/P9D/1//X/9f/1/+nD4rW/4+5/4Ysq2T+BwAAgCqIuX9jmIn8DwAAAKURc/+NYSbyPwAAAJRGzP0vCjOpSP7X/9f/1//X/9f/77x//f/BpP/fnf5/D/r/U1m1+v+X+3n8+v/6/yxVtP5/zP0vDjOpSP4HAACAKoi5/6YwE/kfAAAASiPm/pvDTOR/AAAAKI2Y+zeFmVQk/+v/6//r/+v/6/933r/+/2DS/+9O/78H/X+f/6//r/9PXxWt/x9z/0vCTCqS/wEAAKAKYu5/aZiJ/A8AAADFM3JtN4u5/2VhJkvy/zXuAAAAAHjBxdx/S9ZWBK/I3//r/+v/F7//vyFdp/+v/58Vsv8/nOn/F4f+f3f6/z3o/+v/6//r/9NXRev/N3J/Np69PMykIvkfAAAAqiDm/lvDTOR/AAAAKI2Y+38pzET+BwAAgNKIuX9zmElF8r/+v/5/8fv/Pv9f/7/o/X+f/18k+v/d6f/3oP+v/6//r/9PXxWt/x9z/21hJhXJ/wAAAFAFMfffHmYi/wMAAEBpxNz/y2Em8j8AAACURsz9W8JMKpL/9f8L3v+PzVH9f/1//X/9f/3/FdH/707/vwf9f/1//X/9f/qqaP3/mPtfEWZSkfwPAAAAVRBz/x1hJvI/AAAAlEbM/a8MM5H/AQAAoDRi7p8IM6lI/tf/L3j/P+/Bj/n8f/1//X/9f/3/ldH/707/vwf9f/3/vvT/Fy7p/+v/kyta/z/m/jvDTCqS/wEAAKAKYu7fGmYi/wMAAEBpxNx/V5iJ/A8AAAClEXP/tjCTiuR//f+B6P9n+v/6//r/+v/6/yuj/9+d/n8P+v/6/z7/X/+fvipa/z/m/leFmVQk/wMAAEAVxNy/PcxE/gcAAIDSiLn/1WEm8j8AAACURsz9O8JMKpL/9f/1//X/9f/1/zvvX/9/MOn/d6f/34P+v/6//r/+P31VtP5/zP2vCTOpSP4HAACAKoi5f2eYifwPAAAApRFz/91hJvI/AAAAlEbM/ZNhJhXJ//r/+v/6//r/+v+d96//P5j0/7vT/+9B/1//X/9f/5++Klr/P+b+e8JMKpL/AQAAoApi7r83zET+BwAAgNKIuX8qzET+BwAAgNKIuX86zKQi+V//X/9f/1//f1X9/1cu3q/+f07/v1j0/7vT/+9B/1///wXv/4/q/1MqRev/x9y/K8ykIvkfAAAAqiDm/t1hJvI/AAAAlEbM/XvCTOR/AAAAKI2Y+/eGmVQk/+v/6//r/+v/+/z/zvvX/x9M+v/d9b//Hx+i/r/+v/6/z//X/2epovX/Y+6/L8ykIvkfAAAAqiDm/n1hJvI/AAAAlEbM/fvDTOR/AAAAKI2Y+w+EmVQk/+v/6//r/+v/6/933r/+/2DS/+/O5//3oP+v/6//r//PGj30h81fFa3/H3P/wTCTiuR/AAAAqIKY+18bZiL/AwAAQGnE3P8rYSbyPwAAAJRGzP2/GmZSkfyv/9/SPa8/XP1//X/9f/3/Bv3/waT/353+fw/6//r/+v/6//TVsv3/EL3Xu/8fc/+hMJOK5H8AAACogpj7fy3MRP4HAACA0oi5/3VhJvI/AAAAlEbM/YfDTCqS//X/ff6//r/+v/5/5/2vd/9/LN6v/v+a6P93p//fg/6//r/+v/4/fVW0z/+Puf/1YSYVyf8AAABQBTH33x9mIv8DAABAacTc/4YwE/kfAAAASiPm/jeGmVQk/+v/6//r/+v/6/933r/P/x9M+v/d6f/3oP+v/6//r/9PXxWt/x9z/5vCTCqS/wEAAKAKYu5/c5iJ/A8AAAClEXP/W8JM5H8AAAAojZj73xpmUpH8r/+v/6//r/+v/995//r/g0n/vzv9/x70//X/9f/1/+mrovX/Y+7/9TCTiuR/AAAAqIKY+x8IM5H/AQAAoDRi7n9bmIn8DwAAAKURc//bw0wqkv/1//X/9f/1//X/O+9f/38w6f93N2D9/1/cFC7X/8/p/xf7+Ffb/x9p+/q69P9/sFz/f2FD++31/7keitb/j7n/HWEmFcn/AAAAUAUx978zzET+BwAAgNKIuf9dYSbyPwAAAJRGzP2/EWZSkfyv/18/jsX2sv5/Wfv/Q/r/+v/6/xWh/9/dgPX/ff5/G/3/Yh+/z//X/2epovX/Y+5/d5hJRfI/AAAAVEHM/Q+Gmcj/AAAAUBox9z8UZiL/AwAAQGnE3P+eMJOK5H/9f5//X43+v8//z/T/9f8rQv+/O/3/HvT/9f+L1v//T/1/BlvR+v8x9z8cZlKR/A8AAABVEHP/e8NM5H8AAAAojZj7fzPMRP4HAACA0oi5/31hJhXJ//r/g9L/nxjQ/v9j+v/Xsf9/x035dvr/+v8s0v/vTv+/B/1//f+i9f99/j8Drmj9/5j73x9msvL8P77iLQEAAIAXRMz9vxVmUpG//wcAAIAqiLn/t8NM5H8AAAAojZj7fyfMpCL5X/9/UPr/Pv8/0//3+f9tj0f/X/+/k/Xr/8d3Hv1//X/9/0j/X/9f/592Rev/x9z/u2EmFcn/AAAAUAUx938gzET+BwAAgIHQ6f/Jbhdz/5EwE/kfAAAASiPm/qNhJhXJ//r/+v/6/wXt///Z1n/53rffeXSX/r/+v/7/qqzr5//XX/w+/1//X/8/0f/X/9f/p13R+v8x9x8LM6lI/gcAAIAqiLn/98JM5H8AAAAojZj7j4eZyP8AAABQGjH3z4SZVCT/6//r/+v/F7T/P8Cf/x/Ph/5/q771/+Obrv5/R3n/Pq2i69v/f+9iT1z/f7X9/7GOl+r/6/8P8vHr/+v/s1TR+v8x98+GmVQk/wMAAEAVhNw/dCKfi1fI/wAAAFAaMfefDDOR/wEAAKA0Yu7/YJhJRfK//r/+v/6//r/P/++8/279/9qIz/8vqtS//1njhaL/36Y4/f/O9P/1/wf5+PX/9f9Zqmj9/5j758JMKpL/AQAAoApi7v9QmIn8DwAAAKURc/+Hw0zkfwAAACiNmPtPhZlUJP/r/+v/6//r/+v/d95/YT//X/+/q7X27/X/A/3/avf//0f/X/9f/5/+KFr/P+b+02EmFcn/AAAAUAUx958JM5H/AQD+n707abKzLvs4fvp5wpNO8SzcuXBjlUtfAgtd6wtw4caNVZYLJ1ScCc4jioqzIjgPOIAgooLzAE4ozqDiPA84IUrFonNdV9Ldd9+nOzndfd///+ezyCVtmnOkUgm/dL7eANCM3P2PjVvsfwAAAGhG7v7HxS2d7H/9/9n0/6cqZf3/5vc/if7/Qfr/nV5f/6//b5n+f5z+fwn9v+f/6//1/6zU1Pr/3P2Pj1s62f8AAADQg9z9T4hb7H8AAABoRu7+8+MW+x8AAACakbv/iXFLJ/t/S/+/tuiz/8+M1/P/W+r/Pf9/x9fX/+v/W3aw/f9F9/7Mp//X/+v/g/5/V/3/0Z0+X/9Pi6bW/+fuf1Lc0sn+BwAAgB7k7n9y3GL/AwAAQDNy918Qt9j/AAAA0Izc/U+JWzrZ/6t7/v+xjY/PtP8v+n/9/8YH9P/6f/3/bHn+/7ie+v/zbz33MXdee7/r9vL6+n/9v+f/6/9Zran1/7n7nxq3dLL/AQAAoAe5+58Wt9j/AAAA0Izc/U+PW+x/AAAAaEbu/mfELZ3s/9X1/7N+/n/R/+v/Nz6g/9f/6/9nS/8/rqf+/0xeX/+v/9f/6/9Zran1/7n7nxm3dLL/AQAAoAe5+58Vt9j/AAAA0Izc/RfGLfY/AAAANCN3//G4pZP9r//f//7/Hv2//j+u/l//r//ff/r/cfr/JfT/+n/9v/6flZpa/5+7/6K4pZP9DwAAAD3I3f/suMX+BwAAgGbk7n9O3GL/AwAAQDNy9z83bulk/+v/Pf9f/6//1/8Pv77+f570/+P0/0vo/8+2nz9H/6//1/9zuj32/3eP/LS9kv4/d//z4pZO9j8AAAD0IHf/8+MW+x8AAACakbv/BXGL/Q8AAADNyN3/wrilk/2v/9f/6//1/2fc/2//obdB/z9M/38w9P/jJtP/rx0Z/LD+f/b9v+f/6//1/2wytef/5+5/UdzSyf4HAACAHuTuf3HcMrL/9/yb+QAAAMChyt3/krjF1/8BAABg9rI6y93/0rilk/2v/9f/6//1/57/P/z6Y/3/dae9P/3/tOj/x02m/9+B/l//P+f3r//X/7Pd1Pr/3P0vi1s62f8AAADQg9z9F8ct9j8AAAA0I3f/y+MW+x8AAACakbv/FXFLJ/t/uP8/9d/r/3dH/7/5/ev/h398rKr/z7+j/n+0/3+w5//3Sf8/7uD7/6P6/81/f/3/Pjrs9994/39s2efr/xkytf4/d/8lcUsn+x8AAAB6kLv/lXGL/Q8AAADNyN3/qrjF/gcAAIBm5O5/ddzSyf73/H/9v/5/fv2/5/+fdJjP/18ceP9/RP+/S/r/cZ7/v4T+X/+v//f8f1Zqav1/7v5L45ZO9j8AAAD04NK7Fhu7/zWLhf0PAAAAc3T6nx3Y+gdKQ+7+18Yt9j8AAAA0I3f/6+KWTva//l//r//X/+v/h19/Wv2/5//vlv5/nP5/Cf3/fvTzRxrr/y/b6fOn0P9fqP9nYjb1/zec+vhh9f+5+18ft3Sy/wEAAKAHufvfELfY/wAAANCM3P1vjFvsfwAAAGhG7v43xS2d7P997/+P7fza+n/9v/5f/6//1/+vmv5/nP5/Cf2/5/97/r/+n5U61f9v/vnwsPr/3P1vjls62f8AAADQg9z9b4lb7H8AAABoRu7+y+IW+x8AAACakbv/rXFLJ/vf8//1//p//b/+f/j19f/zpP8fp/9fQv+v/9f/6/9ZqU3P/z/NYfX/ufsvj1s62f8AAADQg9z9V8Qt9j8AAAA0I3f/2+IW+x8AAACakbv/7XFLJ/tf/7+//X9+XP+v/1/o//X/+v8D0W3/vzb0K9F2O/T/Nz/q+EM3f0T/r//X/+v/9f+swCT6/xOn/u0yd/874pZO9j8AAAD0IHf/O+MW+x8AAACakbv/XXGL/Q8AAADNyN3/7rhlj/v/Pit9VwdH/+/5//p//b/+f/j19f/z1G3/v0ue/7+E/l//r//X/7NSk+j/T/vr3P3viVt8/R8AAACakbv/vXGL/Q8AAADNyN3/vrjF/gcAAIBm5O5/f9zSyf7X/+v/9f/6f/3/8Oufaf+/vhim/z8Y+v9x+v8l9P/6f/2//p+Vmlr/n7v/yrilk/0PAAAAPcjd/4G4xf4HAACAZuTu/2DcYv8DAABAM3L3fyhu6WT/6//1//p//b/+f/j1Pf9/nvT/4/T/i8XiqpE3MNT/nziq/9f/6//1/5yhqfX/ufs/HLd0sv8BAACgB7n7r4pb7H8AAABoRu7+q+MW+x8AAACakbv/I3FLJ/tf/6//1//r//X/w6+v/58n/f84/f8Snv+v/9f/6/9Zqan1/7n7r4lbOtn/AAAA0IPc/dfGLfY/AAAANCN3/0fjFvsfAAAAmpG7/7q4pZP9r//X/+v/9f/70v8f1/9vpf8/GPvX/y/0//p//f8S+n/9v/6frQ6q/787fr5f1v/n7v9Y3NLJ/gcAAIAe5O6/Pm6x/wEAAKAZufs/HrfY/wAAANCM3P2fiFs62f/6f/2//l//7/n/w6+v/58nz/8fp/9fQv+v/9f/6/9ZqYPq/3fq/bf+de7+T8Ytnex/AAAA6EHu/hviFvsfAAAAmpG7/8a4xf4HAACAZuTu/1Tc0sn+1//r/zf3/4uF/l//r/8/6QD6//WF/n/l9P/j9P9L6P/b7P//Z9FQ/39sx8/X/zNFU+v/c/d/Om7pZP8DAABAD3L3fyZusf8BAACgGbn7Pxu32P8AAADQjNz9n4tbWtr/9+ycvs2//z+65RP1/4vF4rYLPP9f/z/y+vr/yfT/9U9V/786+v9x+v8l9P9t9v+e/6//59BMrf/P3f/5uKWl/Q8AAACdy93/hbjF/gcAAIBm5O7/Ytxi/wMAAEAzcvd/KW7pZP/Pv//f+on6/8VZPf9f/7/xAf2//l//P1tn299fvh6/pun/9f/6/8F+fm2Hf+9Z6P/1//p/Bkyt/8/d/+W4pZP9DwAAAD3I3X9T3GL/AwAAQDNy998ct9j/AAAA0Izc/V+JWzrZ//p//b/+f579/7r+X/+v/x80lef/n3feQ27R/+v/W+z/x+j/9f/6f7aaWv+fu/+rcUsn+x8AAAB6kLv/a3GL/Q8AAADNyN3/9bjF/gcAAIBm5O7/RtzSyf7f3v+fszhZqJ401P9Ho6b/P43+f/P71/8P//jw/H/9v/5//02l//f8/zN7//p//f+c3/+e+v/7b/98/T8tmlr/n7v/lrilk/0PAAAAPcjd/824xf4HAACAZuTu/1bcYv8DAABAM3L33xq3dLL/Pf9f/6//1//r/4dfX/8/T/r/cfr/JfT/Z9/P58+q+v/5Pv//f/X/rM7U+v/c/d+OWzaG3wP+/wz/ZwIAAAATkrv/O3FLJ1//BwAAgB7k7v9u3GL/AwAAQDNy938vbulk/+v/9f/6f/2//n/49fX/86T/H6f/X6Kf/n996IOH3c+frcN+/830/57/zwpNrf/P3f/9uKWT/Q8AAABtu2vj29z9P4hb7H8AAABoRu7+H8Yt9j8AAAA0I3f/bXFLJ/tf/6//b7//f4T+f8vr6//1/y3T/+ev6MP0/0v00/8POux+fu7vX/+v/2e7qfX/uftvj1s62f8AAADQg9z9P4pb7H8AAABoRu7+H8ct9j8AAAA0I3f/T+KWTva//r+v/n9t0WP/7/n/+n/9f0/m0/9fcWToo57/r//X/8/3/ev/9f9sN7X+P3f/HWtHutz/AAAAMFcPe+Cjb9/t971j49v1xU/jFvsfAAAAmpG7/2dxi/0PAAAAzcjd//O4pZP9r//vq//v8/n/+n/9v/6/J/Pp/4fp//X/+v/5vn/9v/6f7abW/+fu/0XcctrwG/w/6AEAAAAOz//t7bvn7v9l3NLJ1/8BAACgB7n7fxW3bNv/J3b5p9oBAACAqcnd/+u4pZOv/+v/J97/L/ap/4/vp/8/Sf+v/x96ff3/POn/x51l/39iTf+v/x+h/9f/6//Zamr9f+7+669ZdLn/AQAAoFGbfkfhNxvfri9+G7fY/wAAANCM3P2/i1vsfwAAAGhG7v7fxy2d7H/9/8T7/zN6/v+x+k+e/995/3/x+uDr6//1/y3T/4/z/P8l9P/6f/2//p+V2kP/vzFI97v/z93/h7ilk/0PAAAAPcjd/8e4xf4HAACAZuTu/1PcYv8DAABAM3L3/zlu6WT/6/8Pof+/5Ohisa/9/y6e/6//76P/3+H12+n/73vu8Zse/sirr9T/c8pB9v/5Y0H/r//X/5+k/9f/6//ZamrP/8/d/5e4pZP9DwAAAD3I3X9n3GL/AwAAQDNy9/81brl3/994WO8KAAAAWKXc/X+LWzr5+r/+v8Xn/8+z/89/1ofQ/x+fX/+fTXHv/b/n/+v/t/P8/3H6/yX0//p//b/+n5WaWv+fu//vcUsn+x8AAAB6kLv/H3FL7v+1Pf/WPQAAADAxufv/Gbf4+j8AAAA0I3f/XXFLJ/tf/6//n0r/nzz//9Tnef7/Sfp//f9e6P/H6f+X0P/r//X/+n9Wamr9f+7+f8Utnex/AAAA6EHu/rvjFvsfAAAAmpG7/99xi/0PAAAAzcjd/5+4pZP9r//X/+v/9f/6/+HX1//Pk/5/nP5/Cf2//l//r/9npabW/+fu/28AAAD//xDQcaQ=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x4, &(0x7f0000000540)=[{0x47, 0x5, 0x0, 0x2}, {0xff, 0x1, 0x3a, 0x1}, {0x7, 0x2c, 0xb, 0xffff8fa4}, {0x8001, 0x6, 0x0, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000007c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x10, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8, 0x1}, 0x10}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYRES16=r6, @ANYBLOB="01032cbd70000100000015000000a13cf354233648988ea522de45a20d0b5f54cde458d7c7297fab3990b7c15a4fe6598a0a81547cbfa1fe2d00e92fffbb4d0223ebcf383d49eb8a47bb9092e9cbb983d2da9412bc1f4729029f0a88ce07e8b55eb3796404e8149ebd91cfccd4f806c1b641991fe77293c78030bc2eda568b567d63943c7c9885e413dc94c57a3176f6348fc202162a060ece2c5f4da39355692ad935bd62104562fed2018461eadeb4812de459c6f07fa7553c533ce5cddd4a9ba0f873eee460"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20040000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, 0x0, &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x10) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0xea42, 0x0, 0x4, 0x4093}, &(0x7f0000000440)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0xc4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 3.992238404s ago: executing program 4 (id=513): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000"], 0x48) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x3e2}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mkdir(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x112) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) listxattr(0x0, 0x0, 0x0) 2.568157651s ago: executing program 0 (id=514): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x18, &(0x7f0000000740)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.229726291s ago: executing program 4 (id=515): ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=iso8859-15,umask=00000000000000000000003,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000000253,discard,fmask=00000000000000000000010\x00utf8,iocharset=macinuit,allow_utime=00000000000000000147070,\x00'], 0x1, 0x1528, &(0x7f00000037c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) socket$inet6(0xa, 0xa, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.516333795s ago: executing program 4 (id=516): unshare(0x20060400) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000800)=0x1, 0x4) 1.360003639s ago: executing program 4 (id=517): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) socket(0x10, 0x6, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r6, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) 1.358340009s ago: executing program 1 (id=525): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000700)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [], {}, [], {0x10, 0x4}}, 0x24, 0x0) 204.873181ms ago: executing program 4 (id=518): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 0s ago: executing program 4 (id=519): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) dup3(r0, r0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0xf00, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80001) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) sendto$inet(r6, 0x0, 0x0, 0x240408c4, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. [ 82.151084][ T5755] cgroup: Unknown subsys name 'net' [ 82.320821][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.046670][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.687680][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.696248][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.705918][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.714205][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.723165][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.731433][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.739217][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.739702][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.754021][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.763276][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.773945][ T5083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.781811][ T5083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.791110][ T5083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.799487][ T5083] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.806904][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.809416][ T5083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.823822][ T5083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.827841][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.832162][ T5083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.849459][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.859232][ T5083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.877880][ T5083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.903307][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.912519][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.430408][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 87.594471][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 87.725631][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 87.736951][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.745127][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.752706][ T5765] bridge_slave_0: entered allmulticast mode [ 87.760147][ T5765] bridge_slave_0: entered promiscuous mode [ 87.770169][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 87.796809][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.804122][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.811800][ T5765] bridge_slave_1: entered allmulticast mode [ 87.819221][ T5765] bridge_slave_1: entered promiscuous mode [ 87.937623][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.945382][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.953364][ T5769] bridge_slave_0: entered allmulticast mode [ 87.960502][ T5769] bridge_slave_0: entered promiscuous mode [ 87.971909][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.003919][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.011647][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.019033][ T5769] bridge_slave_1: entered allmulticast mode [ 88.026274][ T5769] bridge_slave_1: entered promiscuous mode [ 88.049114][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.137576][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.146892][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.154735][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.162327][ T5770] bridge_slave_0: entered allmulticast mode [ 88.169373][ T5770] bridge_slave_0: entered promiscuous mode [ 88.182215][ T5765] team0: Port device team_slave_0 added [ 88.216244][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.238632][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.245904][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.254053][ T5770] bridge_slave_1: entered allmulticast mode [ 88.261270][ T5770] bridge_slave_1: entered promiscuous mode [ 88.281711][ T5765] team0: Port device team_slave_1 added [ 88.302145][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.309915][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.317498][ T5768] bridge_slave_0: entered allmulticast mode [ 88.325389][ T5768] bridge_slave_0: entered promiscuous mode [ 88.334267][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.342162][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.349361][ T5768] bridge_slave_1: entered allmulticast mode [ 88.356808][ T5768] bridge_slave_1: entered promiscuous mode [ 88.385692][ T5769] team0: Port device team_slave_0 added [ 88.440768][ T5769] team0: Port device team_slave_1 added [ 88.449209][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.461936][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.473602][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.480562][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.506704][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.569777][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.577080][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.603095][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.627501][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.640652][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.650765][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.657869][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.683824][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.696819][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.703875][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.730025][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.757369][ T5770] team0: Port device team_slave_0 added [ 88.767207][ T5770] team0: Port device team_slave_1 added [ 88.833425][ T5768] team0: Port device team_slave_0 added [ 88.852254][ T5777] Bluetooth: hci0: command tx timeout [ 88.870071][ T5768] team0: Port device team_slave_1 added [ 88.895917][ T5765] hsr_slave_0: entered promiscuous mode [ 88.902676][ T5765] hsr_slave_1: entered promiscuous mode [ 88.911101][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.918152][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.944516][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.951688][ T5777] Bluetooth: hci1: command tx timeout [ 88.960758][ T5777] Bluetooth: hci2: command tx timeout [ 88.961662][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.973570][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.999961][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.011370][ T5777] Bluetooth: hci3: command tx timeout [ 89.041840][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.048854][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.075316][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.122846][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.129843][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.156155][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.193132][ T5769] hsr_slave_0: entered promiscuous mode [ 89.199628][ T5769] hsr_slave_1: entered promiscuous mode [ 89.206621][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.215192][ T5769] Cannot create hsr debugfs directory [ 89.299115][ T5768] hsr_slave_0: entered promiscuous mode [ 89.306293][ T5768] hsr_slave_1: entered promiscuous mode [ 89.312800][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.320535][ T5768] Cannot create hsr debugfs directory [ 89.345105][ T5770] hsr_slave_0: entered promiscuous mode [ 89.352736][ T5770] hsr_slave_1: entered promiscuous mode [ 89.359071][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.370017][ T5770] Cannot create hsr debugfs directory [ 89.789572][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.810089][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.820658][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.834697][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.916642][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.928483][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.950621][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.973650][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.020408][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.043813][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.058183][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.072293][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.176858][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.200148][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.210696][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.225983][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.315008][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.388480][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.430345][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.448311][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.455733][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.472968][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.480154][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.496978][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.530663][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.567075][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.574388][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.594460][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.615871][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.623088][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.664883][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.675804][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.683063][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.733245][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.740431][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.766109][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.793093][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.800254][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.839398][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.846609][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.932221][ T5777] Bluetooth: hci0: command tx timeout [ 90.978821][ T5770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.990762][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.012374][ T5777] Bluetooth: hci2: command tx timeout [ 91.017847][ T5777] Bluetooth: hci1: command tx timeout [ 91.091794][ T5777] Bluetooth: hci3: command tx timeout [ 91.357957][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.460372][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.474289][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.527924][ T5765] veth0_vlan: entered promiscuous mode [ 91.589395][ T5765] veth1_vlan: entered promiscuous mode [ 91.603349][ T5769] veth0_vlan: entered promiscuous mode [ 91.628968][ T5769] veth1_vlan: entered promiscuous mode [ 91.654917][ T5768] veth0_vlan: entered promiscuous mode [ 91.685732][ T5768] veth1_vlan: entered promiscuous mode [ 91.700403][ T5765] veth0_macvtap: entered promiscuous mode [ 91.729921][ T5765] veth1_macvtap: entered promiscuous mode [ 91.750938][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.772171][ T5769] veth0_macvtap: entered promiscuous mode [ 91.787528][ T5769] veth1_macvtap: entered promiscuous mode [ 91.826464][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.849251][ T5768] veth0_macvtap: entered promiscuous mode [ 91.862678][ T5768] veth1_macvtap: entered promiscuous mode [ 91.878590][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.914491][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.926047][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.942517][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.958826][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.968278][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.979538][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.988526][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.008465][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.019783][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.031647][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.040643][ T5770] veth0_vlan: entered promiscuous mode [ 92.061371][ T5770] veth1_vlan: entered promiscuous mode [ 92.069569][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.080301][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.093227][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.104844][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.116306][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.130324][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.145578][ T27] cfg80211: failed to load regulatory.db [ 92.153423][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.162596][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.171811][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.209688][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.221122][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.231604][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.244346][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.256699][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.269725][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.279142][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.289392][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.299132][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.440811][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.452473][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.488110][ T5770] veth0_macvtap: entered promiscuous mode [ 92.526360][ T5770] veth1_macvtap: entered promiscuous mode [ 92.553805][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.570945][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.587253][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.599395][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.610379][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.622826][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.633377][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.644527][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.658047][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.690474][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.707150][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.719220][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.730133][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.740469][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.751504][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.765321][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.773979][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.781957][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.781998][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.810147][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.846436][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.858932][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.867872][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.876748][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.897732][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.916418][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.949738][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.963362][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.011690][ T5777] Bluetooth: hci0: command tx timeout [ 93.092403][ T5777] Bluetooth: hci1: command tx timeout [ 93.097884][ T5771] Bluetooth: hci2: command tx timeout [ 93.117879][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.162595][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.172206][ T5777] Bluetooth: hci3: command tx timeout [ 93.238285][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.280560][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.347447][ T5861] syz.2.3[5861]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.141799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.150809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.340679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.349426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.443353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.458008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.261837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 95.401321][ T5777] Bluetooth: hci0: command tx timeout [ 95.401344][ T5771] Bluetooth: hci1: command tx timeout [ 95.401480][ T5771] Bluetooth: hci2: command tx timeout [ 95.408546][ T5777] Bluetooth: hci3: command tx timeout [ 95.671359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 95.681657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.020626][ T5861] loop2: detected capacity change from 0 to 4096 [ 96.049929][ T5870] loop0: detected capacity change from 0 to 64 [ 96.693853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.813820][ T5873] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 97.826355][ T5861] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 97.838232][ T5870] ======================================================= [ 97.838232][ T5870] WARNING: The mand mount option has been deprecated and [ 97.838232][ T5870] and is ignored by this kernel. Remove the mand [ 97.838232][ T5870] option from the mount to silence this warning. [ 97.838232][ T5870] ======================================================= [ 98.300633][ T5876] loop1: detected capacity change from 0 to 32768 [ 98.360994][ T5876] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (5876) [ 98.386489][ T5876] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.397095][ T5876] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 98.406233][ T5876] BTRFS info (device loop1): using free space tree [ 98.424129][ T5861] ntfs3: loop2: Failed to read $AttrDef (-4). [ 98.887791][ T5878] Trying to free block not in datazone [ 99.346771][ T5876] BTRFS info (device loop1): enabling ssd optimizations [ 99.353859][ T5876] BTRFS info (device loop1): auto enabling async discard [ 99.378305][ T5873] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 99.465557][ T5873] syz.3.4 (5873) used greatest stack depth: 20648 bytes left [ 100.158091][ T28] audit: type=1800 audit(1767686494.500:2): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 100.525422][ T28] audit: type=1326 audit(1767686495.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 100.763350][ T28] audit: type=1326 audit(1767686495.040:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 100.855134][ T28] audit: type=1326 audit(1767686495.140:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 100.884048][ T28] audit: type=1326 audit(1767686495.140:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 100.921269][ T28] audit: type=1326 audit(1767686495.140:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 100.981268][ T28] audit: type=1326 audit(1767686495.160:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 101.072435][ T28] audit: type=1326 audit(1767686495.160:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 101.189411][ T5770] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.329767][ T28] audit: type=1326 audit(1767686495.160:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 101.625210][ T5911] loop0: detected capacity change from 0 to 2048 [ 101.856486][ T5911] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.463808][ T5916] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 102.546980][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 102.822698][ T5919] Illegal XDP return value 3990956758 on prog (id 2) dev N/A, expect packet loss! [ 103.006870][ T5841] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.029806][ T5921] loop0: detected capacity change from 0 to 2048 [ 103.043066][ T5921] EXT4-fs: Ignoring removed i_version option [ 103.116614][ T5841] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.147651][ T5921] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 103.431330][ T5926] loop3: detected capacity change from 0 to 512 [ 103.442554][ T5926] ext4: Bad value for 'max_dir_size_kb' [ 103.492855][ T5923] fido_id[5923]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.525308][ T5780] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.075667][ T5928] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.096463][ T5928] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 108.289733][ T5943] loop2: detected capacity change from 0 to 32768 [ 108.433301][ T5943] jfs_strtoUCS: char2uni returned -22. [ 108.454063][ T5943] charset = cp1255, char = 0xfc [ 108.700671][ T5952] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.423445][ T5962] loop0: detected capacity change from 0 to 512 [ 111.472709][ T5962] EXT4-fs: Ignoring removed oldalloc option [ 111.540076][ T5962] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.603655][ T5962] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.687974][ T5962] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2872: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 111.711465][ T5962] EXT4-fs (loop0): 1 truncate cleaned up [ 111.719318][ T5962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.802266][ T5968] trusted_key: encrypted_key: insufficient parameters specified [ 112.351411][ T5962] loop0: detected capacity change from 512 to 64 [ 112.649321][ T5765] EXT4-fs error (device loop0): mb_free_blocks:1938: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 112.708005][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.287084][ T5978] random: crng reseeded on system resumption [ 115.372763][ T5972] loop2: detected capacity change from 0 to 32768 [ 115.413601][ T5972] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.691770][ T5972] XFS (loop2): Ending clean mount [ 115.758796][ T5769] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.372087][ T6004] sched: RT throttling activated [ 119.609212][ T6016] loop0: detected capacity change from 0 to 1024 [ 120.046197][ T28] audit: type=1800 audit(1767686514.470:11): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.38" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 120.199853][ T12] hfsplus: found bad thread record in catalog [ 120.266994][ T12] hfsplus: found bad thread record in catalog [ 121.040604][ T6030] binfmt_misc: register: failed to install interpreter file ./file1 [ 122.755735][ T6046] loop2: detected capacity change from 0 to 8 [ 127.321292][ T6074] bridge0: port 3(syz_tun) entered blocking state [ 127.328380][ T6074] bridge0: port 3(syz_tun) entered disabled state [ 127.339605][ T6074] syz_tun: entered allmulticast mode [ 127.354714][ T6074] syz_tun: entered promiscuous mode [ 127.375294][ T6074] bridge0: port 3(syz_tun) entered blocking state [ 127.383327][ T6074] bridge0: port 3(syz_tun) entered forwarding state [ 128.133022][ T6083] capability: warning: `syz.2.55' uses deprecated v2 capabilities in a way that may be insecure [ 128.416994][ T6090] binder: 6089:6090 ioctl c0306201 0 returned -14 [ 128.665714][ T6094] random: crng reseeded on system resumption [ 129.712121][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 130.521240][ T23] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.577870][ T23] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 130.635600][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.758682][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 130.770227][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 130.835643][ T23] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.847119][ T23] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.865390][ T23] usb 2-1: Product: syz [ 130.870276][ T23] usb 2-1: Manufacturer: syz [ 130.933527][ T23] cdc_wdm 2-1:1.0: skipping garbage [ 131.494045][ T6113] process 'syz.3.64' launched './file0' with NULL argv: empty string added [ 131.791527][ T23] cdc_wdm 2-1:1.0: skipping garbage [ 131.815776][ T23] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 131.823587][ T23] cdc_wdm 2-1:1.0: Unknown control protocol [ 131.882385][ T23] usb 2-1: USB disconnect, device number 2 [ 132.426714][ T6130] loop2: detected capacity change from 0 to 64 [ 133.169723][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.187765][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.026698][ T6154] netlink: 28 bytes leftover after parsing attributes in process `syz.1.76'. [ 136.114768][ T6155] loop3: detected capacity change from 0 to 2048 [ 136.125079][ T6155] EXT4-fs: Ignoring removed bh option [ 138.311540][ T6154] netlink: 'syz.1.76': attribute type 7 has an invalid length. [ 138.319340][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 138.667775][ T6155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.143728][ T6168] loop2: detected capacity change from 0 to 4096 [ 140.611386][ T6160] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.300556][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1090 with error 28 [ 141.347531][ T28] audit: type=1804 audit(1767686535.880:12): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.82" name="bus" dev="ramfs" ino=8455 res=1 errno=0 [ 141.455110][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 141.455110][ T11] [ 141.521583][ T11] EXT4-fs (loop3): Total free blocks count 0 [ 141.679343][ T11] EXT4-fs (loop3): Free/Dirty block details [ 141.693283][ T6168] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 141.712428][ T11] EXT4-fs (loop3): free_blocks=2415919104 [ 141.718286][ T11] EXT4-fs (loop3): dirty_blocks=1104 [ 141.737184][ T11] EXT4-fs (loop3): Block reservation details [ 141.747263][ T11] EXT4-fs (loop3): i_reserved_data_blocks=69 [ 141.769079][ T6168] ntfs3: loop2: Failed to load $Extend (-22). [ 141.781603][ T6168] ntfs3: loop2: Failed to initialize $Extend. [ 141.869371][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.366663][ T6182] loop2: detected capacity change from 0 to 2048 [ 144.766978][ T6182] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.929640][ T28] audit: type=1800 audit(1767686539.460:13): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.86" name="file1" dev="loop2" ino=1313 res=0 errno=0 [ 145.159952][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 149.286800][ T6194] loop1: detected capacity change from 0 to 32768 [ 149.366355][ T6194] (syz.1.90,6194,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 149.462952][ T6194] (syz.1.90,6194,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 149.590127][ T6194] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 149.610000][ T6194] (syz.1.90,6194,0):ocfs2_initialize_super:2285 ERROR: status = -12 [ 149.664762][ T6194] (syz.1.90,6194,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 150.621851][ T5773] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 150.630640][ T5773] Bluetooth: hci1: Injecting HCI hardware error event [ 150.640903][ T5773] Bluetooth: hci1: hardware error 0x00 [ 153.811683][ T5773] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 159.665424][ T6272] loop3: detected capacity change from 0 to 32768 [ 159.780902][ T6272] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.073953][ T6305] Bluetooth: MGMT ver 1.22 [ 160.486616][ T6272] XFS (loop3): Ending clean mount [ 160.516074][ T6304] loop1: detected capacity change from 0 to 4096 [ 160.625232][ T5768] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.668359][ T6306] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.086996][ T6318] vivid-000: disconnect [ 162.001441][ T5777] Bluetooth: hci0: command tx timeout [ 162.303476][ T5773] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 162.707394][ T6332] loop3: detected capacity change from 0 to 8 [ 164.051285][ T5773] Bluetooth: hci0: command tx timeout [ 164.473579][ T6314] vivid-000: reconnect [ 167.817869][ T6355] loop3: detected capacity change from 0 to 64 [ 168.676469][ T6345] loop1: detected capacity change from 0 to 40427 [ 168.761479][ T6345] F2FS-fs (loop1): LFS is not compatible with checkpoint=disable [ 170.005043][ T28] audit: type=1326 audit(1767686564.540:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 170.088275][ T28] audit: type=1326 audit(1767686564.560:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 170.204329][ T28] audit: type=1326 audit(1767686564.580:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 170.315459][ T28] audit: type=1326 audit(1767686564.580:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 170.350914][ T28] audit: type=1326 audit(1767686564.580:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 170.416539][ T28] audit: type=1326 audit(1767686564.590:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 170.479696][ T28] audit: type=1326 audit(1767686564.590:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 170.540811][ T28] audit: type=1326 audit(1767686564.590:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 170.620995][ T6360] loop3: detected capacity change from 0 to 32768 [ 170.639237][ T28] audit: type=1326 audit(1767686564.590:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1678f749 code=0x7ffc0000 [ 170.679132][ T5823] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 171.378161][ T6360] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 173.468278][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 173.485693][ T5823] usb 2-1: device descriptor read/all, error -71 [ 173.548510][ T6360] XFS (loop3): Ending clean mount [ 173.692881][ T5768] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 174.219860][ T6403] loop2: detected capacity change from 0 to 512 [ 174.270969][ T6401] loop3: detected capacity change from 0 to 32768 [ 174.327808][ T6401] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.383155][ T6403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.458406][ T6403] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.667367][ T6401] XFS (loop3): Ending clean mount [ 174.732042][ T6401] XFS (loop3): Quotacheck needed: Please wait. [ 175.274581][ T6401] XFS (loop3): Quotacheck: Done. [ 175.350398][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.420777][ T6397] loop1: detected capacity change from 0 to 32768 [ 175.807334][ T6397] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 176.071256][ T28] audit: type=1804 audit(1767686570.600:23): pid=6428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.152" name="/newroot/32/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 176.406234][ T6397] XFS (loop1): Ending clean mount [ 176.444459][ T6435] siw: device registration error -23 [ 177.114130][ T5768] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.163493][ T5770] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 178.175973][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 178.466391][ T6450] input: syz1 as /devices/virtual/input/input5 [ 178.497153][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.507530][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.536847][ T6452] IPVS: Error connecting to the multicast addr [ 178.563948][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.637245][ T9] usb 2-1: config 0 descriptor?? [ 178.785542][ T6457] Zero length message leads to an empty skb [ 179.042425][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 179.081864][ T6460] loop2: detected capacity change from 0 to 4096 [ 179.447015][ T6460] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 179.471667][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 179.578480][ T6460] ntfs3: loop2: Failed to load $Extend (-22). [ 179.585112][ T6460] ntfs3: loop2: Failed to initialize $Extend. [ 179.668820][ T9] usb 1-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.804103][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 179.827656][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00 [ 179.845992][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.897983][ T6462] nbd: nbd1 already in use [ 180.523330][ T9] usb 1-1: config 0 descriptor?? [ 181.064305][ T6472] loop2: detected capacity change from 0 to 32768 [ 181.124356][ T9] wacom 0003:056A:00D6.0002: item fetching failed at offset 3/5 [ 181.137796][ T6472] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 181.161778][ T9] wacom 0003:056A:00D6.0002: parse failed [ 181.181795][ T9] wacom: probe of 0003:056A:00D6.0002 failed with error -22 [ 181.201094][ T787] usb 2-1: USB disconnect, device number 5 [ 182.957136][ T28] audit: type=1326 audit(1767686577.490:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 182.988757][ T6472] XFS (loop2): Ending clean mount [ 183.000748][ T6472] XFS (loop2): Quotacheck needed: Please wait. [ 183.028174][ T9] usb 1-1: USB disconnect, device number 2 [ 183.058661][ T28] audit: type=1326 audit(1767686577.490:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 183.168539][ T28] audit: type=1326 audit(1767686577.520:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 183.206464][ T6472] XFS (loop2): Quotacheck: Done. [ 183.218373][ T28] audit: type=1326 audit(1767686577.520:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 183.833167][ T6496] loop1: detected capacity change from 0 to 512 [ 184.113512][ T6496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 184.171900][ T6496] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.540073][ T6502] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 184.551719][ T6502] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 184.561647][ T6502] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.174: Failed to acquire dquot type 0 [ 185.069826][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 185.094304][ T5769] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 185.620055][ T6512] netlink: 48 bytes leftover after parsing attributes in process `syz.3.172'. [ 186.119760][ T6514] loop2: detected capacity change from 0 to 32768 [ 186.171668][ T6514] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.292257][ T6514] XFS (loop2): Ending clean mount [ 186.309286][ T6514] XFS (loop2): Quotacheck needed: Please wait. [ 186.334282][ T6521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.369866][ T6531] bond_slave_0: entered promiscuous mode [ 186.376009][ T6531] bond_slave_1: entered promiscuous mode [ 186.381870][ T6531] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 186.404690][ T6531] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 186.412971][ T6514] XFS (loop2): Quotacheck: Done. [ 186.423730][ T6531] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 188.268438][ T28] audit: type=1804 audit(1767686582.790:28): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.177" name="/newroot/51/file0/bus" dev="loop2" ino=9291 res=1 errno=0 [ 188.654127][ T5769] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 188.715807][ T6551] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 189.033991][ T6557] netlink: 'syz.0.188': attribute type 10 has an invalid length. [ 189.042465][ T2954] bond0: (slave bond_slave_0): interface is now down [ 189.049600][ T2954] bond0: (slave bond_slave_1): interface is now down [ 189.122397][ T6557] syz_tun: entered promiscuous mode [ 189.142859][ T1129] bond0: (slave bond_slave_0): interface is now down [ 189.149996][ T1129] bond0: (slave bond_slave_1): interface is now down [ 189.223116][ T6557] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 189.233385][ T2954] bond0: (slave bond_slave_0): interface is now down [ 189.240165][ T2954] bond0: (slave bond_slave_1): interface is now down [ 189.267426][ T2954] bond0: (slave syz_tun): interface is now down [ 189.284824][ T2954] bond0: now running without any active interface! [ 190.371390][ T5773] Bluetooth: hci3: command 0x0405 tx timeout [ 190.455368][ T6569] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 191.645308][ T6580] loop3: detected capacity change from 0 to 256 [ 193.431487][ T6598] netlink: 40 bytes leftover after parsing attributes in process `syz.2.200'. [ 193.613267][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 193.629277][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 193.663086][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 193.720648][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 193.730141][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 193.834809][ T6604] loop2: detected capacity change from 0 to 2048 [ 193.870032][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 195.099242][ T6606] delete_channel: no stack [ 195.610533][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.619446][ T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 195.629975][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.632436][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 195.647331][ T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 195.658581][ T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 195.673117][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 195.683710][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 195.693173][ T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 195.711519][ T9] usb 4-1: Product: syz [ 195.718809][ T9] usb 4-1: Manufacturer: syz [ 195.723560][ T9] usb 4-1: SerialNumber: syz [ 195.732660][ T9] usb 4-1: config 0 descriptor?? [ 195.746173][ T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 195.766678][ T6604] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.812479][ T9] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 195.982783][ T9] usb 4-1: USB disconnect, device number 2 [ 196.022188][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 196.211398][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 196.437368][ T27] usb 3-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6 [ 196.460546][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.479345][ T27] usb 3-1: Product: syz [ 196.488504][ T27] usb 3-1: Manufacturer: syz [ 196.501416][ T27] usb 3-1: SerialNumber: syz [ 196.726810][ T27] pwc: Visionite VCS-UC300 USB webcam detected. [ 196.749593][ T27] pwc: Failed to set LED on/off time (-71) [ 196.758742][ T27] pwc: send_video_command error -71 [ 196.770030][ T27] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 196.789721][ T27] Philips webcam: probe of 3-1:5.0 failed with error -71 [ 196.804683][ T27] usb 3-1: USB disconnect, device number 2 [ 197.020543][ T6622] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 198.304617][ T6629] loop3: detected capacity change from 0 to 32768 [ 198.314467][ T6629] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.210 (6629) [ 198.429955][ T6629] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 198.440317][ T6629] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 198.450035][ T6629] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 198.460041][ T6629] BTRFS info (device loop3): use zstd compression, level 3 [ 198.467397][ T6629] BTRFS info (device loop3): using free space tree [ 198.498599][ T6634] ip6gre1: entered promiscuous mode [ 198.598655][ T6634] ip6gre1: entered allmulticast mode [ 199.102343][ T6629] BTRFS info (device loop3): enabling ssd optimizations [ 199.109379][ T6629] BTRFS info (device loop3): auto enabling async discard [ 199.449232][ T5768] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 204.805071][ T6699] loop3: detected capacity change from 0 to 32768 [ 205.028469][ T6699] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 205.169792][ T6714] loop2: detected capacity change from 0 to 1764 [ 205.203404][ T6714] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 205.364456][ T6699] XFS (loop3): Ending clean mount [ 205.396513][ T6699] XFS (loop3): Quotacheck needed: Please wait. [ 205.530665][ T6699] XFS (loop3): Quotacheck: Done. [ 206.201877][ T5820] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 206.280930][ T5768] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.391713][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 206.407276][ T5820] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 206.431250][ T5820] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.446804][ T5820] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.458598][ T5820] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 206.477006][ T5820] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.493178][ T5820] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 206.521765][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.696302][ T6727] netlink: 140 bytes leftover after parsing attributes in process `syz.0.241'. [ 207.628906][ T5820] usb 3-1: GET_CAPABILITIES returned 0 [ 207.931312][ T5820] usbtmc 3-1:16.0: can't read capabilities [ 209.040239][ T6728] delete_channel: no stack [ 209.702103][ T5820] usb 3-1: USB disconnect, device number 3 [ 211.988118][ T5083] Bluetooth: hci0: command tx timeout [ 211.995628][ T5771] Bluetooth: hci2: command 0x0406 tx timeout [ 212.568802][ T6743] loop1: detected capacity change from 0 to 32768 [ 213.705323][ T6755] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 215.301793][ T6763] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 218.017306][ T6779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'. [ 218.406353][ T6784] loop3: detected capacity change from 0 to 4096 [ 218.713612][ T6787] siw: device registration error -23 [ 218.751508][ T6784] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 218.954168][ T6784] ntfs3: loop3: Failed to load $Extend (-22). [ 218.961413][ T6784] ntfs3: loop3: Failed to initialize $Extend. [ 219.035299][ T6777] loop2: detected capacity change from 0 to 32768 [ 219.181367][ T6777] (syz.2.250,6777,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 219.204956][ T6777] (syz.2.250,6777,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 219.259017][ T6777] JBD2: Ignoring recovery information on journal [ 219.475217][ T6777] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 221.718252][ T5769] ocfs2: Unmounting device (7,2) on (node local) [ 223.483485][ T6824] siw: device registration error -23 [ 228.371441][ T5777] Bluetooth: hci0: command tx timeout [ 230.715946][ T6859] syz.3.276 (6859): drop_caches: 2 [ 239.692578][ T6897] vivid-003: ================= START STATUS ================= [ 239.711373][ T6897] vivid-003: FM Deviation: 75000 [ 239.716905][ T6897] vivid-003: ================== END STATUS ================== [ 241.139630][ T6907] loop1: detected capacity change from 0 to 2048 [ 242.883558][ T6907] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.120563][ T5773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.141407][ T5773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.150284][ T5773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.161358][ T5773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.169268][ T5773] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 246.177054][ T5773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.654097][ T5769] bridge0: port 3(syz_tun) entered disabled state [ 247.065374][ T5769] syz_tun (unregistering): left allmulticast mode [ 247.092800][ T5769] syz_tun (unregistering): left promiscuous mode [ 247.102204][ T5769] bridge0: port 3(syz_tun) entered disabled state [ 247.192459][ T6914] loop3: detected capacity change from 0 to 32768 [ 248.985039][ T5773] Bluetooth: hci4: command tx timeout [ 249.159996][ T6932] loop1: detected capacity change from 0 to 4096 [ 249.264796][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.765782][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.916228][ T5773] Bluetooth: Frame is too long (len 10, expected len 6) [ 250.086025][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.365846][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.481026][ T6966] loop3: detected capacity change from 0 to 64 [ 250.719240][ T6921] chnl_net:caif_netlink_parms(): no params data found [ 251.072758][ T5773] Bluetooth: hci4: command tx timeout [ 251.784726][ T6921] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.803345][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.851701][ T6921] bridge_slave_0: entered allmulticast mode [ 251.858837][ T6921] bridge_slave_0: entered promiscuous mode [ 251.942951][ T6921] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.950244][ T6921] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.977270][ T6921] bridge_slave_1: entered allmulticast mode [ 254.397409][ T5773] Bluetooth: hci4: command tx timeout [ 254.417621][ T6921] bridge_slave_1: entered promiscuous mode [ 254.683997][ T6921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.755842][ T6921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.275331][ T6995] loop1: detected capacity change from 0 to 40427 [ 255.393972][ T6995] F2FS-fs (loop1): invalid crc value [ 255.867247][ T6995] F2FS-fs (loop1): Found nat_bits in checkpoint [ 255.960211][ T6995] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 255.975218][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.982013][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.025995][ T6921] team0: Port device team_slave_0 added [ 256.226236][ T28] audit: type=1800 audit(1767686650.730:29): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.311" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 256.556903][ T5773] Bluetooth: hci4: command tx timeout [ 256.742566][ T5770] syz-executor: attempt to access beyond end of device [ 256.742566][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 256.763984][ T6921] team0: Port device team_slave_1 added [ 256.823868][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 257.132155][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.139203][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.241311][ T6921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.326501][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.361369][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.431515][ T6921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.948170][ T6921] hsr_slave_0: entered promiscuous mode [ 257.961600][ T6921] hsr_slave_1: entered promiscuous mode [ 257.976353][ T6921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.999147][ T6921] Cannot create hsr debugfs directory [ 260.330814][ T7028] loop1: detected capacity change from 0 to 32768 [ 260.382753][ T7028] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.313 (7028) [ 260.476205][ T7028] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 260.516129][ T7028] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 260.555460][ T7028] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 260.603186][ T7028] BTRFS info (device loop1): use zstd compression, level 3 [ 260.610494][ T7028] BTRFS info (device loop1): using free space tree [ 260.823206][ T7028] BTRFS info (device loop1): enabling ssd optimizations [ 261.028954][ T7028] BTRFS info (device loop1): auto enabling async discard [ 262.146225][ T5770] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 262.194675][ T11] hsr_slave_0: left promiscuous mode [ 262.211360][ T5777] Bluetooth: hci4: command tx timeout [ 262.352177][ T11] hsr_slave_1: left promiscuous mode [ 262.407197][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.442200][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.464752][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.499607][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.774843][ T11] bridge_slave_1: left allmulticast mode [ 262.905482][ T11] bridge_slave_1: left promiscuous mode [ 263.142346][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.218681][ T11] bridge_slave_0: left allmulticast mode [ 263.271156][ T11] bridge_slave_0: left promiscuous mode [ 263.278906][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.729511][ T11] veth1_macvtap: left promiscuous mode [ 263.731750][ T7109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.331'. [ 263.751758][ T11] veth0_macvtap: left promiscuous mode [ 263.757808][ T11] veth1_vlan: left promiscuous mode [ 263.801763][ T11] veth0_vlan: left promiscuous mode [ 263.855461][ T7112] loop1: detected capacity change from 0 to 256 [ 263.897230][ T7112] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 265.587754][ T11] team0 (unregistering): Port device team_slave_1 removed [ 265.642064][ T11] team0 (unregistering): Port device team_slave_0 removed [ 265.698263][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.756568][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.340440][ T11] bond0 (unregistering): Released all slaves [ 266.506436][ T6921] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 266.538384][ T6921] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 266.618666][ T6921] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 266.843026][ T6921] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 266.971828][ T7130] serio: Serial port ttyS3 [ 267.880629][ T7137] loop3: detected capacity change from 0 to 1024 [ 267.997438][ T28] audit: type=1800 audit(1767686662.530:30): pid=7137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.339" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 268.213017][ T1071] hfsplus: bad catalog folder entry [ 268.234018][ T1071] hfsplus: bad catalog file entry [ 268.267893][ T6921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.381796][ T6921] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.429078][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.437754][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.506452][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.513720][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.135821][ T7161] ceph: No mds server is up or the cluster is laggy [ 269.194451][ T27] libceph: connect (1)[c::]:6789 error -101 [ 269.485611][ T6921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.493269][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 271.493281][ T7188] loop1: detected capacity change from 0 to 1024 [ 271.507399][ T7189] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 271.549903][ T7188] EXT4-fs: Ignoring removed orlov option [ 271.574571][ T7188] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.659859][ T7188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.873733][ T6921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.930102][ T7202] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 272.003003][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.356886][ T5777] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 274.465378][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 274.565396][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 274.634953][ T6921] veth0_vlan: entered promiscuous mode [ 274.663515][ T6921] veth1_vlan: entered promiscuous mode [ 274.744020][ T6921] veth0_macvtap: entered promiscuous mode [ 274.784267][ T6921] veth1_macvtap: entered promiscuous mode [ 274.982691][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.021260][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.054092][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.123381][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.172469][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.201189][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.236070][ T6921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.324796][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.367067][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.395274][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.417789][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.428055][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.450976][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.504928][ T6921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.575204][ T6921] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.628304][ T6921] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.661290][ T6921] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.711294][ T6921] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.967399][ T1071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.000826][ T1071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.058054][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.123938][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.009661][ T7267] cgroup: Invalid name [ 278.075262][ T7273] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 278.086941][ T7273] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 278.165834][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 278.401249][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 278.415422][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.450094][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.498439][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 278.525376][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 278.559717][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.698600][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 278.711202][ T23] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 278.719270][ T23] usb 2-1: Manufacturer: syz [ 278.730807][ T23] usb 2-1: config 0 descriptor?? [ 278.789337][ T7288] loop4: detected capacity change from 0 to 4096 [ 279.081301][ T23] rc_core: IR keymap rc-hauppauge not found [ 279.569293][ T23] Registered IR keymap rc-empty [ 280.061956][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 280.098176][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 280.385449][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 280.401814][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 281.601362][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 281.607603][ T7307] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 281.669259][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 281.751432][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 281.976897][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 284.555243][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 284.629554][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 284.681470][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 284.721437][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 284.748077][ T7326] loop4: detected capacity change from 0 to 4096 [ 284.772982][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 284.831473][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 284.860984][ T5780] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 284.909106][ T23] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 284.946330][ T23] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 285.219982][ T23] usb 2-1: USB disconnect, device number 6 [ 286.310632][ T7351] fuse: Unknown parameter 'group_00000000000000000000' [ 287.272445][ T7349] can0: slcan on ttyS3. [ 287.944811][ T7349] can0 (unregistered): slcan off ttyS3. [ 287.966218][ T7349] can0: slcan on ttyS3. [ 288.212419][ T7344] can0 (unregistered): slcan off ttyS3. [ 289.781575][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 290.190546][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.825112][ T23] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 290.865660][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.916857][ T23] usb 2-1: config 0 descriptor?? [ 290.970170][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 291.292395][ T7393] random: crng reseeded on system resumption [ 291.355348][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 291.469885][ T7394] loop3: detected capacity change from 0 to 1024 [ 291.487274][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 292.019672][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.027925][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.037971][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.045479][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.053413][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.060803][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.069163][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.077229][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.085229][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.092726][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.100331][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.107762][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.115699][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.123176][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.132900][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.140259][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.148167][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.155560][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.163142][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.170535][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.179049][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.186528][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.194639][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.202416][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.210010][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.217628][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.225291][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.233006][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.240653][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.248106][ T7394] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.353564][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 292.360892][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 292.368264][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 292.388443][ T28] audit: type=1800 audit(1767686686.920:31): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.387" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 292.447840][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 292.455521][ T23] pwc: recv_control_msg error -32 req 04 val 1400 [ 292.466224][ T23] pwc: recv_control_msg error -32 req 02 val 2000 [ 292.473710][ T23] pwc: recv_control_msg error -32 req 02 val 2100 [ 292.490194][ T23] pwc: recv_control_msg error -32 req 04 val 1500 [ 292.501484][ T23] pwc: recv_control_msg error -32 req 02 val 2500 [ 292.510986][ T23] pwc: recv_control_msg error -32 req 02 val 2400 [ 292.529859][ T23] pwc: recv_control_msg error -32 req 02 val 2600 [ 292.548012][ T23] pwc: recv_control_msg error -32 req 02 val 2900 [ 292.578326][ T23] pwc: recv_control_msg error -32 req 02 val 2800 [ 292.823720][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 292.853239][ T23] pwc: Registered as video103. [ 292.880905][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 292.944406][ T23] usb 2-1: USB disconnect, device number 7 [ 293.011438][ T27] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 293.038569][ T7410] loop3: detected capacity change from 0 to 1024 [ 293.180102][ T28] audit: type=1800 audit(1767686687.710:32): pid=7410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.391" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 293.236884][ T27] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 293.435672][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 293.742665][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.784544][ T7410] syz.3.391: attempt to access beyond end of device [ 293.784544][ T7410] loop3: rw=34817, sector=5778, nr_sectors = 2 limit=1024 [ 293.841337][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 293.928819][ T7410] hfsplus: request for non-existent node -16711680 in B*Tree [ 293.959713][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 294.028276][ T7410] hfsplus: request for non-existent node -16711680 in B*Tree [ 294.043719][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.177403][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 294.331759][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 294.469144][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.615047][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 295.108022][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.214011][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.274318][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 295.710643][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.773125][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.854713][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 296.839524][ T27] usb 5-1: unable to read config index 5 descriptor/start: -71 [ 296.891265][ T27] usb 5-1: can't read configurations, error -71 [ 299.791483][ T28] audit: type=1326 audit(1767686693.520:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9988f8f749 code=0x7ffc0000 [ 300.182057][ T28] audit: type=1326 audit(1767686693.520:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9988f8f749 code=0x7ffc0000 [ 300.486842][ T28] audit: type=1326 audit(1767686693.530:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9988f8f749 code=0x7ffc0000 [ 300.579807][ T28] audit: type=1326 audit(1767686693.530:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f9988f8f749 code=0x7ffc0000 [ 300.837247][ T28] audit: type=1326 audit(1767686693.530:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9988f8f749 code=0x7ffc0000 [ 300.905826][ T28] audit: type=1326 audit(1767686693.530:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9988f8f749 code=0x7ffc0000 [ 300.971802][ T7465] omfs: Invalid superblock (0) [ 301.037887][ T28] audit: type=1326 audit(1767686693.540:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9988f8f749 code=0x7ffc0000 [ 301.277279][ T28] audit: type=1326 audit(1767686693.540:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9988f8f749 code=0x7ffc0000 [ 301.545484][ T28] audit: type=1326 audit(1767686693.540:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9988f8f749 code=0x7ffc0000 [ 301.835139][ T7474] loop1: detected capacity change from 0 to 128 [ 301.935330][ T7474] EXT4-fs (loop1): Test dummy encryption mode enabled [ 302.056307][ T7474] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.387016][ T7481] block device autoloading is deprecated and will be removed. [ 302.559527][ T7474] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 303.206957][ T7488] loop3: detected capacity change from 0 to 32768 [ 303.226117][ T7488] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.409 (7488) [ 303.244993][ T7488] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 303.255751][ T7488] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 303.264847][ T7488] BTRFS info (device loop3): using free space tree [ 303.353591][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.447331][ T7488] BTRFS info (device loop3): enabling ssd optimizations [ 303.455209][ T7488] BTRFS info (device loop3): auto enabling async discard [ 303.623331][ T7488] syz.3.409 (7488) used greatest stack depth: 20488 bytes left [ 303.798819][ T5768] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 303.901205][ T7524] loop4: detected capacity change from 0 to 1024 [ 306.783390][ T7545] loop1: detected capacity change from 0 to 512 [ 307.123435][ T7545] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.418: invalid indirect mapped block 4294967295 (level 1) [ 307.212007][ T7545] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.418: invalid indirect mapped block 4294967295 (level 1) [ 307.303302][ T7545] EXT4-fs (loop1): 2 truncates cleaned up [ 307.323159][ T7545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.408022][ T7555] loop3: detected capacity change from 0 to 4096 [ 307.481265][ T7555] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 307.577172][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.672335][ T7555] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 311.861248][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 312.084851][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.126048][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.175962][ T23] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 312.195962][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.228719][ T23] usb 5-1: config 0 descriptor?? [ 313.731648][ T23] steelseries 0003:1038:12B6.0003: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 313.790673][ T7650] loop3: detected capacity change from 0 to 128 [ 314.069932][ T7650] hpfs: hpfs_map_sector(): read error [ 314.076341][ T7650] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 314.137961][ T7650] hpfs: hpfs_map_sector(): read error [ 314.411396][ T23] steelseries 0003:1038:12B6.0003: hid_hw_raw_request() failed with -71 [ 314.499029][ T23] usb 5-1: USB disconnect, device number 4 [ 314.506060][ T5780] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 314.749229][ T7651] fido_id[7651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 315.848381][ T7680] netlink: 596 bytes leftover after parsing attributes in process `syz.1.447'. [ 317.513602][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.519984][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.171544][ T7696] loop0: detected capacity change from 0 to 4096 [ 318.316510][ T7696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.444535][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.914177][ T5777] Bluetooth: hci4: link tx timeout [ 319.919832][ T5777] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 319.931496][ T5777] Bluetooth: hci4: link tx timeout [ 319.936715][ T5777] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.991481][ T7729] dvmrp6: entered allmulticast mode [ 321.731455][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 321.933079][ T27] usb 4-1: config 0 has no interfaces? [ 321.938602][ T27] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 321.982207][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 322.019550][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.719925][ T27] usb 4-1: config 0 descriptor?? [ 323.950839][ T27] usb 4-1: USB disconnect, device number 3 [ 324.051258][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 324.200745][ T28] audit: type=1326 audit(1767686718.730:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 324.250247][ T28] audit: type=1326 audit(1767686718.730:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 324.311177][ T28] audit: type=1326 audit(1767686718.760:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 324.359765][ T28] audit: type=1326 audit(1767686718.760:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 324.395849][ T7748] loop4: detected capacity change from 0 to 32768 [ 324.406377][ T28] audit: type=1326 audit(1767686718.760:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 324.461410][ T7748] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 324.974837][ T7748] XFS (loop4): Ending clean mount [ 325.230298][ T7748] XFS (loop4): Quotacheck needed: Please wait. [ 325.731240][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 325.981208][ T7748] XFS (loop4): Quotacheck: Done. [ 327.183726][ T6921] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 327.943686][ T7789] warning: `syz.1.470' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 328.575180][ T7801] loop4: detected capacity change from 0 to 128 [ 329.019582][ T7801] hpfs: hpfs_map_sector(): read error [ 329.025485][ T7801] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 329.073571][ T7801] hpfs: hpfs_map_sector(): read error [ 329.366795][ T7807] loop0: detected capacity change from 0 to 512 [ 329.393746][ T7807] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 329.454962][ T7807] EXT4-fs (loop0): 1 truncate cleaned up [ 329.515186][ T7807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.550666][ T7815] loop4: detected capacity change from 0 to 256 [ 329.562305][ T7815] exfat: Deprecated parameter 'namecase' [ 329.568088][ T7815] exfat: Deprecated parameter 'utf8' [ 329.591539][ T7815] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 330.041226][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 330.305309][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 330.316585][ T23] usb 4-1: config 1 interface 0 has no altsetting 0 [ 330.337458][ T23] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.40 [ 330.352585][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.372686][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.380930][ T23] usb 4-1: Product: syz [ 330.395720][ T23] usb 4-1: Manufacturer: syz [ 330.400401][ T23] usb 4-1: SerialNumber: syz [ 330.412186][ T7820] syz.4.476 (7820): drop_caches: 2 [ 330.519429][ T7833] loop1: detected capacity change from 0 to 512 [ 331.104825][ T7833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.118403][ T7833] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.764285][ T23] usbhid 4-1:1.0: can't add hid device: -71 [ 331.777313][ T23] usbhid: probe of 4-1:1.0 failed with error -71 [ 331.786529][ T23] usb 4-1: USB disconnect, device number 4 [ 331.951514][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.046241][ T7845] 9pnet_fd: Insufficient options for proto=fd [ 332.605571][ T7851] loop0: detected capacity change from 0 to 128 [ 333.194884][ T7851] hpfs: hpfs_map_sector(): read error [ 333.200405][ T7851] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 333.215487][ T7851] hpfs: hpfs_map_sector(): read error [ 333.340070][ T6489] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 334.582233][ T28] audit: type=1804 audit(1767686729.090:47): pid=7865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.487" name="bus" dev="ramfs" ino=12274 res=1 errno=0 [ 334.678310][ T7869] netlink: 44 bytes leftover after parsing attributes in process `syz.0.487'. [ 334.987088][ T7874] loop1: detected capacity change from 0 to 4096 [ 335.381288][ T787] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 336.004279][ T7882] ntfs3: loop1: MFT: r=1b, expect seq=1 instead of 0! [ 336.032031][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.043039][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.053278][ T787] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 336.071536][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.092501][ T787] usb 4-1: config 0 descriptor?? [ 336.531288][ T787] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 336.585110][ T787] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input10 [ 336.791442][ T7876] loop4: detected capacity change from 0 to 32768 [ 336.810086][ T28] audit: type=1326 audit(1767686731.340:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 336.821686][ T7876] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.488 (7876) [ 336.929177][ T787] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 336.960357][ T28] audit: type=1326 audit(1767686731.350:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 337.037983][ T28] audit: type=1326 audit(1767686731.350:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 337.062688][ T787] usb 4-1: USB disconnect, device number 5 [ 337.090627][ T7876] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 337.161303][ T28] audit: type=1326 audit(1767686731.350:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 337.193030][ T7876] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 337.225142][ T7876] BTRFS info (device loop4): force clearing of disk cache [ 337.252939][ T28] audit: type=1326 audit(1767686731.390:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 337.261724][ T7876] BTRFS info (device loop4): metadata ratio 0 [ 337.371527][ T7876] BTRFS info (device loop4): enabling ssd optimizations [ 337.378565][ T7876] BTRFS info (device loop4): using spread ssd allocation scheme [ 337.422172][ T28] audit: type=1326 audit(1767686731.390:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 337.439548][ T7876] BTRFS info (device loop4): using free space tree [ 337.520209][ T28] audit: type=1326 audit(1767686731.390:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 337.607506][ T7894] fido_id[7894]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 337.611246][ T28] audit: type=1326 audit(1767686731.390:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 337.711305][ T7876] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 337.725507][ T7876] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 337.735682][ T7899] loop1: detected capacity change from 0 to 2048 [ 337.818914][ T7876] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 337.819708][ T7876] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 337.829854][ T28] audit: type=1326 audit(1767686731.390:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f818f749 code=0x7ffc0000 [ 337.943614][ T7876] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 337.944306][ T7876] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 337.954722][ T7876] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 337.964964][ T7876] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 337.984091][ T7876] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 338.701766][ T5780] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 338.728323][ T7876] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 338.791434][ T7876] BTRFS error (device loop4): open_ctree failed: -12 [ 340.882573][ T6489] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 344.154536][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 344.618616][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 344.618632][ T28] audit: type=1326 audit(1767686739.150:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818c58f749 code=0x7ffc0000 [ 344.669001][ T7970] loop0: detected capacity change from 0 to 256 [ 344.679274][ T7970] exfat: Deprecated parameter 'namecase' [ 344.699344][ T7970] exfat: Deprecated parameter 'utf8' [ 344.754672][ T28] audit: type=1326 audit(1767686739.150:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818c58f749 code=0x7ffc0000 [ 344.838301][ T7970] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 344.897032][ T28] audit: type=1326 audit(1767686739.170:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818c58f749 code=0x7ffc0000 [ 345.037113][ T28] audit: type=1326 audit(1767686739.170:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818c58f749 code=0x7ffc0000 [ 345.059243][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.065789][ T28] audit: type=1326 audit(1767686739.180:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f818c58f749 code=0x7ffc0000 [ 345.593111][ T28] audit: type=1326 audit(1767686739.180:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818c58f749 code=0x7ffc0000 [ 345.676337][ T28] audit: type=1326 audit(1767686739.180:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f818c58f749 code=0x7ffc0000 [ 345.749385][ T28] audit: type=1326 audit(1767686739.180:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f818c58f749 code=0x7ffc0000 [ 347.058454][ T7970] syz.0.504 (7970): drop_caches: 2 [ 347.598095][ T7991] loop0: detected capacity change from 0 to 32768 [ 347.607800][ T5858] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 347.662496][ T7991] [ 347.662496][ T7991] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 347.662496][ T7991] [ 348.003263][ T5858] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 348.389830][ T7997] ERROR: (device loop0): diWrite: ixpxd invalid [ 348.389830][ T7997] [ 348.665054][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.685310][ T5858] usb 2-1: config 0 descriptor?? [ 348.688164][ T7997] ERROR: (device loop0): txCommit: [ 348.688164][ T7997] [ 348.815705][ T5858] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 348.832253][ T5765] [ 348.832253][ T5765] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 348.832253][ T5765] [ 348.844829][ T5765] [ 348.844829][ T5765] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 348.844829][ T5765] [ 348.882713][ T7994] overlayfs: missing 'lowerdir' [ 349.036673][ T5858] gspca_sn9c2028: read1 error -32 [ 349.052625][ T5858] gspca_sn9c2028: read1 error -32 [ 349.289710][ T8002] loop4: detected capacity change from 0 to 256 [ 349.309341][ T5757] usb 2-1: USB disconnect, device number 8 [ 349.322276][ T8002] exfat: Deprecated parameter 'namecase' [ 349.362547][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 349.435806][ T8002] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 349.570919][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 349.584713][ T27] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 349.603763][ T27] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 349.626052][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.643528][ T27] usb 1-1: Product: syz [ 349.648645][ T27] usb 1-1: Manufacturer: syz [ 349.653866][ T27] usb 1-1: SerialNumber: syz [ 349.680875][ T27] usb 1-1: config 0 descriptor?? [ 351.326047][ T8011] loop1: detected capacity change from 0 to 32768 [ 351.344583][ T8011] (syz.1.525,8011,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 351.381655][ T8011] (syz.1.525,8011,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 351.815627][ T8011] JBD2: Ignoring recovery information on journal [ 352.050196][ T8011] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 352.277978][ T8011] [ 352.280341][ T787] usb 1-1: USB disconnect, device number 3 [ 352.280385][ T8011] ====================================================== [ 352.293282][ T8011] WARNING: possible circular locking dependency detected [ 352.300365][ T8011] syzkaller #0 Not tainted [ 352.304837][ T8011] ------------------------------------------------------ [ 352.311899][ T8011] syz.1.525/8011 is trying to acquire lock: [ 352.317836][ T8011] ffff888053dd09d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 352.331153][ T8011] [ 352.331153][ T8011] but task is already holding lock: [ 352.338566][ T8011] ffff888053dd5c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0 [ 352.348190][ T8011] [ 352.348190][ T8011] which lock already depends on the new lock. [ 352.348190][ T8011] [ 352.358613][ T8011] [ 352.358613][ T8011] the existing dependency chain (in reverse order) is: [ 352.367749][ T8011] [ 352.367749][ T8011] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 352.375750][ T8011] down_read+0x46/0x2e0 [ 352.380472][ T8011] ocfs2_init_acl+0x2fa/0x720 [ 352.385797][ T8011] ocfs2_mknod+0x12e5/0x20f0 [ 352.390941][ T8011] ocfs2_mkdir+0x196/0x410 [ 352.395918][ T8011] vfs_mkdir+0x296/0x440 [ 352.400796][ T8011] do_mkdirat+0x1d4/0x440 [ 352.405687][ T8011] __x64_sys_mkdirat+0x89/0xa0 [ 352.411011][ T8011] do_syscall_64+0x55/0xb0 [ 352.415976][ T8011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.422426][ T8011] [ 352.422426][ T8011] -> #4 (jbd2_handle){++++}-{0:0}: [ 352.429762][ T8011] start_this_handle+0x1e9d/0x20c0 [ 352.435423][ T8011] jbd2__journal_start+0x2bb/0x5b0 [ 352.441078][ T8011] jbd2_journal_start+0x2a/0x40 [ 352.446479][ T8011] ocfs2_start_trans+0x376/0x6c0 [ 352.451966][ T8011] ocfs2_modify_bh+0xe9/0x470 [ 352.457188][ T8011] ocfs2_local_read_info+0x13fd/0x1770 [ 352.463194][ T8011] dquot_load_quota_sb+0x757/0xb80 [ 352.468857][ T8011] dquot_load_quota_inode+0x2dc/0x5d0 [ 352.474776][ T8011] ocfs2_enable_quotas+0x1c7/0x440 [ 352.480438][ T8011] ocfs2_fill_super+0x3f6d/0x4d90 [ 352.486002][ T8011] mount_bdev+0x22b/0x2d0 [ 352.490894][ T8011] legacy_get_tree+0xea/0x180 [ 352.496144][ T8011] vfs_get_tree+0x8c/0x280 [ 352.501123][ T8011] do_new_mount+0x24b/0xa40 [ 352.506201][ T8011] __se_sys_mount+0x2da/0x3c0 [ 352.511427][ T8011] do_syscall_64+0x55/0xb0 [ 352.516394][ T8011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.522838][ T8011] [ 352.522838][ T8011] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 352.531384][ T8011] down_read+0x46/0x2e0 [ 352.536086][ T8011] ocfs2_start_trans+0x36a/0x6c0 [ 352.541577][ T8011] ocfs2_modify_bh+0xe9/0x470 [ 352.546804][ T8011] ocfs2_local_read_info+0x13fd/0x1770 [ 352.552810][ T8011] dquot_load_quota_sb+0x757/0xb80 [ 352.558476][ T8011] dquot_load_quota_inode+0x2dc/0x5d0 [ 352.564400][ T8011] ocfs2_enable_quotas+0x1c7/0x440 [ 352.570147][ T8011] ocfs2_fill_super+0x3f6d/0x4d90 [ 352.575723][ T8011] mount_bdev+0x22b/0x2d0 [ 352.580597][ T8011] legacy_get_tree+0xea/0x180 [ 352.585844][ T8011] vfs_get_tree+0x8c/0x280 [ 352.590803][ T8011] do_new_mount+0x24b/0xa40 [ 352.595852][ T8011] __se_sys_mount+0x2da/0x3c0 [ 352.601071][ T8011] do_syscall_64+0x55/0xb0 [ 352.606039][ T8011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.612482][ T8011] [ 352.612482][ T8011] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 352.619990][ T8011] ocfs2_start_trans+0x26b/0x6c0 [ 352.625490][ T8011] ocfs2_mknod+0xe47/0x20f0 [ 352.630541][ T8011] ocfs2_mkdir+0x196/0x410 [ 352.635511][ T8011] vfs_mkdir+0x296/0x440 [ 352.640311][ T8011] do_mkdirat+0x1d4/0x440 [ 352.645195][ T8011] __x64_sys_mkdirat+0x89/0xa0 [ 352.650519][ T8011] do_syscall_64+0x55/0xb0 [ 352.655485][ T8011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.661937][ T8011] [ 352.661937][ T8011] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 352.672576][ T8011] down_write+0x97/0x1f0 [ 352.677393][ T8011] ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 352.684099][ T8011] ocfs2_reserve_clusters_with_limit+0x1bf/0xba0 [ 352.690997][ T8011] ocfs2_mknod+0xdee/0x20f0 [ 352.696085][ T8011] ocfs2_mkdir+0x196/0x410 [ 352.701078][ T8011] vfs_mkdir+0x296/0x440 [ 352.705884][ T8011] do_mkdirat+0x1d4/0x440 [ 352.710808][ T8011] __x64_sys_mkdirat+0x89/0xa0 [ 352.716216][ T8011] do_syscall_64+0x55/0xb0 [ 352.721178][ T8011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.727639][ T8011] [ 352.727639][ T8011] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 352.738204][ T8011] __lock_acquire+0x2ddb/0x7c80 [ 352.743706][ T8011] lock_acquire+0x197/0x410 [ 352.748778][ T8011] down_write+0x97/0x1f0 [ 352.753580][ T8011] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 352.760032][ T8011] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 352.766912][ T8011] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 352.773105][ T8011] ocfs2_xattr_set+0xb6d/0x11f0 [ 352.778506][ T8011] ocfs2_set_acl+0x4e1/0x590 [ 352.783737][ T8011] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 352.789242][ T8011] vfs_set_acl+0x803/0xa60 [ 352.794212][ T8011] do_set_acl+0xf5/0x180 [ 352.799012][ T8011] path_setxattr+0x39f/0x550 [ 352.804156][ T8011] __x64_sys_setxattr+0xbb/0xd0 [ 352.809555][ T8011] do_syscall_64+0x55/0xb0 [ 352.814524][ T8011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.820967][ T8011] [ 352.820967][ T8011] other info that might help us debug this: [ 352.820967][ T8011] [ 352.831215][ T8011] Chain exists of: [ 352.831215][ T8011] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem [ 352.831215][ T8011] [ 352.847003][ T8011] Possible unsafe locking scenario: [ 352.847003][ T8011] [ 352.854479][ T8011] CPU0 CPU1 [ 352.859862][ T8011] ---- ---- [ 352.865247][ T8011] lock(&oi->ip_xattr_sem); [ 352.869871][ T8011] lock(jbd2_handle); [ 352.876485][ T8011] lock(&oi->ip_xattr_sem); [ 352.883706][ T8011] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 352.891027][ T8011] [ 352.891027][ T8011] *** DEADLOCK *** [ 352.891027][ T8011] [ 352.899195][ T8011] 3 locks held by syz.1.525/8011: [ 352.904289][ T8011] #0: ffff888064a5e418 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 352.913571][ T8011] #1: ffff888053dd5f58 (&type->i_mutex_dir_key#19){+.+.}-{3:3}, at: vfs_set_acl+0x37a/0xa60 [ 352.923796][ T8011] #2: ffff888053dd5c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0 [ 352.933768][ T8011] [ 352.933768][ T8011] stack backtrace: [ 352.939695][ T8011] CPU: 1 PID: 8011 Comm: syz.1.525 Not tainted syzkaller #0 [ 352.947015][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.957106][ T8011] Call Trace: [ 352.960429][ T8011] [ 352.963415][ T8011] dump_stack_lvl+0x16c/0x230 [ 352.968150][ T8011] ? load_image+0x3b0/0x3b0 [ 352.972691][ T8011] ? show_regs_print_info+0x20/0x20 [ 352.977928][ T8011] ? print_circular_bug+0x12b/0x1a0 [ 352.983159][ T8011] check_noncircular+0x2bd/0x3c0 [ 352.988137][ T8011] ? look_up_lock_class+0x75/0x140 [ 352.993296][ T8011] ? print_deadlock_bug+0x5d0/0x5d0 [ 352.998522][ T8011] ? lockdep_lock+0xe0/0x220 [ 353.003200][ T8011] ? _find_first_zero_bit+0xd3/0x100 [ 353.008538][ T8011] __lock_acquire+0x2ddb/0x7c80 [ 353.013445][ T8011] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 353.019460][ T8011] ? __lock_acquire+0x7c80/0x7c80 [ 353.024521][ T8011] ? verify_lock_unused+0x140/0x140 [ 353.029762][ T8011] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 353.035430][ T8011] ? do_raw_spin_lock+0x121/0x2c0 [ 353.040638][ T8011] ? mutex_unlock+0x10/0x10 [ 353.045178][ T8011] lock_acquire+0x197/0x410 [ 353.049714][ T8011] ? ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 353.055821][ T8011] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 353.061837][ T8011] ? __might_sleep+0xe0/0xe0 [ 353.066464][ T8011] ? read_lock_is_recursive+0x20/0x20 [ 353.071888][ T8011] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 353.078078][ T8011] ? verify_lock_unused+0x140/0x140 [ 353.083310][ T8011] ? check_noncircular+0x175/0x3c0 [ 353.088453][ T8011] down_write+0x97/0x1f0 [ 353.092744][ T8011] ? ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 353.098850][ T8011] ? down_read_killable+0x340/0x340 [ 353.104083][ T8011] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 353.110031][ T8011] ? mark_lock+0x94/0x320 [ 353.114396][ T8011] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 353.120409][ T8011] ? lock_chain_count+0x20/0x20 [ 353.125297][ T8011] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 353.131229][ T8011] ? ocfs2_block_group_search+0x470/0x470 [ 353.136992][ T8011] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 353.142917][ T8011] ? _raw_spin_unlock+0x40/0x40 [ 353.147816][ T8011] ? stack_trace_save+0x9c/0xe0 [ 353.152788][ T8011] ? stack_trace_snprint+0xf0/0xf0 [ 353.157935][ T8011] ? __stack_depot_save+0x560/0x630 [ 353.163174][ T8011] ? kasan_set_track+0x5f/0x70 [ 353.167985][ T8011] ? kasan_set_track+0x4e/0x70 [ 353.172783][ T8011] ? __kasan_kmalloc+0x8f/0xa0 [ 353.177626][ T8011] ? ocfs2_reserve_new_metadata_blocks+0x114/0x940 [ 353.184179][ T8011] ? ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 353.190022][ T8011] ? ocfs2_xattr_set+0xb6d/0x11f0 [ 353.195075][ T8011] ? ocfs2_set_acl+0x4e1/0x590 [ 353.199877][ T8011] ? ocfs2_iop_set_acl+0x1ab/0x2a0 [ 353.205023][ T8011] ? vfs_set_acl+0x803/0xa60 [ 353.209661][ T8011] ? do_set_acl+0xf5/0x180 [ 353.214119][ T8011] ? path_setxattr+0x39f/0x550 [ 353.218916][ T8011] ? __x64_sys_setxattr+0xbb/0xd0 [ 353.223980][ T8011] ? do_syscall_64+0x55/0xb0 [ 353.228679][ T8011] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.234793][ T8011] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 353.241185][ T8011] ? ocfs2_init_steal_slots+0x160/0x160 [ 353.246787][ T8011] ? ocfs2_xattr_block_set+0x2b40/0x2b40 [ 353.252472][ T8011] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 353.258254][ T8011] ? ocfs2_xattr_set+0xb33/0x11f0 [ 353.263363][ T8011] ? ocfs2_prepare_refcount_xattr+0xf20/0xf20 [ 353.269558][ T8011] ? ocfs2_truncate_log_needs_flush+0x135/0x2e0 [ 353.275837][ T8011] ? ocfs2_remove_btree_range+0x1480/0x1480 [ 353.281764][ T8011] ? down_write+0x162/0x1f0 [ 353.286299][ T8011] ? down_read_killable+0x340/0x340 [ 353.291532][ T8011] ? up_write+0x1c3/0x410 [ 353.295892][ T8011] ocfs2_xattr_set+0xb6d/0x11f0 [ 353.300787][ T8011] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 353.306546][ T8011] ? __kasan_kmalloc+0x8f/0xa0 [ 353.311348][ T8011] ? ocfs2_set_acl+0x11e/0x590 [ 353.316149][ T8011] ? ocfs2_iop_set_acl+0x1ab/0x2a0 [ 353.321294][ T8011] ? vfs_set_acl+0x803/0xa60 [ 353.325923][ T8011] ? path_setxattr+0x39f/0x550 [ 353.330715][ T8011] ? do_syscall_64+0x55/0xb0 [ 353.335358][ T8011] ? ocfs2_set_acl+0x11e/0x590 [ 353.340153][ T8011] ? rcu_is_watching+0x15/0xb0 [ 353.344951][ T8011] ? ocfs2_set_acl+0x11e/0x590 [ 353.349750][ T8011] ? __kmalloc+0xe2/0x240 [ 353.354110][ T8011] ? ocfs2_inode_lock_atime+0x4e0/0x4e0 [ 353.359693][ T8011] ocfs2_set_acl+0x4e1/0x590 [ 353.364322][ T8011] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 353.369302][ T8011] ? ocfs2_xattr_get+0x220/0x220 [ 353.374277][ T8011] ? evm_inode_set_acl+0xbb/0x410 [ 353.379340][ T8011] ? down_read_killable+0x340/0x340 [ 353.384578][ T8011] ? evm_revalidate_status+0x4f/0xb0 [ 353.389905][ T8011] ? posix_acl_valid+0x352/0x3d0 [ 353.394888][ T8011] vfs_set_acl+0x803/0xa60 [ 353.399348][ T8011] do_set_acl+0xf5/0x180 [ 353.403895][ T8011] path_setxattr+0x39f/0x550 [ 353.408539][ T8011] ? simple_xattrs_free+0x150/0x150 [ 353.413796][ T8011] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 353.419850][ T8011] ? lock_chain_count+0x20/0x20 [ 353.424798][ T8011] __x64_sys_setxattr+0xbb/0xd0 [ 353.429718][ T8011] do_syscall_64+0x55/0xb0 [ 353.434168][ T8011] ? clear_bhb_loop+0x40/0x90 [ 353.438872][ T8011] ? clear_bhb_loop+0x40/0x90 [ 353.443579][ T8011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.449501][ T8011] RIP: 0033:0x7fe4f818f749 [ 353.453955][ T8011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.473586][ T8011] RSP: 002b:00007fe4f9078038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 353.482030][ T8011] RAX: ffffffffffffffda RBX: 00007fe4f83e5fa0 RCX: 00007fe4f818f749 [ 353.490031][ T8011] RDX: 00002000000000c0 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 353.498096][ T8011] RBP: 00007fe4f8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 353.506113][ T8011] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 353.514125][ T8011] R13: 00007fe4f83e6038 R14: 00007fe4f83e5fa0 R15: 00007ffeb384f828 [ 353.522154][ T8011] [ 353.618587][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 353.748784][ T7927] Set syz1 is full, maxelem 65536 reached