last executing test programs: 5m40.615814047s ago: executing program 3 (id=1344): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x20) 5m36.376241561s ago: executing program 3 (id=1348): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8a301, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000500)={r2, 0xe1, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x17, 0x2, r2}) 5m35.351012948s ago: executing program 3 (id=1353): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) unshare(0x400) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000007c0)={0x1f, @none}, 0x8) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r2, &(0x7f0000000080), &(0x7f0000000800)=ANY=[@ANYBLOB="7f162f720368ed8b73905e3449437829f66fbc36590f5e1642c7cc0d14a819cc96a6707b1669ec83504a3409baf2def553a66b6e9575953cc8b10f2558b35bb6b272359c3e8c12d1a174b294ed79314d3c123981ba0008000000000000000000d65a849f007b130a3e0fdd06289084e5369b"], 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000002380)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0'}, 0x1008) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$TIPC_NL_BEARER_ADD(r0, 0x0, 0x20000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000)=0xd, 0x1a) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 5m34.847087598s ago: executing program 3 (id=1354): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) getdents(r0, &(0x7f0000001080)=""/4083, 0xff3) 5m31.106300344s ago: executing program 3 (id=1363): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8a301, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000500)={r2, 0xe1, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x17, 0x2, r2}) 5m18.677643295s ago: executing program 3 (id=1435): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 5m17.796801986s ago: executing program 32 (id=1435): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 3m49.456981124s ago: executing program 0 (id=1626): syz_open_dev$video4linux(&(0x7f0000000280), 0x7ff, 0x20000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44010}, 0x40840) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x6, 0x2}, 0xf) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x21) 3m49.308184285s ago: executing program 0 (id=1627): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x44}}, 0x20000010) 3m48.949718414s ago: executing program 0 (id=1629): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b0001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f01600800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000ac0201802800028008000340000000000900020073797a3100000000080003400000000008000180000000003800028008000340000000000800018000000000080003400000000008000340000000000900020073797a300000000008000340000000002c00028008000340000000000900020073797a31000000000900020073797a32000000000800034000000000d0000100b408b1e286b5c8f7a7321d1f80c982b3c96b4dac7dead86aceee30544dfdb289f2cae899fc3fe86ee3f122505d76d6b5878270ecb40c37908d60b9ed31d97a3e0ee856f3cf3c2fdfee967991f8d1ef7fdce37b30f8842735e543ac808675a64f66eb37009373328ddf992e92b3a5765bd5f765d73c578babbb08efd7b59dab641a88f3099e34bb7fbc04cb298bb0df6eb0dc4ca79864758aff38b7192698c89435c5699f4a9222ad4a2c68c9356b741f04ef667f7a169b8976632c7cb98f18ba558bc302c7b73401c42a76160c000280080003400000000044"], 0x17d4}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c800020000"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 3m48.118865229s ago: executing program 0 (id=1630): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$null(0xffffff9c, &(0x7f0000000000), 0x2200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r4, 0x742f, 0x77ae, 0x1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 3m44.279334289s ago: executing program 4 (id=1635): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x6, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x0, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m44.174150625s ago: executing program 4 (id=1637): bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r0, 0x1, &(0x7f0000000800)=[0x0]) 3m44.077602177s ago: executing program 0 (id=1638): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x44}}, 0x20000010) 3m43.458863916s ago: executing program 0 (id=1640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x478c, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c5}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffed}, {0x6, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 3m43.010253388s ago: executing program 4 (id=1643): syz_mount_image$nilfs2(&(0x7f00000045c0), &(0x7f0000004600)='./file0\x00', 0x0, &(0x7f0000004640), 0x1, 0x4581, &(0x7f0000004680)="$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") 3m38.689090558s ago: executing program 4 (id=1652): bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r0, 0x1, &(0x7f0000000800)=[0x0]) 3m38.011415334s ago: executing program 4 (id=1655): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x20800, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'dt2814\x00', [0x5c22, 0x800, 0x1, 0xffff3244, 0x82, 0xe6, 0xc, 0x4, 0x5, 0x4, 0x695b, 0x2, 0x4, 0x403, 0x6, 0x1, 0x1000001, 0x0, 0x10, 0x8, 0x90, 0x2, 0x200003, 0x5, 0x8004, 0x8, 0x2, 0x8, 0x5, 0x41, 0xfffffffd]}) 3m28.272253246s ago: executing program 33 (id=1640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x478c, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c5}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffed}, {0x6, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 3m27.662301123s ago: executing program 4 (id=1681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x48804) 3m12.194383099s ago: executing program 34 (id=1681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x48804) 5.59387777s ago: executing program 2 (id=2047): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 5.470705582s ago: executing program 2 (id=2048): socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0xd}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$sndseq(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0x6, @loopback, @local, 0x8, 0x7827, 0x3, 0x3}}) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.193978117s ago: executing program 2 (id=2049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x800}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '/\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0) 1.997949394s ago: executing program 2 (id=2051): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) 1.780434821s ago: executing program 1 (id=2052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000010000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000002ee0000000000001910be1a000000000000000000000000000000000000000008000000000000000000000000000000fdfffffffffeffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000100010000000008001f0001000000072feb3449062d474345581a836386bbb150252cba4b9380b93f4a9a1c21e7393d7810ff7adfb7333484e98e1eb97bc160fddd002514510509467387cf5f807784adec223d51d71bfaee4f"], 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) 1.677819759s ago: executing program 2 (id=2053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000040, &(0x7f0000000240)={[{@lazytime}, {@filestreams}, {@pqnoenforce}, {@usrquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@swalloc}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$eJzs/QWcbXWhuP/PgUM3giBSUmKSEqJIhyJKihKCtKSACCgdSqigCCjd3d2d0t3d3R3/14EDKj5wvd/f/V+8Ps/zYmbPjlnz2Z/3Wou9Z83Ze6n5FptrYGDMgfd6//RvXbTbvcstPtpC6528y+Bb9t5x4SeGXjz8eydjzTH0dM6hp3MNDAwMGrqcQe9dNnj2k04eZmDwwJD//taoI408zKgDAyMPPTt0OQMzv3cyyiHv3+6dD8UDnXTIj9vhvY93G23IQoZ8sczyb609MDAw4t99/5BxTftPd1TaUnPOP9/frD5wG2bo1YP+dt27p4Pf+xjlgIGBUfYb+Oj1Y8hth/u77/3fbMjPHHPygSXu/QR+9v+5lppz/gU/5D9kWxx26GUzD9nGP7wNGvvwer7jYms8NnQKBw2duMF/t718Euv9/1NLzTnfQgMfvR0PLDzvpo++8+5+c/A8AwOD5x0YGDzfwMDg+T9pj/qf6RNd+aqqquoTac65ZhjynH2YDz0eGPH9x7X0uPCyN6d7cGBg8MLvPU8cvPz7zwWrqqqqqqqq6t+zOeeaYW54/j/mxz3/n/TMbcbq+X9VVVVVVVXV/50WnHOuGYY81//Q8//xP+75/7OPH33we3/7P8fM733X25/snaiqqqqqqqqqj22+BfH5/6Qf9/z/ipMmvbrn/1VVVVVVVVX/d1r0nXfe2fzvXmdv6MVTv389Pf8/+5G7l/3EBlxVVVVVVVVV/+3efuqMc/72mu8TD3zo9d7fbejvBQYdd961135iA/33aNA//z5ki096TP9fG+I84hGTDgysvcQnPZT6BPo/81r19f+X8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9x/P+D1/8/+4QV338v+M9POcOtZ/ztO9997//BCy/41Jaf0NA/if5Tj/8PrD5oYGCo75irDwwMLDznootPPTAwcMatM0w5xcAH180y5LrZxh723TeIf/+ficw7Fi94i8neOx2yogyM88Eyjnt3+Qu+s/+wgz40iL9rrFMOPni1pV6Z8cOnU330/Rjmg69GO/nx9/8tyzAfutGIH/HN7y///fvyYeehY596yNin2WCtdadZf+NNvrL6WiusuvKqK6896/QzTTfjrLPONNM0q6y+5srTvvf5o+Zs0nc/z/2vzNmoH56zp+b8+zn78H37qDmb9OPn7N0l7nr5iN96f84G/zfnbO6Pn7NJVx/6g8aaY7iB5d+dm0EDA2PNM9zARkPOTDfCwMBY8w697fhDbvuNsYcZGNj5b3d0yFcjfLAODtpiyG2Wmm+xud7bTQ0M/O30b33E+9kPP3Tkcww9nXPo6Vzv/ZgxB/62Kg6e/aSThxkyF/8wHaOONPIwow4MjDz07NDlDMz63snIZ75/u494n/UPDfTdl1nZ4b2PdxttYGBglCFfTLzC2dsOmfr/hfdp/3/6//8/ec0y6IP1cdDQj6G3ec9rzvkX/NvPencahszdsEMvm3mIyf/wW9v/Q/803klHHJj0Y8b7Ma+L8260fq15xrhb/U+9Lg6Nd/yPGe/HvI7vR453yQf3eOy9Rf2PjfdD+7qF3v08x7+yrxv4+H3dsLSAla+a6MP7uu989BD/YXf5/hyN8KEbfdS+bvy9JtliyPLn+Ph93UJDxj7cP+zrhhkYGGvu9/d1Q3Z88w03sPOQM9MPOTP/cAOHDTkzw7tnRho4b8iZr664zporDblggX9eD6Ye9A9/oAnb2Xwf2s4G/d19H/Shv+8c/N7pKAe8/x5OH7HfHDT0bv2X+wpab8f8mPF+zPtP4TwPuWyl40cc93/q/adovCN+/Hg/6v2yP3K8O7189r3/w+P9YDsb7u+ma4F/ZTub9B+3syF3cdi/2zL+1cdhK8Ht3/t6/A+WtuFmj3/wmGK4Dy33v3pMscDHb2djrv6h79t+v4FBHzc38/8rczPhP+2Dtvz7uflXH29NPfl71w/7MXMzwqzLTfX+3Az/35yb+f+7czPHwLD/ODeDB+YdGBiYYuj+Yb5/ZW7G//i5+VfXm5Hh9u99vfIHF82z4xGXvD83H56L/2pu5vvvzs2kH6w3U7x73WTDDAw//MBGK2ywwXrTvff5/bPTv/f547fBef6VuRzzf2YuJxj8UXP5t1V11AevPuC/2Ab/aZ/+/vLn+e/O5cAHczmw+oc3lvp3rd//ucvfXf7u8neXv7v83eUv7iOO/3/w+v+7jznbLkN/uTHc1ZOMt90nPd5PuP/o4/9Dff/h+P92401y9TADH1z3scdn37vNv+Xx2ZnfOxnlkPdv9+HjgzzQjz4+u9+sM2/zv3R89v+p97fVf+H3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/tO//HcAj0y3y/NADocM9sfXSi3zS4/2E+48+/j/U9x+O/y+y9NZPDDPwwXUfe/z/vds4jv/f/8Z8O/07H/9/f1vt+H/9F+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/HO//HcDRR++xyft/D3DjWDuc8UmP9xPuP/X4f+//7639v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/c0OP/Ax96e8vvt15gcPz//3Yf4b9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/AcN5I9Z/Aflj1n8h8kfs/gPmz9m8R+cP2bxHy5/zOI/fP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8P5U/ZvEfJ3/M4j9u/pjF/9P5Yxb/8fLHLP7j549Z/D+TP2bxnyB/zOL/2fwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/1z+mMV/svf9R/yExvVvmsV/8rZ/zOI/Rf6YxX/K/DGL/1T5Yxb/z+ePWfynzh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/7X8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/PX/M4j9b/pjF/xv5Yxb/b+aPWfxnzx+z+H8rf8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/7fzxyz+38kfs/gvlD9m8f9u/pjFf+H8MYv/9/LHLP7fzx+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP4/yB+z+C+VP2bx/2H+mMX/R/ljFv+l88cs/svkj1n8l80fs/gvlz9m8f9x/pjFf/n8MYv/CvljFv+f5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/j/NH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/j/LH7P4r5c/ZvFfP3/M4r9B/pjF/+f5Yxb/DfPHLP6/yB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx/3X+mMX/N/ljFv/t88cs/jvkj1n8d8wfs/jvlD9m8f9t/pjF/3f5Yxb/3+ePWfx3zh+z+O+SP2bx/0P+mMX/j/ljFv9d88cs/n/KH7P475Y/ZvHfPX/M4r9H/pjF/8/5Yxb/v+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9B/9H/4f31c/6ZZ/A9r+8cs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+T+L9b/v+cxH/QlfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/Lf/h6UKL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4v/ul/n/cxb/QfljFv9h8scs/sPmj1n8B+ePWfyHyx+z+A+fP2bxHyF/zOI/Yv6YxX+k/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9P5Y9Z/MfJH7P4j5s/ZvH/dP6YxX+8/DGL//j5Yxb/z+SPWfwnyB+z+H82f8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfw/lz9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+n88fs/hPnT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/afLHLP7T5o8Numi34QYGBv7j/afLH7Ns/9Pnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif+wA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+XP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP6fzx+z+E+dP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+gwfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyh+z+I+TP2bxHzd/zOL/6fwxi/94+WMW//Hzxyz+n8kfs/hPkD9m8f9s/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/Ln/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8P58/ZvGfOn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/9fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/9fwxi/9s+WMW/2/kj1n8v5k/ZvGfPX/M4v+t/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/t/OH7P4fyd/zOK/UP6Yxf+7+WMW/4Xzxyz+38sfs/h/P3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/IcbyB+z+A/KH7P4D5M/ZvEfNn/M4j84f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/JvEffiB/zOI/KH/M4j9M/pjFf9j8MYv/4Pwxi/9w+WMW/+Hzxyz+I+SPWfxHzB+z+I+UP2bxHzl/zOI/Sv6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4v+p/DGL/zj5Yxb/cfPHLP6fzh+z+I+XP2bxHz9/zOL/mfwxi/8E+WMW/8/mj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi//n8scs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/8/ljFv+p88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fy1/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fzx+z+M+WP2bx/0b+mMX/m/ljFv/Z88cs/t/KH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8zi/+38MYv/d/LHLP4L5Y9Z/L+bP2bxXzh/zOL/vfwxi//388cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/8P8scs/kvlj1n8f5g/ZvH/Uf6YxX/p/LH/UP9BH7Iefpn8sf9Q/3f7++1/2fwxi/9y+WMW/x/nj1n8l88fs/ivkD9m8f9J/pjFf8X8sUEXDRo6M//Z/ivlj1m2/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzHxgJLrP4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/hIH8MYv/oPwxi/8w+WMW/2Hzxyz+g/PHLP7D5Y9Z/IfPH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+QxvxH85Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf1v0b42w+G+XNmbx/3X+mMX/N/ljFv/t88cs/jvkj1n8d3zP/613Pqlx/Ztm8d+p7R+z+P82f8zi/7v8MYv/7/PHLP47549Z/HfJH7P4/yF/zOL/x/wxi/+u+WMW/z/lj1n8d8sfs/jvnj9m8d8jf8zi/+f8MYv/X/LHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5/zR+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGJ/4gD+WMW/0H5Yxb/YfLHLP7D5o9Z/Afnj1n8h8sfs/gPnz9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/T+WPWfzHyR+z+I+bP2bx/3T+mMV/vPwxi//4+WMW/8/kj1n8J8gfs/h/Nn/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8P5c/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv+p8scs/p/PH7P4T50/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf9r+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/3r+mMV/tvwxi/838scs/t/MH7P4z54/ZvH/Vv6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv9v549Z/L+TP2bxXyh/zOL/3fwxi//C+WMW/+/lj1n8v58/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8f5A/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOL/4/wxi//y+WMW/xXyxyz+P8kfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYP/oMEDIz6dP2bwH7L9P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TPybxH2kgf8ziPyh/zOI/TP6YxX/Y/DGL/+D8MYv/cPljFv/h88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOL/qfwxi/84+WMW/3Hzxyz+n84fs/iPlz9m8R8/f8zi/5n8MYv/BPljFv/P5o9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/5/LHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF//P5Yxb/qfPHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8ziP03+mMV/2oGBzT+pIf07Z/Gfru0fs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+Iw/kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfw/lT9m8R8nf8ziP27+mMX/0/ljFv/x8scs/uPnj1n8P5M/ZvGfIH/M4v/Z/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/XP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOI/df6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/6/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/DGL/x/yxyz+f8wfs/jvmj9m8f9T/pjFf7f8MYv/7vljFv898scs/n/OH7P4/yV/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/1/wxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I8ykD9m8R+UP2bxHyZ/zOI/bP6YxX9w/pjFf7j8MYv/8PljFv8R8scs/iPmj1n8R8ofs/iPnD9m8R8lf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bx/1T+mMV/nPwxi/+4+WMW/0/nj1n8x8sfs/iPnz9m8f9M/pjFf4L8MYv/Z/PHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjF/3P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v/5/DGL/9T5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/lj9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/nj1n8Z8sfs/h/I3/M4v/N/DGL/+z5Yxb/b+WPWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/dv6Yxf87+WMW/4Xyxyz+380fs/gvnD9m8f9e/pjF//v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/wf5Yxb/pfLHLP4/zB+z+P8of8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+P84fs/gvnz9m8V8hf8zi/5P8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMX/p/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/Z/ljFv/18scs/uvnj1n8N8gfs/j/PH/M4r9h/pjF/xf5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP6/zh+z+P8mf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+v80fs/j/Ln/M4v/7/DGL/875Yxb/XfLHLP5/yB+z+P8xf8ziv2v+mMX/T/ljFv/d8scs/rvnj1n898gfs/j/OX/M4v+X/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mflj7/sPjDgw8J/sf1b+mGX7Pzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8/5o/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/ljzn8k/+oHP4DozzRWoBZ/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH/Ugfwxi/+g/DGL/zD5Yxb/YfPHLP6D88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/6fyxyz+4+SPWfzHzR+z+H86f8ziP17+mMV//Pwxi/9n8scs/hPkj1n8P5s/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/p/LH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv/P549Z/KfOH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOL/tfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H89f8ziP1v+mMX/G/ljFv9v5o9Z/GfPH7P4fyt/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/t/PHLP7fyR+z+C+UP2bx/27+mMV/4fwxi//38scs/t/PH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/j/IH7P4L5U/ZvH/Yf6Yxf9H+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/3H+mMV/+fwxi/8K+WMW/5/kj1n8V8wfs/ivZPT/F+6wxX9lo/+/kMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6jDeSPWfwH5Y9Z/IfJH7P4D5s/ZvEfnD9m8R8uf8ziP3z+mMV/hPwxi/+I+WMW/5Hyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/D+VP2bxHyd/zOI/bv6Yxf/T+WMW//Hyxyz+4+ePWfw/kz9m8Z8gf8zi/9n8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8f9c/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/h/Pn/M4j91/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/r+WPWfxnyh+z+M+cP2bxnyV/7B/8h1425ic8pv9PfYT/rPljlu3/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/LH/VP8RP+T/h/yx/1T/gQ/5/zF/zOK/a/6Yxf9P+WMW/93yxyz+u+ePWfz3yB+z+P85f8zi/5f8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/X/PHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/5MP+W/wvj+vfNIv/o23/mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP/pA/pjFf1D+mMV/mPwxi/+w+WMW/8H5Yxb/4fLHLP7D549Z/EfIH7P4j5g/ZvEfKX/M4j9y/pjFf5T8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMX/U/ljFv9x8scs/uPmj1n8P50/ZvEfL3/M4j9+/pjF/zP5Yxb/CfLHLP6fzR+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/z+WPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/+fzxyz+U+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif8YA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+X//+PnbsP97qu7zj+454sZ592Xeo122UXGnNtRiKjUQtRUTzenDLRzHuEw01yIzcSYApstFLHpkvdLNjEwjFnq5Y43Fx3KxqWNVsjtlY5xbUwxhwsMmfsOnAOwdnbc+182ffr8v14/ME5v9/x/Ut5Xi9/Py+uq1CW/sP0D2Xpf5z+oSz9j9c/lKX/a/UPZek/XP9Qlv6/oH8oS/8T9A9l6f+L+oey9H+d/qEs/X9J/1CW/r+sfyhL/xP1D2Xp/3r9Q1n6j9A/lKX/G/QPZel/kv6hLP1H6h/K0v9k/UNZ+o/SP5Sl/6/oH8rSf7T+oSz936h/KEv/X9U/lKX/GP1DWfq/Sf9Qlv5v1j+Upf+v6R/K0v8t+oey9B+rfyhL/1P0D2XpP07/UJb+p+ofytL/NP1DWfqfrn8oS//x+oey9D9D/1CW/mfqH8rSf4L+oSz9z9I/lKV/m/6hLP3P1j+Upf85+oey9D9X/1CW/ufpH8rSv13/UJb+b9U/lKX/2/QPZel/vv6hLP3frn8oS/8L9A9l6T9R/1CW/hfqH8rS/yL9Q1n6v0P/UJb+F+sfytL/nfqHsvS/RP9Qlv6X6h/K0v8y/UNZ+l+ufyhL/yv0D2Xpf6X+oSz9r9I/lKX/JP1DWfpfrX8oS//J+oey9J+ifyhL/w79Q1n6T9U/lKX/NP1DWfpP1z+Upf8M/UNZ+r9L/1CW/tfoH8rSf6b+oSz9Z+kfytJ/tv6hLP3n6B/K0v9a/UNZ+s/VP5Sl/zz9Q1n6z9c/lKX/Av1DWfpfp38oS/+F+oey9H+3/qEs/RfpH8rSf7H+oSz9l+gfytL/ev1DWfq/R/9Qlv436B/K0v9G/UNZ+i/VP5Sl/zL9Q1n6L9c/lKX/r+sfytL/N/QPZem/Qv9Qlv7v1T+Upf9v6h/K0v99+oey9H+//qEs/W/SP5Sl/836h7L0v0X/UJb+v6V/KEv/lfqHsvT/bf1DWfr/jv6hLP1v1T+Upf9t+oey9P9d/UNZ+n9A/1CW/rfrH8rS/w79Q1n636l/KEv/39M/lKX/7+sfytL/Lv1DWfp/UP9Qlv4f0j+Upf8q/UNZ+q/WP5Sl/x/oH8rS/w/1D2Xpf7f+oSz91+gfytL/Hv1DWfp/WP9Qlv4f0T+Upf9a/UNZ+t+rfyhL/z/SP5Sl/zr9Q1n6/7H+oSz979M/lKX/n+gfytL/fv1DWfp/VP9Qlv5/qn8oS/+P6R/K0v/j+oey9P+E/qEs/f9M/1CW/p/UP5Sl/wP6h7L0X69/KEv/B/UPZen/5/qHsvTfoH8oS/+H9A9l6f8X+oey9P9L/UNZ+j+sfyhL/7/SP5Sl/6f0D2Xp/2n9Q1n6f0b/UJb+n9U/lKX/5/QPZen/1/qHsvT/vP6hLP2/oH8oS/+N+oey9P+i/qEs/f9G/1CW/pv0D2Xp/4j+oSz9v6R/KEv/L+sfytL/Uf1DWfp/Rf9Qlv5f1T+Upf/f6h/K0v8x/UNZ+n9N/1CW/n+nfyhL/6/rH8rS/+/1D2Xpv1n/UJb+39A/lKX/Fv1DWfr/g/6hLP3/Uf9Qlv7f1D+Upf8/6R/K0v9b+oey9P+2/qEs/b+jfyhL/8f1D2Xp/8/6h7L0f0L/UJb+T+ofytJ/q/6hLP2f0j+Upf+/6B/K0v+7+oey9P9X/UNZ+n9P/1CW/tv0D2Xp/7T+oSz9v69/KEv/7fqHsvT/N/1DWfrv0D+Upf+/6x/K0v8Z/UNZ+v+H/qEs/XfqH8rSf5f+oSz9/1P/UJb+P9A/lKX/bv1DWfr/UP9Qlv7P6h/K0v9H+oey9H9O/1CW/v+lfyhL/+f1D2Xp/2P9Q1n679E/lKT/K1v6h7L076d/KEv//vqHsvQfoH8oS/+B+oey9B+kfyhL/8H6h7L0H6J/KEv/ofqHsvR/mf6hLP0P0z+Upf/L9Q9l6f8K/UNZ+h+ufyhL/5/RP5Sl/xH6h15y/QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6/mb94yTWTZs7smOcb3/jGN/u/ebH/zQQAAPxf+8mH/hf77wQAAAAAAAAAAAAAAAAAAADyauL/TuzF/mcEAAAAAAAAAAAAAICfdm3tp24f0O+gpwYc+ODnH+3Y+3XU7ounr137YOn+2vXjc4KX7H/ggz179uxZ/czY8V0Ph7Rarc7/tVd2PR7a87jz9Zcdu+rofY/KuM/f+fgVEw8/d9762wZ+Y/Ut7U8P2vvsoNZVU2fM7HhD/1arnD6otajzwUn9Wq1y5qDWrZ0PRnY+mDCota7zwcl7H7ys9ZnOB6+fPGfmlM4nzqr8ewYvFW3ty1oDDlps66B/Gxy4/2XHPjG9+2svL9n9agNbXfsftv5LR/X4WbcX2H/365dTe+6/z/+AwAvq2/6f3dL9tZeX/B/v/x/etHtJ9LMX3n/365fT7B/qE3z+P2ijPT/39/j8/5rgJfffnzJ00+2d+2+78L5Xdz018H/z+f8nr19O77n//gd9/u/8HD+++/P/kFarnHGIvx2QSlv78u29vf/3vv+BP9fjpt+B+7/nK1tf0bn/e59rreh6alAf9z++t/f/m3r8vQJ909a+Zk+P9/8+7L81PHjJ/fvftv7wvZ//t94/+cgDftaX/Z/Rc/8jFsy6dsT8xUtOnDFr0rSOaR2zx4wcfdKoMWNGjx6x9xPBvl8P8TcFkji09//WYT1u+rVaHfvvN953y/jO/e94aMVHup4a2sf9n9nr+/9rvP9DaFj/1uDBrUWTFiyYd9K+X7sfjtz3676/LNh/H/77/7gTuv6y7j8z7NdqHb3/fvgVY4Z07v/6uWVD11OD+7j/Cb3uf9zBf1YJ9M0hvv9P6XFz0P5P2Xbjws79H/+DV23teqqv//1/Vq/7v9v7PxyKtvZWrW+infs/ecjys6tdlzZ//gf1aWL/x+68dVe163K2/UN9mtj/xJVvvrradTnH/qE+Tez/wVlXrqx2Xc61f6hPE/t//md3HVPtupxn/1CfJvb/2HefWlvturTbP9Snif1/8K72k6tdl7faP9Snif2feN0Px1a7Lm+zf6hPE/uf+vIL1lW7LufbP9Snif2fvee0I6tdl7fbP9Snif33W/69ZdWuywX2D/VpYv9PTlo5p9p1mWj/UJ8m9r/u2OHPVrsuF9o/1KeJ/a94+o0Tql2Xi+wf6tPE/r96x6rHql2Xd9g/1KeJ/X/isletqnZdLrZ/qE8T+//RsIcOq3Zd3mn/UJ8m9r9587oHql2XS+wf6tPE/levGzCs2nW51P6hPk3sf+lZ0x6tdl0us3+oTxP7HzX6y5dWuy6X2z/Up4n9H/25bz1V7bpcYf9Qnyb2f8HDC+dXuy5X2j/Up4n9Lzzm4z+udl2usn+oTxP7f0vHMdOrXZdJ9g/1aWL/5bbDNle7LlfbP9Snif1fsmPNuGrXZbL9Q32a2P+GI77wsWrXZYr9Q32a2P/OubPHVLsuHfYP9Wli/99579L3VbsuU+0f6tPE/m9/7uul2nWZZv9Qnyb2v23kJZdVuy7T7R/q08T+15z7zCPVrssM+4f6NLH/lRseX1DturzL/qE+Tex/48Zznqh2Xa6xf6hPE/s/fviIw6tdl5n2D/VpYv9zLl7xoWrXZZb9Q32a2P/p99/x2mrXZbb9Q32a2P/Qr439ZLXrMsf+oT5N7P/TY9//qWrX5Vr7h/o0sf9d4447odp1mWv/UJ8m9r/lgZF3Vrsu8+wf6tPE/j/wyF0Vr8t8+4f6NLH/ua97fke167LA/qE+Tez/TRMvWlztulxn/1CfJvZ/5N0Tvljtuiy0f6hPE/u//NvfP7/adXm3/UN9mtj/cUdd/epq12WR/UN9mtj/9Bmbbq52XRbbP9Snif2PX71lVLXrssT+oT5N7P+IJ+ffU+26XG//UJ8m9r99wFHnVbsu77F/qE8T+7/3hoe/We263GD/UJ8m9n/zTR/tqHZdbrR/qE8T+//s7sE7q12XpfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2D6N0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//8mu+jL") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x105842, 0xa9) writev(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000600)="80c9e54e17958ed1ceec616760d40e3b43e7b65d33fa101cf41a2451cf2573b9ed0da6", 0x23}, {0x0}, {&(0x7f0000000580)}], 0x4) 589.684348ms ago: executing program 1 (id=2054): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b02, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x5b16) 419.81744ms ago: executing program 1 (id=2055): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 335.232217ms ago: executing program 1 (id=2056): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000680)=[{0x0}], 0x1) 169.859148ms ago: executing program 2 (id=2057): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x214bd489c968ee48, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b", 0xbd, 0xfffffffffffffffb) add_key$user(&(0x7f00000000c0), &(0x7f0000001180)={'syz', 0x3}, &(0x7f0000001240)="2538a31458875a3834bb4dd1d577822e94caf9fd9084e93733a8382da6d1309a20dadb708d89b2f5f2d61cccee8a5b182b139587fe3ec4ae20", 0x39, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000001380)="a5912d9fc540476e125f43d11514966170649448ff0db3eb5d145ee154df6a4381a747ba906e9032360aa04f18da6bd14e1e7aed618f5a8b5de1e94d47fafab74a2d6f4d23c3bff6d3b422459d14032906bdb5bac194a026bdd19d641b8f76ce6b12cf676bee76f74eefec0e6caf9275ff8b0039bc0b6a26eb8892ccdf031824a7255b3068d8caa31529d6d68645eaeca27f2aebf81bf2b440a55d1a2c1f69f025788e668e3f30d0499af9d8b6c4978cdbac9f5bc95d4de75ea7b36c32ed53e72892acaeca33ad2297ce9b607e369a933035c81b91182fe35fa09390dc0ff7b67d796bc62f5a92ab60771077ee338500c8f558fdf051c2baec1beb01fd5f15a38f7641aa1ff747602cea4d04feb5b016c429d4ef0d96ebfb6fd02ef6c36b2ba54c6969e094c78e6ea73967fe14eed1e8b11c5d830ef41b6119abed038bdbaefe5adebfbe67fc00a92042e690f7627de74164c9c86a5fc7052792a2df31dc53b7efdb21594a0bc04f42cd1c9d3298b036a3e1e1ba8519bc61c8765a29a500391ec5320b89437de328868869119a5671b9e0e30926b8daa4519f4895e9b97a5868e8ee7920bc54a08cdf264fad5d93ea8a0ca8c30c9f0103b9d9a8773b606396741f544bae5f112286199fff49983917c2bb271396de9a4c054a0dfb755da3b2f25114e43ac026e2f04532b7e7aa932a292d1a00b2e7dc221dd34aa396ff0dc5ac564403bbc9b9ab2f4d2f98cea4e902a2caa39fb7d7f3bab4ba76e1408ad1955cf0b0544d06ed719e5ae2e91d06b122c8042d360cc7e0f3b016747f09bed1bddcb5448fb9269880cb34bd040b613f81e5024be0472242a1bca94e0c66105b4123786e038e08b2cdda646a64b7f4c83ec41c83232167fdf61e63a1af717d9ddc31deeb9c7229164cf36b69c5720310d1883c3f1f6c189e08400a6fd5b10c950dbce650312dea77d07805c28d32febca35e269ea93ab55c7b5d5e7c8b6a3dd362569ddc0f2ffa16f951a8c6b7e3eaf3d89600208d07bac9370e0eac6bde4db15ebee817587b6ea83e612f21e481bb489054727cffdc55b2db2295a34de407138450a1bc818ef117ad6bb8cd23595a9799a158f59fcc1917a10ad6019ccbbbf8d12b3477516aea8516518256d65f772465c691b9cbe56635d1d13eee73c62dfd68a0416ff46666598b532827ec6e3c44d286d20d41800be8536de61fbf016b77e3115c43f6003e6aa2cea6f7530a1bc071054c4c5e1124f3ad3caa936127231f6d8b2e8563b7e9f56b9e58caa0c35f4e858e4e3c6eaa664478659e596c504eb10e2c67fcfe876819482983f100cc14897c4e20af189c8cb27cf70aa7a2bf0f5174923a48f7f34575acbd2a7b1abd03ed0a05387f969548b677c2c702ef5ce424129ec80ba9d0859df2bd9678bd0635be6a3ea2f23e105613f9dea9c40b9efb13b17843ec9cbb31f53fbb49e550aa77f29e91f864c82190f4d087142f0883bdf10bb9f5a3a4fede3c9ebaa9d64a3505d2bb8d52480d2f04378b615f7dcc34032917b7da75f38b0c49261604f6d51d59582695bb4121db4389775f9ecbbdeb7b02f029cbd5c90b39b618a19c7eed63eb6e19aeb4fbfacdf3f91e5d448737dddcb11d62b5a09a64ff9691081f93b067d946e772b865922b97dca58113d7d45f951d2a3ad3def69443e70fac23a365ce90d0971078474420ca0ad5f1778f58102855acf5bd233e214e598ce1626e5f96874d1690165e6a5ef13c930f5ed9ec975adf1fe9f0d4f1c0ab95a9e32b8d75f36cb6ad4fdee877c26e8ddefd2d6b2ac99b427a518ed41f2887268cfea036f7095a9f72d816ed275118ac539d38d4508d7ed9483b6e0893c2388946794ecc13f37796870bd983ab5ec8164aac6615b597e66391a3a4aac37bd84298ba8244ff877d937e8933da52483ee86cbcb951dadd30dea8c7523cd013f2f0f52f2cc125188215a3481e6aa2e223dac0eea2394aa95bbc994e250665e5530a4aa1b41be7ae024277ae1b8186019ad067d0f69259de6541e629e1accbf9842330cea8ff4510a367a3fd48145e017d9754f5cce2a5d14573e2f3546e48828b6dd97ce8cb9a73d09a5af8421b356214fc953775c39683b6f5d844167a1653535cdbecdaff9d4be6e06d6e265f7f580424fa483d98ddc4a57be2144bdc70e0dbb6b662ef2e383e5318919b01a770abdb041e96a642f6075bcf32ad210ee06cc7c46a7d185392537b89df80bb059edc79b04c0d7c3d28f71889345017825430fcbbd3e025241bea5651a23396e2bb198fd121417f8de2fb9a2f0cc276d096833e7da3b5a10afb52cfcf70a12c1a5e6008c3780a5e3445e30a8ecf99ecc369801fc1956ac4ec6e4f7c1749eb9632366a1cde6baa1e8050ead719f952240e0d924ac0e76bc7ccafb3368cd7a16a03880e83fb83ce9a66ebc11294906ed3122097b79539f174ba46903f5f2197ef4f3c3b7ca9cb1d041fa87725edfc1099dc8034f8a604b4cb262b6fca9d6790a9a8a5ae30f9deeec3ae5e3268101a404c1cf4c34014d01deca3666e943c8c5b5c8ffd3aeab1a82ef1473e6094ff0d4fbf3fc8be0568e6810506d97d54715f480b8b6cd2a95bd3c95705eaec339a72d055adc54a712394789bf23095adc5d812388f45c2bedbb9014b4feeb62cd1a23007b50b43401bd0c17877973d9a0d0823af9d22ae2f911bdb8af198792c170bdeaac0dd96ea4e3dc6d67228bc79919aa81c98213296696efb7f798455b20dbaee965aae0eadb599edee1e07ce7e56a32d2c76574c7bb67ca1bca1a9e092de5429de3a177afe782aaf90bf7f6dd6b6ddafd975f543727884db2bbe63a24dd8ae479d55348f46c64a7f39ebceabb99c9c17921fde1a056077fa47250490b1b0c7493d74a229d261c886ed09be019a0c0e6355aa1d725b95099cff9174ace1762fe0c9a41288a7c32d90fa8bbb0ffaeff84f6bf4a2ddba9a9f5c449b8a8f722cb575c222dfc02e8447aec8f451d0cda1089830d405ca6e6c6cd11078b6d51090da24efa96f2179753da82f848e41cfbe6ca3d87861e7485fb277046e7ef20cccba2931900ae9739a0e342e1d4513020c98c6e3499d5746365cb903ff694046aee1b22b70c81dee6a49931f9a63daa6544150d052743de0cef7187bd019a2fd8a1819fdc2fa95ca1e6c1dabb8f478af028080443c9b1f3e778289e4d5a389fca54fc97243f6140507e348c8990ddfb996c44479d3bf516db170690089d6a5c4b3eec126a0b228daeccc3ec7f6d83a1c8952314cc5822525552f62edd9cad1952b7ae1757642d50894877e574621b30c030d1f2f05e08e3272e132b0a203e0fdf7ff922ceb299b84be4f6a82700b542dd9bd5e1e67d10fba0c720a5c2627b9e1e8e154b5259746de3f89587477e64b129deb36b4ece35ad222a42ef06ee52241dc0e2be3a036664f2fe0b77eddecd2646c15c6b49e62b34447636639190978ad75dced73a9930f7bdaaef7ac349417061ec11a41713387f9a76c95e20d5190ac49854906dc95b459b0906f8f120eb4b005adc7b71f712a26e6faf60f43322090bae12a4122d2856e7b3d59fb0c911d1a974e6b6194758d7d730362c24defc0ed74845b9e27e26c06079e5f87085854fc68e01b377dec2dde578d89e071d66b1970b3316c6440819e4f04c0226c47a18772da54566bbab54e8c70b23cbae86e8cba4aab74649426557df21b1d7e4ebc7d990e92b20a052efbfbb9978f8601bc05f423fbd3c191a370829360141b27c1c6ef4b37ffd297f2dbe8dc89eae923c8c1427eb5dbc7758b1e00b39ebaab7de0113a2b7920857df000ee8b2553086d5fff19e1d7e9935f90388bf52b5b8bead719b60e0dc17973027be7acbf70620aa5a8e042b0c3b092adfc364f9c1a714f204f19ed5dc167c3dd140b2894de0e041a816b2edf57c109e4c4351a28135456342c2881c573de7919bbca354158654dd7cbfc497adb2ab263f8c60622fd262895152fc455ad1365c23afe1f192fa1aa55df1482dedd3213b74c4a753841d4e9866d99f1f76e07837ef820d9e995c5f64347d63c4d974d7fbfbc31d5394c4a9aa10550fec47f33b602d7c6e7f3a5f324126f6b5a35336532e01ac839818d68c11d4558266fc055e6b6f8a0e58039dfecbded41d1c1ae41a7a087626633cf0c9c2fcccf61adbbbb55a8fe00326441bd8c7ad711cc5764492001af50590d955e5c9a38bd78003fbaa3199daa9651528344ccbffb0bc33259c052410440203657ad1c429417f79da70b64cfa065400aff9390fd5d44d0fdf7cd130cf4c3a672cbe068869632e37dba754d2b279c54421dcd04aa0916f46e07edf4f36ac2e175ec7d53f68d168aeb0fb2ab0a655ce9304fb7d4de9a78cb3242c7be73ca6eaf2b3d565a5b8ddc39fd4e5c3a9d4641857c73f47a404ec43219418df2f9357ad4f627e210da96429ee20cdbfc32bf9397863b0a88158aab9dec61a0bd0976256efbfd48217b508792b320921138a85119f264d3db8ef88992d300d78406fd6107ed81807430c895282c68f6f52cf715a2eeb87b28e9177bd5124fe2ab25f11b50e28f7a0914e6a47e626a781cfc68e7e994961a628f5cb84cc2d05d149c300baa6c7a440bbc0a330a95ca4c9b3a1e8e2b0959206f5ec049f2be13322a65823f20ec88dfa4cb28d665567be8ce02981a16afdf2ae082686d1b76dc4aadd92153f8df2df4e6bab817d76ee20a68dc9f29324380922533393eda3b7dbcaee25a02765a807006edccf83a32f620dcca9b5f4cbd3058d7c68a6c34fa07332070b76f55d9d3a821a2c1133811935a49bd2e77d33a43ffae0d23101ec99470d3c339e291beafd11fb7dadf58b05223dbbb29905510a5532835fd2e64c4c6d7df5bade192eddbea417580eff79a577fcfa5dfe6f6cce3c4c84a6c152c75ab27b327013061ed895a8079e8dcfa09c852b9710ce4c04407a2ea756e1bd7e4944b93e436ea755156b45fbab5cb79a1a98656b581b1458a5937314c8dcce14c3d6ad3fea0515e37a689ec3fc06e04ae14bb312a98e680de7802b7b697803baf777c971f5ba5af740c7a639dfb69add51af6e7587073a57b24f9b4e1c57b4a312e344c6d1dc06089f19cd4b94a30db8146e28c4f479b0c76ee116d64329cf63100092dd08d42d1189e99de6df86deaee70545f480c0cb272a7d7532bb8b68240ff874eb37f0fedc0b796f63b23aefc2d7b3f7b39202313e17584b0ba30a5129b781196a629d9bc936600aeb512362cb3210174259c325d06e2552b8f39b20939274a780520b4dc1eaef49f5f8d0bf73951a85a73bb99b79cf7116f0b2485c85ba9855c30977bdfbe8c281d3afc01cff777a5833b3650dcd92531435844489f7a782d8c5316889ec60acd68f9e1b5f949423397ca13434016b2cf7304ba95805490bfe12246e8c90f5882169d5a16e2a52794790007453a468f6e09bf56472b7d332e9318631adf1fbf2fb5be14d011157dca6e6afc48cab9a960fb95033deeefb470470f8e6887945593dc963a97f3711ace0bc5eba4f2b1427f1b47db13e4c7391d2e809c04ebdf678d920b429024644a6864eeddb2536d52ddca2f79fde9", 0xf80, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000240)={r1, r1, r1}, &(0x7f0000003980)=""/4136, 0x1028, 0x0) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000940)=[{0x6, 0x0, 0x1, 0x7fff8000}]}) epoll_create1(0x80000) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) r3 = syz_open_dev$dvb_demux(0x0, 0x1, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) io_cancel(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x1, 0x800, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 169.641705ms ago: executing program 1 (id=2058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x800}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '/\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0) 0s ago: executing program 1 (id=2059): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x2, 0x0) kernel console output (not intermixed with test programs): .816974][T10297] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.817060][T10297] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.817207][T10297] bridge_slave_0: entered allmulticast mode [ 577.852333][T10297] bridge_slave_0: entered promiscuous mode [ 578.055868][T10297] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.056004][T10297] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.054854][T10297] bridge_slave_1: entered allmulticast mode [ 579.085742][T10297] bridge_slave_1: entered promiscuous mode [ 579.154183][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.174920][T10616] binder: BINDER_SET_CONTEXT_MGR already set [ 579.174934][T10616] binder: 10614:10616 ioctl 4018620d 200000004a80 returned -16 [ 579.854239][T10631] loop4: detected capacity change from 0 to 128 [ 579.926564][ T37] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 580.086078][ T37] usb 2-1: device descriptor read/64, error -71 [ 580.099464][T10631] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 580.328916][ T37] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 580.359403][T10297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.360202][T10623] loop0: detected capacity change from 0 to 32768 [ 580.395245][T10297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.404691][T10623] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1511 (10623) [ 580.458372][ T37] usb 2-1: device descriptor read/64, error -71 [ 580.576845][ T37] usb usb2-port1: attempt power cycle [ 580.702364][T10623] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 580.702388][T10623] BTRFS info (device loop0): using crc32c checksum algorithm [ 580.702409][T10623] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 580.785891][T10642] loop2: detected capacity change from 0 to 128 [ 580.966404][ T37] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 581.024374][ T37] usb 2-1: device descriptor read/8, error -71 [ 581.024523][T10297] team0: Port device team_slave_0 added [ 581.096776][T10297] team0: Port device team_slave_1 added [ 581.132994][T10642] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 581.194490][T10642] ext4 filesystem being mounted at /312/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 581.245282][T10623] BTRFS info (device loop0): rebuilding free space tree [ 581.279942][ T37] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 581.310086][ T37] usb 2-1: device descriptor read/8, error -71 [ 581.315931][T10297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.315943][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.315966][T10297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.431076][ T37] usb usb2-port1: unable to enumerate USB device [ 581.604095][T10297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.604112][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.604135][T10297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.688592][T10623] BTRFS info (device loop0): disabling free space tree [ 581.688666][T10623] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 581.688690][T10623] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 581.692524][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 581.841333][T10623] BTRFS info (device loop0): enabling ssd optimizations [ 581.841361][T10623] BTRFS info (device loop0): turning on async discard [ 581.841378][T10623] BTRFS info (device loop0): enabling disk space caching [ 581.841394][T10623] BTRFS info (device loop0): force clearing of disk cache [ 581.841422][T10623] BTRFS info (device loop0): use zstd compression, level 3 [ 583.378833][T10668] Process accounting resumed [ 583.563016][T10677] binder: BINDER_SET_CONTEXT_MGR already set [ 583.563032][T10677] binder: 10676:10677 ioctl 4018620d 200000004a80 returned -16 [ 583.748886][ T5830] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 585.323416][ T7648] hid-generic 0004:0004:FFFF0001.0003: unknown main item tag 0x0 [ 585.323450][ T7648] hid-generic 0004:0004:FFFF0001.0003: unknown main item tag 0x0 [ 585.323474][ T7648] hid-generic 0004:0004:FFFF0001.0003: unknown main item tag 0x0 [ 585.410679][T10297] hsr_slave_0: entered promiscuous mode [ 585.425716][T10297] hsr_slave_1: entered promiscuous mode [ 585.443683][T10297] debugfs: 'hsr0' already exists in 'hsr' [ 585.443703][T10297] Cannot create hsr debugfs directory [ 585.663326][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 585.921000][ T7648] hid-generic 0004:0004:FFFF0001.0003: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 586.156151][T10704] loop2: detected capacity change from 0 to 512 [ 586.183979][T10704] vfat: Bad value for 'allow_utime' [ 586.251770][T10696] fido_id[10696]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0004:0004:FFFF0001.0003/report_descriptor': No such file or directory [ 587.473357][T10691] loop1: detected capacity change from 0 to 32768 [ 587.474587][T10691] btrfs: Deprecated parameter 'usebackuproot' [ 587.474610][T10691] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 587.475404][T10691] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1523 (10691) [ 587.651439][T10691] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 587.651487][T10691] BTRFS info (device loop1): using crc32c checksum algorithm [ 587.651515][T10691] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 587.926936][ T1427] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 587.927482][T10691] BTRFS warning (device loop1): couldn't read tree root [ 587.927507][T10691] BTRFS warning (device loop1): try to load backup roots slot 1 [ 587.930853][ T1418] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 587.931054][T10691] BTRFS warning (device loop1): couldn't read tree root [ 587.931075][T10691] BTRFS warning (device loop1): try to load backup roots slot 2 [ 587.939850][ T1418] BTRFS warning (device loop1): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 588.001391][T10691] BTRFS warning (device loop1): couldn't read tree root [ 588.001418][T10691] BTRFS warning (device loop1): try to load backup roots slot 3 [ 588.006394][ T9955] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 588.147415][ T9955] usb 5-1: device descriptor read/64, error -71 [ 588.158260][T10691] BTRFS info (device loop1): rebuilding free space tree [ 588.360989][T10691] BTRFS warning (device loop1): discard failed for extent [5242880, 5246975]: errno=-512 unknown [ 588.396425][ T9955] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 588.566939][T10691] BTRFS warning (device loop1): discard failed for extent [5251072, 5255167]: errno=-512 unknown [ 588.567571][T10691] BTRFS warning (device loop1): discard failed for extent [5259264, 5267455]: errno=-512 unknown [ 588.567793][T10691] BTRFS info (device loop1): disabling free space tree [ 588.567881][T10691] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 588.567906][T10691] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 588.679616][T10731] loop0: detected capacity change from 0 to 32768 [ 588.693747][T10731] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1529 (10731) [ 588.736181][T10731] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 588.736247][T10731] BTRFS info (device loop0): using crc32c checksum algorithm [ 588.736282][T10731] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 588.806360][ T9955] usb 5-1: device descriptor read/64, error -71 [ 588.909792][T10731] BTRFS info (device loop0): rebuilding free space tree [ 588.917745][ T9955] usb usb5-port1: attempt power cycle [ 589.067735][ T2884] hsr_slave_0: left promiscuous mode [ 589.155640][T10731] BTRFS info (device loop0): disabling free space tree [ 589.155713][T10731] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 589.155737][T10731] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 589.172309][T10731] BTRFS info (device loop0): enabling ssd optimizations [ 589.172367][T10731] BTRFS info (device loop0): turning on async discard [ 589.172413][T10731] BTRFS info (device loop0): enabling disk space caching [ 589.172445][T10731] BTRFS info (device loop0): force clearing of disk cache [ 589.172486][T10731] BTRFS info (device loop0): use zstd compression, level 3 [ 589.178055][ T2884] hsr_slave_1: left promiscuous mode [ 589.288563][ T9955] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 589.323029][ T9955] usb 5-1: device descriptor read/8, error -71 [ 589.348203][ T2884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.348319][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.408175][ T2884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.408203][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.413950][T10691] BTRFS warning (device loop1): discard failed for extent [5296128, 5300223]: errno=-512 unknown [ 589.414647][T10691] BTRFS warning (device loop1): discard failed for extent [6881280, 6889471]: errno=-512 unknown [ 589.415167][T10691] BTRFS info (device loop1): checking UUID tree [ 589.415242][T10691] BTRFS error (device loop1): failed to check the UUID tree: -4 [ 589.729612][T10691] BTRFS error (device loop1): open_ctree failed: -4 [ 589.924781][ T9955] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 589.941792][ T9955] usb 5-1: device descriptor read/8, error -71 [ 590.314791][ T9955] usb usb5-port1: unable to enumerate USB device [ 591.108833][ T5830] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 591.583004][ T2884] veth1_macvtap: left promiscuous mode [ 591.583316][ T2884] veth0_macvtap: left promiscuous mode [ 591.611974][ T2884] veth1_vlan: left promiscuous mode [ 591.687743][ T2884] veth0_vlan: left promiscuous mode [ 594.186428][ T37] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 594.336453][ T37] usb 5-1: device descriptor read/64, error -71 [ 594.576396][ T37] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 594.606897][ T2884] team0 (unregistering): Port device team_slave_1 removed [ 594.647418][ T2884] team0 (unregistering): Port device team_slave_0 removed [ 594.729814][ T37] usb 5-1: device descriptor read/64, error -71 [ 594.836844][ T37] usb usb5-port1: attempt power cycle [ 595.135232][T10791] loop1: detected capacity change from 0 to 8 [ 595.145244][T10791] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 595.396610][ T37] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 595.428619][ T37] usb 5-1: device descriptor read/8, error -71 [ 595.437531][T10790] loop0: detected capacity change from 0 to 8 [ 595.526355][T10794] cramfs: Error -3 while decompressing! [ 595.526402][T10794] cramfs: ffffffff9999f208(26)->ffff888079870000(4096) [ 595.527949][T10794] cramfs: Error -3 while decompressing! [ 595.527983][T10794] cramfs: ffffffff9999f208(26)->ffff888079870000(4096) [ 595.587522][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1544'. [ 596.341027][ T8702] udevd[8702]: incorrect cramfs checksum on /dev/loop1 [ 596.512742][ T37] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 596.527772][ T37] usb 5-1: device descriptor read/8, error -71 [ 596.636616][ T37] usb usb5-port1: unable to enumerate USB device [ 596.786484][ T9955] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 596.947184][ T9955] usb 3-1: Using ep0 maxpacket: 32 [ 597.048492][ T9955] usb 3-1: config 0 has no interfaces? [ 597.052708][ T9955] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 597.052735][ T9955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.052755][ T9955] usb 3-1: Product: syz [ 597.052769][ T9955] usb 3-1: Manufacturer: syz [ 597.052784][ T9955] usb 3-1: SerialNumber: syz [ 597.165344][ T9955] usb 3-1: config 0 descriptor?? [ 597.279754][T10813] SQUASHFS error: Failed to read block 0x71: -5 [ 597.661714][ T38] audit: type=1800 audit(1776152812.800:553): pid=10813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1545" name="file0" dev="loop0" ino=1 res=0 errno=0 [ 598.059369][T10790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.839862][T10297] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 599.057525][T10297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 599.097211][T10297] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 599.273899][T10297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 599.275223][T10297] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 599.369802][T10297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 599.370622][T10297] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 599.527515][T10833] netlink: 'syz.4.1552': attribute type 1 has an invalid length. [ 599.531060][T10297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 601.405175][ T9] usb 3-1: USB disconnect, device number 13 [ 603.114164][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 604.119666][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 604.152949][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 604.166436][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 604.179896][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 604.186922][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 604.418562][ T9955] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 604.600104][ T9955] usb 2-1: device descriptor read/64, error -71 [ 604.916330][ T9955] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 605.046493][ T9955] usb 2-1: device descriptor read/64, error -71 [ 605.166718][ T9955] usb usb2-port1: attempt power cycle [ 605.236458][T10870] lo speed is unknown, defaulting to 1000 [ 605.315879][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'. [ 605.557940][T10886] tipc: Started in network mode [ 605.557977][T10886] tipc: Node identity e6943ada8676, cluster identity 4711 [ 605.582772][T10886] tipc: Enabled bearer , priority 0 [ 605.589047][T10870] wg1 speed is unknown, defaulting to 1000 [ 605.617080][T10886] syzkaller0: entered promiscuous mode [ 605.617104][T10886] syzkaller0: entered allmulticast mode [ 605.826552][ T9955] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 605.849526][ T9955] usb 2-1: device descriptor read/8, error -71 [ 606.173799][ T2884] IPVS: stop unused estimator thread 0... [ 606.205448][T10889] tipc: Resetting bearer [ 606.274966][T10904] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 606.568435][T10901] loop1: detected capacity change from 0 to 32768 [ 606.575508][T10901] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1566 (10901) [ 606.575765][ T9935] Bluetooth: hci5: command tx timeout [ 606.658707][T10901] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 606.658740][T10901] BTRFS info (device loop1): using crc32c checksum algorithm [ 606.658770][T10901] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 606.794380][T10884] tipc: Resetting bearer [ 606.898465][T10901] BTRFS info (device loop1): rebuilding free space tree [ 607.197260][T10884] tipc: Disabling bearer [ 607.230232][T10901] BTRFS info (device loop1): disabling free space tree [ 607.230326][T10901] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 607.230351][T10901] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 607.265225][T10901] BTRFS info (device loop1): enabling ssd optimizations [ 607.265253][T10901] BTRFS info (device loop1): turning on async discard [ 607.265273][T10901] BTRFS info (device loop1): enabling disk space caching [ 607.265291][T10901] BTRFS info (device loop1): force clearing of disk cache [ 607.265313][T10901] BTRFS info (device loop1): use zstd compression, level 3 [ 607.548864][ T5825] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 608.147228][ T7648] tipc: Node number set to 1625438938 [ 608.843232][ T5490] 8021q: adding VLAN 0 to HW filter on device eth3 [ 609.023480][T10942] binder: 10941:10942 ioctl 4018620d 0 returned -22 [ 609.086770][ T9935] Bluetooth: hci5: command tx timeout [ 609.234671][T10946] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1572'. [ 609.568855][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1573'. [ 611.852760][ T9935] Bluetooth: hci5: command tx timeout [ 613.731658][T10972] binder: 10971:10972 ioctl 4018620d 0 returned -22 [ 613.857864][T10974] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1583'. [ 613.906453][ T9935] Bluetooth: hci5: command tx timeout [ 614.427197][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'. [ 615.861065][T10998] loop2: detected capacity change from 0 to 736 [ 616.170730][T11004] binder: 11003:11004 ioctl 4018620d 0 returned -22 [ 617.288098][T11009] block device autoloading is deprecated and will be removed. [ 617.601039][T11013] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1595'. [ 617.835182][T11022] binder: 11020:11022 ioctl 4018620d 0 returned -22 [ 618.214138][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1598'. [ 619.238557][T11038] binder: 11037:11038 ioctl c0306201 0 returned -14 [ 620.689092][T11066] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 620.689116][T11066] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1608'. [ 620.962667][T11070] binder: 11069:11070 ioctl c0306201 0 returned -14 [ 621.326249][T11076] netlink: 'syz.1.1610': attribute type 1 has an invalid length. [ 622.302143][ T5490] 8021q: adding VLAN 0 to HW filter on device eth4 [ 622.551703][T10870] chnl_net:caif_netlink_parms(): no params data found [ 622.911044][T11063] vivid-000: kernel_thread() failed [ 623.503614][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'. [ 624.390823][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.390904][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.572118][T11089] binder: BINDER_SET_CONTEXT_MGR already set [ 624.572129][T11089] binder: 11088:11089 ioctl 4018620d 200000004a80 returned -16 [ 624.572390][T11089] binder: 11088:11089 ioctl c0306201 0 returned -14 [ 625.259623][T10870] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.264196][T10870] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.264388][T10870] bridge_slave_0: entered allmulticast mode [ 625.296802][T10870] bridge_slave_0: entered promiscuous mode [ 625.359583][T10870] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.359724][T10870] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.359860][T10870] bridge_slave_1: entered allmulticast mode [ 625.402052][T10870] bridge_slave_1: entered promiscuous mode [ 626.678286][T11109] hugetlbfs: syz.1.1618 (11109): Using mlock ulimits for SHM_HUGETLB is obsolete [ 627.573127][T11113] netlink: 'syz.1.1619': attribute type 1 has an invalid length. [ 627.573148][T11113] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1619'. [ 628.181066][T11117] binder: 11115:11117 ioctl c0306201 0 returned -14 [ 628.393080][T10870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.419944][T10870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.548690][T11128] binder: 11127:11128 ioctl c0306201 0 returned -14 [ 629.790173][T10870] team0: Port device team_slave_0 added [ 629.867494][T10870] team0: Port device team_slave_1 added [ 629.867756][ T2884] bridge_slave_1: left allmulticast mode [ 629.867773][ T2884] bridge_slave_1: left promiscuous mode [ 629.867920][ T2884] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.089379][ T2884] bridge_slave_0: left allmulticast mode [ 630.090547][ T2884] bridge_slave_0: left promiscuous mode [ 630.114037][ T2884] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.527521][T11139] loop1: detected capacity change from 0 to 32768 [ 630.541328][T11140] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 630.619608][T11139] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 630.731696][T11139] XFS (loop1): Ending clean mount [ 630.753557][T11139] XFS (loop1): Quotacheck needed: Please wait. [ 630.870382][T11151] netlink: 'syz.0.1629': attribute type 1 has an invalid length. [ 630.870404][T11151] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1629'. [ 631.334128][ T7648] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 631.456280][T11139] XFS (loop1): Quotacheck: Done. [ 631.636325][ T7648] usb 1-1: Using ep0 maxpacket: 8 [ 631.677481][ T7648] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 631.677514][ T7648] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 631.677537][ T7648] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 631.677560][ T7648] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.677598][ T7648] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 631.677620][ T7648] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.841170][ T38] audit: type=1800 audit(1776152847.340:554): pid=11156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1628" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 631.841560][ T38] audit: type=1800 audit(1776152847.350:555): pid=11156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1628" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 632.640428][ T5825] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 632.819260][ T7648] usb 1-1: GET_CAPABILITIES returned 0 [ 632.819291][ T7648] usbtmc 1-1:16.0: can't read capabilities [ 634.362937][ T2884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.370516][ T7648] usb 1-1: USB disconnect, device number 22 [ 634.801786][T11168] binder_alloc: 11167: pid 11167 spamming oneway? 1 buffers allocated for a total size of 4096 [ 634.802565][T11168] binder_alloc: 11167: pid 11167 spamming oneway? 2 buffers allocated for a total size of 5120 [ 634.815833][ T2884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.903399][T11171] binder: BINDER_SET_CONTEXT_MGR already set [ 634.903415][T11171] binder: 11170:11171 ioctl 4018620d 200000004a80 returned -16 [ 634.940365][ T2884] bond0 (unregistering): Released all slaves [ 635.858387][T11181] netlink: 'syz.2.1639': attribute type 1 has an invalid length. [ 635.858408][T11181] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1639'. [ 636.397263][T10870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.397276][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.397295][T10870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.401185][T10870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.401199][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.401226][T10870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.907939][ T2884] hsr_slave_0: left promiscuous mode [ 636.951202][ T2884] hsr_slave_1: left promiscuous mode [ 636.952099][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.988851][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.027970][T11202] netlink: 'syz.2.1644': attribute type 1 has an invalid length. [ 638.299506][T11196] loop4: detected capacity change from 0 to 32768 [ 638.583674][T11211] loop1: detected capacity change from 0 to 256 [ 638.584678][T11211] exfat: Deprecated parameter 'utf8' [ 638.584720][T11211] exfat: Deprecated parameter 'utf8' [ 638.584758][T11211] exfat: Deprecated parameter 'utf8' [ 638.715026][T11211] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 639.349905][T11196] NILFS (loop4): error -4 creating segctord thread [ 639.378660][ T2884] team0 (unregistering): Port device team_slave_1 removed [ 640.302677][ T2884] team0 (unregistering): Port device team_slave_0 removed [ 640.419507][T11224] netlink: 'syz.2.1651': attribute type 1 has an invalid length. [ 640.419527][T11224] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1651'. [ 641.066173][T11186] syzkaller0: entered promiscuous mode [ 641.066407][T11186] syzkaller0: entered allmulticast mode [ 641.286558][T11235] comedi comedi2: dt2814: I/O base address or length out of range [ 643.145587][T11243] trusted_key: encrypted_key: keylen parameter is missing [ 643.253172][T11247] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1659'. [ 644.963775][T11258] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 644.963811][T11258] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 644.963837][T11258] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1663'. [ 646.057520][T11268] binder: BINDER_SET_CONTEXT_MGR already set [ 646.057535][T11268] binder: 11267:11268 ioctl 4018620d 200000004a80 returned -16 [ 646.345634][T11271] hub 8-0:1.0: USB hub found [ 646.355185][T11271] hub 8-0:1.0: 1 port detected [ 647.226037][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1669'. [ 649.054882][T11283] netlink: 'syz.2.1673': attribute type 1 has an invalid length. [ 649.227838][T11285] loop1: detected capacity change from 0 to 4096 [ 651.524383][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 651.603971][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 651.605636][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 651.740199][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 651.758515][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 653.396697][T11322] loop2: detected capacity change from 0 to 40427 [ 653.428756][T11322] F2FS-fs (loop2): invalid crc value [ 653.557009][T11322] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 653.564423][T11322] F2FS-fs (loop2): Start checkpoint disabled! [ 653.621704][T11322] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 653.624625][T11322] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 653.838172][ T9935] Bluetooth: hci1: command tx timeout [ 654.679019][T11330] Bluetooth: hci0: unsupported parameter 255 [ 654.679039][T11330] Bluetooth: hci0: unsupported parameter 255 [ 654.994468][ T1115] kworker/u8:8: attempt to access beyond end of device [ 654.994468][ T1115] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 655.011484][ T1115] CPU: 0 UID: 0 PID: 1115 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 655.011514][ T1115] Tainted: [L]=SOFTLOCKUP [ 655.011521][ T1115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 655.011534][ T1115] Workqueue: writeback wb_workfn (flush-7:2) [ 655.011578][ T1115] Call Trace: [ 655.011588][ T1115] [ 655.011596][ T1115] dump_stack_lvl+0xe8/0x150 [ 655.011620][ T1115] f2fs_stop_checkpoint+0x383/0x540 [ 655.011655][ T1115] f2fs_write_end_io+0x1274/0x1740 [ 655.011696][ T1115] __submit_merged_bio+0x256/0x6a0 [ 655.011733][ T1115] __submit_merged_write_cond+0x3c9/0x4e0 [ 655.011790][ T1115] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 655.011843][ T1115] f2fs_write_data_pages+0x287e/0x34f0 [ 655.011882][ T1115] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 655.011932][ T1115] ? __lock_acquire+0x6b5/0x2cf0 [ 655.011978][ T1115] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 655.011994][ T1115] do_writepages+0x32e/0x550 [ 655.012020][ T1115] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 655.012056][ T1115] ? reacquire_held_locks+0x104/0x190 [ 655.012079][ T1115] ? rt_spin_lock+0x1e0/0x400 [ 655.012123][ T1115] __writeback_single_inode+0x133/0x10e0 [ 655.012145][ T1115] ? rt_spin_unlock+0x160/0x200 [ 655.012165][ T1115] writeback_sb_inodes+0x97f/0x1980 [ 655.012197][ T1115] ? lockdep_hardirqs_on+0x7a/0x110 [ 655.012226][ T1115] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 655.012279][ T1115] ? rcu_is_watching+0x15/0xb0 [ 655.012310][ T1115] wb_writeback+0x445/0xb00 [ 655.012336][ T1115] ? queue_io+0x2a1/0x440 [ 655.012359][ T1115] ? __pfx_wb_writeback+0x10/0x10 [ 655.012389][ T1115] wb_workfn+0x3fd/0xf20 [ 655.012412][ T1115] ? __lock_acquire+0x6b5/0x2cf0 [ 655.012431][ T1115] ? look_up_lock_class+0x57/0x110 [ 655.012467][ T1115] ? __pfx_wb_workfn+0x10/0x10 [ 655.012494][ T1115] ? do_raw_spin_lock+0x12b/0x2f0 [ 655.012510][ T1115] ? lock_acquire+0x106/0x350 [ 655.012532][ T1115] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 655.012552][ T1115] ? process_scheduled_works+0xa69/0x1910 [ 655.012573][ T1115] ? process_scheduled_works+0xa69/0x1910 [ 655.012595][ T1115] ? process_scheduled_works+0xa69/0x1910 [ 655.012611][ T1115] ? process_scheduled_works+0xa69/0x1910 [ 655.012629][ T1115] process_scheduled_works+0xb68/0x1910 [ 655.012669][ T1115] ? __pfx_process_scheduled_works+0x10/0x10 [ 655.012691][ T1115] ? assign_work+0x3d5/0x5e0 [ 655.012712][ T1115] worker_thread+0xa90/0x1040 [ 655.012749][ T1115] kthread+0x388/0x470 [ 655.012771][ T1115] ? __pfx_worker_thread+0x10/0x10 [ 655.012786][ T1115] ? __pfx_kthread+0x10/0x10 [ 655.012809][ T1115] ret_from_fork+0x514/0xb70 [ 655.012829][ T1115] ? __pfx_ret_from_fork+0x10/0x10 [ 655.012864][ T1115] ? __switch_to+0xc79/0x1410 [ 655.012903][ T1115] ? __pfx_kthread+0x10/0x10 [ 655.012924][ T1115] ret_from_fork_asm+0x1a/0x30 [ 655.012956][ T1115] [ 655.013246][ T1115] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 655.176464][ T37] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 655.427204][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 655.428931][ T37] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 655.428954][ T37] usb 2-1: config 0 has no interface number 0 [ 655.431423][ T37] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 655.431453][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.431466][ T37] usb 2-1: Product: syz [ 655.431476][ T37] usb 2-1: Manufacturer: syz [ 655.431485][ T37] usb 2-1: SerialNumber: syz [ 655.435854][ T37] usb 2-1: config 0 descriptor?? [ 655.646997][ T37] usb 2-1: selecting invalid altsetting 1 [ 655.647020][ T37] speedtch 2-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 655.647075][ T37] speedtch 2-1:0.1: usbatm_usb_probe: bind failed: -22! [ 655.647137][ T37] speedtch 2-1:0.1: probe with driver speedtch failed with error -22 [ 655.686138][ T37] usb 2-1: USB disconnect, device number 35 [ 655.989579][ T9935] Bluetooth: hci1: command tx timeout [ 658.110272][ T9935] Bluetooth: hci1: command tx timeout [ 660.164167][ T9935] Bluetooth: hci1: command tx timeout [ 664.432120][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 664.517437][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 664.520307][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 664.521769][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 664.522444][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 666.786465][ T5841] Bluetooth: hci6: command tx timeout [ 667.133557][ T9935] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 667.185306][ T9935] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 667.203848][ T9935] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 667.216366][ T9935] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 667.255704][ T9935] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 668.866621][ T5841] Bluetooth: hci6: command tx timeout [ 669.433898][ T5841] Bluetooth: hci7: command tx timeout [ 670.946529][ T5841] Bluetooth: hci6: command tx timeout [ 671.436761][T11393] syz_tun: left promiscuous mode [ 671.448606][T11393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 671.556736][ T5841] Bluetooth: hci7: command tx timeout [ 671.933586][ T5237] lo speed is unknown, defaulting to 1000 [ 673.062257][ T5841] Bluetooth: hci6: command tx timeout [ 673.581808][T11404] lo speed is unknown, defaulting to 1000 [ 673.599086][T11300] lo speed is unknown, defaulting to 1000 [ 673.599930][ T9935] Bluetooth: hci7: command tx timeout [ 673.623633][T11300] wg1 speed is unknown, defaulting to 1000 [ 673.907870][T11396] lo speed is unknown, defaulting to 1000 [ 673.908974][T11404] wg1 speed is unknown, defaulting to 1000 [ 674.315448][T11428] loop2: detected capacity change from 0 to 32768 [ 674.390197][T11428] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 674.433295][T11438] loop1: detected capacity change from 0 to 1024 [ 674.437247][T11428] XFS (loop2): Ending clean mount [ 674.481078][T11428] XFS (loop2): Quotacheck needed: Please wait. [ 674.645775][T11396] wg1 speed is unknown, defaulting to 1000 [ 674.711726][T11438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.273556][T11182] bond0: (slave syz_tun): Releasing backup interface [ 675.541543][T11428] XFS (loop2): Quotacheck: Done. [ 675.563525][ T38] audit: type=1800 audit(1776152891.080:556): pid=11428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1714" name="file0" dev="loop2" ino=4420 res=0 errno=0 [ 675.668174][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.691741][ T9935] Bluetooth: hci7: command tx timeout [ 675.895186][ T5826] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 676.434663][ T5490] 8021q: adding VLAN 0 to HW filter on device eth5 [ 677.457317][T11475] tipc: Failed to remove unknown binding: 66,1,1/1625438938:1956991534/1956991536 [ 678.625838][T11300] chnl_net:caif_netlink_parms(): no params data found [ 681.393901][T11509] binder_alloc: 11508: pid 11508 spamming oneway? 1 buffers allocated for a total size of 4096 [ 682.355306][ T5490] 8021q: adding VLAN 0 to HW filter on device eth6 [ 682.498070][ T38] audit: type=1326 audit(1776152898.010:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11512 comm="syz.1.1724" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff889d7c819 code=0x0 [ 682.726628][T11404] chnl_net:caif_netlink_parms(): no params data found [ 683.602200][T11529] loop2: detected capacity change from 0 to 131072 [ 683.635383][T11529] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 683.635409][T11529] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 683.637792][T11529] F2FS-fs (loop2): invalid crc value [ 683.773219][T11529] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 683.807564][T11529] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 683.807593][T11529] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 683.842632][T11396] chnl_net:caif_netlink_parms(): no params data found [ 684.259867][T11300] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.259952][T11300] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.260115][T11300] bridge_slave_0: entered allmulticast mode [ 684.276688][T11300] bridge_slave_0: entered promiscuous mode [ 684.458419][T11300] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.458529][T11300] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.458690][T11300] bridge_slave_1: entered allmulticast mode [ 684.477539][T11300] bridge_slave_1: entered promiscuous mode [ 684.631708][ T2884] bridge_slave_1: left allmulticast mode [ 684.631751][ T2884] bridge_slave_1: left promiscuous mode [ 684.631964][ T2884] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.733624][ T2884] bridge_slave_0: left allmulticast mode [ 684.733651][ T2884] bridge_slave_0: left promiscuous mode [ 684.733875][ T2884] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.847775][ T2884] bridge_slave_1: left allmulticast mode [ 684.847796][ T2884] bridge_slave_1: left promiscuous mode [ 684.847948][ T2884] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.972163][ T2884] bridge_slave_0: left allmulticast mode [ 684.972184][ T2884] bridge_slave_0: left promiscuous mode [ 684.972340][ T2884] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.865933][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.866007][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.661016][ T2884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.757806][ T2884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.804195][T11545] tipc: Failed to remove unknown binding: 66,1,1/0:2725471068/2725471070 [ 687.838093][ T2884] bond0 (unregistering): Released all slaves [ 688.267457][ T2884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.326821][ T2884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.356596][ T2884] bond0 (unregistering): Released all slaves [ 688.386950][ T2884] bond1 (unregistering): (slave veth3): Releasing active interface [ 688.386976][ T2884] vlan2: entered promiscuous mode [ 688.466804][ T2884] bond1 (unregistering): (slave vlan2): Releasing active interface [ 688.508197][ T2884] bond1 (unregistering): Released all slaves [ 689.369807][T11300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.570509][T11553] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 689.624708][T11553] bond3: (slave lo): Enslaving as an active interface with an up link [ 689.711051][T11553] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 689.785921][T11300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.873517][ T2884] tipc: Left network mode [ 690.125374][T11404] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.125481][T11404] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.125633][T11404] bridge_slave_0: entered allmulticast mode [ 690.139014][T11404] bridge_slave_0: entered promiscuous mode [ 692.157166][T11404] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.157304][T11404] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.157508][T11404] bridge_slave_1: entered allmulticast mode [ 692.159846][T11404] bridge_slave_1: entered promiscuous mode [ 692.215403][T11300] team0: Port device team_slave_0 added [ 692.501309][T11396] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.501420][T11396] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.501639][T11396] bridge_slave_0: entered allmulticast mode [ 693.467285][T11568] loop1: detected capacity change from 0 to 1024 [ 693.482384][T11396] bridge_slave_0: entered promiscuous mode [ 693.565677][T11568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.601749][T11300] team0: Port device team_slave_1 added [ 693.602111][T11396] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.602256][T11396] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.602416][T11396] bridge_slave_1: entered allmulticast mode [ 693.605035][T11396] bridge_slave_1: entered promiscuous mode [ 694.041930][T11571] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 694.075873][T11571] EXT4-fs (loop1): Remounting filesystem read-only [ 694.178108][ T5915] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 694.209766][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.336781][ T5915] usb 3-1: device descriptor read/64, error -71 [ 694.446393][T11404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.494092][T11575] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 694.494248][T11575] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1736'. [ 694.504843][T11404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.576652][ T5915] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 694.749075][T11300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.749091][T11300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.749118][T11300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.759516][ T5915] usb 3-1: device descriptor read/64, error -71 [ 694.765810][T11396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.866948][ T5915] usb usb3-port1: attempt power cycle [ 695.768834][T11300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.768850][T11300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.768893][T11300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.842098][T11396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.978845][T11404] team0: Port device team_slave_0 added [ 696.011136][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.037181][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.076495][ T5915] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 696.097002][ T5915] usb 3-1: device descriptor read/8, error -71 [ 697.945089][ T5915] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 698.207950][ T5915] usb 3-1: device descriptor read/8, error -71 [ 698.317960][ T5915] usb usb3-port1: unable to enumerate USB device [ 698.579819][ T2884] hsr_slave_0: left promiscuous mode [ 698.619084][ T2884] hsr_slave_1: left promiscuous mode [ 698.621627][ T2884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.621652][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.670338][ T2884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.670363][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.857699][ T2884] veth1_macvtap: left promiscuous mode [ 698.857767][ T2884] veth0_macvtap: left promiscuous mode [ 698.857956][ T2884] veth1_vlan: left promiscuous mode [ 698.858066][ T2884] veth0_vlan: left promiscuous mode [ 699.256958][ T2884] team0 (unregistering): Port device team_slave_1 removed [ 699.316943][ T2884] team0 (unregistering): Port device team_slave_0 removed [ 699.966862][ T2884] team0 (unregistering): Port device team_slave_1 removed [ 700.006830][ T2884] team0 (unregistering): Port device team_slave_0 removed [ 700.210442][T11404] team0: Port device team_slave_1 added [ 700.212257][T11396] team0: Port device team_slave_0 added [ 700.302052][T11396] team0: Port device team_slave_1 added [ 700.544783][T11300] hsr_slave_0: entered promiscuous mode [ 700.550149][T11300] hsr_slave_1: entered promiscuous mode [ 700.552259][T11300] debugfs: 'hsr0' already exists in 'hsr' [ 700.552326][T11300] Cannot create hsr debugfs directory [ 700.558395][T11404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.558431][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.558506][T11404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.653469][T11404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.653484][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.653504][T11404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.654464][T11396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.654477][T11396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.654502][T11396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.779500][T11396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.779516][T11396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.779543][T11396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.638803][T11404] hsr_slave_0: entered promiscuous mode [ 701.640310][T11404] hsr_slave_1: entered promiscuous mode [ 701.641202][T11404] debugfs: 'hsr0' already exists in 'hsr' [ 701.641225][T11404] Cannot create hsr debugfs directory [ 701.672766][T11396] hsr_slave_0: entered promiscuous mode [ 701.674317][T11396] hsr_slave_1: entered promiscuous mode [ 701.675330][T11396] debugfs: 'hsr0' already exists in 'hsr' [ 701.675355][T11396] Cannot create hsr debugfs directory [ 701.966786][T11622] loop2: detected capacity change from 0 to 7 [ 702.026366][T11622] Dev loop2: unable to read RDB block 7 [ 702.026406][T11622] loop2: unable to read partition table [ 702.026616][T11622] loop2: partition table beyond EOD, truncated [ 702.026647][T11622] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 703.888080][ T5490] 8021q: adding VLAN 0 to HW filter on device eth7 [ 704.771731][T11300] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 704.830763][T11300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 704.850258][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1758'. [ 704.975716][T11300] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 705.103289][T11300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 705.967069][T11300] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 706.014405][T11300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 706.026002][T11300] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 706.178502][T11300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 706.503002][T11688] netlink: 'syz.2.1765': attribute type 13 has an invalid length. [ 706.503023][T11688] netlink: 'syz.2.1765': attribute type 17 has an invalid length. [ 707.385885][T11687] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.408351][T11687] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.233736][T11687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.267026][T11687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.450524][T11688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.452123][T11688] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.506604][T11688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 709.634841][T11693] wg1 speed is unknown, defaulting to 1000 [ 709.634886][T11693] syz0: Port: 1 Link DOWN [ 709.634960][ T1397] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.148500][ T1397] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.149629][ T1397] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.036458][ T1397] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.502311][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 711.512755][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 711.532491][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 711.602565][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 711.605571][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 711.748692][T11756] loop2: detected capacity change from 0 to 8 [ 711.749626][T11756] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 712.103168][T11444] udevd[11444]: incorrect cramfs checksum on /dev/loop2 [ 712.205675][T11444] udevd[11444]: incorrect cramfs checksum on /dev/loop2 [ 712.243517][T11444] udevd[11444]: incorrect cramfs checksum on /dev/loop2 [ 712.271912][T11766] cramfs: Error -3 while decompressing! [ 712.271926][T11766] cramfs: ffffffff9999b208(26)->ffff88806f6db000(4096) [ 712.272060][T11766] cramfs: Error -3 while decompressing! [ 712.272070][T11766] cramfs: ffffffff9999b208(26)->ffff88806f6db000(4096) [ 713.062671][T11751] lo speed is unknown, defaulting to 1000 [ 713.064665][T11751] wg1 speed is unknown, defaulting to 1000 [ 713.183951][T11780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1783'. [ 713.755321][ T9935] Bluetooth: hci3: command tx timeout [ 715.826351][ T9935] Bluetooth: hci3: command tx timeout [ 716.180412][T11751] chnl_net:caif_netlink_parms(): no params data found [ 716.543208][T11751] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.544473][T11751] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.544669][T11751] bridge_slave_0: entered allmulticast mode [ 716.591198][T11751] bridge_slave_0: entered promiscuous mode [ 717.040220][T11751] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.040304][T11751] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.040494][T11751] bridge_slave_1: entered allmulticast mode [ 717.073916][T11751] bridge_slave_1: entered promiscuous mode [ 717.671356][ T5490] 8021q: adding VLAN 0 to HW filter on device eth9 [ 717.695416][T11751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.907965][ T9935] Bluetooth: hci3: command tx timeout [ 718.057541][T11831] loop2: detected capacity change from 0 to 32768 [ 718.064490][T11751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.074980][T11831] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1789 (11831) [ 718.187300][T11831] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 718.187330][T11831] BTRFS info (device loop2): using crc32c checksum algorithm [ 718.187358][T11831] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 718.432288][T11751] team0: Port device team_slave_0 added [ 718.786408][T11831] BTRFS info (device loop2): rebuilding free space tree [ 718.968957][T11831] BTRFS info (device loop2): disabling free space tree [ 718.969038][T11831] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 718.969064][T11831] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 719.079736][T11831] BTRFS info (device loop2): enabling ssd optimizations [ 719.079761][T11831] BTRFS info (device loop2): turning on async discard [ 719.079778][T11831] BTRFS info (device loop2): enabling disk space caching [ 719.079794][T11831] BTRFS info (device loop2): force clearing of disk cache [ 719.079812][T11831] BTRFS info (device loop2): use zstd compression, level 3 [ 719.085936][T11751] team0: Port device team_slave_1 added [ 719.271367][T11404] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 719.312618][T11404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 719.438105][ T5826] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 719.464747][T11404] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 719.529876][T11404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 719.552698][T11751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.552712][T11751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.552732][T11751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.589700][T11404] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 719.756840][T11404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.788053][T11751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.788068][T11751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.788094][T11751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.792658][T11404] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 719.880520][T11404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 719.986289][ T9935] Bluetooth: hci3: command tx timeout [ 720.331910][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 720.516392][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 720.521873][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.521896][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 720.521911][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 720.521925][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 720.521940][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 720.521967][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 720.521982][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.630581][T11879] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 720.644796][ T9] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 720.719403][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'. [ 720.794735][ T9] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 720.851588][ T9] usb 2-1: USB disconnect, device number 36 [ 721.469611][T11751] hsr_slave_0: entered promiscuous mode [ 721.470999][T11751] hsr_slave_1: entered promiscuous mode [ 721.471956][T11751] debugfs: 'hsr0' already exists in 'hsr' [ 721.471977][T11751] Cannot create hsr debugfs directory [ 721.808093][T11396] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 721.842410][T11396] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 722.027338][T11396] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 722.059177][T11396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 722.087136][T11396] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 722.123800][T11396] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 722.164793][ T3207] bridge_slave_1: left allmulticast mode [ 722.164823][ T3207] bridge_slave_1: left promiscuous mode [ 722.165255][ T3207] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.244187][T11897] loop2: detected capacity change from 0 to 32768 [ 722.247823][T11897] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1803 (11897) [ 722.271116][ T3207] bridge_slave_0: left allmulticast mode [ 722.271142][ T3207] bridge_slave_0: left promiscuous mode [ 722.271389][ T3207] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.300936][T11897] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 722.300966][T11897] BTRFS info (device loop2): using crc32c checksum algorithm [ 722.300994][T11897] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 722.515692][T11897] BTRFS info (device loop2): rebuilding free space tree [ 722.803256][T11897] BTRFS info (device loop2): disabling free space tree [ 722.803311][T11897] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 722.803332][T11897] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 722.878442][T11897] BTRFS info (device loop2): enabling ssd optimizations [ 722.878469][T11897] BTRFS info (device loop2): turning on async discard [ 722.878485][T11897] BTRFS info (device loop2): enabling disk space caching [ 722.878501][T11897] BTRFS info (device loop2): force clearing of disk cache [ 722.878519][T11897] BTRFS info (device loop2): use zstd compression, level 3 [ 722.948100][ T3207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.066957][ T3207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.135792][ T5826] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 723.161005][ T3207] bond0 (unregistering): Released all slaves [ 723.228884][T11396] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 723.261263][T11396] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 723.766471][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 723.786346][ T3207] hsr_slave_0: left promiscuous mode [ 723.871564][ T3207] hsr_slave_1: left promiscuous mode [ 723.872526][ T3207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.907213][ T3207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.943656][ T9] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 723.943691][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.943704][ T9] usb 3-1: Product: syz [ 723.943713][ T9] usb 3-1: Manufacturer: syz [ 723.943723][ T9] usb 3-1: SerialNumber: syz [ 723.956462][ T9] usb 3-1: config 0 descriptor?? [ 724.037302][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 724.319728][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 724.321935][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 724.321992][ T9] usb 3-1: media controller created [ 724.546123][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 724.592329][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 724.593827][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 724.642246][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 724.671786][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 724.681620][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 724.975477][ T9] DVB: Unable to find symbol mt352_attach() [ 725.132491][ T9] DVB: Unable to find symbol nxt6000_attach() [ 725.132506][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 725.147537][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 725.152133][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 725.152152][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 725.175013][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 725.175092][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 725.208761][ T9] usb 3-1: USB disconnect, device number 18 [ 725.387179][ T3207] team0 (unregistering): Port device team_slave_1 removed [ 725.396017][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1810'. [ 725.548428][ T3207] team0 (unregistering): Port device team_slave_0 removed [ 725.723191][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 727.082009][ T5841] Bluetooth: hci1: command tx timeout [ 728.385474][T11931] lo speed is unknown, defaulting to 1000 [ 728.400598][T11931] wg1 speed is unknown, defaulting to 1000 [ 729.106391][ T5841] Bluetooth: hci1: command tx timeout [ 729.197756][ T9935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 729.235016][ T9935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 729.268680][ T9935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 729.287996][ T9935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 729.290063][ T9935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 729.662645][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'. [ 731.196587][ T5841] Bluetooth: hci1: command tx timeout [ 731.333272][ T5490] 8021q: adding VLAN 0 to HW filter on device eth10 [ 731.441370][ T5841] Bluetooth: hci4: command tx timeout [ 731.786098][T11959] lo speed is unknown, defaulting to 1000 [ 732.040086][T11959] wg1 speed is unknown, defaulting to 1000 [ 733.271558][ T5841] Bluetooth: hci1: command tx timeout [ 733.456307][T11693] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 733.507246][ T5841] Bluetooth: hci4: command tx timeout [ 733.619545][T11693] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 733.619566][T11693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.619579][T11693] usb 3-1: Product: syz [ 733.619587][T11693] usb 3-1: Manufacturer: syz [ 733.619597][T11693] usb 3-1: SerialNumber: syz [ 734.048482][ T5490] 8021q: adding VLAN 0 to HW filter on device eth11 [ 734.190222][T11693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 734.190281][T11693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 735.336104][T11931] chnl_net:caif_netlink_parms(): no params data found [ 735.443136][T11693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 735.586331][ T5841] Bluetooth: hci4: command tx timeout [ 736.669850][T11693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -EPROTO [ 736.670501][T11693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 736.670558][T11693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 736.766126][T11693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 736.806551][T11693] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 736.877918][T11693] usb 3-1: USB disconnect, device number 19 [ 737.240045][T11931] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.240233][T11931] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.240399][T11931] bridge_slave_0: entered allmulticast mode [ 737.243130][T11931] bridge_slave_0: entered promiscuous mode [ 737.255489][T11931] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.257847][T11931] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.258448][T11931] bridge_slave_1: entered allmulticast mode [ 737.301291][T11931] bridge_slave_1: entered promiscuous mode [ 737.510896][ T38] audit: type=1800 audit(1776152953.000:558): pid=12040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1828" name="file0" dev="overlay" ino=2357 res=0 errno=0 [ 738.056076][ T5841] Bluetooth: hci4: command tx timeout [ 738.103186][T11751] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 738.190226][T11751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 738.209162][T11931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.232249][T11751] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 738.321470][T11751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 738.325774][T11931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.628407][T11751] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 738.730269][T11751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 738.807690][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1830'. [ 739.574700][T11959] chnl_net:caif_netlink_parms(): no params data found [ 739.629617][T11751] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 739.744568][T11751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 740.101575][T11931] team0: Port device team_slave_0 added [ 740.227773][T11931] team0: Port device team_slave_1 added [ 740.333818][ T5490] 8021q: adding VLAN 0 to HW filter on device eth12 [ 740.928702][T11931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.928715][T11931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.928734][T11931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.058002][T11931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.058020][T11931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.058047][T11931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.173646][T11959] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.173855][T11959] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.174052][T11959] bridge_slave_0: entered allmulticast mode [ 742.181167][T11959] bridge_slave_0: entered promiscuous mode [ 742.206106][T11959] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.218073][T11959] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.218241][T11959] bridge_slave_1: entered allmulticast mode [ 742.230932][T11959] bridge_slave_1: entered promiscuous mode [ 742.732017][T11931] hsr_slave_0: entered promiscuous mode [ 742.734854][T11931] hsr_slave_1: entered promiscuous mode [ 742.740991][T11931] debugfs: 'hsr0' already exists in 'hsr' [ 742.741144][T11931] Cannot create hsr debugfs directory [ 742.817322][T12109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1838'. [ 743.322659][T11959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.552246][ T38] audit: type=1800 audit(1776152959.040:559): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1837" name="file0" dev="overlay" ino=2406 res=0 errno=0 [ 743.953567][T12116] loop2: detected capacity change from 0 to 32768 [ 743.984640][T11959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.019485][T12116] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 744.131929][T12116] XFS (loop2): Ending clean mount [ 744.140781][T12116] XFS (loop2): Quotacheck needed: Please wait. [ 744.657935][T12116] XFS (loop2): Quotacheck: Done. [ 744.672452][ T38] audit: type=1800 audit(1776152960.190:560): pid=12116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1839" name="file0" dev="loop2" ino=4420 res=0 errno=0 [ 744.851554][ T5826] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 744.869404][T11959] team0: Port device team_slave_0 added [ 745.441082][T11959] team0: Port device team_slave_1 added [ 746.773444][T12168] loop1: detected capacity change from 0 to 32768 [ 746.775874][T12168] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1845 (12168) [ 746.809999][T12168] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 746.810030][T12168] BTRFS info (device loop1): using crc32c checksum algorithm [ 746.810060][T12168] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 747.044619][T11959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.044638][T11959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.044669][T11959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.054869][T12168] BTRFS info (device loop1): rebuilding free space tree [ 747.116978][T11959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.116993][T11959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.117014][T11959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.295962][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.296024][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.484426][T12168] BTRFS info (device loop1): disabling free space tree [ 747.484540][T12168] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 747.484568][T12168] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 747.511983][T12168] BTRFS info (device loop1): enabling ssd optimizations [ 747.512008][T12168] BTRFS info (device loop1): turning on async discard [ 747.512026][T12168] BTRFS info (device loop1): enabling disk space caching [ 747.512043][T12168] BTRFS info (device loop1): force clearing of disk cache [ 747.512061][T12168] BTRFS info (device loop1): use zstd compression, level 3 [ 747.847504][T11959] hsr_slave_0: entered promiscuous mode [ 747.848614][T11959] hsr_slave_1: entered promiscuous mode [ 747.849606][T11959] debugfs: 'hsr0' already exists in 'hsr' [ 747.849651][T11959] Cannot create hsr debugfs directory [ 748.067617][ T5825] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 749.620602][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1846'. [ 751.388633][T12223] loop2: detected capacity change from 0 to 16 [ 751.492860][ T1418] bridge_slave_1: left allmulticast mode [ 751.492891][ T1418] bridge_slave_1: left promiscuous mode [ 751.493151][ T1418] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.615642][T12223] erofs (device loop2): mounted with root inode @ nid 36. [ 751.647782][ T1418] bridge_slave_0: left allmulticast mode [ 751.647825][ T1418] bridge_slave_0: left promiscuous mode [ 751.653676][ T1418] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.793491][ T1418] bridge_slave_1: left allmulticast mode [ 751.793519][ T1418] bridge_slave_1: left promiscuous mode [ 751.793739][ T1418] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.924754][ T1418] bridge_slave_0: left allmulticast mode [ 751.924785][ T1418] bridge_slave_0: left promiscuous mode [ 751.925026][ T1418] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.366301][T12236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1857'. [ 753.527624][ T1418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.647113][ T1418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.730869][ T1418] bond0 (unregistering): Released all slaves [ 754.148595][ T1418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.229948][ T1418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.308275][ T1418] bond0 (unregistering): Released all slaves [ 754.567567][T11751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.592871][ T5490] 8021q: adding VLAN 0 to HW filter on device eth5 [ 754.952463][T12254] loop2: detected capacity change from 0 to 16 [ 755.060804][T12254] erofs (device loop2): mounted with root inode @ nid 36. [ 756.059457][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1865'. [ 756.956423][ T1418] hsr_slave_0: left promiscuous mode [ 756.998620][ T1418] hsr_slave_1: left promiscuous mode [ 756.999639][ T1418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.044223][ T1418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.236355][ T1418] hsr_slave_0: left promiscuous mode [ 757.276294][ T1418] hsr_slave_1: left promiscuous mode [ 757.277712][ T1418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.298107][ T1418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.026744][ T1418] team0 (unregistering): Port device team_slave_1 removed [ 758.108257][ T1418] team0 (unregistering): Port device team_slave_0 removed [ 758.425125][T12278] loop2: detected capacity change from 0 to 32768 [ 758.436763][T12278] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1870 (12278) [ 758.528311][T12278] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 758.528343][T12278] BTRFS info (device loop2): using sha256 checksum algorithm [ 758.610976][T12278] BTRFS info (device loop2): rebuilding free space tree [ 758.671657][T12278] BTRFS info (device loop2): disabling free space tree [ 758.671729][T12278] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 758.671754][T12278] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 758.710649][T12278] BTRFS info (device loop2): checking UUID tree [ 758.711849][T12278] BTRFS info (device loop2): setting nodatasum [ 758.711870][T12278] BTRFS info (device loop2): setting nodatacow [ 758.711886][T12278] BTRFS info (device loop2): turning off barriers [ 758.711903][T12278] BTRFS info (device loop2): force clearing of disk cache [ 758.873550][ T5826] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 759.176979][ T1418] team0 (unregistering): Port device team_slave_1 removed [ 759.297657][ T1418] team0 (unregistering): Port device team_slave_0 removed [ 760.225721][T11751] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.275889][ T825] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.275999][ T825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.314468][ T825] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.326487][ T825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.500819][T11751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 760.500842][T11751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 761.605879][T12322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1874'. [ 763.621935][ T5490] 8021q: adding VLAN 0 to HW filter on device eth6 [ 764.150426][T11751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.203508][T12343] loop2: detected capacity change from 0 to 32768 [ 764.240053][T12358] netlink: 'syz.1.1880': attribute type 10 has an invalid length. [ 764.240981][T12358] batman_adv: batadv0: Adding interface: netdevsim0 [ 764.241003][T12358] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.241055][T12358] batman_adv: batadv0: Interface activated: netdevsim0 [ 764.266880][T12343] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1878 (12343) [ 764.343193][T12343] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 764.343225][T12343] BTRFS info (device loop2): using sha256 checksum algorithm [ 764.804075][T12343] BTRFS info (device loop2): rebuilding free space tree [ 765.043596][T12343] BTRFS info (device loop2): disabling free space tree [ 765.043670][T12343] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 765.043694][T12343] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 765.191685][T12343] BTRFS info (device loop2): checking UUID tree [ 765.194124][T12343] BTRFS info (device loop2): setting nodatasum [ 765.194145][T12343] BTRFS info (device loop2): setting nodatacow [ 765.194182][T12343] BTRFS info (device loop2): turning off barriers [ 765.194200][T12343] BTRFS info (device loop2): force clearing of disk cache [ 765.486731][ T5826] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 767.265404][T11751] veth0_vlan: entered promiscuous mode [ 767.557504][T11751] veth1_vlan: entered promiscuous mode [ 767.997192][T11751] veth0_macvtap: entered promiscuous mode [ 768.103227][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1883'. [ 769.219994][T11751] veth1_macvtap: entered promiscuous mode [ 769.402437][T11751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.429361][T11751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.472473][ T3207] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.639898][ T3207] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.650582][ T3207] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.654936][ T3207] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.068358][T11931] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 770.125314][T11931] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 770.151030][T11931] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 770.190794][T11931] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 770.211922][T11931] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 770.293288][T11931] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 770.686797][T11931] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 770.785376][T11931] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 771.076295][T11693] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 771.308004][T11693] usb 3-1: Using ep0 maxpacket: 8 [ 771.335403][T11693] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 771.335473][T11693] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 771.335511][T11693] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 771.335533][T11693] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 771.335554][T11693] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 771.335589][T11693] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 771.335610][T11693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.805841][T11693] usb 3-1: usb_control_msg returned -32 [ 771.805885][T11693] usbtmc 3-1:16.0: can't read capabilities [ 771.875935][T12466] loop2: detected capacity change from 0 to 7 [ 771.951296][T12466] Dev loop2: unable to read RDB block 7 [ 771.951330][T12466] loop2: AHDI p1 p2 p3 [ 771.951359][T12466] loop2: partition table partially beyond EOD, truncated [ 771.951637][T12466] loop2: p1 start 1818582900 is beyond EOD, truncated [ 771.951659][T12466] loop2: p3 start 335544320 is beyond EOD, truncated [ 772.209937][T11693] usb 3-1: USB disconnect, device number 20 [ 772.263800][ T9935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 772.335224][ T9935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 772.345945][ T9935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 772.412767][ T9935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 772.423975][ T9935] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 772.903613][T12474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1892'. [ 773.507259][T11959] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 773.659320][T12478] binder: 12477:12478 ioctl 4018620d 0 returned -22 [ 773.698319][T11959] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 773.698899][T12467] lo speed is unknown, defaulting to 1000 [ 773.720437][T11959] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 773.860733][T11959] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 773.911740][T12467] wg1 speed is unknown, defaulting to 1000 [ 773.911777][T11959] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 773.989865][T11959] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 774.046504][ T5946] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 774.216305][ T5946] usb 3-1: Using ep0 maxpacket: 8 [ 774.218370][ T5946] usb 3-1: config 162 has an invalid interface number: 84 but max is 2 [ 774.218394][ T5946] usb 3-1: config 162 has an invalid interface number: 3 but max is 2 [ 774.218414][ T5946] usb 3-1: config 162 has no interface number 0 [ 774.218430][ T5946] usb 3-1: config 162 has no interface number 1 [ 774.218492][ T5946] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 774.218529][ T5946] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 774.218552][ T5946] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 774.218576][ T5946] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 774.218601][ T5946] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 774.218625][ T5946] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 774.218650][ T5946] usb 3-1: config 162 interface 84 has no altsetting 0 [ 774.218668][ T5946] usb 3-1: config 162 interface 2 has no altsetting 0 [ 774.218685][ T5946] usb 3-1: config 162 interface 3 has no altsetting 0 [ 774.220874][ T5946] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 774.220901][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.220931][ T5946] usb 3-1: Product: syz [ 774.220945][ T5946] usb 3-1: Manufacturer: syz [ 774.220959][ T5946] usb 3-1: SerialNumber: syz [ 774.418034][T12487] fuse: Bad value for 'fd' [ 774.474994][T11959] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 774.520139][T11959] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 774.589501][T12480] IPv6: NLM_F_REPLACE set, but no existing node found! [ 775.110903][ T5841] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 775.272321][ T5841] Bluetooth: hci5: command tx timeout [ 775.353575][ T5946] usb 3-1: USB disconnect, device number 21 [ 775.421172][T12499] binder: BINDER_SET_CONTEXT_MGR already set [ 775.421182][T12499] binder: 12498:12499 ioctl 4018620d 200000004a80 returned -16 [ 775.915353][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1900'. [ 776.843466][T12511] binder: 12510:12511 ioctl 4018620d 0 returned -22 [ 776.981775][ T3207] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.346947][ T5841] Bluetooth: hci5: command tx timeout [ 777.988434][ T38] audit: type=1800 audit(1776152993.140:561): pid=12523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1906" name="file0" dev="overlay" ino=2448 res=0 errno=0 [ 778.693484][ T3207] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.814416][T12535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1910'. [ 779.547375][ T5841] Bluetooth: hci5: command tx timeout [ 779.840162][ T38] audit: type=1326 audit(1776152995.350:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff889d7c819 code=0x7ffc0000 [ 779.844082][ T38] audit: type=1326 audit(1776152995.360:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff889d7c819 code=0x7ffc0000 [ 779.844927][ T38] audit: type=1326 audit(1776152995.360:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff889d7c819 code=0x7ffc0000 [ 779.865038][ T38] audit: type=1326 audit(1776152995.380:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff889d7c819 code=0x7ffc0000 [ 779.938243][ T38] audit: type=1326 audit(1776152995.410:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff889d7c819 code=0x7ffc0000 [ 779.940317][ T38] audit: type=1326 audit(1776152995.460:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff889d7c819 code=0x7ffc0000 [ 779.940726][ T38] audit: type=1326 audit(1776152995.460:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff889d7c819 code=0x7ffc0000 [ 779.940772][ T38] audit: type=1326 audit(1776152995.460:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff889d7c819 code=0x7ffc0000 [ 779.941579][ T38] audit: type=1326 audit(1776152995.460:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff889d7c819 code=0x7ffc0000 [ 780.325228][ T3207] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.528486][T11931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.780958][ T3207] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.860505][T12467] chnl_net:caif_netlink_parms(): no params data found [ 780.990668][T11931] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.255913][ T825] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.256071][ T825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.341040][T12467] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.343360][T12467] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.343492][T12467] bridge_slave_0: entered allmulticast mode [ 781.411307][T12467] bridge_slave_0: entered promiscuous mode [ 781.589818][ T5841] Bluetooth: hci5: command tx timeout [ 781.796195][ T1427] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.796309][ T1427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.796878][T12467] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.796947][T12467] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.797118][T12467] bridge_slave_1: entered allmulticast mode [ 781.800509][T12467] bridge_slave_1: entered promiscuous mode [ 782.141933][T12467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.185008][T12467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.316326][T11696] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 782.374032][T12467] team0: Port device team_slave_0 added [ 782.429697][T12467] team0: Port device team_slave_1 added [ 782.512107][T11696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 782.512692][T11696] usb 2-1: not running at top speed; connect to a high speed hub [ 782.513816][T11696] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 782.542655][T11696] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 782.542682][T11696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.542702][T11696] usb 2-1: Product: syz [ 782.542715][T11696] usb 2-1: Manufacturer: syz [ 782.542729][T11696] usb 2-1: SerialNumber: syz [ 782.635414][ T3207] bridge_slave_1: left allmulticast mode [ 782.635438][ T3207] bridge_slave_1: left promiscuous mode [ 782.635672][ T3207] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.876079][T11696] qmi_wwan 2-1:251.0: probe with driver qmi_wwan failed with error -22 [ 782.890856][T11696] usb 2-1: USB disconnect, device number 38 [ 782.903994][ T3207] bridge_slave_0: left allmulticast mode [ 782.909205][ T3207] bridge_slave_0: left promiscuous mode [ 782.909452][ T3207] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.098000][ T3207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.178472][ T3207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.218403][ T3207] bond0 (unregistering): Released all slaves [ 784.265581][T11959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.297579][T12467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.297595][T12467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.297621][T12467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.399795][T12467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.399815][T12467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.399841][T12467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.721313][T12566] fuse: fd is not a fuse device [ 784.792632][T11959] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.843286][T12467] hsr_slave_0: entered promiscuous mode [ 784.876359][T12467] hsr_slave_1: entered promiscuous mode [ 784.902661][T12467] debugfs: 'hsr0' already exists in 'hsr' [ 784.902683][T12467] Cannot create hsr debugfs directory [ 785.353410][T12573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1919'. [ 786.226980][ T3207] hsr_slave_0: left promiscuous mode [ 786.276782][ T3207] hsr_slave_1: left promiscuous mode [ 786.280556][ T3207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.280581][ T3207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.370343][ T3207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.370373][ T3207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.513358][ T9935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 786.583412][ T9935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 786.585240][ T9935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 786.658806][ T9935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 786.664734][ T9935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 786.924164][ T3207] veth1_macvtap: left promiscuous mode [ 786.924226][ T3207] veth0_macvtap: left promiscuous mode [ 786.924393][ T3207] veth1_vlan: left promiscuous mode [ 786.924516][ T3207] veth0_vlan: left promiscuous mode [ 786.960478][T12579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1920'. [ 787.025949][T12581] fuse: Unknown parameter 'grou00000000000000000000' [ 787.224003][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 788.318332][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 788.364887][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 788.381795][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 788.396092][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 788.411952][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 788.946324][ T9935] Bluetooth: hci3: command tx timeout [ 788.966984][ T3207] team0 (unregistering): Port device team_slave_1 removed [ 789.026729][ T3207] team0 (unregistering): Port device team_slave_0 removed [ 790.629292][ T9935] Bluetooth: hci1: command tx timeout [ 790.984920][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1927'. [ 791.002176][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1927'. [ 791.761027][ T9935] Bluetooth: hci3: command tx timeout [ 791.945045][T12580] netdevsim netdevsim1: Firmware load for '/../file0' refused, path contains '..' component [ 792.596028][T11700] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 792.711565][ T9935] Bluetooth: hci1: command tx timeout [ 792.794026][T11700] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 792.794059][T11700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.794073][T11700] usb 2-1: Product: syz [ 792.794082][T11700] usb 2-1: Manufacturer: syz [ 792.794091][T11700] usb 2-1: SerialNumber: syz [ 792.835961][T11700] usb 2-1: config 0 descriptor?? [ 792.994753][T12587] lo speed is unknown, defaulting to 1000 [ 793.064915][T12587] wg1 speed is unknown, defaulting to 1000 [ 793.064962][T12576] lo speed is unknown, defaulting to 1000 [ 793.277596][T12576] wg1 speed is unknown, defaulting to 1000 [ 793.281316][T11700] usb 2-1: Firmware: major: 195, minor: 0, hardware type: ATUSB (0) [ 793.490151][T11700] usb 2-1: failed to fetch extended address, random address set [ 793.770035][ T5490] 8021q: adding VLAN 0 to HW filter on device eth8 [ 793.830621][ T5841] Bluetooth: hci3: command tx timeout [ 794.195338][T12639] netlink: 'syz.1.1932': attribute type 1 has an invalid length. [ 794.978489][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 794.986239][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1935'. [ 795.926177][ T5841] Bluetooth: hci1: command tx timeout [ 796.019902][ T5841] Bluetooth: hci3: command tx timeout [ 796.126323][T11700] usb 2-1: USB disconnect, device number 39 [ 797.986295][ T5841] Bluetooth: hci1: command tx timeout [ 802.392510][T12716] loop2: detected capacity change from 0 to 32768 [ 802.407778][T12716] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1957 (12716) [ 802.820348][T12716] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 802.820381][T12716] BTRFS info (device loop2): using crc32c checksum algorithm [ 802.820408][T12716] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 803.151103][T12716] BTRFS info (device loop2): rebuilding free space tree [ 803.287899][T12716] BTRFS info (device loop2): disabling free space tree [ 803.287976][T12716] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 803.288001][T12716] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 803.319228][T12716] BTRFS info (device loop2): enabling ssd optimizations [ 803.319254][T12716] BTRFS info (device loop2): turning on async discard [ 803.319271][T12716] BTRFS info (device loop2): enabling disk space caching [ 803.319287][T12716] BTRFS info (device loop2): force clearing of disk cache [ 803.319305][T12716] BTRFS info (device loop2): use zstd compression, level 3 [ 803.622437][ T5826] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 804.182724][T12741] openvswitch: netlink: Message has 76 unknown bytes. [ 804.182758][T12741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.004920][T12768] loop2: detected capacity change from 0 to 32768 [ 808.028185][T12768] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1969 (12768) [ 808.033180][T12768] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 808.033208][T12768] BTRFS info (device loop2): using crc32c checksum algorithm [ 808.033236][T12768] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 808.192836][T12768] BTRFS info (device loop2): rebuilding free space tree [ 808.280692][T12768] BTRFS info (device loop2): disabling free space tree [ 808.280778][T12768] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 808.280802][T12768] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 808.315681][T12768] BTRFS info (device loop2): enabling ssd optimizations [ 808.315703][T12768] BTRFS info (device loop2): turning on async discard [ 808.315719][T12768] BTRFS info (device loop2): enabling disk space caching [ 808.315734][T12768] BTRFS info (device loop2): force clearing of disk cache [ 808.315751][T12768] BTRFS info (device loop2): use zstd compression, level 3 [ 808.641210][ T5826] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 808.730552][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.730617][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.599070][T12587] chnl_net:caif_netlink_parms(): no params data found [ 810.468183][T12576] chnl_net:caif_netlink_parms(): no params data found [ 812.603894][T12824] loop2: detected capacity change from 0 to 32768 [ 812.640756][T12824] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1979 (12824) [ 812.670331][T12824] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 812.670366][T12824] BTRFS info (device loop2): using crc32c checksum algorithm [ 812.670399][T12824] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 812.855077][T12824] BTRFS info (device loop2): rebuilding free space tree [ 813.011966][T12587] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.012087][T12587] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.012280][T12587] bridge_slave_0: entered allmulticast mode [ 813.025199][T12587] bridge_slave_0: entered promiscuous mode [ 813.054592][T12824] BTRFS info (device loop2): disabling free space tree [ 813.054691][T12824] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 813.054721][T12824] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 813.102948][T12824] BTRFS info (device loop2): enabling ssd optimizations [ 813.102973][T12824] BTRFS info (device loop2): turning on async discard [ 813.102990][T12824] BTRFS info (device loop2): enabling disk space caching [ 813.103006][T12824] BTRFS info (device loop2): force clearing of disk cache [ 813.103043][T12824] BTRFS info (device loop2): use zstd compression, level 3 [ 813.212784][T12587] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.212894][T12587] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.213069][T12587] bridge_slave_1: entered allmulticast mode [ 813.258693][T12587] bridge_slave_1: entered promiscuous mode [ 813.349041][ T5826] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 813.545150][T12467] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 813.593774][T12467] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 813.655892][T12576] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.656014][T12576] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.672311][T12576] bridge_slave_0: entered allmulticast mode [ 813.684187][T12576] bridge_slave_0: entered promiscuous mode [ 813.736215][T12467] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 813.850947][T12467] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 813.963956][T12576] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.964152][T12576] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.964353][T12576] bridge_slave_1: entered allmulticast mode [ 814.002418][T12576] bridge_slave_1: entered promiscuous mode [ 814.159513][T12467] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 814.248445][T12467] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 814.294004][T12587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.364824][T12467] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 814.622326][T12841] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1981'. [ 814.641776][T12467] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 814.768815][T12587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.396303][T12576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.479307][T12576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.522131][T12587] team0: Port device team_slave_0 added [ 815.563813][T12587] team0: Port device team_slave_1 added [ 815.763744][T12864] loop1: detected capacity change from 0 to 32768 [ 815.840423][T12864] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 815.887806][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 815.888290][T12864] XFS (loop1): Ending clean mount [ 815.903411][T12864] XFS (loop1): Quotacheck needed: Please wait. [ 816.095831][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 816.125964][ T9] usb 3-1: config 4 has an invalid interface number: 104 but max is 0 [ 816.125990][ T9] usb 3-1: config 4 has no interface number 0 [ 816.126030][ T9] usb 3-1: config 4 interface 104 altsetting 0 endpoint 0x1 has an invalid bInterval 190, changing to 11 [ 816.178785][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=4b.f8 [ 816.178813][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.178826][ T9] usb 3-1: Product: syz [ 816.178836][ T9] usb 3-1: Manufacturer: syz [ 816.178845][ T9] usb 3-1: SerialNumber: syz [ 816.256093][T12864] XFS (loop1): Quotacheck: Done. [ 816.268948][ T38] kauditd_printk_skb: 26 callbacks suppressed [ 816.268961][ T38] audit: type=1800 audit(1776153031.780:597): pid=12864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1985" name="file0" dev="loop1" ino=4420 res=0 errno=0 [ 816.389420][ T5825] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 817.289667][ T9] rtsx_usb 3-1:4.104: probe with driver rtsx_usb failed with error -71 [ 817.437974][ T9] usb 3-1: USB disconnect, device number 22 [ 817.801332][T12576] team0: Port device team_slave_0 added [ 817.914397][T12576] team0: Port device team_slave_1 added [ 817.915304][T12587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.915320][T12587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.915351][T12587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.480279][T12882] loop2: detected capacity change from 0 to 32768 [ 818.492936][T12882] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1989 (12882) [ 818.504691][T12882] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 818.504781][T12882] BTRFS info (device loop2): using crc32c checksum algorithm [ 818.504911][T12882] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 818.695731][T12882] BTRFS info (device loop2): rebuilding free space tree [ 818.911949][T12587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.911965][T12587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.911988][T12587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.920083][T12882] BTRFS info (device loop2): disabling free space tree [ 818.920169][T12882] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 818.920194][T12882] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 818.933779][T12882] BTRFS info (device loop2): enabling ssd optimizations [ 818.933806][T12882] BTRFS info (device loop2): turning on async discard [ 818.933824][T12882] BTRFS info (device loop2): enabling disk space caching [ 818.933842][T12882] BTRFS info (device loop2): force clearing of disk cache [ 818.933864][T12882] BTRFS info (device loop2): use zstd compression, level 3 [ 819.208549][T12576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.208561][T12576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.208579][T12576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.312839][T12576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.312851][T12576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.312869][T12576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.442414][ T5826] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 820.040629][T12587] hsr_slave_0: entered promiscuous mode [ 820.089660][T12587] hsr_slave_1: entered promiscuous mode [ 820.096061][T12587] debugfs: 'hsr0' already exists in 'hsr' [ 820.096078][T12587] Cannot create hsr debugfs directory [ 820.253166][T12576] hsr_slave_0: entered promiscuous mode [ 820.254626][T12576] hsr_slave_1: entered promiscuous mode [ 820.255271][T12576] debugfs: 'hsr0' already exists in 'hsr' [ 820.255289][T12576] Cannot create hsr debugfs directory [ 822.327717][T12911] loop2: detected capacity change from 0 to 32768 [ 822.360844][T12911] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 822.464136][T12911] XFS (loop2): Ending clean mount [ 822.480303][T12911] XFS (loop2): Quotacheck needed: Please wait. [ 822.945898][T12911] XFS (loop2): Quotacheck: Done. [ 823.007599][ T38] audit: type=1800 audit(1776153038.520:598): pid=12911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1993" name="file0" dev="loop2" ino=4420 res=0 errno=0 [ 823.149362][ T5826] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 824.363786][T12467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.366471][T11696] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 824.411263][ T3207] bridge_slave_1: left allmulticast mode [ 824.411290][ T3207] bridge_slave_1: left promiscuous mode [ 824.412403][ T3207] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.490262][ T3207] bridge_slave_0: left allmulticast mode [ 824.490289][ T3207] bridge_slave_0: left promiscuous mode [ 824.491953][ T3207] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.578541][T11696] usb 3-1: Using ep0 maxpacket: 16 [ 824.582529][T11696] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 824.582555][T11696] usb 3-1: config 0 has no interface number 0 [ 824.582601][T11696] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.582629][T11696] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.582676][T11696] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 824.582694][T11696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.654091][T11696] usb 3-1: config 0 descriptor?? [ 824.692641][ T3207] bridge_slave_1: left allmulticast mode [ 824.692664][ T3207] bridge_slave_1: left promiscuous mode [ 824.692823][ T3207] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.783697][ T3207] bridge_slave_0: left allmulticast mode [ 824.783718][ T3207] bridge_slave_0: left promiscuous mode [ 824.807216][ T3207] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.347545][T11696] uclogic 0003:28BD:0071.0004: failed retrieving string descriptor #100: -71 [ 825.347620][T11696] uclogic 0003:28BD:0071.0004: failed retrieving pen parameters: -71 [ 825.347680][T11696] uclogic 0003:28BD:0071.0004: pen probing failed: -71 [ 825.347711][T11696] uclogic 0003:28BD:0071.0004: failed probing parameters: -71 [ 825.347816][T11696] uclogic 0003:28BD:0071.0004: probe with driver uclogic failed with error -71 [ 825.531641][T11696] usb 3-1: USB disconnect, device number 23 [ 826.710132][ T3207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.823002][ T3207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.902353][ T3207] bond0 (unregistering): Released all slaves [ 827.421874][T12949] loop1: detected capacity change from 0 to 32768 [ 827.487695][T12949] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 827.538688][T12949] XFS (loop1): Ending clean mount [ 827.553129][T12949] XFS (loop1): Quotacheck needed: Please wait. [ 828.022322][T12949] XFS (loop1): Quotacheck: Done. [ 828.081367][ T38] audit: type=1800 audit(1776153043.600:599): pid=12949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2005" name="file0" dev="loop1" ino=4420 res=0 errno=0 [ 828.216728][ T5825] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 829.297304][ T3207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.368779][T11696] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 829.428038][ T3207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.499791][ T3207] bond0 (unregistering): Released all slaves [ 829.537066][T11696] usb 3-1: device descriptor read/64, error -71 [ 829.859668][T11696] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 829.961928][T12467] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.011002][T11696] usb 3-1: device descriptor read/64, error -71 [ 830.068956][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.120210][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.127039][T11696] usb usb3-port1: attempt power cycle [ 830.507321][ T3207] hsr_slave_0: left promiscuous mode [ 830.536455][T11696] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 830.548612][ T3207] hsr_slave_1: left promiscuous mode [ 830.551765][ T3207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.557728][T11696] usb 3-1: device descriptor read/8, error -71 [ 830.603472][ T3207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.756864][ T3207] hsr_slave_0: left promiscuous mode [ 830.796928][ T3207] hsr_slave_1: left promiscuous mode [ 830.797767][ T3207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.816325][T11696] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 830.819553][ T3207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.837079][T11696] usb 3-1: device descriptor read/8, error -71 [ 830.946898][T11696] usb usb3-port1: unable to enumerate USB device [ 831.407020][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 831.561242][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 831.561273][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.561291][ T9] usb 3-1: Product: syz [ 831.561305][ T9] usb 3-1: Manufacturer: syz [ 831.561325][ T9] usb 3-1: SerialNumber: syz [ 831.728032][ T3207] team0 (unregistering): Port device team_slave_1 removed [ 831.851869][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 831.851919][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 831.851939][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 831.853874][ T3207] team0 (unregistering): Port device team_slave_0 removed [ 831.909527][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 831.980919][ T9935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 832.067225][ T9935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 832.068806][ T9935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 832.070108][ T9935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 832.070854][ T9935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 832.638276][ T3207] team0 (unregistering): Port device team_slave_1 removed [ 832.696798][ T3207] team0 (unregistering): Port device team_slave_0 removed [ 832.899016][ T825] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.899150][ T825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.301807][T11696] usb 3-1: USB disconnect, device number 28 [ 833.439451][T12972] lo speed is unknown, defaulting to 1000 [ 833.543706][T12972] wg1 speed is unknown, defaulting to 1000 [ 834.236957][ T5841] Bluetooth: hci4: command tx timeout [ 834.755909][T12986] loop2: detected capacity change from 0 to 32768 [ 834.863312][T12986] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 834.930035][T12986] XFS (loop2): Ending clean mount [ 834.945460][T12986] XFS (loop2): Quotacheck needed: Please wait. [ 835.556052][T12986] XFS (loop2): Quotacheck: Done. [ 835.570245][ T38] audit: type=1800 audit(1776153051.090:600): pid=12986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2014" name="file0" dev="loop2" ino=4420 res=0 errno=0 [ 836.197796][ T5826] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 836.308343][ T5841] Bluetooth: hci4: command tx timeout [ 836.593275][T12972] chnl_net:caif_netlink_parms(): no params data found [ 837.127087][T12972] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.127212][T12972] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.127687][T12972] bridge_slave_0: entered allmulticast mode [ 837.130271][T12972] bridge_slave_0: entered promiscuous mode [ 837.171815][T12972] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.171932][T12972] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.172160][T12972] bridge_slave_1: entered allmulticast mode [ 837.174869][T12972] bridge_slave_1: entered promiscuous mode [ 837.312124][T12972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.331541][T12972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.392972][ T5841] Bluetooth: hci4: command tx timeout [ 838.543034][T12972] team0: Port device team_slave_0 added [ 838.628803][T12972] team0: Port device team_slave_1 added [ 839.074921][T13023] loop1: detected capacity change from 0 to 32768 [ 839.163001][T13023] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 839.234434][T13023] XFS (loop1): Ending clean mount [ 839.286663][T13023] XFS (loop1): Quotacheck needed: Please wait. [ 839.476733][T12972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.476747][T12972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.476770][T12972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.563027][T12972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.563061][T12972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.563091][T12972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.908450][T12972] hsr_slave_0: entered promiscuous mode [ 839.909474][T12972] hsr_slave_1: entered promiscuous mode [ 839.910381][T12972] debugfs: 'hsr0' already exists in 'hsr' [ 839.910402][T12972] Cannot create hsr debugfs directory [ 840.187049][T13023] XFS (loop1): Quotacheck: Done. [ 840.194767][ T38] audit: type=1800 audit(1776153055.710:601): pid=13023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2024" name="file0" dev="loop1" ino=4420 res=0 errno=0 [ 840.346918][ T5825] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 840.399095][T12587] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 840.459793][T12587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 840.471102][ T5841] Bluetooth: hci4: command tx timeout [ 840.711351][T12587] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 840.779110][T12587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 841.309132][T12587] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 841.839283][T12587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 844.812038][T13057] loop1: detected capacity change from 0 to 32768 [ 844.830672][T13057] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 844.875122][T13057] XFS (loop1): Ending clean mount [ 844.900615][T13057] XFS (loop1): Quotacheck needed: Please wait. [ 845.087578][T12587] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 845.301230][T12587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 845.419587][T13057] XFS (loop1): Quotacheck: Done. [ 845.426435][ T38] audit: type=1800 audit(1776153060.940:602): pid=13057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2032" name="file0" dev="loop1" ino=4420 res=0 errno=0 [ 845.568176][ T5825] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 846.355753][T13075] delete_channel: no stack [ 846.580286][ T9935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 846.640269][ T9935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 846.643190][ T9935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 846.697306][ T9935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 846.791847][ T9935] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 847.022335][T13084] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 847.022464][T13084] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 848.434954][T13080] lo speed is unknown, defaulting to 1000 [ 849.446461][ T9935] Bluetooth: hci5: command tx timeout [ 849.876286][T13099] loop1: detected capacity change from 0 to 32768 [ 850.645561][T13080] wg1 speed is unknown, defaulting to 1000 [ 851.008560][ T3207] bridge_slave_1: left allmulticast mode [ 851.008579][ T3207] bridge_slave_1: left promiscuous mode [ 851.008733][ T3207] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.087184][T13099] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 851.199999][ T3207] bridge_slave_0: left allmulticast mode [ 851.200023][ T3207] bridge_slave_0: left promiscuous mode [ 851.200197][ T3207] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.229067][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 851.325516][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 851.338891][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 851.440033][T13099] XFS (loop1): Ending clean mount [ 851.455030][T13099] XFS (loop1): Quotacheck needed: Please wait. [ 851.498128][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 851.520255][ T5841] Bluetooth: hci5: command tx timeout [ 851.521625][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 853.418915][T13099] XFS (loop1): Quotacheck: Done. [ 853.503764][T13133] binder_alloc: 13132: pid 13132 spamming oneway? 1 buffers allocated for a total size of 4096 [ 853.504271][T13133] binder_alloc: 13132: pid 13132 spamming oneway? 2 buffers allocated for a total size of 5120 [ 853.578959][ T5825] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 853.591089][ T5841] Bluetooth: hci5: command tx timeout [ 855.737113][ T9935] Bluetooth: hci5: command tx timeout [ 855.888428][ T9935] Bluetooth: hci6: command tx timeout [ 857.910545][T13156] loop2: detected capacity change from 0 to 32768 [ 858.159091][T13158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2052'. [ 858.542156][ T9935] Bluetooth: hci6: command tx timeout [ 858.545032][T13156] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 858.589634][T13156] XFS (loop2): Ending clean mount [ 858.600241][T13156] XFS (loop2): Quotacheck needed: Please wait. [ 858.680949][ T3207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.869471][T13156] XFS (loop2): Quotacheck: Done. [ 858.877360][ T3207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.881811][ T38] audit: type=1800 audit(1776153074.400:603): pid=13156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2053" name="file0" dev="loop2" ino=4420 res=0 errno=0 [ 858.960246][ T5826] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 858.979283][ T3207] bond0 (unregistering): Released all slaves [ 860.090161][T11700] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 860.328143][T11700] usb 3-1: Using ep0 maxpacket: 32 [ 860.342171][T11700] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 860.342196][T11700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.358782][T11700] usb 3-1: config 0 descriptor?? [ 860.439556][T11700] as10x_usb: device has been detected [ 860.444965][T11700] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 860.547861][ T9935] Bluetooth: hci6: command tx timeout [ 860.697870][T13179] INFO: trying to register non-static key. [ 860.697883][T13179] The code is fine but needs lockdep annotation, or maybe [ 860.697893][T13179] you didn't initialize this object before use? [ 860.697900][T13179] turning off the locking correctness validator. [ 860.697918][T13179] CPU: 0 UID: 0 PID: 13179 Comm: syz.2.2057 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 860.697946][T13179] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 860.697954][T13179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 860.697968][T13179] Call Trace: [ 860.697975][T13179] [ 860.697983][T13179] dump_stack_lvl+0xe8/0x150 [ 860.698010][T13179] assign_lock_key+0x133/0x150 [ 860.698041][T13179] register_lock_class+0xcc/0x2e0 [ 860.698068][T13179] __lock_acquire+0xad/0x2cf0 [ 860.698092][T13179] ? __lock_acquire+0x6b5/0x2cf0 [ 860.698121][T13179] ? do_raw_spin_lock+0x12b/0x2f0 [ 860.698144][T13179] ? do_raw_spin_lock+0x12b/0x2f0 [ 860.698168][T13179] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 860.698193][T13179] lock_acquire+0x106/0x350 [ 860.698216][T13179] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 860.698243][T13179] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 860.698271][T13179] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 860.698295][T13179] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 860.698319][T13179] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 860.698342][T13179] ? lockdep_hardirqs_on+0x7a/0x110 [ 860.698370][T13179] as102_dvb_dmx_start_feed+0x70/0x290 [ 860.698396][T13179] dmx_section_feed_start_filtering+0x518/0x6c0 [ 860.698422][T13179] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 860.698454][T13179] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 860.698483][T13179] dvb_demux_do_ioctl+0x473/0x540 [ 860.698512][T13179] dvb_usercopy+0x199/0x2e0 [ 860.698536][T13179] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 860.698565][T13179] ? __pfx_dvb_usercopy+0x10/0x10 [ 860.698594][T13179] ? __fget_files+0x3a6/0x420 [ 860.698617][T13179] ? __fget_files+0x2a/0x420 [ 860.698641][T13179] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 860.698667][T13179] dvb_demux_ioctl+0x29/0x40 [ 860.698694][T13179] __se_sys_ioctl+0xff/0x170 [ 860.698723][T13179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.698744][T13179] do_syscall_64+0x15f/0xf80 [ 860.698772][T13179] ? trace_irq_disable+0x3b/0x140 [ 860.698794][T13179] ? clear_bhb_loop+0x40/0x90 [ 860.698816][T13179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.698842][T13179] RIP: 0033:0x7faee05cc819 [ 860.698866][T13179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.698883][T13179] RSP: 002b:00007faede826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 860.698906][T13179] RAX: ffffffffffffffda RBX: 00007faee0845fa0 RCX: 00007faee05cc819 [ 860.698921][T13179] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000008 [ 860.698932][T13179] RBP: 00007faee0662c91 R08: 0000000000000000 R09: 0000000000000000 [ 860.698943][T13179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.698954][T13179] R13: 00007faee0846038 R14: 00007faee0845fa0 R15: 00007fff51a68c18 [ 860.698974][T13179] [ 860.750383][T11700] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 860.851547][T11700] as10x_usb: error during firmware upload part1 [ 860.852465][T11700] Registered device nBox DVB-T Dongle [ 860.886889][T11700] usb 3-1: USB disconnect, device number 29 [ 860.981231][T11700] Unregistered device nBox DVB-T Dongle [ 860.990172][T11700] as10x_usb: device has been disconnected [ 861.187398][ T3207] hsr_slave_0: left promiscuous mode [ 861.227815][ T3207] hsr_slave_1: left promiscuous mode [ 861.228278][ T3207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.266915][ T3207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.897320][ T3207] team0 (unregistering): Port device team_slave_1 removed [ 861.936700][ T3207] team0 (unregistering): Port device team_slave_0 removed [ 862.428383][T13176] bond0: (slave syz_tun): Releasing backup interface [ 865.477313][ T3207] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.697538][ T3207] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.769536][ T5490] 8021q: adding VLAN 0 to HW filter on device eth5 [ 865.917883][ T3207] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.989248][ T3207] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 866.138671][ T3207] batman_adv: batadv0: Removing interface: netdevsim0 [ 866.178141][ T3207] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.217494][ T5490] 8021q: adding VLAN 0 to HW filter on device eth6 [ 866.557428][ T5490] 8021q: adding VLAN 0 to HW filter on device eth7 [ 866.830500][ T5490] 8021q: adding VLAN 0 to HW filter on device eth8 [ 867.258616][ T5490] 8021q: adding VLAN 0 to HW filter on device eth13 [ 867.617478][ T5490] 8021q: adding VLAN 0 to HW filter on device eth14 [ 867.913076][ T5490] 8021q: adding VLAN 0 to HW filter on device eth15 [ 868.056457][ T3207] bridge_slave_1: left allmulticast mode [ 868.056480][ T3207] bridge_slave_1: left promiscuous mode [ 868.056630][ T3207] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.136883][ T3207] bridge_slave_0: left allmulticast mode [ 868.136905][ T3207] bridge_slave_0: left promiscuous mode [ 868.137060][ T3207] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.218134][ T3207] bridge_slave_1: left allmulticast mode [ 868.218156][ T3207] bridge_slave_1: left promiscuous mode [ 868.218285][ T3207] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.296806][ T3207] bridge_slave_0: left allmulticast mode [ 868.296831][ T3207] bridge_slave_0: left promiscuous mode [ 868.296973][ T3207] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.377820][ T3207] bridge_slave_1: left allmulticast mode [ 868.377838][ T3207] bridge_slave_1: left promiscuous mode [ 868.377944][ T3207] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.436865][ T3207] bridge_slave_0: left allmulticast mode [ 868.436887][ T3207] bridge_slave_0: left promiscuous mode [ 868.437040][ T3207] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.497772][ T3207] bridge_slave_1: left allmulticast mode [ 868.497789][ T3207] bridge_slave_1: left promiscuous mode [ 868.497890][ T3207] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.556844][ T3207] bridge_slave_0: left allmulticast mode [ 868.556869][ T3207] bridge_slave_0: left promiscuous mode [ 868.557045][ T3207] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.426683][ T3207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.506718][ T3207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 869.526854][ T3207] bond0 (unregistering): Released all slaves [ 869.566631][ T3207] bond1 (unregistering): (slave veth3): Releasing active interface [ 869.566658][ T3207] vlan2: entered promiscuous mode [ 869.626711][ T3207] bond1 (unregistering): (slave vlan2): Releasing active interface [ 869.646898][ T3207] bond1 (unregistering): Released all slaves [ 869.686744][ T3207] bond2 (unregistering): (slave veth5): Releasing active interface [ 869.706835][ T3207] bond2 (unregistering): Released all slaves [ 869.746627][ T3207] bond3 (unregistering): (slave lo): Releasing backup interface [ 869.766477][ T3207] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 869.767848][ T3207] bond3 (unregistering): Released all slaves [ 870.106560][ T3207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.148580][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.148627][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.186625][ T3207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.207262][ T3207] bond0 (unregistering): Released all slaves [ 870.246600][ T3207] bond1 (unregistering): (slave veth3): Releasing active interface [ 870.307925][ T3207] bond1 (unregistering): Released all slaves [ 870.436594][ T3207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.516587][ T3207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.576917][ T3207] bond0 (unregistering): Released all slaves