last executing test programs: 13.776226315s ago: executing program 0 (id=382): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file2/../file0\x00', 0x2028, 0x150) 13.657405188s ago: executing program 2 (id=383): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) inotify_init() userfaultfd(0x80801) close_range(r1, 0xffffffffffffffff, 0x0) 12.50482898s ago: executing program 0 (id=387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f0000000180)=ANY=[], 0x1, 0x20e, &(0x7f00000006c0)="$eJzs3E1rU1kYB/CTNJ02M8zQ1cDMZg4zm5nNHe3GjQtFKogBRY34skppqiGxgd4skuIia1d+DhHcCO7EL9DP4MZdEUpXXXmlJmlsaW21JtX6+23y8PzvuTknBy7h5mXt7OMH9cU0Way0QmE6F/LnQjds5sJMyIeBbvjv2a2NR9dv37l8vlSauzbZ78f4218v7z58+ver1i83n291ciGE9dk3q7+v/rH27sb9WhpraVxqtmIlzjebrcp8oxoXamk9ifHq4PxpdXlHvthoDp86VNM0VpY6sV7txFYztpY7sXKvUluKSZLE6cCRlJ9sZllYz7Ism+qGLMs+9wS50cyLcTni/vOd276ox62r6dtuu9wu9x57+cVLpblT8YOZ4aiNdrs8sZ2f7uVxZz4Zfu7ns3vmP4V//+nlW9mFK6VdeTEsjH75AAAAAABwIiVx257395Nkv7xXffT5wK7794XwZ2HYmRj9UgAAAIB9pJ2VeqWxMLncKxrVYyumws7OmRf9KR40/P/XBx8zouLXfhG+8DzFEML+x+TDsW/KeIrB98j7ncHvCw43vPC1plH8Rl6NQTEd9oqKYaU+NZ5NAQAATpbhm/5DD8mPdEIAAAAAAAAAAAAAAAAAAADwAxrHn5kd9xoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7lfQAAAP//1edT5A==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffffc}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4e328000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) ftruncate(r0, 0xf4fc) 12.325444784s ago: executing program 2 (id=388): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) socket$key(0xf, 0x3, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3c1, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 12.031689383s ago: executing program 0 (id=389): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x0, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 11.557759355s ago: executing program 1 (id=390): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/237, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) 11.38468076s ago: executing program 1 (id=391): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000400)) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x200013, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='^!{.,\x00', 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000000c0)=0x3ff, 0x4) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/247, 0xf7, 0x0, &(0x7f0000000540)=""/33, 0x21}, &(0x7f00000005c0)=0x40) 9.587848479s ago: executing program 1 (id=393): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffffffe}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x56d, &(0x7f0000000880)="$eJzs3c9rXEUcAPDv22z6uzaFUlREAj1Yqd00iT8qeKhH0WJB73VJXkPJpluym9LEgu3BXrxIEUSsiHe9eyz+A/4VBS0UKUEPXiJv8zZNk9383Dap7/OBV2Z23mbed+fNdGZnlw2gsAazf0oRL0XE10nEkYhI8rJy5IWDi+fNP7oxlh1JLCx88lfSOi/Lt/9W+3kH88yLEfHblxGnSqvrbczOTVZrtXQ6zw81p64ONWbnTl+eqk6kE+mVkdHRs2+Njrz7ztubimfvGmWvX/jnu4/vfXD2qxPz3/7y4OidJM7FobxseRzbcHN5ZjAG89ekP86tOHG4B5XtJslOXwBb0pf38/7IxoAj0Zf3euD/74uIWAAKKtH/oaDa84D22r5H6+DnxsP3FxdAq+MvL743Evtaa6MD88kTK6NsvTvQg/qzOn798+6d7IjevQ8BsK6btyLiTLm8evxL8vFv685s4JyVdRj/4Nm5l81/3ug0/yktzX+iw/znYIe+uxXr9//Sgx5U01U2/3uv4/x3adNqoC/PHW7N+fqTS5draTa2vRARJ6N/b5Zfaz/n7Pz9hW5ly+d/2ZHV354L5tfxoLxiU2u82qxuJ+blHt6KeLnj/DdZav+kQ/tnr8eFDdZxPL37arey9eN/uhZ+initY/s/3tFK1t6fHGrdD0Ptu2K1v28f/71b/Tsdf9b+B9aOfyBZvl/b2HwdP+77N+1W9kT88UT8Pyye0fn+35N82krvyR+7Xm02p4cj9iQfrX585PFz2/n2+Vn8J0+sPf51uv/3R8RnG4z/9rGfX1kr/vY6fKfaf3xT7b/5xP0PP/++W/3r3P/lxfZ/s5U5mT+4kfFvoxe4zZcPAAAAAAAAdpVSRByKpFRZSpdKlcri5zuOxYFSrd5onrpUn7kyHq3vyg5Ef6m9031k2echhvPPw7bzIyvyoxFxNCK+6dvfylfG6rXxnQ4eAAAAAAAAAAAAAAAAAAAAdomDXb7/n/mjb6evDnjq/OQ3FNe6/b8Xv/QE7Er+/4fi0v+huPR/KC79H4pL/4fi0v+huPR/KC79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrqwvnz2bEw/+jGWJYfvzY7M1m/dno8bUxWpmbGKmP16auViXp9opZWxupT6/29Wr1+dXgkZq4PNdNGc6gxO3dxqj5zpXnx8lR1Ir2Y9j+TqAAAAAAAAAAAAAAAAAAAAOD50pidm6zWaun0NhJJbOvpRU8cjl1xGVtNlHfHZUj0OLHTIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPZfAAAA///wGTUB") r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000003060101000000000000000001000005050001002489ba"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x90) 9.587479609s ago: executing program 2 (id=394): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$eJzs3T9sVPcdAPDfe3aLTYHalIFKlXpSUVu1lWUz0RqpxhiMDS4VLQxdjrN9gJuzD9nnKAODoyxImSJliDKgRMrmCXnLRJZIGbNkJDNSMmSJFAnlort7Z99758MX4sMBfT4S/t37/be/9373e8PxixOVO0truaW1XGElV164tXY693q5tL5cDHHWp205+6Lr8TlQvYiT2B+cq+cv/ufG6RA+WfziSbVarYaa/rCrsZbX335zb6E1bYpbL95q9Lt7b/vlfyGEE23zqukLIQwkr88l6WSSDoYQjoUQohDCjXtv38zt02wePi6ezT+du781fmp288FW5989CuH90m//dnv5qz/0jX/5l30aHgAAAAAAAAAAAAAAAACAl9z0tavX/z06Fh5FoX8zav++7nSSdvp+bHXf/L73vywAAAAAAAAAAAAAAAAAAAD8TO18/z8XHd/l+/9TSTrRoX31n92N88efOE96Y+ZfV6cujI4l579HbeVnkqyvz/WF4eb56p91Pv/9XKb97ue/t4/zvJrza447FKJ4JHUdxyMjIXyYHPx+Mjocl8prlb/eKq+vLO7bNF5a6fg3Tu9PRSc50D8V/2ec/z+Z6b/35///pu3dVLu+uX9vsVdaOv59Het99Gb0jPj/crve+Uy7FxF/nl86/v31vMHWChONBaAW/3f6977/pzL99yr+x0IIuag211xqBajtYWr5nfYrpKXj/4t6XmrpTP6Qne7/7zLxv5Dp/6DW/43sBxG7Sse/sY4PpGrs3P/D8d73/8VM/wcR/9r8N3z+dyUd/0ONzP5Ulfpfstv1fzrTf6/ifz1O5nksSr0DNqNGfqf/r460dPwH2sp3nv/irvb/lzLtX9TzX3Pc5vNfc/n/c9R4/mN32/HfCk+q1cGO9bq9/2cy7Xq9/k/U939tzpzo5aCvkPT9f7iel947D9V/dop/NRP/2Uz/zxH/jzs/he6o70oGmvHfWU++P9TI/8D+ryvp+P+qkRm31tio/6zv/6K99/+XM/0fxP6vNv+NuLejvirS8T/SsV4t/p938fl/JdOu9/EPYbT5BmjfvrCHdPyPdqxXv/8H9o7/XKZdr+P/p152DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPASmEzSoRDFI6nrOB4ZCeF8cn0yHI7mC4v5+VJ54bW1EKaS/Fw4Ht0ulecLpfzSSnmxmC+USuWFEC4k5SfCQLRWKlfyy4W7F7f7GozuFAurlflioRJCmE7yfxeONvuaX6osF+6GEC5tl/06Lq/evVNYyS8urf5jdHR0NMxsz2E4Kr5RKa5UGqM3SkOY3W47FLVMrl58eXsuR6L/l9dXVwqlev6Vljal8kKh1NJmLil7NwxHldX1lYVCpZgvlW83xztIE0k6NXPtv9eujLWV34wa6eSLnRYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9Kj8b+/F0Lob1zFIYRclLyIkn8pDx8Xz+afzt3fGj81u/lg68ludQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4gR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs0j9KA0EUB+A3Y6Glx7BadjvbFUW0cEXwBHoMD6NH8RLewSJF2hQhkMxC2D+wTVJ9X/Ngfsy8B/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3jqJvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//9HQIRk=") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0xff80) 9.497630762s ago: executing program 4 (id=395): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f0000000140)=""/87, &(0x7f0000000480)=""/59, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000101}, 0x84) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 8.048390771s ago: executing program 1 (id=396): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x3, 0x33) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 7.906712385s ago: executing program 3 (id=397): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x8}}, 0x100, 0x0, 0x0, 0x101, 0x54}, 0x9c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0xfffffffffffffffb, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.887329355s ago: executing program 1 (id=398): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) inotify_init() userfaultfd(0x80801) close_range(r1, 0xffffffffffffffff, 0x0) 7.886631645s ago: executing program 4 (id=399): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f0000000180)=ANY=[], 0x1, 0x20e, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffffc}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4e328000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) ftruncate(r0, 0xf4fc) 6.495257674s ago: executing program 1 (id=400): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 6.305139288s ago: executing program 3 (id=401): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/237, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) 6.214000291s ago: executing program 4 (id=402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10600, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0x4}, {}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20001090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r6, &(0x7f0000000500)=[{&(0x7f0000000140)=""/200, 0xc8}], 0x1) close_range(r6, r7, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) select(0x40, &(0x7f0000000080)={0x0, 0x7e, 0x5, 0x6, 0x800000007f, 0x7, 0x0, 0x1}, &(0x7f0000000140)={0x1, 0x4, 0x2, 0x8, 0xfffffffffffffffe, 0x4, 0xc0, 0xffff}, &(0x7f0000000180)={0x3, 0x3, 0x1, 0x8000, 0x21, 0x6, 0x1, 0x4}, &(0x7f0000000400)={r8, r9/1000+60000}) close(r5) r10 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r10, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000200002f954c420000000025396369bc333de9f5e500"], 0x18}, 0x20008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f0000000480)={0x0, 0xb0, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r10, 0x0, 0x29, 0x0, &(0x7f0000000040)=0x29) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="aa", 0x1}], 0x1}, 0x4) 6.085255975s ago: executing program 3 (id=403): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000001c0)='ecryptfs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0x1}}, {@dfltuid}, {@cache_none}]}}) 6.032668456s ago: executing program 2 (id=404): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000400)) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x200013, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='^!{.,\x00', 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000000c0)=0x3ff, 0x4) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) 5.582733488s ago: executing program 4 (id=405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1f3642, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000000)) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf5", @ANYRES64], 0x0) io_setup(0x80000000, 0x0) syz_open_procfs(0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x1) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, 0x0) dup3(0xffffffffffffffff, r6, 0x80000) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.328158065s ago: executing program 0 (id=406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf255700000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 5.1435481s ago: executing program 3 (id=407): socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x8000000) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) unshare(0x22020600) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) 4.338343442s ago: executing program 2 (id=408): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, &(0x7f0000000d00)={0x0, 0xa, 0x2, "8613"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.248810094s ago: executing program 0 (id=409): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x2}, 0x20) 3.860459115s ago: executing program 3 (id=410): syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80000, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x184) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYBLOB="2c6d65b47d7189617375"], 0x1, 0x61e2, &(0x7f000000d7c0)="$eJzs3c1vHGcdB/DfvvqltLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288Szk92uU8c7a8/nIzkzv3lmvc/4u7MvmZl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vB2udiLj287RgJeIz0YvoRiyV9WpELK2u5PX7EfFc7DXHsxExWIgob7/3z9MRr0bER09F7OxurpeLLx6yH9/9499/98Mn3vrbHwbn//unO73XJq139+6v/vPne0fbZgAAAGiboiiKTvqYfyZ9vu823SkAYCby63+R5OWnvv71P9/6yzz1R61Wq9XqGdRVxXj3qkVEbFVvU75ncDgeAE6Yrfi46S7QIPm3Wj8inmi6E8Bc6zTdAY7Fzu7meifl26m+Hqzut+dzQUby3+o8uL5j0nSa+jkms3p8bUcvnpnQn6UZ9WGe5Py79fyv7bcP03rHnf+sTMp/uH/pU+vk/Hv1/GtOT/7dsfm3Vc6//0j59+QPAAAAAABzLP///0rDx38Xjr4ph/JJx39XZ9QHAAAAAAAAAHjcjjr+3wPG/wMAAIC5VX5WL/3mqYNlk76LrVx+tRPxZG19oGXSxTLLTfcDAAAAAAAAAAAAANqkv38O79VOxCAinlxeLoqi/Kmq14/qqLc/6dq+/dBmTT/JAwDAvo+eql3L34lYjIir6bv+BsvLy0WxuLRcLBdLC/n97HBhsViqfK7N03LZwvAQb4j7w6L8ZYuV21VN+7w8rb3++8r7Gha9Q3TsMRmkv+aE5obCBoBk/9VoxyvSKVMUT0968wEj7P+n0EqsNP24Yv41/TAFAAAAjl9RFEUnfZ33mXTMv9t0pwCAmciv//XjAkequxPaIx7P71er1Wq1Wv2p6qpivHvVIiK2qrcp3zMYjh8ATpit+LjpLtAg+bdaPyKea7oTwFzrNN0BjsXO7uZ6J+Xbqb4epPHd87kgI/lvdfZul28/bjpN/RyTWT2+tqMXz0zoz7Mz6sM8yfl36/lf228fpvWOO/9ZmZT/cO+SufbJ+ffq+decnvy7Y/Nvq5x//5Hy78kfAAAAAADmWP7//xXHf/MmAwAAAAAAAMCJs7O7uZ6ve83H/z83Zj3Xf55OOf/Oo+a/lOblf6Ll/Lu1/L9cW69Xmb//5sH+/+/dzfXf3/nXZ/P0sPkv5JlOemR10iOik+6p00/To2zdw7YHvWF5T4NOt9dP5/wUg3fiRtyMjbgwsm43/T0O2tdG2sueDkbaL4609x9qvzTSPkjfO1As5fZzsR4/iZvx9l572bYwZfsXp7QXU9pz/j3P/62U8+9Xfsr8l1N7pzYt3f+w+9B+X52Ou583bnz+lxeOf3Om2o7eg22rKrfvbAP92fubPDGMn93euHXu7vU7d26tRZqMLL0YafKY5fwHez8LB8//L+y35+f96v56/8PhI+c/L7ajPzH/Fyrz5fa+NOO+NSHnP0w/Of+3U/v4/f8k5z95/3+5gf4AAAAAAAAAAAAAAADAJymKYu8S0Tci4nK6/qepazMBgNnKr/9Fkper1Wq1Wq0+fXVVMd7r1SIi/lq9Tfme4RfjfhkAMM/+FxH/aLoTNEb+LZa/76+cvth0Z4CZuv3+Bz+6fvPmxq3bTfcEAAAAAAAAAPi08vifq5Xxn1+MiJXaeiPjv74Zq0cd/7OfZx4MMPqYB/qeYLs77HUrw40/H3vjc5+bNP732Xh4/O88Jm6vuh0TDKa0D6e0L0xpXxy79CCtsRd6VOT8n6+Md17mf6Y2/Hobxn+tj3nfBjn/s5XHc5n/l2rrVfMvfjt3+W8ddsXt6I7kf/7Oez89f/v9D1658d71dzfe3fjxpbW1C5cuX75y5cr5d27c3Liw/+/x9HoO5Pzz2NfOA22XnH/OXP7tkvP/Qqrl3y45/y+mWv7tkvPP7/fk3y45//zZR/7tkvN/KdXyb5ec/1dSLf922dndXCjzfznV8m+XvP9/NdXyb5ec/yupln+75PzPpVr+7ZLzP5/qQ+Tv6+FPkZx/PsJl/2+XnP9aquXfLjn/i6mWf7vk/C+lWv7tkvN/NdXyb5ec/9dSLf92yflfTrX82yXn//VUHzL/aac9c0Lk/K+k2v7fLjn/b6Ra/u2S8/9mquXfLjn/11It/3bJ+X8r1fJvl5z/t1Mt/3bJ+X8n1fJvl5z/66mWf7scfP+/GTNmzOSZpp+ZAAAAAAAAAAAAAIC6WZxO3PQ2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LvXGLnO8g7gZ/bmtUOIgRCc1JC1Y4xxluz6El9oXUwIlwYoBZIAvWC73rVZ8A2vXQJFsmmgRMKoqKIi/dAWUNRGqiqsig+0Smk+VL18atoP9EtFVQmpUWWigIrUVjRbzZz3fXdmdnZm1ztenz3n95OSZ3fmnDnvnHnP2Xl2/Z8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLMtb5v+Yi3Lsvp/jf9tzLKX1b9eP7axcdubb/YIAQAAgJX6v8b/X7wt3XB4CSs1LfN3r/vHb8/Nzc1lHx78veGvzs2lO8aybHhdljXui67++0dqzcsEj2ejtYGm7wd6bH6wx/1DPe4f7nH/SI/71/W4f7TH/Qt2wALr89/HNB5sW+PLjfkuzW7Phhv3beuw1uO1dQMD8Xc5DbXGOnPDJ7KZ7FQ2nU22LJ8vW2ss/8yW+rbelcVtDTRta3N9hvzos8fjGGphH29r2db8Y0Y/fGs29uMfffb4H1+4dmen2nM3tDxePs4dW+vj/Hy4JR9rLVuX9kkc50DTODd3eE0GW8ZZa6xX/7p9nC8ucZyD88NcVe2v+Wg20Pj6ucZ+Gmr+tV7aT5vDbf99T5Zll+eH3b7Mgm1lA9mGllsG5l+f0XxG1h+jPpVemQ0ta55uWcI8rdepba3ztP2YiK//lrDe0CJjaH6Zfvi5kQWv+3LnaVR/1osdK+1zsN/HSlHmYJwXzzWe9BMd5+C28Pw/u33xOdhx7nSYg+l5N83Brb3m4MDIYGPM6UWoNdaZn4O7WpYfbGyp1qjPb+8+BycunD43Mfvpz7xp5vSxk9Mnp8/s2bVrcs++fQcOHJg4MXNqejL//3Xu7eLbkA2kY2Br2HfxGHhD27LNU3XuG/07Dke7HIcb25bt93E41P7kaqtzQC6c0/mx8XB9p49eGcgWOcYar8/OlR+H6Xk3HYdDTcdhx58pHY7DoSUch/Vlzu1c2nuWoab/Oo3hRv0s2Ng0B9vfj7TPwX6/HynKHBwN8+Jfdy7+s2BzGO8T48t9PzK4YA6mpxvOPfVb0vv90QON0mle3lW/45aR7OLs9Pn7Hjt24cL5XVkoq+JVTXOlfb5uaHpO2YL5OrDs+Xp45nVP3NXh9o1hX42+qf6/0UVfq/oye+/r/lo1frp13p8tt+7OQumz1d6fnX6a1/dn6iW77M/6Mp+fWPl78dSXNp1/hxc5/8a+/6V8e+mhHh8cHsqP38G0d4ZbzsetL9VQ49xVa2z7xYmlnY+Hw3+rfT6+vcv5eFPbsv0+Hw+3P7l4Pq71+m3HyrS/nqNhnpya7H4+ri+zafdy5+RQ1/PxPaHWwv5/Y+gUUl/UNHcWm7dpW0NDw+F5DcUttM7TPS3LD4ferL6tp3df3zzdcU/+WIPp2c1brXk61rZsv+dpOl8tNk9rvX77dn3aX8/RMC9u39N9ntaXeXbvys+d6+OXTefOkV5zcHhwpD7m4TQJ8/P93Po4B+/Ljmdns1PZVOPekcZ8qjW2NX7/0ubgSPhvtc+Vm7rMwR1ty/Z7DqafY4vNvdrQwiffB+2v52iYF0/e330O1pd5cH9/37vuCLekZZreu7b/fm2x33nd1babbuTvvOrj/Jv93X83W1/m1IHl9pnd99O94ZZbOuyn9uN3sWNqKlud/bQpjPPagcX3U3089WW+enCJ8+lwlmWXPvlA4/e94e8rf37xe99u+btLp7/pXPrkAy/ceuJvlzN+ANa+l/KyIf9Z1/SXqaX8/R8AAABYE2LfPxBqov8HAACA0oh9f/xX4Yn+HwAAAEoj9v1DoSYV6f83PXht5qVLWUrmzwXx/rQbHsqXixnXyfD92Ny8+u0PPDX9k7+8tLRtD2RZ9tOHfrPj8pseiuPKjYVxXn176+0LV7y0pO0ffWR+ueb8+tfD48fns9Rp0CmCO5ll2TO3fbmxnbGPXGnUZx862qgfuPzE4/VlXjyYfx/Xf/5V+fJ/EMK/h08ca1n/+bAffhDq5Ls774+43reuvHHz/kfntxfXq219eeNpP/nR/HHj5+R85fF8+bifFxv/X33p6W/Vl3/s9Z3Hf2mg8/ifDo/7VKj/89p8+ebXoP59XO8LYfxxe3G9+7753Y7jv/rFfPlz78iXOxpq3P6O8P22d1ybad5fj9WOtTyv7J35cnH7k9/7ncb98fHi47ePf/TIlZb90T4/nv3n/HEm2paPt8ftRH/Rtv364zTPz7j9p3/7aMt+7rX9qx94/rX1x23f/r1tyw22rd/+iU1/+IUvd9xeHM/hPzvX8nwOvz8cx2H7T340zMdw//9e/XLLdqOj7289/8Tlv77xUsvzid7143z7V99yslH/Y+wnv3/Ly259+eW76/suy577YP54vbZ/8o/Otoz/G3fsbLwe8f6Y0W/f/mLi9s9/avzM2dmLM1NNe7Xx2TnvycezbnT9hvp4bwvn1vbvj5y98LHp82OTY5NZNlbej9C7bt8M9YW8XF7u+jsfCa/nXV97ZsP2f/pSvP1fHs5vv/Lu/OfWG8JyXwm3b8xfv7naCrf/5JY7Gsd37dn8+5Ycex9s3vafB5a0YHj+7e8L4nw/9+qPNfZD/b7Gz414XK9w/N+fyh/nO2G/zoVPZt56x/z2mpePn41w5YP58b7i/RdOc/F1/ZPwer/3B/njx3HF5/v98D7mu5taz3dxfnzn0kD74zc+xeNyOJ9kl/P741Jxf1958Y6Ow4ufQ5JdvrPx/e+mx7lzWU9zMbOfnp04NXPm4mMTF6ZnL0zMfvozR06fvXjmwpHGZ3ke+Xiv9efPTxsa56ep6X17s8n1WZadzSZX4YR1Y8Zf/2pp4z/3yPGp/ZPbp6ZPHLt44sIj56bPnzw+O3t8emp2+7ETJ6Y/1Wv9malDu3Yf3LN/9/jJmalDBw4e3HNwfObM2fow8kH1sG/yE+Nnzh9prDJ7aO/BXfffv3dy/PTZqelD+ycnxy/2Wr/xs2m8vvZvjJ+fPnXswszp6fHZmc9MH9p1cN++3T0/DfD0uROzYxPnL56ZuDg7fX4ify5jFxo313/29Vqfcpr9t/z9bLta/kF82fvu3Zc+n7Xuqc8t+lD5Im0fIHotfBbNP7zi3IGlfB/7/uFQk4r0/wAAAFAFse8fCTXR/wMAAEBpxL5/XaiJ/h8AAABKI/b9o6EmFen/5f/l/5eW/8/vl/+vVv7/3CfzXOlaz//H/Lz8fzXc5Pz/irffh/z/3d3ulP/vQf7/pubnV2Tg5o9f/l/+n4WKlv+Pff/6LKtk/w8AAABVEPv+DaEm+n8AAAAojdj33xJqov8HAACA0oh9/8tCTSrS/8v/Lyn/v7tX4Kr8+X/X/1+9/P/8eUj+P7ei/H98ceT/K2PZ+ftHH275tgT5/67k/3uQ/1+7+f8CjF/+X/6fdsOL3nOz8v+x77811KQi/T8AAABUQez7Xx5qov8HAACA0oh9/22hJvp/AAAAKI3Y928MNalI/y//f93X/x9t/kb+v3X88v+tXP8/zIe1eP3/psHI/68Nrv/fnfx/D9ed/x+V/1+L+f/h/o6/2Pn/nsOX/+eGKNr1/2Pf/4pQk4r0/wAAAFAFse9/ZaiJ/h8AAABKI/b9rwo10f8DAABAacS+//ZQk4r0//L/153/byH/3zp++f/O80P+fw3m/7te/z//Sv6/WOT/u5P/78H1/6uV/+/z+Iud/+/39f+H396+vvw/nRQt/x/7/leHmlSk/wcAAIAqiH3/HaEm+n8AAAAojdj3vybURP8PAAAApRH7/k2hJhXp/+X/5f/l/+X/5f87b793/j8n/18s8v/dyf/3IP8v/y//v7T8f4c3v/L/dFK0/H/s++8MNalI/w8AAABVEPv+u0JN9P8AAABQGrHv/5lQE/0/AAAAlEbs+zeHmlSk/9/04LVHv9b4Sv4/k/+X/69A/v/eEfl/+f9yk//vTv6/B/l/+X/5/yVe/3+h5eT/1/V6MEqjaPn/2Pe/NtRkQePX/o4UAAAAWCti3/+6UJOK/P0fAAAAqiD2/XeHmuj/AQAAoDRi3z8WarL2+v8PDVzHSq7/X678/5/+9ZN3Z/L/8v89tl/S/H+cBvL/FSf/3538fw/y//L/8v+rkv+nOoqW/499/5ZQk7XX/wMAAACLiH3/1lAT/T8AAACURuz77wk10f8DAABAacS+f1uoSUX6f/n/cuX/I/l/+f9u2y9p/j+R/682+f8Omg7SNZL/H5P/l/9fi+MvR/4/vvuV/6c/ipb/j33/60NNKtL/AwAAQBXEvn97qIn+HwAAAEoj9v1vCDXR/wMAAEBpxL5/R6hJRfp/+X/5f/l/+X/5/87bl/9fm+T/u1tu/n/E9f/l/+X/K5b/d/1/+qto+f/Y978x1KQi/T8AAABUQez7d4aa6P8BAACgNOK/38z/3av+HwAAAMoo9v3joSYV6f9XkP+fG5T/T+T/W8df1Px/Tf5f/l/+v/Tk/7tbI9f/l/8vUP6/frv8v/y//D/Xq2j5/9j3vynUpCL9PwAAAFRB7PvvCzXR/wMAAEBpxL5/ItRE/w8AAAClEfv+yVCTivT/rv9fufz/uirn/13/X/5f/r/85P+7k//vQf7f9f/Llv/PMvl/bqqi5f9j378r1KQi/T8AAABUQez7d4ea6P8BAACgNGLfvyfURP8PAAAApRH7/r2hJhXp/+X/K5f/r/T1/+X/5f/l/8tP/r87+f8e5P/l/8uW/3f9f26youX/Y99/f6hJRfp/AAAAqILY9+8LNdH/AwAAQGnEvn9/qEno/zv9u24AAABgbYl9/4FQk4r8/V/+vyT5/9/6+5Zty//L/3fbfn/y/+vl/0OV/y+Wkub/2w+L6yb/34P8v/y//L/8P31VtPx/7PsPhppUpP8HAACAKoh9/5tDTfT/AAAAUBqx7//ZUBP9PwAAAJRG7Pt/LtSkIv2//H9J8v9t5P/l/7tt3/X/5f/LrKT5/74pVf5/QP5f/r9Y45f/l/9noRuf/49fLS3/H/v+Q6EmFen/AQAAoApi3//zoSb6fwAAACiN2Pe/JdRE/w8AAAClEfv+w6EmFen/5f/l/+X/5f9vTP7/LVm7Iub/65NH/r9c5P+7K1X+3/X/5f8LNn75f/l/Fira9f9j3//WUJOK9P8AAABQBbHvfyDURP8PAAAApRH7/reFmuj/AQAAoDRi3/9gqElF+n/5f/l/+X/5f9f/77x9+f+1Sf6/O/n/HuT/5f/l/+X/6aui5f9j3//2UJOK9P8AAABQBbHvf0eoif4fAAAASiP2/e8MNdH/AwAAQGnEvv9doSYV6f/l/+X/i5T/H2kbv/y//H8m/y//v0zy/93J//cg/y//L/8v/09fFS3/H/v+Xwg1qUj/DwAAAFUQ+/6HQk30/wAAAFAase9/d6iJ/h8AAABKI/b97wk1qUj/L/8v/1+k/H/m+v/y/5XJ/2cte1X+v3/k/7uT/+9B/l/+X/5f/p++Klr+P/b97w01qUj/DwAAAFUQ+/5fDDXR/wMAAEBpxL7/faEm+n8AAAAojdj3/1KoSUX6f/l/+f9i5f/nLmWu/5/I/+f6kv+vr1So/L/r/98o8v/dyf/30CH/v07+X/5f/l/+n+tWtPx/7PvfH2pSkf4fAAAAqiD2/R8INdH/AwAAQGnEvv+DoSb6fwAAACiN2Pc/HGpSkf5f/r+S+f/0lIuX/3f9f/n/qlz/X/7/RpH/707+vwfX/5f/l/+X/6evipb/j33/I6EmFen/AQAAoApi3/9oqIn+HwAAAEoj9v0fCjXR/wMAAEBpxL7/w6EmFen/5f8rmf8v8PX/y5b/H2qZHzcm/7+ukPn/0abXM81L+X/5/1Ug/9+d/H8P8v8hP58NyP8XMP8fZvP6RdaX/6eIipb/j33/R0JNKtL/AwAAQBXEvv+XQ030/wAAAFAase//lVAT/T8AAACURuz7fzXUpCL9v/y//L/8v+v/u/5/5+3L/69N8v/dyf/3IP/v+v9Fzv/3IP9PERUt/x/7/l8LNVm08Xvhv5bwNAEAAIACiX3/R0NNKvL3fwAAAKiC2PcfCTXR/wMAAEBpxL7/aKhJRfp/+f/2/H+8oqr8v/z/msv/D8n/5+T/q61/+f/X3Jpl8v/y//L/8v/y//L/rETR8v+x7z8WalKR/h8AAACqIPb9vx5qov8HAACA0oh9//FQE/0/AAAAlEbs+6dCTSrS/8v/u/5/v/L/P5X/v9n5f9f/D+T/q831/7uT/+9B/l/+X/5f/p++Klr+P/b906EmFen/AQAAoMTSr4Nj338i1ET/DwAAAKUR+/6ToSb6fwAAACiN2Pd/LNSkIv2//L/8v+v/34z8/1DL8vL/Ofl/+f9+kP/vTv6/B/l/+X/5f/l/+qpo+f/Y98+EmlSk/wcAAIAqiH3/x0NN9P8AAABQGrHv/0Soif4fAAAASiP2/adCTSrS/8v/y/9XPf9fy7LLrv8v/99p+/L/a5P8f3fy/z3I/8v/y//L/9NXRcv//z979/Fk11nmcfyOx5bUs/H8CbOZDSuWsDIb9mzZUcXaRJODbXIGkzFgwOScczI554wJJudooqFKlFvP86hb9/Y5kvp033Pe9/PZPCMNct+2BdQP1bfe3P1Xxi2d7H8AAADoQe7+e8Ut9j8AAAA0I3f/veMW+x8AAACakbv/PnFLJ/tf/6//773/X23l/f/9/3r9/xn6f/3/FNb6+0sv7Ncf2P/f8U5X3UP/r//X/w/S/+v/9f+ca279f+7++8Ytnex/AAAA6EHu/vvFLfY/AAAANCN3//3jFvsfAAAAmpG7/6q4pZP9r//X/+v/9f/7+v+b9P/6/2Xz/v8w/f8I/b/+X/+v/2dSc+v/c/c/IG7pZP8DAABAD3L3PzBusf8BAACgGbn7HxS32P8AAADQjNz9D45bOtn/+n/9v/5/Kf3/Ce//n/P96P/1/5vo/4fp/0fo//X/+n/9P5OaW/+fu/8hcUsn+x8AAAB6kLv/oXGL/Q8AAADNyN3/sLjF/gcAAIBm5O5/eNzSyf7X/+v/9f9L6f+P6f1//b/+f+FuXJ39zwT9/zr9/4iR/n+10v8POe9+fvO3t5zPfwD9v/6fdXPr/3P3PyJuuctqdeJiv0kAAABgVnL3PzJu6eTP/wEAAKAHufuvjlvsfwAAAGhG7v5r4pZO9r/+X/+v/9f/6/83f339/zKdX39/8sBfr/8PB/b/d/jfK+/Zb//v/f9h3v/X/+v/Odfc+v/c/dfGLZ3sfwAAAOhB7v5HxS32PwAAADQjd/+j4xb7HwAAAJqRu/8xcUsn+1//31r//9/7ft2e/n+3dtH/6//1//r/1h22v9f/h67f/9+pH+r/9f/6f/0/hzO3/j93/2Pjlk72PwAAAPQgd//j4hb7HwAAAJqRu//xcYv9DwAAAM3I3f+EuKWT/a//b63/3//rvP+v/9/09fX/+v+W6f+H6f9HtPL+/0X+rtl2P39Y2/78+n/9P+vm1v/n7n9i3NLJ/gcAAIAe5O5/Utxi/wMAAEAzcvc/OW6x/wEAAKAZufufErd0sv/1//r/ZfT/+RX0//r/o+//k/5/mfT/w/T/I1rp/y/Stvv5pX9+/b/+n3Vz6/9z9z81bulk/wMAAEAPcvc/LW6x/wEAAKAZufufHrfY/wAAANCM3P3PiFs62f/6f/3/Mvp/7//r/73/r/8/P/r/Yfr/Efp//b/+X//PpObW/+fuvy5u6WT/AwAAQA9y9z8zbrH/AQAAoBm5+58Vt9j/AAAA0Izc/c+OWzrZ//p//b/+X/+v/9/89fX/y6T/H6b/H6H/1//r//X/TGpG/f+eX3Vq9Zy4pZP9DwAAAD3I3f/cuMX+BwAAgGbk7n9e3GL/AwAAQDNy9z8/bulk/+v/Z9P/7+Z8bfX/O6vV6qL7/7vq/5fd/+/s+edZvy/1//r/Y6D/H6b/H6H/1//r//X/TGpG/f/uj3P3vyBu6WT/AwAAQA9y918ft9j/AAAA0Izc/S+MW+x/AAAAaEbu/hfFLZ3sf/3/bPr/XW31/97/P/f3R0/9v/f/1+n/j4f+f5j+f4T+X/+v/9f/M6m59f+5+18cN5247KK/RQAAAGBmcvffELd08uf/AAAA0IPc/S+JW+x/AAAAWKjr1n4md/9L45ZO9r/+f9r+/8Sen9P/6//P/f2h/9f/6/+Pnv5/mP5/hP5f/6//1/8zqbn1/7n7Xxa3dLL/AQAAoAe5+2+MW+x/AAAAaEbu/pfHLfY/AAAANCN3/yvilk72v/7f+//6f/2//n/z19f/L5P+f5j+f4T+X/+/3f7/5Nn/U/9PGy6g/z99+vTVR97/5+5/ZdzSyf4HAACAHuTuf1XcYv8DAABAM3L3vzpusf8BAACgGbn7XxO3dLL/9f9H0f+fqRVn3f/nb/Vl9f/XrFb6f/2//l//P0z/P0z/P0L/r//3/r/+n0nN7f3/3P2vjVs62f8AAADQg9z9r4tb7H8AAABoRu7+18ct9j8AAAA0I3f/G+KWTva//t/7/wvq/73/r//f9/0srP+/baX/PxaL6P93Dv76c+//r9X/6/8HdNf/3+3O+36o/9f/s25u/X/u/jfGLZ3sfwAAAOhB7v43xS32PwAAADQjd/+b4xb7HwAAAJqRu/8tcdOlnex//b/+X/+v/9f/b/76x/z+/4nVaqX/n8Ai+v8Bc+//vf+v/x/SXf9/Dv2//p91c+v/c/e/NW7pZP8DAABAD3L3vy1usf8BAACgGbn73x632P8AAADQjNz974hbOtn/+n/9v/5f/998/3/tIvp/7/9PRP8/TP8/Qv+v/9f/6/85Ftvq/3P3vzNu6WT/AwAAQA9y978rbrH/AQAAoBm5+98dt9j/AAAA0Izc/e+JWzrZ//p//f+F9P/5OfX/bfX/J2fX/5/a99fr5P1//f9E9P/D9P8j9P/6f/3/dfp/pjS39/9z9783bulk/wMAAEAPcve/L279T7f2PwAAADQjd//74xb7HwAAAJqRu/8DcUsn+1//r//3/r/+v/n3//X/XdH/D9P/j9D/6//1/97/Z1Jz6/9z938wbulk/wMAAEAPcvd/KG6x/wEAAKAZufs/HLfY/wAAANCM3P03xS2d7H/9v/5f/6//1/+f+Weo/2+D/n/Y8fT/O/p//X/18/8V/y7Q/+v/x349bZpb/5+7/yNxSyf7HwAAAHqQu/+jcYv9DwAAAM3I3f+xuMX+BwAAgEW6dMPP5e7/eNzSyf7X/+v/9f/6f/3/5q+v/18m/f8w7/8f5H+u3/sj/f/59vP/t+9HS3v//9z//tL/6/+Z3tz6/9z9n4hbOtn/AAAA0IPc/Z+MW+x/AAAAaEbu/k/FLfY/AAAANCN3/6fjlk72v/5f/99M/3/7h9D/6//1/93T/w/T/4/w/v9W389f+ufX/+v/WTe3/j93/2filk72PwAAAPQgd/9n4xb7HwAAAJqRu/9zcYv9DwAAAM3Y3f0Zl3W4//X/W+v/d//6+n/v/+v/9f/6/2np/4fp/0fo//X/+n/9P5OaW///+d1fdWr1hbilk/0PAAAAPcjd/8W4xf4HAACAZuTu/1LcYv8DAABAM3L3fzlu6WT/6/+9/7+M/v/06dNX6//1//u/n7P9/y36f4r+f5j+f4T+X/+v/9f/M6m59f+5+78St3Sy/wEAAKAHufu/GrfY/wAAANCM3P1fi1vsfwAAAGhG7v6vxy2d7H/9/+2f4/L6+aPt/2/4/439/yn9v/f/9f8r7//r/yei/99sJ67+f0SL/f+p8//2t93PH9a2P7/+X//Purn1/7n7vxG3dLL/AQAAoAe5+78Zt6zt/5uP8VMBAAAAU8rd/624xZ//AwAAQDNy9387bulk/+v/j+/9/9v/3vXy/v/OavPn1//r//X/+v+jpv8fpv8f0WL/fwG23c8v/fPr//X/rJtb/5+7/ztxy/7hd9mFfZcAAADAnOTu/27c0smf/wMAAEAPcvffHLfY/wAAANCM3P3fi1s62f/6/+Pr//f28633/8fz/v8p/b/+f8r+/xL9fxv0/8P0/yOOrP8/kX99/f8R2vbn1//v7f/zd7P+v3dz6/9z938/bulk/wMAAEAPcvf/IG6x/wEAAKAZuft/GLfY/wAAANCM3P23xC179v+mtrsV+n/9/3L7f+//6/+9/6//X6f/3xn8/55v/39ydbj+P+n/vf+v/++1//f+P2fMrf/P3f+juMWf/wMAAMDiXHbAz+fu/3HcYv8DAABAM3L3/yRusf8BAACgGbn7fxq33HrJtj7SsdL/6//1//p//f/mr6//Xyb9/zDv/4/Q/0/Rz1+h/2+j/1+t9P8c3tz6/9z9P4tb/Pk/AAAANCN3/8/jFvsfAAAAmpG7/xdxi/0PAAAAzcjd/8u4pZP9r//X/x+y/99NM/X/Z+j/z9D/b6b/Px76/2H6/xH6f+//6/+9/8+k5tb/5+7/VdzSyf4HAACAHuTu/3XcYv8DAABAM3L3/yZusf8BAACgGbn7fxu3dLL/t9b/x99q/f92+/9LvP+/S/+v/9/09fX/y6T/H6b/H6H/1//r//X/TGpu/X/u/t/FLZ3sfwAAAOhB7v7fxy32PwAAADQjd/8f4hb7HwAAAJqRu/+PcUsn+9/7/333/xO8/6//H+7/T+79Ovp//b/+/+jp/4fp/zerf1D6f/2//l//z6Tm1v/n7v9T3NLJ/gcAAIAe5O7/c9xi/wMAAEAzcvffGrfY/wAAANCM3P1/iVs62f/6f/2//t/7//r/zV9f/79M+v9h2+z/7375+Jf1/v/W+//8CPp//b/+n0nMrf/P3f/XuKWT/Q8AAAA9yN3/t7jF/gcAAIBm5O7/e9xi/wMAAEAzcvf/I27pZP+P9P9n3y7X/w/S/+///Pr/zb8/9P/6f/3/0dP/D/P+/wj9v/f/9f/6fyY1t/4/d/8/45ZO9j8AAAD0IHf/bXGL/Q8AAADNyN3/r7jF/gcAAIBm5O7/d9zSyf73/v+S+v8r9P/6f/2//l//P0L/P0z/P0L/r//X/+v/mdTc+v/c/f8JAAD///dEVNI=") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0xc0, 0x2, 0x0, 0x6, 0x3}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x2000898, &(0x7f00000003c0), 0x1, 0x55ae, &(0x7f000000abc0)="$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") read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0x0, 0x1}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[], 0x32600) 3.175711044s ago: executing program 0 (id=411): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x8}}, 0x100, 0x0, 0x0, 0x101, 0x54}, 0x9c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0xfffffffffffffffb, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.463977333s ago: executing program 4 (id=412): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x11, 0x148, 0x250, 0x0, 0x318, 0x2a8, 0x2a8, 0x318, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1e8, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth0_vlan\x00', {0xb, 0x2, 0x2f, 0xb2, 0x6, 0x8, 0x8, 0x18}, {0xf2}}}, @common=@unspec=@state={{0x28}, {0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xb, 0xb, 0x4468, 'syz1\x00', 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x6, 0xf93b, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 48.057879ms ago: executing program 4 (id=413): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/237, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) 127.871µs ago: executing program 3 (id=414): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f0000000180)=ANY=[], 0x1, 0x20e, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffffc}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) ftruncate(r0, 0xf4fc) 0s ago: executing program 2 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000040), &(0x7f0000000580)}, 0x20) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0], 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.102' (ED25519) to the list of known hosts. [ 63.290150][ T4177] cgroup: Unknown subsys name 'net' [ 63.420207][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.911431][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.371004][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 66.429517][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 66.454992][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 66.475876][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.522140][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 66.582079][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.590450][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.598907][ T4195] device bridge_slave_0 entered promiscuous mode [ 66.625871][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.632982][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.641340][ T4195] device bridge_slave_1 entered promiscuous mode [ 66.712281][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.719791][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.727998][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.750664][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.768905][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.776233][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.784361][ T4201] device bridge_slave_0 entered promiscuous mode [ 66.791900][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.799831][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.808350][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.817122][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.826545][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.833928][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.841937][ T4191] device bridge_slave_0 entered promiscuous mode [ 66.856812][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.864128][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.872159][ T4201] device bridge_slave_1 entered promiscuous mode [ 66.899612][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.907280][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.916694][ T4191] device bridge_slave_1 entered promiscuous mode [ 66.924062][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.931169][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.939544][ T4192] device bridge_slave_0 entered promiscuous mode [ 66.955666][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.980712][ T4195] team0: Port device team_slave_0 added [ 66.986892][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.995111][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.003110][ T4192] device bridge_slave_1 entered promiscuous mode [ 67.019307][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.037653][ T4195] team0: Port device team_slave_1 added [ 67.058773][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.078107][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.089297][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.126363][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.140751][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.152416][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.162453][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.169528][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.195521][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.209637][ T4190] team0: Port device team_slave_0 added [ 67.231384][ T4201] team0: Port device team_slave_0 added [ 67.245792][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.252788][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.278941][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.292787][ T4190] team0: Port device team_slave_1 added [ 67.307375][ T4201] team0: Port device team_slave_1 added [ 67.334751][ T4191] team0: Port device team_slave_0 added [ 67.362458][ T4192] team0: Port device team_slave_0 added [ 67.370931][ T4191] team0: Port device team_slave_1 added [ 67.378602][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.385985][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.412125][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.439651][ T4192] team0: Port device team_slave_1 added [ 67.453338][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.460329][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.486685][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.498645][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.505670][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.539230][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.573722][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.580714][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.606933][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.623655][ T4195] device hsr_slave_0 entered promiscuous mode [ 67.630492][ T4195] device hsr_slave_1 entered promiscuous mode [ 67.645229][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.652236][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.678622][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.691523][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.698791][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.725190][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.748636][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.756168][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.782574][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.802322][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.809541][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.835739][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.898079][ T4201] device hsr_slave_0 entered promiscuous mode [ 67.905345][ T4201] device hsr_slave_1 entered promiscuous mode [ 67.912286][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.921028][ T4201] Cannot create hsr debugfs directory [ 67.930594][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.937551][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.944624][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.952678][ T4190] Cannot create hsr debugfs directory [ 68.007013][ T4191] device hsr_slave_0 entered promiscuous mode [ 68.014149][ T4191] device hsr_slave_1 entered promiscuous mode [ 68.020979][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.028794][ T4191] Cannot create hsr debugfs directory [ 68.038488][ T4192] device hsr_slave_0 entered promiscuous mode [ 68.045692][ T4192] device hsr_slave_1 entered promiscuous mode [ 68.052757][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.060815][ T4192] Cannot create hsr debugfs directory [ 68.074265][ T4179] Bluetooth: hci2: command 0x0409 tx timeout [ 68.081098][ T4179] Bluetooth: hci3: command 0x0409 tx timeout [ 68.083660][ T1109] Bluetooth: hci4: command 0x0409 tx timeout [ 68.098350][ T4179] Bluetooth: hci1: command 0x0409 tx timeout [ 68.106491][ T1109] Bluetooth: hci0: command 0x0409 tx timeout [ 68.420904][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.435135][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.449535][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.462310][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.511034][ T4201] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.530587][ T4201] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.551882][ T4201] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.568080][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.578891][ T4201] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.589181][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.600919][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.625374][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.698693][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.722643][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.732408][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.744932][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.795809][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.811987][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.833957][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.844631][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.862690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.872407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.890474][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.902389][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.954652][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.965004][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.975450][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.982756][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.991918][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.004077][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.012701][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.019834][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.029070][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.038524][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.063147][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.075395][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.105590][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.117756][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.127911][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.137250][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.164782][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.171780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.181852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.191035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.199510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.211568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.220561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.229250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.238239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.247498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.256533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.265948][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.273010][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.281331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.289495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.325266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.338886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.348309][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.355490][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.368043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.377244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.386861][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.394038][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.408270][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.421594][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.444396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.452556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.462649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.472612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.485043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.495406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.504790][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.511996][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.528541][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.545097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.569018][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.585853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.604340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.621550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.630280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.640930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.650251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.660779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.669873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.690687][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.708319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.721733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.731978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.747372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.760192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.783673][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.798142][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.808759][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.817537][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.827468][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.836948][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.844104][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.852792][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.861894][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.877238][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.885526][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.898078][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.911340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.922576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.931617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.941935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.951321][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.958453][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.968713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.984948][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.994369][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.002961][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.010101][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.018303][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.033460][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.046489][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.058658][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.067549][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.074717][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.099808][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.121129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.130564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.138732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.150333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.160610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.164829][ T4237] Bluetooth: hci0: command 0x041b tx timeout [ 70.179618][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.193352][ T4237] Bluetooth: hci4: command 0x041b tx timeout [ 70.199717][ T4237] Bluetooth: hci1: command 0x041b tx timeout [ 70.211205][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.219820][ T4237] Bluetooth: hci3: command 0x041b tx timeout [ 70.226119][ T4237] Bluetooth: hci2: command 0x041b tx timeout [ 70.239155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.249099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.257908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.272155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.282814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.291966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.359912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.372140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.388362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.400994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.414050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.433108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.442428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.457183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.466248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.477295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.487490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.517945][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.534528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.549002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.557987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.574994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.590021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.598599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.614521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.622570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.636990][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.652137][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.666040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.680249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.705431][ T4195] device veth0_vlan entered promiscuous mode [ 70.728972][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.750815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.769514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.797399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.820215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.842137][ T4195] device veth1_vlan entered promiscuous mode [ 70.879285][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.945129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.964340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.980113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.996411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.055932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.066702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.076435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.084706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.098522][ T4195] device veth0_macvtap entered promiscuous mode [ 71.111809][ T4190] device veth0_vlan entered promiscuous mode [ 71.119843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.129188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.145295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.169599][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.185169][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.196275][ T4195] device veth1_macvtap entered promiscuous mode [ 71.210087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.219263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.232731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.241441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.250118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.262211][ T4190] device veth1_vlan entered promiscuous mode [ 71.303004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.314174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.322430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.331732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.358164][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.364916][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.388008][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.408848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.419672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.429035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.439631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.449389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.458630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.480004][ T4190] device veth0_macvtap entered promiscuous mode [ 71.492079][ T4190] device veth1_macvtap entered promiscuous mode [ 71.501591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.511596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.521410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.546413][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.560021][ T4201] device veth0_vlan entered promiscuous mode [ 71.575291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.585156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.595431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.605879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.614984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.624042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.632487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.646816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.655836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.664924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.672759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.685633][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.696103][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.705442][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.714604][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.726029][ T4191] device veth0_vlan entered promiscuous mode [ 71.741075][ T4191] device veth1_vlan entered promiscuous mode [ 71.759292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.768881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.778946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.788340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.799983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.810579][ T4201] device veth1_vlan entered promiscuous mode [ 71.833895][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.846794][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.859474][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.871559][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.882473][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.894454][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.908320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.918288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.927352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.937074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.947760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.957763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.972002][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.981223][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.990539][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.999712][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.035076][ T4192] device veth0_vlan entered promiscuous mode [ 72.060890][ T4191] device veth0_macvtap entered promiscuous mode [ 72.083081][ T4201] device veth0_macvtap entered promiscuous mode [ 72.099813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.112350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.123726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.132519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.141591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.151703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.161161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.172065][ T4191] device veth1_macvtap entered promiscuous mode [ 72.187209][ T4192] device veth1_vlan entered promiscuous mode [ 72.203915][ T4201] device veth1_macvtap entered promiscuous mode [ 72.244588][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 72.250785][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 72.263058][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 72.281030][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.283992][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 72.299208][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.309173][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.310312][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 72.326019][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.330868][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.349028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.357446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.369458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.378234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.387511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.398314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.415352][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.427599][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.438005][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.448512][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.458527][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.469023][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.481253][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.503087][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.514870][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.525337][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.535870][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.547686][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.559204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.568112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.577143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.587297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.597535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.607033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.619270][ T4192] device veth0_macvtap entered promiscuous mode [ 72.631763][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.652728][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.663009][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.673985][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.683870][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.694776][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.708517][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.720044][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.729111][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.738032][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.747226][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.769641][ T4201] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.775921][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.786405][ T4201] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.795704][ T4201] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.798850][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.813447][ T4201] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.829038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.838192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.847583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.858466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.895672][ T4192] device veth1_macvtap entered promiscuous mode [ 73.007098][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.015923][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.032336][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.048720][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.058942][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.069651][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.079622][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.090505][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.101086][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.112039][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.124769][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.135437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.142904][ T3108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.153626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.157456][ T3108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.169370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.179558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.201034][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.215393][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.229040][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.239786][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.250661][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.261548][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.271478][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.282852][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.296923][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.320928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.334803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.348574][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.361255][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.374013][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.382866][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.397872][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.409914][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.427952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.504276][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.512241][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.536893][ T3108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.558666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.573907][ T3108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.622337][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.635998][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.661742][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.702232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.719385][ T3108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.731525][ T3108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.742037][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.773525][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.802075][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.820823][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.839764][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.859054][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.892147][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.911566][ T4277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 74.099207][ T4284] IPVS: length: 72 != 24 [ 74.343191][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 74.347095][ T1109] Bluetooth: hci4: command 0x0419 tx timeout [ 74.473190][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 74.733193][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 74.803187][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 75.551988][ T1109] Bluetooth: hci1: command 0x0419 tx timeout [ 75.558169][ T1109] Bluetooth: hci3: command 0x0419 tx timeout [ 75.564406][ T1109] Bluetooth: hci2: command 0x0419 tx timeout [ 75.571314][ T4271] Bluetooth: hci0: command 0x0419 tx timeout [ 75.709717][ T4275] loop3: detected capacity change from 0 to 32768 [ 75.821870][ T4275] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4275) [ 75.905501][ T4300] loop2: detected capacity change from 0 to 32768 [ 75.944386][ T4300] ======================================================= [ 75.944386][ T4300] WARNING: The mand mount option has been deprecated and [ 75.944386][ T4300] and is ignored by this kernel. Remove the mand [ 75.944386][ T4300] option from the mount to silence this warning. [ 75.944386][ T4300] ======================================================= [ 76.022787][ T4300] JBD2: Ignoring recovery information on journal [ 76.082716][ T4275] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 76.117922][ T4275] BTRFS info (device loop3): using free space tree [ 76.124715][ T4275] BTRFS info (device loop3): has skinny extents [ 76.145958][ T4300] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 77.075536][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801f73d800: rx timeout, send abort [ 77.157701][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801f73d800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 77.211871][ T4275] BTRFS error (device loop3): open_ctree failed: -22 [ 77.273221][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 77.323248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 77.785812][ T4300] syz.2.7 (4300) used greatest stack depth: 20496 bytes left [ 77.870148][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 78.216596][ T7] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 78.983211][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 79.003219][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 79.013205][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 79.023201][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 81.329011][ T4339] loop3: detected capacity change from 0 to 32768 [ 81.367999][ T4360] loop2: detected capacity change from 0 to 1024 [ 81.387009][ T4362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18'. [ 81.449927][ T4360] EXT4-fs (loop2): inline encryption not supported [ 81.481712][ T4360] EXT4-fs (loop2): Ignoring removed bh option [ 81.502369][ T4360] EXT4-fs (loop2): Ignoring removed nobh option [ 81.663377][ T7] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 81.734435][ T4368] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 81.761725][ T4368] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.404053][ T7] usb 5-1: can't read configurations, error -71 [ 82.532906][ T4360] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 82.557051][ T4360] System zones: 0-1, 3-12 [ 82.594155][ T4360] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,errors=remount-ro,inlinecrypt,norecovery,bh,debug,nogrpid,noauto_da_alloc,nobh,. Quota mode: none. [ 83.626470][ T26] audit: type=1800 audit(1777646824.421:2): pid=4360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 84.989028][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880611ebc00: rx timeout, send abort [ 84.997726][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880611ebc00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 85.291601][ T4398] loop0: detected capacity change from 0 to 32768 [ 85.527373][ T4398] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.28 (4398) [ 85.564536][ T4398] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 85.574116][ T4398] BTRFS info (device loop0): using free space tree [ 85.580701][ T4398] BTRFS info (device loop0): has skinny extents [ 86.717398][ T1112] cfg80211: failed to load regulatory.db [ 88.077674][ T4398] BTRFS info (device loop0): enabling ssd optimizations [ 88.462702][ T4445] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 89.703843][ T4237] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 89.875980][ T4449] loop2: detected capacity change from 0 to 512 [ 90.015874][ T4449] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.088066][ T4449] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.208583][ T4449] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.224652][ T4449] EXT4-fs (loop2): 1 truncate cleaned up [ 90.230449][ T4449] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,min_batch_time=0x000000000000000d,debug_want_extra_isize=0x0000000000000068,dioread_lock,nouid32,dioread_lock,,errors=continue. Quota mode: none. [ 90.333731][ T4237] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.374564][ T4237] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.563434][ T4237] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.572540][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.613820][ T4237] usb 2-1: Product: syz [ 90.618180][ T4237] usb 2-1: Manufacturer: syz [ 90.622879][ T4237] usb 2-1: SerialNumber: syz [ 90.951871][ T4484] 9pnet: Insufficient options for proto=fd [ 91.953439][ T4237] usb 2-1: 0:2 : does not exist [ 92.782988][ T4237] usb 2-1: USB disconnect, device number 2 [ 93.076693][ T4501] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 93.390970][ T4497] loop0: detected capacity change from 0 to 32768 [ 93.865518][ T4497] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.46 (4497) [ 93.904717][ T4497] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 93.913955][ T4497] BTRFS info (device loop0): using free space tree [ 93.920595][ T4497] BTRFS info (device loop0): has skinny extents [ 94.173945][ T4504] loop4: detected capacity change from 0 to 32768 [ 94.330643][ T4504] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.49 (4504) [ 95.147793][ T4272] udevd[4272]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.195187][ T4497] BTRFS error (device loop0): open_ctree failed: -12 [ 95.909681][ T4309] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4309) [ 96.651661][ T4510] loop2: detected capacity change from 0 to 32768 [ 97.137424][ T4559] 9pnet: Insufficient options for proto=fd [ 98.052520][ T4566] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.265647][ T4566] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.973225][ T4540] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.955200][ T4540] usb 3-1: Using ep0 maxpacket: 16 [ 100.083767][ T4540] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.096454][ T4540] usb 3-1: config 0 has no interfaces? [ 100.146268][ T4587] process 'syz.3.63' launched './file0' with NULL argv: empty string added [ 100.184173][ T4540] usb 3-1: New USB device found, idVendor=6666, idProduct=4901, bcdDevice=6b.be [ 100.223455][ T4540] usb 3-1: New USB device strings: Mfr=50, Product=0, SerialNumber=0 [ 100.253205][ T4540] usb 3-1: Manufacturer: syz [ 100.274866][ T4540] usb 3-1: config 0 descriptor?? [ 100.404277][ T4589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 100.502517][ T4589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.580080][ T4540] usb 3-1: USB disconnect, device number 2 [ 100.642116][ T4576] loop0: detected capacity change from 0 to 32768 [ 100.749200][ T4576] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 100.760414][ T4576] BTRFS info (device loop0): using free space tree [ 100.776443][ T4576] BTRFS info (device loop0): has skinny extents [ 101.410731][ T4576] BTRFS info (device loop0): enabling ssd optimizations [ 101.535601][ T26] audit: type=1800 audit(1777646842.331:3): pid=4576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.62" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 102.025078][ T4632] 9pnet: Insufficient options for proto=fd [ 102.722940][ T4629] vivid-008: disconnect [ 103.192496][ T4643] HTB: quantum of class 8002000E is big. Consider r2q change. [ 103.313942][ T4575] vivid-008: reconnect [ 103.558895][ T4626] loop4: detected capacity change from 0 to 40427 [ 103.680947][ T4538] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.732761][ T4626] F2FS-fs (loop4): build fault injection attr: rate: 174, type: 0x1ffff [ 103.923411][ T4538] usb 2-1: Using ep0 maxpacket: 8 [ 104.043584][ T4538] usb 2-1: config 0 has no interfaces? [ 104.049138][ T4538] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 104.106432][ T4538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.521414][ T4538] usb 2-1: config 0 descriptor?? [ 105.864051][ T4540] usb 2-1: USB disconnect, device number 3 [ 107.913473][ T4537] Bluetooth: hci4: command 0x0405 tx timeout [ 109.263999][ T4694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.86'. [ 111.183164][ C1] sched: RT throttling activated [ 111.364694][ T4697] loop4: detected capacity change from 0 to 32768 [ 111.419284][ T4697] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.87 (4697) [ 111.436247][ T4697] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 111.445069][ T4697] BTRFS info (device loop4): using free space tree [ 111.451634][ T4697] BTRFS info (device loop4): has skinny extents [ 111.463262][ T4538] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.683643][ T4537] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.703522][ T4538] usb 2-1: Using ep0 maxpacket: 8 [ 111.748691][ T4697] BTRFS info (device loop4): enabling ssd optimizations [ 111.768391][ T26] audit: type=1800 audit(1777646852.561:4): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.87" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 111.823398][ T4538] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 111.884485][ T4538] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 111.906349][ T4727] vivid-008: disconnect [ 111.923570][ T4537] usb 1-1: Using ep0 maxpacket: 16 [ 112.028858][ T4538] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 112.043943][ T4537] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.082995][ T4695] vivid-008: reconnect [ 112.113470][ T4537] usb 1-1: config 0 has no interfaces? [ 112.139745][ T4538] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 112.202297][ T4704] loop2: detected capacity change from 0 to 32768 [ 112.209040][ T4538] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.223946][ T4537] usb 1-1: New USB device found, idVendor=6666, idProduct=4901, bcdDevice=6b.be [ 112.244653][ T4537] usb 1-1: New USB device strings: Mfr=50, Product=0, SerialNumber=0 [ 112.259305][ T4729] loop3: detected capacity change from 0 to 24 [ 112.279990][ T4729] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 112.294024][ T4537] usb 1-1: Manufacturer: syz [ 112.330934][ T4537] usb 1-1: config 0 descriptor?? [ 112.343067][ T4704] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.89 (4704) [ 112.373016][ T4729] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 112.483406][ T4538] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 112.513092][ T4538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.532947][ T4538] usb 2-1: Product: syz [ 112.543241][ T4538] usb 2-1: Manufacturer: syz [ 112.553469][ T4538] usb 2-1: SerialNumber: syz [ 112.565109][ T4538] usb 2-1: config 0 descriptor?? [ 112.703085][ T4464] usb 1-1: USB disconnect, device number 2 [ 112.720528][ T4272] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop4 scanned by udevd (4272) [ 112.761625][ T4704] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 112.787750][ T4704] BTRFS info (device loop2): using free space tree [ 112.833792][ T4704] BTRFS info (device loop2): has skinny extents [ 113.677211][ T4735] loop3: detected capacity change from 0 to 131072 [ 114.719908][ T4735] F2FS-fs (loop3): Test dummy encryption mode enabled [ 114.733121][ T4735] F2FS-fs (loop3): invalid crc value [ 115.314602][ T4735] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.375249][ T4538] hub 2-1:0.0: bad descriptor, ignoring hub [ 115.387507][ T4704] BTRFS error (device loop2): open_ctree failed: -12 [ 115.616050][ T4538] hub: probe of 2-1:0.0 failed with error -5 [ 115.653978][ T4538] usb 2-1: USB disconnect, device number 4 [ 116.154025][ T4783] device syzkaller0 entered promiscuous mode [ 117.816858][ T4795] loop4: detected capacity change from 0 to 4096 [ 117.871904][ T4798] loop1: detected capacity change from 0 to 256 [ 120.561609][ T4814] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 120.569774][ T4814] UDF-fs: Scanning with blocksize 512 failed [ 120.598189][ T4815] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 122.397024][ T4816] loop1: detected capacity change from 0 to 128 [ 123.307596][ T4293] attempt to access beyond end of device [ 123.307596][ T4293] loop1: rw=1048577, want=140, limit=128 [ 124.139913][ T4293] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 124.193818][ T4293] attempt to access beyond end of device [ 124.193818][ T4293] loop1: rw=1048577, want=142, limit=128 [ 124.249449][ T4293] Buffer I/O error on dev loop1, logical block 70, lost async page write [ 124.257886][ T4814] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 124.257954][ T4814] UDF-fs: Scanning with blocksize 1024 failed [ 124.272526][ T4814] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 124.281749][ T4814] UDF-fs: Scanning with blocksize 2048 failed [ 124.312925][ T4293] attempt to access beyond end of device [ 124.312925][ T4293] loop1: rw=1048577, want=144, limit=128 [ 124.434815][ T4293] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 124.443556][ T4293] attempt to access beyond end of device [ 124.443556][ T4293] loop1: rw=1048577, want=146, limit=128 [ 124.454790][ T4293] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 124.465646][ T4814] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 124.479768][ T4814] UDF-fs: Scanning with blocksize 4096 failed [ 125.394253][ T4828] device syzkaller0 entered promiscuous mode [ 125.455347][ T4829] loop2: detected capacity change from 0 to 2048 [ 126.038628][ T4833] loop4: detected capacity change from 0 to 131072 [ 126.070216][ T4833] F2FS-fs (loop4): Test dummy encryption mode enabled [ 126.079357][ T4833] F2FS-fs (loop4): invalid crc value [ 126.099114][ T4833] F2FS-fs (loop4): Found nat_bits in checkpoint [ 126.164830][ T4833] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 126.355809][ T4844] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.380556][ T4833] fscrypt (loop4, inode 10): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 127.538030][ T26] audit: type=1800 audit(1777646868.331:5): pid=4829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.111" name="file1" dev="loop2" ino=2097153 res=0 errno=0 [ 127.881990][ T4868] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 127.894282][ T4862] loop4: detected capacity change from 0 to 256 [ 127.956611][ T4870] loop3: detected capacity change from 0 to 512 [ 128.000299][ T4868] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 128.010317][ T4868] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 128.206014][ T4870] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 128.234520][ T4870] EXT4-fs (loop3): orphan cleanup on readonly fs [ 128.390341][ T4870] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.120: bg 0: block 248: padding at end of block bitmap is not set [ 130.046436][ T4870] Quota error (device loop3): write_blk: dquota write failed [ 130.320362][ T4870] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 131.174543][ T4870] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.120: Failed to acquire dquot type 1 [ 131.343491][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 131.393552][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 131.414014][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 131.472659][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 131.487738][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 131.738117][ T4870] EXT4-fs (loop3): 1 truncate cleaned up [ 131.755563][ T23] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 131.866619][ T23] Bluetooth: hci1: Injecting HCI hardware error event [ 132.862113][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.876962][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.897968][ T4205] Bluetooth: hci1: hardware error 0x00 [ 132.914184][ T4870] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.442347][ T4899] device syzkaller0 entered promiscuous mode [ 134.334220][ T4918] loop0: detected capacity change from 0 to 2048 [ 135.056678][ T4922] loop4: detected capacity change from 0 to 128 [ 135.078887][ T4918] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.604407][ T26] audit: type=1800 audit(1777646876.401:6): pid=4918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.137" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 136.022396][ T4931] loop1: detected capacity change from 0 to 32768 [ 136.140733][ T4936] ODEBUG: Out of memory. ODEBUG disabled [ 141.815706][ T4972] loop3: detected capacity change from 0 to 64 [ 141.834651][ T4969] loop2: detected capacity change from 0 to 2048 [ 141.994588][ T4972] hfs: unable to parse mount options [ 142.132800][ T4969] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.579486][ T26] audit: type=1800 audit(1777646884.371:7): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.153" name="file1" dev="loop2" ino=1415 res=0 errno=0 [ 145.719445][ T4993] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 147.227828][ T5004] device syzkaller0 entered promiscuous mode [ 150.470683][ T5041] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 152.010403][ T5048] netlink: 36 bytes leftover after parsing attributes in process `syz.1.176'. [ 152.158402][ T5044] kvm [5043]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x4b12 [ 152.212835][ T5044] kvm [5043]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 152.266126][ T5044] kvm [5043]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x1024 [ 152.327754][ T5044] kvm [5043]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x80 [ 152.344796][ T5044] kvm [5043]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 152.367032][ T5044] kvm [5043]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 152.550212][ T5052] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 152.580169][ T5052] overlayfs: overlapping lowerdir path [ 152.910625][ T5059] device syzkaller0 entered promiscuous mode [ 153.998111][ T5070] loop0: detected capacity change from 0 to 512 [ 154.199484][ T5070] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 155.141157][ T5070] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.181: bad orphan inode 131083 [ 155.205290][ T5070] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 156.900191][ T5100] loop1: detected capacity change from 0 to 64 [ 157.020232][ T5100] hfs: unable to parse mount options [ 157.060288][ T5099] device syzkaller0 entered promiscuous mode [ 158.637183][ T5116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.196'. [ 158.862465][ T5123] loop4: detected capacity change from 0 to 8 [ 161.576123][ T5139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.203'. [ 161.673117][ T5141] loop4: detected capacity change from 0 to 64 [ 161.743251][ T4461] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 161.749755][ T5141] hfs: unable to parse mount options [ 161.939962][ T5149] device syzkaller0 entered promiscuous mode [ 162.153840][ T4461] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 162.203803][ T4461] usb 4-1: config 1 interface 0 has no altsetting 0 [ 162.503843][ T4461] usb 4-1: string descriptor 0 read error: -22 [ 162.516323][ T4461] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 162.600052][ T4461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.418739][ T4461] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 163.653780][ T4461] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0926:3333.0001/input/input5 [ 165.014733][ T4461] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 165.208310][ T4461] usb 4-1: USB disconnect, device number 2 [ 166.439651][ T5163] fido_id[5163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 166.589019][ T5172] Can't find a SQUASHFS superblock on nullb0 [ 168.312991][ T5179] loop4: detected capacity change from 0 to 64 [ 168.380993][ T5184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.215'. [ 168.623622][ T5188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.216'. [ 170.133567][ T4537] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.803525][ T4537] usb 5-1: Using ep0 maxpacket: 8 [ 171.933629][ T4537] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 171.967163][ T4537] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 172.074385][ T4537] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 172.167707][ T4537] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 172.375544][ T4537] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.663472][ T4537] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 172.685238][ T4537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.721377][ T4537] usb 5-1: Product: syz [ 172.747011][ T4537] usb 5-1: Manufacturer: syz [ 172.756596][ T4537] usb 5-1: SerialNumber: syz [ 172.782052][ T4537] usb 5-1: config 0 descriptor?? [ 172.843397][ T4537] usb 5-1: can't set config #0, error -71 [ 172.890375][ T4537] usb 5-1: USB disconnect, device number 4 [ 173.388848][ T5223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.228'. [ 174.148168][ T5226] loop0: detected capacity change from 0 to 32768 [ 174.263280][ T4297] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 174.278726][ T5226] XFS (loop0): Mounting V5 Filesystem [ 174.368785][ T5226] XFS (loop0): Ending clean mount [ 174.523258][ T4297] usb 4-1: Using ep0 maxpacket: 16 [ 174.600917][ T4191] XFS (loop0): Unmounting Filesystem [ 174.617615][ T5230] loop1: detected capacity change from 0 to 32768 [ 174.644082][ T4297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.676930][ T4297] usb 4-1: config 0 has no interfaces? [ 174.753618][ T4297] usb 4-1: New USB device found, idVendor=6666, idProduct=4901, bcdDevice=6b.be [ 174.773035][ T4297] usb 4-1: New USB device strings: Mfr=50, Product=0, SerialNumber=0 [ 174.790081][ T4297] usb 4-1: Manufacturer: syz [ 174.815519][ T4297] usb 4-1: config 0 descriptor?? [ 175.101822][ T4237] usb 4-1: USB disconnect, device number 3 [ 175.363311][ T4459] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 175.693285][ T4459] usb 2-1: Using ep0 maxpacket: 8 [ 175.893357][ T4459] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 175.913465][ T4459] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 175.921739][ T4459] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 175.932333][ T4459] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 175.946744][ T4459] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.123546][ T4459] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 176.151087][ T4459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.231299][ T4459] usb 2-1: Product: syz [ 176.235672][ T4459] usb 2-1: Manufacturer: syz [ 176.240471][ T4459] usb 2-1: SerialNumber: syz [ 176.283605][ T4459] usb 2-1: config 0 descriptor?? [ 176.368778][ T5261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.239'. [ 177.191451][ T5267] netlink: 200 bytes leftover after parsing attributes in process `syz.3.241'. [ 177.417496][ T5267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.241'. [ 177.721436][ T5271] loop0: detected capacity change from 0 to 256 [ 177.823975][ T5271] exfat: Unknown parameter 'keep_last_dots' [ 178.581063][ T4459] usb 2-1: can't set config #0, error -71 [ 179.301996][ T4459] usb 2-1: USB disconnect, device number 5 [ 180.310308][ T5291] device syzkaller0 entered promiscuous mode [ 180.903618][ T5305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.253'. [ 181.203301][ T4659] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 181.303223][ T4459] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 181.573273][ T4459] usb 1-1: Using ep0 maxpacket: 8 [ 181.603554][ T4659] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.631210][ T4659] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 181.853670][ T4659] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.907958][ T4659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.992746][ T4659] usb 4-1: Product: syz [ 182.031113][ T4659] usb 4-1: Manufacturer: syz [ 182.090986][ T4659] usb 4-1: SerialNumber: syz [ 182.262882][ T4659] cdc_mbim 4-1:1.0: skipping garbage [ 182.524552][ T5307] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 182.733300][ T4459] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 183.238320][ T5307] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 183.273690][ T4659] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 185.141042][ T5323] Can't find a SQUASHFS superblock on nullb0 [ 185.159082][ T4459] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 185.374285][ T4459] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 185.459218][ T4459] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 185.517624][ T4459] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.613146][ C0] raw-gadget.1 gadget: ignoring, device is not running [ 185.633140][ C0] raw-gadget.1 gadget: ignoring, device is not running [ 185.663191][ C0] raw-gadget.1 gadget: ignoring, device is not running [ 185.693144][ C0] raw-gadget.1 gadget: ignoring, device is not running [ 185.723148][ C0] raw-gadget.1 gadget: ignoring, device is not running [ 185.743164][ C0] raw-gadget.1 gadget: ignoring, device is not running [ 185.756385][ T4459] usb 1-1: string descriptor 0 read error: -32 [ 185.762680][ T4459] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 185.764648][ T4659] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 185.804111][ T4659] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, de:c7:ab:b9:59:3e [ 185.826289][ T4659] usb 4-1: USB disconnect, device number 4 [ 185.832856][ T4659] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 185.856534][ T4459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.933524][ T4459] usb 1-1: config 0 descriptor?? [ 185.960621][ T4459] usb 1-1: can't set config #0, error -71 [ 185.971352][ T5334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.265'. [ 186.000219][ T4459] usb 1-1: USB disconnect, device number 3 [ 186.608694][ T5352] loop4: detected capacity change from 0 to 256 [ 186.831596][ T5352] exfat: Unknown parameter 'keep_last_dots' [ 187.483430][ T4659] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 187.843390][ T4659] usb 2-1: Using ep0 maxpacket: 8 [ 189.053362][ T4459] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 189.273746][ T4659] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 189.484015][ T4459] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.547406][ T4459] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 189.853927][ T4459] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.899925][ T4459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.007393][ T4459] usb 5-1: Product: syz [ 190.084561][ T4459] usb 5-1: Manufacturer: syz [ 190.148617][ T4459] usb 5-1: SerialNumber: syz [ 190.514478][ T4659] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 190.522735][ T4659] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 190.533241][ T4659] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 190.542279][ T4659] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.561148][ T4459] cdc_mbim 5-1:1.0: skipping garbage [ 190.603934][ T4659] usb 2-1: string descriptor 0 read error: -71 [ 190.620655][ T4659] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 190.634057][ T5363] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 190.660735][ T4659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.682937][ T4659] usb 2-1: config 0 descriptor?? [ 190.713492][ T4659] usb 2-1: can't set config #0, error -71 [ 190.730674][ T4659] usb 2-1: USB disconnect, device number 6 [ 191.227483][ T4655] Bluetooth: hci3: command 0x0406 tx timeout [ 191.248247][ T4537] Bluetooth: hci2: command 0x0406 tx timeout [ 191.283359][ T4537] Bluetooth: hci0: command 0x0406 tx timeout [ 191.316107][ T5379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.280'. [ 191.447403][ T5363] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 191.458064][ T5383] device syzkaller0 entered promiscuous mode [ 191.495874][ T4459] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 191.512722][ T4459] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 191.570351][ T4459] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, ca:d7:8f:59:c5:21 [ 191.777076][ T4459] usb 5-1: USB disconnect, device number 5 [ 191.783706][ T4459] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 192.773221][ T4655] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 193.063207][ T4655] usb 4-1: Using ep0 maxpacket: 16 [ 194.240963][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.247440][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.413454][ T4655] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.832709][ T4655] usb 4-1: config 0 has no interfaces? [ 195.879128][ T4655] usb 4-1: string descriptor 0 read error: -71 [ 195.907754][ T5413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.292'. [ 195.941150][ T4655] usb 4-1: New USB device found, idVendor=6666, idProduct=4901, bcdDevice=6b.be [ 195.980585][ T4655] usb 4-1: New USB device strings: Mfr=50, Product=0, SerialNumber=0 [ 196.077308][ T4655] usb 4-1: config 0 descriptor?? [ 196.135672][ T4655] usb 4-1: can't set config #0, error -71 [ 196.153661][ T4655] usb 4-1: USB disconnect, device number 5 [ 196.292834][ T5426] device syzkaller0 entered promiscuous mode [ 198.153583][ T4539] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 198.413199][ T4539] usb 4-1: Using ep0 maxpacket: 16 [ 199.003393][ T4539] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.442564][ T4539] usb 4-1: config 0 has no interfaces? [ 200.803329][ T4539] usb 4-1: string descriptor 0 read error: -71 [ 200.813213][ T4539] usb 4-1: New USB device found, idVendor=6666, idProduct=4901, bcdDevice=6b.be [ 200.863378][ T4539] usb 4-1: New USB device strings: Mfr=50, Product=0, SerialNumber=0 [ 200.898839][ T4539] usb 4-1: config 0 descriptor?? [ 200.913663][ T5464] loop3: detected capacity change from 0 to 64 [ 200.943363][ T4539] usb 4-1: can't set config #0, error -71 [ 200.956805][ T4539] usb 4-1: USB disconnect, device number 6 [ 200.972145][ T5466] device syzkaller0 entered promiscuous mode [ 204.083275][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 204.864711][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 205.205487][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.293634][ T21] usb 2-1: config 0 has no interfaces? [ 206.373346][ T21] usb 2-1: New USB device found, idVendor=6666, idProduct=4901, bcdDevice=6b.be [ 206.382796][ T21] usb 2-1: New USB device strings: Mfr=50, Product=0, SerialNumber=0 [ 206.419032][ T21] usb 2-1: Manufacturer: syz [ 206.442807][ T21] usb 2-1: config 0 descriptor?? [ 206.465311][ T5555] device syzkaller0 entered promiscuous mode [ 208.331382][ T4655] usb 2-1: USB disconnect, device number 7 [ 210.573292][ T4297] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 210.597077][ T5587] loop0: detected capacity change from 0 to 512 [ 210.722700][ T5587] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 210.808297][ T5587] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.332: corrupted in-inode xattr [ 210.842448][ T5587] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.332: couldn't read orphan inode 15 (err -117) [ 210.864714][ T5587] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nodiscard,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,lazytime,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 210.894569][ T4297] usb 2-1: Using ep0 maxpacket: 8 [ 211.296750][ T4297] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 211.354259][ T4297] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 211.387001][ T4297] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 211.423385][ T4297] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 211.443231][ T4297] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.715639][ T5602] loop0: detected capacity change from 0 to 40427 [ 211.809601][ T5602] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 211.817434][ T5602] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 211.828933][ T5602] F2FS-fs (loop0): invalid crc value [ 211.836335][ T5606] loop3: detected capacity change from 0 to 1024 [ 211.843327][ T4297] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 211.854710][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.862763][ T4297] usb 2-1: Product: syz [ 211.866979][ T4297] usb 2-1: Manufacturer: syz [ 211.873212][ T4297] usb 2-1: SerialNumber: syz [ 211.888710][ T4297] usb 2-1: config 0 descriptor?? [ 211.897402][ T5602] F2FS-fs (loop0): Found nat_bits in checkpoint [ 211.933528][ T5606] EXT4-fs (loop3): Ignoring removed orlov option [ 211.961106][ T5606] EXT4-fs (loop3): Ignoring removed bh option [ 211.981003][ T5602] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 211.988243][ T5602] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 212.031652][ T5606] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 212.031652][ T5606] [ 213.812925][ T5621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.337'. [ 214.673655][ T4297] hub 2-1:0.0: bad descriptor, ignoring hub [ 214.679631][ T4297] hub: probe of 2-1:0.0 failed with error -5 [ 214.954191][ T4297] usb 2-1: USB disconnect, device number 8 [ 214.997116][ T5625] loop3: detected capacity change from 0 to 128 [ 215.075161][ T5625] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.259603][ T5625] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 217.337299][ T5642] loop4: detected capacity change from 0 to 128 [ 217.736536][ T4297] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 217.983254][ T4297] usb 2-1: Using ep0 maxpacket: 16 [ 218.083342][ T4297] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 218.103775][ T4297] usb 2-1: can't read configurations, error -71 [ 218.304122][ T3108] attempt to access beyond end of device [ 218.304122][ T3108] loop4: rw=1, want=250, limit=128 [ 218.523624][ T5663] syz.0.339 uses obsolete (PF_INET,SOCK_PACKET) [ 218.843213][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 219.016408][ T5662] loop3: detected capacity change from 0 to 32768 [ 219.052842][ T5662] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.351 (5662) [ 219.073223][ T4655] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 219.113843][ T5662] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 219.123352][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 219.133633][ T5662] BTRFS info (device loop3): setting nodatasum [ 219.139985][ T5662] BTRFS info (device loop3): force zlib compression, level 3 [ 219.152435][ T5662] BTRFS info (device loop3): turning on flush-on-commit [ 219.161191][ T5662] BTRFS info (device loop3): max_inline at 4096 [ 219.172444][ T5662] BTRFS info (device loop3): using free space tree [ 219.180984][ T5662] BTRFS info (device loop3): has skinny extents [ 219.253417][ T21] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 219.271883][ T21] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 219.312824][ T21] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 219.339065][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 219.368731][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.402487][ T5662] BTRFS info (device loop3): enabling ssd optimizations [ 219.493400][ T4655] usb 1-1: config 0 has no interfaces? [ 219.498976][ T4655] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 219.518712][ T4655] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.548697][ T4655] usb 1-1: config 0 descriptor?? [ 219.613772][ T21] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 220.555765][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.563956][ T21] usb 5-1: Product: syz [ 220.568323][ T21] usb 5-1: Manufacturer: syz [ 220.573062][ T21] usb 5-1: SerialNumber: syz [ 220.588957][ T21] usb 5-1: config 0 descriptor?? [ 220.732744][ T1108] usb 1-1: USB disconnect, device number 4 [ 221.053212][ T4297] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 221.703291][ T4297] usb 3-1: Using ep0 maxpacket: 8 [ 221.843577][ T4297] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.851988][ T4297] usb 3-1: config 0 has no interface number 0 [ 221.858478][ T4297] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.869647][ T4297] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 221.879265][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.891893][ T4297] usb 3-1: config 0 descriptor?? [ 221.932940][ T5714] loop0: detected capacity change from 0 to 128 [ 221.957041][ T4297] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 222.173654][ T21] hub 5-1:0.0: bad descriptor, ignoring hub [ 222.179634][ T4655] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 222.209452][ T21] hub: probe of 5-1:0.0 failed with error -5 [ 222.345581][ T4235] usb 3-1: USB disconnect, device number 3 [ 222.365114][ T21] usb 5-1: USB disconnect, device number 6 [ 222.613223][ T4655] usb 2-1: Using ep0 maxpacket: 16 [ 222.763315][ T4655] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.825170][ T4655] usb 2-1: config 0 has no interfaces? [ 222.933772][ T4655] usb 2-1: New USB device found, idVendor=6666, idProduct=4901, bcdDevice=6b.be [ 223.003793][ T4655] usb 2-1: New USB device strings: Mfr=50, Product=0, SerialNumber=0 [ 223.187758][ T4655] usb 2-1: Manufacturer: syz [ 223.351164][ T4655] usb 2-1: config 0 descriptor?? [ 223.362125][ T4295] attempt to access beyond end of device [ 223.362125][ T4295] loop0: rw=1, want=250, limit=128 [ 223.439019][ T5728] loop2: detected capacity change from 0 to 4096 [ 223.550090][ T5734] loop3: detected capacity change from 0 to 512 [ 223.587405][ T5737] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.623018][ T5734] EXT4-fs (loop3): Unrecognized mount option "func=PATH_CHECK" or missing value [ 223.647302][ T26] audit: type=1800 audit(1777646964.441:8): pid=5728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.363" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 223.657619][ T4655] usb 2-1: USB disconnect, device number 11 [ 223.805164][ T5734] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 224.059899][ T5743] netlink: 44 bytes leftover after parsing attributes in process `syz.3.368'. [ 224.153033][ T5744] overlayfs: failed to resolve './bus': -2 [ 226.446771][ T5755] Can't find a SQUASHFS superblock on nullb0 [ 226.493357][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 226.783239][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 226.913709][ T21] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 226.939277][ T21] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 227.004421][ T21] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 227.084573][ T21] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 227.311629][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.635441][ T5757] loop3: detected capacity change from 0 to 4096 [ 227.653872][ T5757] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 227.673754][ T21] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 227.686455][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.724577][ T21] usb 1-1: Product: syz [ 227.740043][ T21] usb 1-1: Manufacturer: syz [ 227.751562][ T21] usb 1-1: SerialNumber: syz [ 227.777619][ T21] usb 1-1: config 0 descriptor?? [ 228.027691][ T5763] loop3: detected capacity change from 0 to 128 [ 228.094650][ T21] hub 1-1:0.0: bad descriptor, ignoring hub [ 228.116716][ T21] hub: probe of 1-1:0.0 failed with error -5 [ 228.345828][ T21] usb 1-1: USB disconnect, device number 5 [ 228.367760][ T4395] attempt to access beyond end of device [ 228.367760][ T4395] loop3: rw=1, want=250, limit=128 [ 228.571240][ T5773] loop2: detected capacity change from 0 to 1024 [ 228.911805][ T5773] EXT4-fs (loop2): Ignoring removed orlov option [ 228.982894][ T5773] EXT4-fs (loop2): Ignoring removed bh option [ 228.989221][ T5773] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 228.989221][ T5773] [ 229.260459][ T5784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.378'. [ 230.300521][ T5794] netlink: 68 bytes leftover after parsing attributes in process `syz.4.384'. [ 230.844717][ T5798] overlayfs: failed to resolve './bus': -2 [ 231.275144][ T5800] loop3: detected capacity change from 0 to 1024 [ 231.369921][ T5807] loop0: detected capacity change from 0 to 128 [ 231.532116][ T5800] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,prjquota,noquota,minixdf,nombcache,nodioread_nolock,,errors=continue. Quota mode: none. [ 231.653494][ T5800] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.720928][ T4659] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 231.804999][ T5523] attempt to access beyond end of device [ 231.804999][ T5523] loop0: rw=1, want=250, limit=128 [ 231.841356][ T5800] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 3: comm syz.3.385: lblock 3 mapped to illegal pblock 3 (length 3) [ 232.036365][ T26] audit: type=1800 audit(1777646972.831:9): pid=5820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.385" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 232.065391][ T4659] usb 5-1: Using ep0 maxpacket: 8 [ 232.080773][ T5800] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 232.156703][ T5820] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: none. [ 232.202022][ T5800] EXT4-fs (loop3): This should not happen!! Data will be lost [ 232.202022][ T5800] [ 232.213264][ T4659] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 232.227893][ T4659] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 232.243672][ T4659] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 232.254501][ T4659] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 232.271936][ T4659] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.297715][ T5820] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 8: comm syz.3.385: lblock 8 mapped to illegal pblock 8 (length 8) [ 232.377594][ T5820] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 232.426075][ T5820] EXT4-fs (loop3): This should not happen!! Data will be lost [ 232.426075][ T5820] [ 232.483566][ T4659] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 232.492938][ T4659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.501553][ T4659] usb 5-1: Product: syz [ 232.515877][ T4659] usb 5-1: Manufacturer: syz [ 232.598643][ T5834] /dev/nullb0: Can't open blockdev [ 233.977052][ T4659] usb 5-1: SerialNumber: syz [ 234.000853][ T4659] usb 5-1: config 0 descriptor?? [ 234.343566][ T4659] hub 5-1:0.0: bad descriptor, ignoring hub [ 234.349709][ T4659] hub: probe of 5-1:0.0 failed with error -5 [ 234.433038][ T5848] loop1: detected capacity change from 0 to 1024 [ 234.463964][ T4659] usb 5-1: USB disconnect, device number 7 [ 234.555338][ T5848] EXT4-fs (loop1): Ignoring removed orlov option [ 234.561748][ T5848] EXT4-fs (loop1): Ignoring removed bh option [ 234.633269][ T5848] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 234.633269][ T5848] [ 234.912970][ T5855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.393'. [ 235.962256][ T5863] loop4: detected capacity change from 0 to 128 [ 237.345317][ T5840] loop2: detected capacity change from 0 to 32768 [ 237.625886][ T5523] attempt to access beyond end of device [ 237.625886][ T5523] loop4: rw=1, want=250, limit=128 [ 238.390021][ T5899] Can't find a SQUASHFS superblock on nullb0 [ 238.563233][ T4451] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 238.903151][ T4451] usb 5-1: Using ep0 maxpacket: 8 [ 239.063468][ T4451] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 239.078633][ T4451] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 239.112733][ T4451] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 239.123794][ T4451] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 239.132826][ T4451] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.343757][ T4451] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 239.368203][ T4451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.402195][ T4451] usb 5-1: Product: syz [ 239.440045][ T4451] usb 5-1: Manufacturer: syz [ 239.445662][ T4451] usb 5-1: SerialNumber: syz [ 239.453323][ T4451] usb 5-1: config 0 descriptor?? [ 239.983151][ T4297] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 240.250391][ T5920] loop3: detected capacity change from 0 to 32768 [ 240.553194][ T4297] usb 3-1: Using ep0 maxpacket: 16 [ 240.714583][ T4297] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 240.771387][ T4297] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 241.183270][ T4297] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 241.191920][ T4297] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 241.201674][ T4297] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 241.211272][ T4297] usb 3-1: config 0 has no interface number 0 [ 241.217851][ T4297] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 241.229379][ T4297] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 241.240991][ T4297] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 241.251480][ T4297] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.272178][ T4297] usb 3-1: config 0 interface 125 has no altsetting 0 [ 241.308583][ T4297] usb 3-1: config 0 interface 125 has no altsetting 2 [ 241.383606][ T4451] hub 5-1:0.0: bad descriptor, ignoring hub [ 241.390474][ T4451] hub: probe of 5-1:0.0 failed with error -5 [ 241.557628][ T4451] usb 5-1: USB disconnect, device number 8 [ 241.764523][ T5931] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 241.776007][ T5931] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 241.797353][ T4297] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 243.720328][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.759605][ T4297] usb 3-1: Product: syz [ 243.828716][ T4297] usb 3-1: Manufacturer: syz [ 243.854645][ T4297] usb 3-1: SerialNumber: syz [ 243.874248][ T4297] usb 3-1: config 0 descriptor?? [ 243.912468][ T3108] general protection fault, probably for non-canonical address 0xdffffc00000000ba: 0000 [#1] PREEMPT SMP KASAN [ 243.924246][ T3108] KASAN: null-ptr-deref in range [0x00000000000005d0-0x00000000000005d7] [ 243.932714][ T3108] CPU: 0 PID: 3108 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 243.940294][ T3108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.950389][ T3108] Workqueue: writeback wb_workfn (flush-7:3) [ 243.956445][ T3108] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 243.963114][ T3108] Code: df 41 80 3c 04 00 74 08 48 89 df e8 d2 20 ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 aa 20 ec fd 41 bf 90 00 00 00 4d 03 [ 243.983053][ T3108] RSP: 0018:ffffc9000d9df260 EFLAGS: 00010202 [ 243.989163][ T3108] RAX: 00000000000000ba RBX: ffff888061163148 RCX: dffffc0000000000 [ 243.997346][ T3108] RDX: 0000000000000000 RSI: ffffffff96483e40 RDI: ffff888061163140 [ 244.005352][ T3108] RBP: 1ffff1100c22c631 R08: dffffc0000000000 R09: 1ffffffff203aa18 [ 244.013357][ T3108] R10: dffffc0000000000 R11: fffffbfff203aa19 R12: 1ffff1100c22c629 [ 244.021352][ T3108] R13: ffff888061163188 R14: 00000000000005d0 R15: ffff88802b243bac [ 244.029602][ T3108] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 244.038573][ T3108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.045187][ T3108] CR2: 000055dddbbca4b0 CR3: 00000000603b3000 CR4: 00000000003506f0 [ 244.053343][ T3108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.061352][ T3108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.069383][ T3108] Call Trace: [ 244.072694][ T3108] [ 244.075650][ T3108] bio_associate_blkg+0x23a/0x340 [ 244.080794][ T3108] lbmStartIO+0x204/0x4c0 [ 244.085156][ T3108] lbmWrite+0x361/0x480 [ 244.089350][ T3108] jfs_flush_journal+0x537/0xec0 [ 244.094484][ T3108] ? lmLogShutdown+0x850/0x850 [ 244.099290][ T3108] ? __lock_acquire+0x7d10/0x7d10 [ 244.104341][ T3108] ? do_raw_spin_lock+0x128/0x2f0 [ 244.109516][ T3108] ? __rwlock_init+0x140/0x140 [ 244.114336][ T3108] jfs_write_inode+0x12b/0x220 [ 244.119134][ T3108] __writeback_single_inode+0x6c3/0xda0 [ 244.124720][ T3108] writeback_sb_inodes+0xa4e/0x1680 [ 244.129966][ T3108] ? queue_io+0x550/0x550 [ 244.134335][ T3108] ? rcu_is_watching+0x11/0xa0 [ 244.139227][ T3108] wb_writeback+0x45d/0xbe0 [ 244.143854][ T3108] ? rcu_lock_release+0x20/0x20 [ 244.148740][ T3108] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 244.154900][ T3108] ? mark_lock+0x94/0x320 [ 244.159288][ T3108] ? _raw_spin_unlock_irq+0x1f/0x40 [ 244.164546][ T3108] wb_workfn+0x43a/0xf20 [ 244.168837][ T3108] ? inode_wait_for_writeback+0x220/0x220 [ 244.174712][ T3108] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 244.180731][ T3108] ? read_lock_is_recursive+0x10/0x10 [ 244.186132][ T3108] ? __schedule+0x11f7/0x43c0 [ 244.190833][ T3108] ? _raw_spin_unlock_irq+0x1f/0x40 [ 244.196058][ T3108] process_one_work+0x85f/0x1010 [ 244.201024][ T3108] ? worker_detach_from_pool+0x240/0x240 [ 244.206764][ T3108] ? lockdep_hardirqs_off+0x70/0x100 [ 244.212098][ T3108] ? _raw_spin_lock_irq+0xb7/0xf0 [ 244.217163][ T3108] ? _raw_spin_lock_irqsave+0x100/0x100 [ 244.222739][ T3108] ? wq_worker_running+0x97/0x170 [ 244.227786][ T3108] worker_thread+0xaa6/0x1290 [ 244.232535][ T3108] kthread+0x436/0x520 [ 244.236631][ T3108] ? rcu_lock_release+0x20/0x20 [ 244.241511][ T3108] ? kthread_blkcg+0xd0/0xd0 [ 244.246114][ T3108] ret_from_fork+0x1f/0x30 [ 244.250559][ T3108] [ 244.253602][ T3108] Modules linked in: [ 244.257580][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.301040][ T4297] usb 3-1: can't set config #0, error -71 [ 244.333993][ T4297] usb 3-1: USB disconnect, device number 4 [ 244.359080][ T26] audit: type=1326 audit(1777646985.151:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.2.415" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864c1ebdd9 code=0x7ffc0000 [ 244.385234][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 244.418785][ T26] audit: type=1326 audit(1777646985.151:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.2.415" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864c1ebdd9 code=0x7ffc0000 [ 244.452389][ T3108] ---[ end trace c5fb071e955131e7 ]--- [ 244.458093][ T3108] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 244.471469][ T3108] Code: df 41 80 3c 04 00 74 08 48 89 df e8 d2 20 ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 aa 20 ec fd 41 bf 90 00 00 00 4d 03 [ 244.515663][ T3108] RSP: 0018:ffffc9000d9df260 EFLAGS: 00010202 [ 244.529572][ T3108] RAX: 00000000000000ba RBX: ffff888061163148 RCX: dffffc0000000000 [ 244.549823][ T3108] RDX: 0000000000000000 RSI: ffffffff96483e40 RDI: ffff888061163140 [ 244.567060][ T3108] RBP: 1ffff1100c22c631 R08: dffffc0000000000 R09: 1ffffffff203aa18 [ 244.586347][ T3108] R10: dffffc0000000000 R11: fffffbfff203aa19 R12: 1ffff1100c22c629 [ 244.604676][ T3108] R13: ffff888061163188 R14: 00000000000005d0 R15: ffff88802b243bac [ 244.616208][ T3108] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 244.625493][ T3108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.632171][ T3108] CR2: 0000557b83207950 CR3: 000000002a4ec000 CR4: 00000000003506e0 [ 244.645503][ T3108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.655901][ T3108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.666213][ T3108] Kernel panic - not syncing: Fatal exception [ 244.672570][ T3108] Kernel Offset: disabled [ 244.676924][ T3108] Rebooting in 86400 seconds..