last executing test programs: 12m31.613839799s ago: executing program 4 (id=1081): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1a00"], 0x20) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406"], 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf9}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x81}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b14"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) syz_usb_connect$uac3(0x0, 0xf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x86a, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0xb, 0x70, 0x4, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x26, 0x25302be3}, [@source_unit={0xc, 0x24, 0xb, 0x8, 0x1, 0x7, 0xd, 0x81}, @power_domain={0x10, 0x24, 0x10, 0xc8, 0x8, 0x2, 0xa, "1238fd577dbd6c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x7, 0x18da, 0x7, 0x1002, 0xfb, 0x9, 0x3, 0x6}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x7, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x596e, 0x8, 0xb}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x1, 0x2a, {0xa, 0x25, 0x25, 0xffff0021, 0xb4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x1, 0x4, 0x226, 0x1002, 0x3, 0x8, 0x80, 0x1}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x7, 0x3, 0x9, 0x86, "b8eef60f4e3a2187c8"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xe6, 0x800, 0x7, "925f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x3b, 0x0, {0xa, 0x25, 0x25, 0x16c, 0xf9, 0x1}}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x111, 0x1, 0x9, 0x0, 0x8, 0x5}, 0x39, &(0x7f0000000140)={0x5, 0xf, 0x39, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xfa, "58dbdb293a3ccacbc9339b76763e5e3f"}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0xf, 0x0, 0x7, [0x9e18dd160c799527, 0x30, 0xc000, 0xff0030, 0x3f00]}]}, 0x2, [{0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="15038d34d6e09ea52d677b9a99f842c341db0997e2ec0a8bd8802b49b8e249d762b21bd8641b0b11cdca29d1d1dd5b3c13357392cae3cb6341cc1268e39c04418c5f6480a850fa1923124d69f5e7134100"/96]}, {0x3, &(0x7f00000001c0)=@string={0x3, 0x3, "ff"}}]}) 12m29.349931669s ago: executing program 4 (id=1097): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 12m28.488622914s ago: executing program 4 (id=1102): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d384", @ANYRESHEX, @ANYRES64]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe750561", 0x68}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc", 0x23}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f", 0x7e}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fa", 0xca}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r3, 0x1, 0x2c, 0x0, &(0x7f0000000040)=0xfffffffffffffd56) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d384", @ANYRESHEX, @ANYRES64]) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe750561", 0x68}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc", 0x23}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f", 0x7e}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fa", 0xca}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) (async) socket$alg(0x26, 0x5, 0x0) (async) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) (async) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) getsockopt$sock_int(r3, 0x1, 0x2c, 0x0, &(0x7f0000000040)=0xfffffffffffffd56) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) accept4(r2, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 12m27.68899182s ago: executing program 4 (id=1111): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x20, r1, 0x0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2b8}, 0x2, 0x48000, 0x1, {0x2}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_PHYS(r6, 0x4008556c, 0x0) accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x80000) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r10, 0x8) r11 = accept4(r10, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000180)=0x8) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000002c0)=0x20) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r14, @ANYBLOB="010000000000000000001700000050000680"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r14, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8878}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1a33}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x539e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9f6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbbc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) bind$unix(r12, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) landlock_restrict_self(r9, 0x4) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) bind$unix(r12, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r8, {0x6, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}}, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) 12m27.175827626s ago: executing program 4 (id=1115): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x8764, 0x530394651130d19e, 0xfefffffe, 0x2ff, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0x644, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0xa8}}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000080)={0x74, 0xffffffffffffffff, 0x82512fdb55d84de1, {0xfff, 0x7}}, 0x1) 12m22.856681564s ago: executing program 4 (id=1132): unshare(0x6020400) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x30}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x8018}, {}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffff5) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80800) getsockopt$bt_BT_SNDMTU(r1, 0x11, 0xc, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x2e, 0x0, &(0x7f0000000100)) (fail_nth: 2) 12m22.461485682s ago: executing program 32 (id=1132): unshare(0x6020400) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x30}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x8018}, {}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffff5) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80800) getsockopt$bt_BT_SNDMTU(r1, 0x11, 0xc, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x2e, 0x0, &(0x7f0000000100)) (fail_nth: 2) 8m25.802452723s ago: executing program 3 (id=2041): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x383341, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x110, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x2000000000000189, &(0x7f0000000340)=ANY=[@ANYRES64=r5, @ANYRESHEX=r6, @ANYRESHEX=r5, @ANYRES32=r5, @ANYRES16], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r10 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x50) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, r1}) ptrace$ARCH_SHSTK_ENABLE(0x1e, r11, 0x1, 0x5001) listen(r10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) 8m25.560953901s ago: executing program 3 (id=2043): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) unshare(0x20040600) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r1, 0xc2945000) fcntl$addseals(r1, 0x409, 0x8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000300)={0x4, r0, 'id0\x00'}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="02bf61", 0x1) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x2000c004) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 8m25.408862521s ago: executing program 3 (id=2044): r0 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @local, @void, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "f22ada", 0x30, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x1, '\x00', {0x2, 0x6, "020dca", 0x43, 0x4, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="020100030a0000002abd700000000000030006000000000002000000e00000090000000000000000030005000000000002000000e00000010000000000000000020010"], 0x50}}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0xd, 0x1}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0xd, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6e6577206563727970746673207472757374650eee0c0c00000030303030300400000130303030303034303936005610a6ae5d51446e150b0a18f95925581837e6ac61d0ce1a471bdfaa9278add7cb7bc28b1b80528aed87064ed153efef3b26b6422b2721081e522ed669f19a8e10a4fd8405f414c9bcf7f2a857d0d390dc070b297f36cda6c6ecabe08446929183b1ba29aa34f8bd891c0f5760a5101aaf588b83fe3a249607eb1319351572538cd023a424687a92a0bccbdccbe22807c2"], 0x2e, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)=0x7) (async) sched_setscheduler(r3, 0x5, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r6, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x1, @loopback, 0xc}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) (async) sendmsg$inet6(r6, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x1, @loopback, 0xc}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) mount$cgroup(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@name={'name', 0x3d, '-'}}, {@name={'name', 0x3d, '-'}}]}) 8m23.685103964s ago: executing program 3 (id=2047): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000009"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x20000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0xa, 0x0, 0x20363059, 0x2, 0x6, [{0x2, 0x8}, {0x2, 0x3ff}, {0x3ff, 0x401}, {0x1, 0x3}, {0x1, 0x1000}, {0x3, 0x18}, {0x6e5, 0x2}, {0xfffff000, 0x5}], 0x3, 0x1, 0x4, 0x1, 0x2}}) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x409, &(0x7f0000000080)={[{@nogrpid}, {@init_itable}, {@sysvgroups}, {@orlov}]}, 0x1, 0x4fa, &(0x7f0000000a00)="$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") ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000040)='nogrpid', 0x200000, &(0x7f00000000c0)={@align=0x3, {0x8, 0x8000, 0x2, 0x4}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x4, 0x9c, 0xf, 0x8000, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x700, 0xebe, 0x28}}) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x800}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044854}, 0x880) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x3fffffffffffff, 0x200000000000000}, 0xfffffffe}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, {0x0, 0x4, 0x0, 0x0, 0x8, 0xfffffffffffffffb, 0x0, 0xbfa}, {0x0, 0x1, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x2004c100}, 0x2c000010) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r6, &(0x7f0000000380)=[{&(0x7f0000000300)=""/13}, {&(0x7f0000000640)=""/262}, {&(0x7f0000000340)=""/43}], 0x20000000000003e5) 8m23.505043251s ago: executing program 3 (id=2049): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @pix_mp={0xffffffff, 0xf, 0x31363553, 0x7, 0xd, [{0x9, 0x2}, {0x22955b83, 0x7f68}, {0x5, 0x4}, {0x28, 0x3}, {0x6, 0x5}, {0x800, 0x3}, {0x5, 0xb33b}, {0x3, 0x4}], 0x42, 0x6, 0x1, 0x2, 0x1}}, 0x9}) (fail_nth: 7) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(r0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x4b, &(0x7f00000004c0)={0x5, 0xf, 0x4b, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0xf4, 0xf000, 0x1}, @generic={0x3, 0x10, 0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x4, 0xff00, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x2e, "907d7018198061e5ca382dbaa429e7ff"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5f, "5d6aa04a7638eb4ac76071df3e57565f"}]}, 0x1, [{0x0, 0x0}]}) 8m22.832889246s ago: executing program 3 (id=2051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101a02, 0x0) copy_file_range(r1, &(0x7f0000000000)=0x7, r1, 0x0, 0x7, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) r4 = fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000001c0)='d\x85^D\vipsync@F\x85i\f\x8b\xae\x02;\xa0\xc5,\x9b\fS\xad\xc2\x9eMr\x90\xc5^\xa6\xf7\xdc\xad\xec\a', &(0x7f0000000100)='./file0/file0\x00', r4) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x0, 0x13c) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x10, 0x0, 0xfffffffffffffff0}]}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r9, 0x0, 0xffffffdb) ioctl$UFFDIO_WAKE(r9, 0x8010aa02, &(0x7f0000000000)={&(0x7f000014a000/0x3000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 8m17.607456019s ago: executing program 0 (id=2067): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x4100, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x1, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) 8m17.423897666s ago: executing program 0 (id=2068): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x22}, [@alu={0x4, 0x1, 0xb, 0x96bdff5043e24129, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0xd455d0f2adb9ba32, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x100c007, &(0x7f0000000600)=ANY=[@ANYBLOB='umask=00000000000000000000016,lastblock=00000000000000000001,uid=ignore,uid=ignore\x00dmode=00000000000000000000006,dmode=00000000000000000000003,fileset=00000000000000001791,uid=', @ANYRESDEC, @ANYBLOB="2cae31643d667d7266653e0a00"], 0x1, 0xc5e, &(0x7f0000002080)="$eJzs3UFsHNd9B+D/G3JFym4qJkoUJ42LdVuksmK5sqSYilW4q5pmG0CWhVAM0EMKrkhKXZgiCZJqZCNtmV566CFAUfSQE4HWKJCigVEXQY9s6wLJxYcip56IFjaCoge2CJqTscHMvpWWFGXRIilR1vcl5G935r2Z92aGM7TAty8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjffvnciefSg24FAHA/XRj72omTnv8A8Ei55L//AQAAAAAAAAAAAABgv0tRxOFIMX9hPU1U7zsGz7dmr98YHxndutrBVNXsq8qXX4PPnTx1+svPD5/p5ofX322fi1fHLp2rvzR3bX5henFxeqo+PtuanJsqtr2FretP33OLjpUHYCAirk9dubJYP/nsqQ2rbwy9P/D4kaGzw08ff7JT9kZ9fGR0dKynTH/tnvd+mzuN8DgQRRyPFM98/yepGRHVAdvhsbjLtbPXDladOFZ1YnxktOrITKs5u1SuvNg9EEVEvadSo3uM7sO52JFGxHLZ/LLBx8rujc03F5qXZ6brF5sLS62l1tzsxdRpbdmfehRxJkWsRMTawO2bq0UR/ZHiu4fW0+WI6Osehy9VA4Pv3I7t/2TtibKd9VrESvEQnLN9bCCKeCVS/PSdozFZHrP8FV+MeKXMH0S8WeaLEam8ME5HvLfFdcTDqT+K+PPy/J9dT1PV/aB7Xzn/9fpXZ6/M9ZTt3le2eD68vf3nQztfPXv1fOg7FNFub7Hi4Ka8P/b5vWkwimhWd/z1dO+/7AAAAAAAAAAAAAAAAACw2w5GEZ+LFC//+x9W44qjGpd+6Ozw7wx9oneI7xN32U6KiGcjYrnY3pjcA3kI8cV0MaUHPJb4UTYYRfxRHv/37e1VWd7rNgEAAAAAAAAAAAAAAAAAADyaivhxpHjh3aNpJXrnFG/NXq1fal6e6cwK2537tztnervdbtdTJxs5J3Iu51zJuZpzLWcUuX7ORs6JnMs5V3Ku5lzLGX25fs5GzomcyzlXcq7mXMsZ/bl+zkbOiZzLOVdyruZcyxn7ZO5eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICPkyKK+CBSfOeb6ylSRDQiJqKTqwMPunUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGkgFfF2pKj/buPmsv6ISNX/O46W305H40CZn4rGcNQiXozGufL9i9FoVtnf+PaD6AA7UktF/ChSDAy+dfOEf6Jz/muddzcvg3jzW7fefb6/k33lt9///8O/V+aRQ2eHR3/5iRh6f+DxLV6nrRpw7Hxr9vqN+vjI6OhYz+L+vPdP9Swbyvstdq33LL7+xmvNmZnphXt/UV4CO6juxbZfHHj4jvOB2A/NaOer/aNWj/6PUPjzEfHAe7p7Lx7wjYn7onz+vxcpfuPd/+g+8Lu///1C513fzbI/++Nbz/8XNm/oDs/8nT7/D/cseyH/NlLrjxhcujZfOxIxuPj6G8db15pXp69Oz54+ceIrw8NfOXWidiBi8EprZrrn1Y4PFQAAAAAAAAAAAAAAAMD9lYr4rUjR/NF6qkfEjWq81tDZ4aePP9kXfdV4qw3jtl4du3Su/tLctfmF6cXF6an6+Gxrcm5qeru7G6yGe42PjO5JZ+7q4B63/+DgS3Pzry+0rv7B0pbrHxs8d3lxaaE5ufXqOBhFRKN3ybGqweMjo1WjZ1rN2arqxS0H0310tVTEf0aKydP19FRelsf/9Y7wr/SO/1/evKE9Gv/3yZ5l5T5TKuJnkeLX/+KJeKpq52Nx2zHL5f4mUhw784VcLg6U5bpt6HyuQGdkYFn2fyPFP3ywsWx3POThW2Wf2/aBfUiU5/9QpHj7z74Xv5KX9W/4/Ietz/9jmze0zfPf/pNN9e5y/j/ds+yxDZ9XsDv9f9SV5/94pHjx8Fvxq3lZ/4d8/kf3szeO5sI3P59jj37+P9OzbCjv99d2p+sAAAAAAAAAAAAPtVoq4m8jxZOj/en5vGzD33/VbpXt/fu/qc0b2qO///psz7Kp3Zmv6K4vdnxQAQAAAGCfqKUifhwpri69dXMM9cbx3z3jP3/z1vjPkbRpbfXvfL9YfW7Abv77X6+hvN+JnXcbAAAAAAAAAAAAAAAAAAAA9pWUing+z6c+cZf51Fcjxcv//Uwul46U5brzwA9V3wcvzM0ePzczMzfZXGpenpmuj803J6fLup+OFOt//YVct6jmV39q0z66c7EvRIrRv+uW7czF3p2bvDMfeGcu9rLsJyPFf/39xrLdeaw/c6vsybLsX0WKb/zT1mWP3Cp7qiz7vUjxw2/Uu2UfK8t2Px/1s7fKPjs5V+zq+QAAAAAAAAAAAAAAAAAAAODRVEtF/Gmk+J9rKzfH8uf5/2s9bytvfqtnvv9NblTz/A9V8//f6fW9zP8/dHuND9odEe1D99hrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY31IU8UakmL+wnlYHyvcdg+dbs9dvjI+Mbl3tYKpq9lXly6/B506eOv3l54fPdPPD6++2vnh17NK5+ktz1+YXphcXp6fq47Otybmp6W1vYaf1NztWHYD6tdeuT125slg/+eypDatvDL0/8PiRobPDTx9/slt2fGR0dKynTH/tnvd+m3SH5QeiiL+MFM98/yfpnwciitj5sbjLtbPXDladOFZ1YnxktOrITKs5u1SuvNg9EEVEvadSo3uM7sO52JFGxHLZ/LLBx8rujc03F5qXZ6brF5sLS62l1tzsxdRpbdmfehRxJkWsRMTawO2bq0URr0WK7x5aT/8yUP4g5ePwpQtjXztx8s7tKPawj9tQtrNei1gpHoJzto8NRBH/GCl++s7R+NeBiP7ofMUXI14p8wcRb0bnfKfywjgd8d4W1xEPp/4o4v/K8392Pb0zUN4PuveV81+vf3Xp7d6y3fvKQ/98uJ/2+b1pMIr4YXXHX0//5ucaAAAAAAAAAAAAAAAAYB8p4pcixQvvHk3V+ODuoOiF1uzV+qXm5ZnOsL7u2L/u6na73a6nTjZyTuRczrmSczXnWs4ocv2cjTIH2+2J/H4550rO1ZxrOaMv18/ZyDmRcznnSs7VnGs5oz/Xz9nIOZFzOedKztWcazljn4zdAwAAAAAAAAAAAAAAAAAAPl6K6n8pvvPN9dQe6MwvPRGdXDUf6MfezwMAAP//mgX8+A==") creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x90) set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r2, r2, r2}, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8007}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="640ac9487eeb00007110af00000000df95"], &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="00200000ffffffffffffbbbbbbbbbbbb08004500003c221fe39739f6ec99ac141418e00000014e20000000289078023a000000000000ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"], 0x4e) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@newtaction={0x134, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x4}, {0x11c, 0x1, [@m_nat={0x70, 0x1d, 0x0, 0x0, {{0x8}, {0x4}, {0x45, 0x6, "35d20f19a3fd5a3ecfdb60e82d09dbc6f2ea22947394df0dacd7f080838d8328646fed97f859409ae071cc3f2c1dd45dcad270b03259f834c801009a3c1ae16739"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0xa8, 0xd, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x20000000, 0xcf4e, 0x2e4f7af}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15c3, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x6, 0x6, 0x800}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x20000000, 0x9, 0xf970a43}}]}, {0x25, 0x6, "f138b42c4edb552afebd27b44c8ea514f2ef4a5b1b5e14a96963dcd6b8cc265b15"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000180)="270300000090a84bceff", 0xa}, {0x0}], 0x2}, 0x400c0c8) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x2, 0x0, &(0x7f0000000000)=0xfffffffe, 0xf4000000) 8m15.269209876s ago: executing program 0 (id=2074): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x759, &(0x7f00000000c0)={[{@usrquota}, {@nobarrier}], [], 0x2c}, 0x0, 0x4f6, &(0x7f00000002c0)="$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") ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000900)={{}, "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"}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000000)="10", 0x1, r1) read$dsp(0xffffffffffffffff, 0x0, 0x0) futimesat(r0, 0x0, &(0x7f0000000400)={{0x77359400}}) 8m13.732573492s ago: executing program 0 (id=2075): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@block_validity}, {}, {@usrjquota}, {@inode_readahead_blks}, {@orlov}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@inlinecrypt}, {@bh}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x140) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) 8m7.901260928s ago: executing program 0 (id=2082): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0xfff, 0x0, 0x5}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'ip6_vti0\x00', {0xdae}, 0x4}) 8m3.918414702s ago: executing program 0 (id=2092): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r2 = fanotify_init(0x81, 0x40000) fanotify_mark(r2, 0x105, 0x800101b, r1, 0x0) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f0000000000)) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 8m3.334773209s ago: executing program 33 (id=2092): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r2 = fanotify_init(0x81, 0x40000) fanotify_mark(r2, 0x105, 0x800101b, r1, 0x0) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f0000000000)) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 3m9.544470323s ago: executing program 1 (id=2610): open_tree(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@metadata_ratio}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(r1, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4) r4 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x3, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, 0x0) 3m7.827332197s ago: executing program 1 (id=2612): sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@pppoe={0x18, 0x0, {0x1, @remote, 'ipvlan0\x00'}}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f00000001c0)="06fc23ca09c94ea0462fb758bcf31874dd626dfb9433d5a5cc90705144f9bb2793dd8abfbad387490000000000", 0x2d}, {&(0x7f00000006c0)="d11a7ea0f3f7cc194fbd86fcf591543b1a8c4b43b43774d634d1149a27240834f43a99ffbd278f7ea3cfb6740fc12e012d5d0ab3ed7db57bdf1388fc9bdb612758b2b8102f51e31ea0b47135b8fdcb3311b8d2bac94970ec84331d184e985e9ea51ff6299e12635d709617db12bda96912be81b28a5cbe0602a28962fa54df64c99797e9eaba756fb93eaa95a3528df24821ca05ce6477b4268e7137880e13fed2f36a49", 0xa4}, {0x0}], 0x4}}], 0x1, 0x200000c4) socket$alg(0x26, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000014c0), 0x430040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f00000023c0)={0x2020}, 0xfffffe29) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0x5) write$dsp(r1, &(0x7f0000000380)="8f02b1145e6308d98e553f07835f9de2b8389279a5becfcec34a3d806185be01", 0x20) 3m4.70857061s ago: executing program 1 (id=2617): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m4.138275288s ago: executing program 1 (id=2618): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) close(0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x37b9, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 3m0.254095341s ago: executing program 1 (id=2625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x2d, &(0x7f0000000280)=""/45, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfef8, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000180)={0x40, 0x31, 0x10, "825b7e6f050000571a8d0ae9a63d3100"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 2m57.42333183s ago: executing program 1 (id=2628): syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000300)='./file2\x00', 0x8008, &(0x7f00000000c0)=ANY=[], 0xfd, 0x149, &(0x7f00000009c0)="$eJzs0EFLOkEYx/Hvurrqf/WvQUHHwMtmmFrRLUijoEMJQZeuuVGwm6IQHuveoXt76AUsnnoBZScjIYpehjfBi7Exuy7YrRcwn8vM/J55nmV2d2tgkNUiTO007GbLbLfN+tJR7WAvFuZxIOHv7GZLJRXmTxU4F2sUhjdQB17SETwsc/W0YYnzsAIGSao6nF3E1LD3H1Cd/1oGyywT9Bu5JL2suGeZa3727Rk56C0EGTOqmSArAd72NJsLMjFvBHSc8AmF/GhDrYA28TyPjqPjvkantVtxKbWocmxqgCL6Pov9wnux634Mwu/d65vrpXLSrwPXd2K9ghP//krXVQ/f+vuFvCZmiD+qTDxHAdevD5+VNKAzrtnxYOBlZvY5vYdxzRYjHxOQBaXjqP+JKWE92Gi/TpIkSZIkSZIkSZL0Jz8BAAD//wFsTrE=") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2044040}, 0x8031) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000200000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) 2m41.980324093s ago: executing program 34 (id=2628): syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000300)='./file2\x00', 0x8008, &(0x7f00000000c0)=ANY=[], 0xfd, 0x149, &(0x7f00000009c0)="$eJzs0EFLOkEYx/Hvurrqf/WvQUHHwMtmmFrRLUijoEMJQZeuuVGwm6IQHuveoXt76AUsnnoBZScjIYpehjfBi7Exuy7YrRcwn8vM/J55nmV2d2tgkNUiTO007GbLbLfN+tJR7WAvFuZxIOHv7GZLJRXmTxU4F2sUhjdQB17SETwsc/W0YYnzsAIGSao6nF3E1LD3H1Cd/1oGyywT9Bu5JL2suGeZa3727Rk56C0EGTOqmSArAd72NJsLMjFvBHSc8AmF/GhDrYA28TyPjqPjvkantVtxKbWocmxqgCL6Pov9wnux634Mwu/d65vrpXLSrwPXd2K9ghP//krXVQ/f+vuFvCZmiD+qTDxHAdevD5+VNKAzrtnxYOBlZvY5vYdxzRYjHxOQBaXjqP+JKWE92Gi/TpIkSZIkSZIkSZL0Jz8BAAD//wFsTrE=") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2044040}, 0x8031) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000200000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) 6.272146496s ago: executing program 5 (id=3044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d61"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000000306050000000000000000000100000405000100070000000900020073797a300000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.771259688s ago: executing program 5 (id=3047): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000002fc0)={{r1, &(0x7f0000000180)='\x00', 0x80, &(0x7f0000000280)={@_ha_fsid={[0x8001]}, {0x2, 0x7, 0x3db8a910, 0x5}}, 0xffffffff, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x200}, 0x4, &(0x7f0000002f00)=[{0x3, 0x8e24, &(0x7f0000000340)='$\x00', &(0x7f00000003c0)}, {0x1, 0xfffffa92, &(0x7f0000000440)='/dev/ptmx\x00', &(0x7f0000000cc0)="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", 0x1000, 0xa}, {0x3, 0xe85, &(0x7f0000002e00)='.,[:$[}\x00', 0x0, 0x0, 0x30}, {0x1, 0xde15, 0x0, &(0x7f0000002ec0)="5009224818a4a28f310864fb1d52d16118a15f2eac1359d8998f3d568e2fc711", 0x20, 0x2a}]}) ioctl$TCSETS(r1, 0x40204706, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 5.432298909s ago: executing program 5 (id=3049): openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r0, &(0x7f0000000280)=@nfc_llcp, &(0x7f0000000300)=0x80, 0x80000) 4.32888315s ago: executing program 5 (id=3055): fanotify_init(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0) 3.736097659s ago: executing program 5 (id=3056): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 1.747720239s ago: executing program 2 (id=3062): openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r0, &(0x7f0000000280)=@nfc_llcp, &(0x7f0000000300)=0x80, 0x80000) 1.548834841s ago: executing program 2 (id=3063): fanotify_init(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0) 1.531712165s ago: executing program 5 (id=3064): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000100), 0x1, 0x511, &(0x7f00000002c0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000001180)=@ethtool_perm_addr={0x20, 0x33, "9202d35fd98857d17b5841f9b724b37ed51f39ac2a1c3276a8ebbda75ee5a698401ede1d61e3fd98e7b3f3d6750d01ba0ec681"}}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000001140)=0x7f, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x9}, 0x0, &(0x7f0000001080)={0xffffffff00000000, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe, 0x7}, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x1) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004800003400000000000690780a010102ac1414aa070c0476bc4b4c9e3e260cbf00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100), 0x20901, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) read(r3, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r4, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1) 1.439334414s ago: executing program 2 (id=3065): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) getpgid(r0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) 775.550895ms ago: executing program 2 (id=3066): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001900010900000000000000021800ee01acea2e000000000008070000ac141400"/45], 0x24}, 0x1, 0x0, 0x0, 0x24001850}, 0x0) 430.133519ms ago: executing program 2 (id=3067): capset(&(0x7f0000002ffa)={0x20071026, 0xffffffffffffffff}, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) lstat(&(0x7f0000000040)='\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=@updsa={0x1bc, 0x1a, 0x4, 0x70bd27, 0x25dfdbfd, {{@in6=@local, @in=@remote, 0x4e21, 0xb9, 0x4e21, 0xb, 0x2, 0x0, 0x1e0, 0x29, 0x0, r1}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x32}, @in6=@loopback, {0x1, 0x1, 0x43842ef1, 0x2, 0x3, 0x0, 0x9, 0x7ff}, {0x2, 0x1000, 0x3, 0x1}, {0x9, 0x2}, 0x70bd25, 0x3504, 0x2, 0x4, 0x8, 0x80}, [@tmpl={0xc4, 0x5, [{{@in=@loopback, 0x4d4, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x0, 0x3, 0x1, 0x3, 0x4, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, 0x0, @in6=@remote, 0x3500, 0x1, 0x0, 0x0, 0xe, 0x0, 0x7fffffff}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0xc3}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x3503, 0x1, 0x1, 0x6, 0x8b, 0x5582, 0x4}]}, @proto={0x5, 0x19, 0x32}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nolargeio}, {@nolargeio}, {@bsdgroups}]}, 0x1, 0xb92c, &(0x7f000002e340)="$eJzs3XtsnWUdwPGnXbu1kMEwdFwUGZMBA9nWbVAKwbUd6yiXymVgB0yorMCk4zIKblxLCAmoGMB4IWZRIl6jRHEQiYLTiHJxGGOA+AeRgDFgsuhfoMZQ8/acU9pDaejTPU8z9vkk6+n7nv6eted7nvdky7LT03luRwh1oWQwVHvxza1PfHFd55M//9L92x++6/lHSmfbGsp3t5Vv28u3HWF4seHTtaVTdV/f9mhtcVA7et29Ghtr9gnh0qp1Wko3NzVXvm6oSvn0vMr9tSOHNZ8v/Rqxd/HhD23rekMIc0bN14QQlrzrB91D9bSv7iw/JmFUtxnlu2veuW/4tq70a8WzIazYHt7z+TGtiu9zTufsjx883d/I7qCnfXVXVf+2cuea8n5sq96De6Lq5/lrDy26s/wQDj/fpjHhlPS0d54RJtjHx/3vogVDpetmfQhhZghhVgihYbp7sGu0dywrXrNrK8fl7JX9P2e858WRS1/7TwhhbvEyXrpelF4LgN1Le8eylePs/5kT7f/WO7a9Yf/D7q+rvWNZsder9n/DRPt/Q+vaF0r7vq2lNPX29P4QAAAAAMC4rtty45W9/f19m3ziE5/4ZOST6b4yAam9s+mn+zsBAAAAAAAAAAAA3q8c/5x4un9GAAAAAAAAAAAAAPig6Opu3zmjZsypGaMPDtnRN3y7/K2eK753z9D6ym357tPHWXLM+/wPDQ0Nte5cUXkv9llV75fdUD1crD9Y99bT5cO26vcfrB8+Wx8uuWxDf9+S4rdaWR82FwfNxbqd9eHe4mBpcbC6Pny/OFg2fNAYthcHiy69un99ceLUyEfsg6WrezDMGFMsjHk2jO4/WD9/e+V2giUrq9WFcv/99z9vU9V9FeP3f2f99vd6X3J2jcn1X7S5cjvBku/a/we9vuaX49333v1H1u/QP61xrv9jGlVf96uu//PGWXJkfu6LT19R9H/sybvWlE/VvZ/r/6j1V1b3H1585PpfLHVK5fpfvLasmtKDsQfq6r5950T7f+L+dZXX9dpRsyOrnXHS861F/30Wbvtz+VT9JPufMtH+r5n3rusJk9TV/eBQ1f6fRP9wxDhLjjT52kunPVv0/8nTa5pG3TeZ/quq+y8e2HjN4uu23Hjsho29l/dd3ndVy5LlJxzf3LK8efHwFaH0cWqPyZ5kavt/+P3/R8/UhLBgZH7B8W9fUPSf++3OnvKphkn275xw/18y9ntllPm1YebMsLl3YGBTc+lj5XBp6WPpy8bpP4nX/48dVf6yxvJtTQgHjsy3HNB0YNG/acaqj5RPzZxk/9UT9h8c+X2JNMX9v75qZkz/wece/FnRf/4Pz6/8ncJkX/9Pnah/7bfs/6nq6q76C59drOj/t7qFJ0aOd/nzX1o5+v9q/wXnRo6fpn9aOfrf8OHDBiLHT9c/rRz9G5effHvk+Bn6p5Wj//aTWr8bOX6m/mnl6P+NY477Y+R4t/5p5eh/zuHNr0eOf1L/tHL0//uHtlwYOX6W/mnl6L/4kFtujhw/W/+0cvQfmH1tU+T4OfqnlaP/E7XXL40cP1f/tHL0/82xG34fOb5G/7Ry9N97/sZXIsfP0z+tHP3PWtp7d+T4+fqnlaP/Ayf3PRw5/in908rR/+KDH70scrxH/7Ry9P9q00/bI8fX6p/Wru5f/Q9yiv476p84KnK5C/RPK8f+r9vr8X0jxy/UP60c/W9a8J3/Ro5fpH9aOfo/cvSDL0eOr9M/rRz93zjxx9sixz+tf1o5+s877gdfjhy/WP+0cvS/5rA/vRQ5fon+aeXo//iiF/4VOd6rf1o5+r/6ib88EDn+Gf3TytH/mOaXn4wcv1T/tHL0X/PRX4/3/wS9H+v1TytH/637PdUfOd6nf1o5+v+u5pn6yPHL9E8rR/9999kxP3L8cv3TytH/mYWH/CNy/Ar908rRPxxx0I7I8Q36p5Wj/4XHNz0UOf5Z/dPK0f/+1v3uiBy/Uv+0cvTfOXf2DZHj/fqnlaP/4Qc1nh05vlH/tHL0v62x/oTI8av0TytH/8dm1hwaOX61/mnl6F+7pOtHkePX6J9Wjv7PrTjzC5Hj1+qfVo7+9y5ufzVyfJP+aeXov3beqqcix6/TP60c/Y/Yd23s/8g+oH9aOfr/M6w7IHL8ev3TytF/25yzb40cv0H/tHL0v+XQ89ZGjn/uxTe3zgr6J5Oj/y9OuPO+yPHN9n9aOfpvarn9scjxLfqnlaP/wiPv+Wvk+I36p5Wj/ytH3f3vyPGb9E8rR/9vzvrK7Mjxm/VPK0f/8xvuOzpy/Bb908rRf/aBW1dGjt+qf1o5+v/2gAfWR47fpj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9nBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt6dwF06Fv4fPzNmxhpS1iLZS3ZZUhg0KC3WJPs+WUNZC1EhWyhKypqtJEtJSLudylJJKdJGWilZ/q8xS4zvSP37NZrv+/16zTxnuefMda7PfZ3nmed+zj0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD85208av3VBoNh464d9Iz7b3/olCuP3GzUVZcdfdzVFxx200Vjb111mnF3r/rERAZPPtiqY+4bOnaTYSddctbQMVeGPvVxp5t22iEzDoZsk0e1/+b/ZNjzjr8wdMLVIUeM/TXB9E/+7TNvdeFgMJj5nzxerY1HrjlqzOSN/TWh21Tj7h53+4TLw8b+WmmLwWClTQeT3D8mv8c2HLXu5B7D/4KNR6659kT9B+M6P9l94vXdauL9fKpDNx0yWcP9h2w8ctQ6Y1pPah3vs/fRT+4Dg8GwUweDYacNBsNOHwyGnTG5e/CfMXK1ZVYb85o//vrY6geN/4Igvb4PeeRNl4z5nDF87OeJYWeO/1wA/G8Zudoyq4f1P2L8/Wn93/voPRtZ//C/b+2Rqy0zeMrX+WNvPWj8v+/j+l957ivumnwjBgAAAP5Vjz9w+VXjjvUNHQzmGUx0vPdJ474vMOTCq2+5ZbIN9PkhHCd75s9M/I8Z03ma8+YdDHbdcHIPhclgijiOzb9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fQvNonj/zOP/3jAVJeuMW7TBW89YacNJv7zY26b5r8+6slmSj3+Pxg9ZGzLMc1HDwaDN49cb4NFBoPBBjudcOt8gwn3rTDmvpVmmWrcCQIWefL310/igce/m/zJkzVMN+ExLnzy8dd+4rSphkw0iKfY9omjzt5x44eXnfjjQpN+HhPOL3HdG+44cfx7WYZOtNGk9tXxjz/+uUzcedzYFxkz9iX22mX3Jfbcd7/FRu+y1Q7b7bDdrssvuewKyy21/LJLLbH96J23W3Ls75Oas7Gnrlj9uczZiInn7IGRT52ziZ/bpOZs3mefsycfccdrbp9t/JwN+xfnbPVnn7N5R48f66rDB1s+OTdj/so1hg/2GXNlqanH7ELjtp1jzLavnWXoYHDsP57omEtTT9gHhxw0+j9w3pJxH0eO+7haPG/JpZM6b8lgm4keZ8WxH/a6cvx2E7/PetzNz/m8JSuPOmThMWtxoj//f+Hf+vz/jF4rDJkwUeNPGjJum7G9/nGeifHTtupTzjOxfDqXzH/SM8Y779AJ+3Ua77j3xQ2ZaP6f7X1xg0Xu3fL8sc9r1eXH/qnH/+0o+bVjnX/MXvC0147Bs792TPWPi/+4dbsb5574teONkx7i09bF+DmaeqKNJvXacc3Dww4a8/jjxzyJ1451Ro97o/E/XjvG/LWrj3/tGDP2UcMHx465svSYK2sOH5wz5soyT16ZdnD1mCuLb7PbztuOuWGtZ+63iwx52g88hv121ET77XM4P84q1w0Gq1ydntekpzNL++2IZxlvfj/34Fnfz73w4Y+uPxgMZhv7WXrMkxw79n9HGu+wZx9vOP/E4NnOPzFYcYXzV/8Pj3fCOntyXxt3uqi1JvFnnrbOZn7GOjt4qqesjOf6dc22Yfuxl+eY8GgXn3b9QePnaPhEj/vPPkePfy6p//iv+Z5q6KmDIc82N2s+l7mZ8dnn5rl+/bLI/GPvn/ZZ5maOWWdffvzcjPgX52bNSczNU78efqohBw2mffrcDHvya+AFxs3NqOcyNzP8Z/ab6cL2Yy8vOOGmTR5fbsHxcxPmIn7+H//4o/7Vudlywn6zwJP3zTd0MGLEYJ+t9tprj6XG/j7+6tJjf3/2NbjGc5nLaf4zcznXuFedoc+cnAk3rXjTSuv8u2twjX91LucdDB3/b+7REy+W/xzf/+mmfzf9u+nfTf9u+nfTv5v+xSZx/H/e8d8XXPTGRW4Z982Y4deev9G2k3u8k9kUffx/XN+nHf/fdqPzrx06mHDfsx6fHbvN8/L47PJjP+y/1PjtJj4+OO7m53x89opjLtv0v3R89t8yfq0+h+8bev3vpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276F5vE8f8lx/8cwOP373X3uAOhw7ceOee//T6rKcQUffx/XN+nHf+/es6RWw8dTLjvWY//j92m4/j/Hnfed8jz+fj/+LXq+D//hP7d9O/29P7TTrZxMHlY/93076Z/N/276d9N/276d9O/m/7d9C82ieP/q47/OYCdH7/twfE/D3DzyavtNrnHO5lNqcf//f//vbz+d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/YuNO/4/mOi/PXyr/SIKx///t02i/7r6Ry3919M/aum/vv5RS/8N9I9a+m+of9TSfyP9o5b+b9M/aum/sf5RS/+36x+19N9E/6il/zv0j1r6b6p/1NJ/M/2jlv6b6x+19N9C/6il/5b6Ry39t9I/aum/tf5RS/9t9I9a+m+rf9TSfzv9o6f3nwJmaBL9t9c/aln/O+gftfTfUf+opf9o/aOW/u/UP2rpv5P+UUv/nfWPWvrvon/U0n9X/aOW/rvpH7X0313/qKX/u/SPWvrvoX/U0n9P/aOW/nvpH7X0f7f+UUv/9+gftfTfW/+opf8++kct/ffVP2rpv5/+UUv//fWPWvofoH/U0v+9+kct/d+nf9TS/0D9o5b+B+kftfQ/WP+opf/79Y9a+h+if9TS/1D9o5b+H9A/aun/Qf2jlv4f0j9q6X+Y/lFL/8P1j1r6H6F/1NL/w/pHLf2P1D9q6X+U/lFL/6P1j1r6H6N/1NL/2Gf0n/a/Oqznq5b+H7H+o5b+x+kftfQ/Xv+opf8J+kct/T+qf9TS/2P6Ry39T9Q/aul/kv5RS/+P6x+19P+E/lFL/5P1j1r6f1L/qKX/KfpHLf0/pX/U0v/T+kct/U/VP2rpf5r+UUv/0/WPWvqfoX/U0v9M/aOW/mfpH7X0/4z+UUv/s/WPWvqfo3/U0v9c/aOW/ufpH7X0P1//qKX/Z/WPWvp/Tv+opf8F+kct/T+vf9TS/0L9o5b+X9A/aul/kf5RS/+L9Y9a+l+if9TS/1L9o5b+X9Q/aun/Jf2jlv6X6R+19P+y/lFL/8v1j1r6f0X/qKX/FfpHLf2v1D9q6X+V/lFL/6/qH7X0v1r/qKX/1/SPWvp/Xf+opf839I9a+n9T/6il/7f0j1r6f1v/qKX/d/SPWvpfo3/U0v9a/aOW/tfpH7X0v17/qKX/DfpHLf1v1D9q6X+T/lFL/5v1j1r636J/1NL/u/pHLf2/p3/U0v/7+kct/W/VP2rpf5v+UUv/2/WPWvrfoX/U0v8H+kct/X+of9TS/0f6Ry3979Q/aun/Y/2jlv536R+19P+J/lFL/5/qH7X0v1v/qKX/z/SPWvr/XP+opf89+kct/e/VP2rp/wv9n0jPv6X/ffpHLf1/qX/U0v9X+kct/X+tf9TS/zf6Ry39f6t/1NL/fv2jlv4P6B+19P+d/lFL/wf1j1r6/17/qKX/H/SPWvr/Uf+opf+f9I9a+v9Z/6il/1/0j1r6P6R/1NL/Yf2jlv5/1T9q6f83/aOW/o/oH7X0/7v+UUv/R/WPWvo/pn/U0v9x/aOW/k/oH5X0HzLQP2rpP0T/qKX/UP2jlv5T6R+19B+mf9TSf7j+UUv/EfpHLf2n1j9q6T+N/lFL/2n1j1r6T6d/1NJ/ev2jlv4z6B+19H+B/lFL/xn1j1r6z6R/1NJ/Zv2jlv4v1D9q6T+L/lFL/xfpH7X0f7H+UUv/WfWPWvrPpn/U0n92/aOW/nPoH7X0n1P/qKX/XPpHLf1fon/U0v+l+kct/efWP2rpP4/+UUv/l+kftfSfV/+opf/L9Y9a+s+nf9TSf379o5b+C+gftfRfUP+opf9C+kct/RfWP2rpv4j+UUv/V+gftfR/pf5RS/9F9Y9a+r9K/6il/2L6Ry39F9c/aum/hP5RS/8l9Y9a+i+lf9TSf2n9o5b+y+gftfRfVv+opf+r9Y9a+i+nf9TSf3n9o5b+K+gftfRfUf+opf9r9I9a+q+kf9TS/7X6Ry39X6d/1NJ/Zf2jlv6r6B+19F9V/6il/0j9o5b+q+kftfRfXf+opf8a+kct/V+vf9TSf5T+UUv/NfWPWvqvpX/U0n9t/aOW/m/QP2rp/0b9o5b+6+gftfR/k/5RS/836x+19H+L/lFL/7fqH7X0X1f/qKX/evpHLf3X1z9q6b+B/lFL/w31j1r6b6R/1NL/bfpHLf031j9q6f92/aOW/pvoH7X0f4f+UUv/TfWPWvpvpn/U0n9z/aOW/lvoH7X031L/qKX/VvpHLf231j9q6b+N/lFL/231j1r6b6d/1NJ/e/2jlv476B+19N9R/6il/2j9o5b+79Q/aum/k/5RS/+d9Y9a+u+if9TSf1f9o5b+u+kftfTfXf+opf+79I+m3P5DntZ/D/2jKbf/09f/nvpHLf330j9q6f9u/aOW/u/RP2rpv7f+UUv/ffSPWvrvq3/U0n8//aOW/vvrH7X0P0D/qKX/e/WPWvq/T/+opf+B+kct/Q/SP2rpf7D+UUv/9+sftfQ/RP+opf+hNf2fGOvA57Z1S/8P1PT/17T0/6D+UUv/D+kftfQ/TP+opf/h+kct/Y/QP2rp/2H9o5b+R+oftfQ/Sv+opf/R+kct/Y/RP2rpf6z+UUv/j+gftfQ/Tv+opf/x+kct/U/QP2rp/1H9o5b+H9M/aul/ov7RlNt/6FNvHXKS/tGU2//p6//j+kct/T+hf9TS/2T9o5b+n9Q/aul/iv5RS/9P6R+19P+0/lFL/1P1j1r6n6Z/1NL/dP2jlv5n6B+19D9T/6il/1n6Ry39P6N/1NL/bP2jlv7n6B+19D9X/6il/3n6Ry39z9c/aun/Wf2jlv6f0z9q6X+B/lFL/8/rH7X0v1D/qKX/F/SPWvpfpH/U0v9i/aOW/pfoH7X0v1T/qKX/F/WPWvp/6Tn0H/c/pzzxfzm855uW/pdZ/1FL/y/rH7X0v1z/qKX/V/SPWvpfoX/U0v9K/aOW/lfpH7X0/6r+UUv/q/WPWvp/Tf+opf/X9Y9a+n9D/6il/zf1j1r6f0v/qKX/t/WPWvp/R/+opf81+kct/a/VP2rpf53+UUv/6/WPWvrf0Nf/Of0ga0v/G/v6Pyct/W/SP2rpf7P+UUv/W/SPWvp/V/+opf/39I9a+n9f/6il/636Ry39b9M/aul/u/5RS/879I9a+v9A/6il/w/1j1r6/0j/qKX/nfpHLf1/rH/U0v8u/aOW/j/RP2rp/1P9o5b+d+sftfT/mf5RS/+f6x+19L9H/6il/736Ry39f6F/1NL/Pv2jlv6/1D9q6f8r/aOW/r/WP2rp/xv9o5b+v9U/aul/v/5RS/8H9I9a+v9O/6il/4P6Ry39f69/1NL/D/pHLf3/qH/U0v9P+kct/f+sf9TS/y/6Ry39H9I/aun/sP5RS/+/6h+19P+b/lFL/0f0j1r6/13/qKX/o/pHLf0f0z9q6f+4/lFL/yf0j0r6P3lR/2dq6T9E/6il/1D9o5b+U+kftfQfpn/U0n+4/lFL/xH6Ry39p9Y/auk/jf5RS/9p9Y9a+k+nf9TSf3r9o5b+M+gftfR/gf5RS/8Z9Y9a+s+kf9TSf2b9o5b+L9Q/auk/i/5RS/8X6R+19H+x/lFL/1n1j1r6z6Z/1NJ/dv2jlv5z6B+19J9T/6il/1z6Ry39X6J/1NL/pfpHLf3n1j9q6T+P/lFL/5fpH7X0n1f/qKX/y/WPWvrPp3/U0n9+/aOW/gvoH7X0X1D/qKX/QvpHLf0X1j9q6b+I/lFL/1foH7X0f6X+UUv/RfWPWvq/Sv+opf9i+kct/RfXP2rpv4T+UUv/JfWPWvovpX/U0n9p/aOW/svoH7X0X1b/qKX/q/WPWvovp3/U0n95/aOW/ivoH7X0X7G9/9B8c0v/17T3n4SW/ivpH7X0f63+UUv/1+kftfRfWf+opf8q+kct/VfVP2rpP1L/qKX/avpHLf1X1z9q6b+G/lFL/9frH7X0H6V/1NJ/Tf2jlv5r6R+19F9b/6il/xv0j1r6v1H/qKX/OvpHLf3fpH/U0v/N+kct/d+if9TS/636Ry3919U/aum/nv5RS//19Y9a+m+gf9TSf0P9o5b+G+kftfR/m/5RS/+N9Y9a+r9d/6ih//DBYOgm+kcN/cdcfIf+UUv/TfWPWvpvpn/U0n9z/aOW/lvoH7X031L/qKX/VvpHLf231j9q6b+N/lFL/231j6b0/iPGXd5O/2hK7z/+4vb6Ry39d9A/aum/o/5RS//R+kct/d+p/xjHT3xDS/+d9I9a+u+sf9TSfxf9o5b+u+ofjes/fNzVKbb/bvpHLet/d/2jlv7v0j9q6b+H/lFL/z31j1r676V/1NL/3fpHLf3fo3/U0n9v/aOW/vvoH7X031f/qKX/fvpHLf331z9q6X+A/lFL//fqH7X0f5/+UUv/A/WPWvofpH/U0v9g/aOW/u/XP2rpf4j+UUv/Q/WPWvp/QP+opf8H9Y9a+n9I/6il/2H6Ry39D9c/aul/hP5RS/8P6x+19D9S/6il/1H6Ry39j9Y/aul/jP5RS/9j9Y9a+n9E/6il/3H6Ry39j9c/aul/gv5RS/+P6h+19P+Y/lFL/xP1j1r6n6R/1NL/4/pHLf0/oX/U0v9k/aOW/p/UP2rpf4r+UUv/T+kftfT/tP5RS/9T9Y9a+p+mf9TS/3T9o5b+Z+gftfQ/U/+opf9Z+kct/T+jf9TS/2z9o5b+5+gftfQ/V/+opf95+kct/c/XP2rp/1n9o5b+n9M/aul/gf5RS//P6x9Nef2nnXDxqf0v1D+a8vrn9f8F/aOW/hfpH7X0v1j/qKX/JfpHLf0v1T9q6f9F/aOW/l/SP2rpf5n+UUv/L+sftfS/XP+opf9X9I9a+l+hf9TS/0r9o5b+V+kftfT/qv5RS/+r9Y9a+n9N/6il/9f1j1r6f0P/qKX/N/WPWvp/S/+opf+39Y9a+n9H/6il/zX6Ry39r9U/aul/nf5RS//r9Y9a+t+gf9TS/0b9o5b+N+kftfS/Wf+opf8t+kct/b+rf9TS/3v6Ry39v69/1NL/Vv2jlv636R+19L9d/6il/x36Ry39f6B/1NL/h/pHLf1/pH/U0v9O/aOW/j/WP2rpf5f+UUv/n+gftfT/qf5RS/+79Y9a+v9M/6il/8/1j1r636N/1NL/Xv2jlv6/0D9q6X+f/lFL/1/qH7X0/5X+UUv/X+sftfT/jf5RS//f6h+19L9f/6il/wP6Ry39f6d/1NL/Qf2jlv6/1z9q6f8H/aOW/n/UP2rp/yf9o5b+f9Y/aun/F/2jlv4P6R+19H9Y/6il/1/1j1r6/03/qKX/I/pHLf3/rn/U0v9R/aOW/o/pH7X0f1z/qKX/E/pHJf2nGugftfQfon/U0n+o/lFL/6n0j1r6D9M/auk/XP+opf8I/aOW/lPrH7X0n0b/qKX/tPpHLf2n0z9q6T+9/lFL/xn0j1r6v0D/qKX/jPpHLf1n0j9q6T+z/lFL/xfqH7X0n0X/qKX/i/SPWvq/WP+opf+s+kct/WfTP2rpP7v+UUv/OfSPWvrPqX/U0n8u/aOW/i/RP2rp/1L9o5b+c+sftfSfR/+opf/L9I9a+s+rf9TS/+X6Ry3959M/auk/v/5RS/8F9I9a+i+of9TSfyH9o5b+C+sftfRfRP+opf8r9I9a+r9S/6il/6L6Ry39X6V/1NJ/Mf2jlv6L6x+19F9C/6il/5L6Ry39lxrbf+rJNaznq5b+S1v/UUv/ZfSPWvovq3/U0v/V+kct/ZfTP2rpv7z+UUv/FfSPWvqvqH/U0v81+kct/VfSP2rp/1r9o5b+r9M/aum/sv5RS/9V9I9a+q+qf9TSf6T+UUv/1fSPWvqvrn/U0n8N/aOW/q/XP2rpP0r/qKX/mvpHLf3X0j9q6b+2/lFL/zfoH7X0f6P+UUv/dfSPWvq/Sf+opf+b9Y9a+r9F/6il/1v1j1r6r6t/1NJ/Pf2jlv7r6x+19N9A/6il/4b6Ry39N9I/aun/Nv2jlv4b6x+19H+7/lFL/030j1r6v0P/qKX/pvpHLf030z9q6b+5/lFL/y30j1r6b6l/1NJ/K/2jlv5b6x+19N9G/6il/7b6Ry39t9M/aum/vf5RS/8d9I9a+u+of9TSf7T+UUv/d+oftfTfSf+opf/O+kct/XfRP2rpv6v+UUv/3fSPWvrvrn/U0v9d+kct/ffQP2rpv6f+UUv/vfSPWvq/W/+opf979I9a+u+tf9TSfx/9o5b+++oftfTfT/+opf/++kct/Q/QP2rp/179o5b+79M/aul/oP5RS/+D9I9a+h+sf9TS//36Ry39D9E/aul/qP5RS/8P6B+19P+g/lFL/w/pH7X0P0z/qKX/4fpHE/VfdXKP5//bJPofoX/Usv4/rH/U0v9I/aOW/kfpH7X0P1r/qKX/MfpHLf2P1T9q6f8R/aOW/sfpH7X0P17/qKX/CfpHLf0/qn/U0v9j+kct/U/UP2rpf5L+UUv/j+sftfT/hP5RS/+T9Y9a+n9S/6il/yn6Ry39P6V/1NL/0/pHLf1P1T9q6X+a/lFL/9P1j1r6n6F/1NL/TP2jlv5n6R+19P+M/lFL/7P1j1r6n6N/1NL/XP2jlv7n6R+19D9f/6il/2f1j1r6f07/qKX/BfpHLf0/r3/U0v9C/aOW/l/QP2rpf5H+UUv/i/WPWvpfon/U0v9S/aOW/l/UP2rp/yX9o5b+l+kftfT/sv5RS//L9Y9a+n9F/6il/xX6Ry39r9Q/aul/lf5RS/+v6h+19L9a/6il/9f0j1r6f13/qKX/N/SPWvp/U/+opf+39I9a+n9b/6il/3f0j1r6X6N/1NL/Wv2jlv7X6f8MI4r6X69/1NL/Bv2jlv436h+19L9J/6il/836Ry39b9E/aun/Xf2jlv7f0z9q6f99/aOW/rfqH7X0v03/qKX/7fpHLf3v0D9q6f8D/aOW/j/UP2rp/yP9o5b+d+oftfT/sf5RS/+79I9a+v9E/6il/0/1j1r6361/1NL/Z/pHLf1/rn/U0v8e/aOW/vfqH7X0/4X+UUv/+/SPWvr/Uv+opf+v9I9a+v9a/6il/2/0j1r6/3Zyjed5rqX//dZ/1NL/Af2jlv6/0z9q6f+g/lFL/9/rH7X0/4P+UUv/P+oftfT/k/5RS/8/6x+19P+L/lFL/4f0j1r6P6x/1NL/r/pHLf3/pn/U0v8R/aOW/n/XP2rp/6j+UUv/x/SPWvo/rn/U0v8J/aOS/sMG+kct/YfoH7X0H6p/1NJ/Kv2jlv7D9I9a+g8fDKaeXEN6Pll6oust/UdY/1FL/6n1j1r6T6N/1NJ/Wv2jlv7T6R+19J9e/6il/wz6Ry39X6B/1NJ/Rv2jlv4z6R+19J9Z/6il/wv1j1r6z6J/1NL/RfpHLf1frH/U0n9W/aOW/rPpH7X0n13/qKX/HPpHLf3n1D9q6T+X/lFL/5foH7X0f6n+UUv/ufWf2JPT0dJ/Hv2jlv4v0z9q6T+v/lFL/5frH7X0n0//qKX//PpHLf0X0D9q6b+g/lFL/4X0j1r6L6x/1NJ/Ef2jlv6v0D9q6f9K/aOW/ovqH7X0f5X+UUv/xfSPWvovrn/U0n8J/aOW/kvqH7X0X0r/qKX/0vpHLf2X0T9q6b+s/lFL/1frH7X0X07/qKX/8vpHLf1X0D9q6b+i/lFL/9foH7X0X0n/qKX/a/WPWvq/Tv+opf/K+kct/VfRP2rpv6r+UUv/kfpHLf1X0z9q6b+6/lFL/zX0j1r6v17/qKX/KP2jlv5r6h+19F9L/6il/9r6Ry3936B/1NL/jfpHLf3X0T9q6f8m/aOW/m/WP2rp/xb9o5b+b9U/aum/rv5RS//19I9a+q+vf9TSfwP9o5b+G+oftfTfSP+opf/b9I9a+m+sf9TS/+36Ry39N9E/aun/Dv2jlv6b6h+19N9M/6il/+b6Ry39t9A/aum/pf5RS/+t9I9a+m+tf9TSfxv9o5b+2+oftfTfTv+opf/2+kct/XfQP2rpv6P+UUv/0fpHLf3fqX/U0n8n/aOW/jvrH7X030X/qKX/rvpHLf130z9q6b+7/lFL/3fpH7X030P/qKX/nvpHLf330j9q6f9u/aOW/u/RP2rpv7f+UUv/ffSPWvrvq3/U0n8//aOW/vvrH7X0P0D/qKX/e/WPWvq/T/+opf+B+kct/Q/SP2rpf7D+UUv/9+sftfQ/RP+opf+h+kct/T+gf9TS/4P6Ry39P6R/1NL/MP2jlv6HT6L/kPKdoqX/EdZ/1NL/w/pHLf2P1D9q6X+U/lFL/6P1j1r6H6N/1NL/WP2jlv4f0T9q6X+c/lFL/+P1j1r6n6B/1NL/o/pHLf0/pn/U0v9E/aOW/ifpH7X0/7j+UUv/T+gftfQ/Wf+opf8n9Y9a+p+if9TS/1P6Ry39P61/1NL/VP2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS//P6B+19D9b/6il/zn6Ry39z9U/aul/nv5RS//z9Y9a+n9W/6il/+f0j1r6X6B/1NL/8/pHLf0v1D9q6f8F/aOW/hfpH7X0v1j/qKX/JfpHLf0v1T9q6f9F/aOW/l/SP2rpf5n+UUv/L+sftfS/XP+opf9X9I9a+l+hf9TS/0r9o5b+V+kftfT/qv5RS/+r9Y9a+n9N/6il/9f1j1r6f0P/qKX/N/WPWvp/S/+opf+39Y9a+n9H/6il/zX6Ry39r9U/aul/nf5RS//r9Y9a+t+gf9TS/0b9o5b+N+kftfS/Wf+opf8t+kct/b+rf9TS/3v6Ry39v69/1NL/Vv2jlv636R+19L9d/6il/x36Ry39f6B/1NL/h/pHLf1/pH/U0v9O/aOW/j/WP2rpf5f+UUv/n+gftfT/qf5RS/+79Y9a+v9M/6il/8/1j1r636N/1NL/Xv2jlv6/0D9q6X+f/lFL/1/qH7X0/5X+UUv/X+sftfT/jf5RS//f6h+19L9f/6il/wP6J+e29P+d/lFL/wf1j1r6/17/qKX/H/SPWvr/Uf+opf+f9I9a+v9Z/6il/1/0j1r6P6R/1NL/Yf2jlv5/1T9q6f+31v6bPvvdLf0fae3/T7T0/7v+UUv/R/WPWvo/pn/U0v9x/aOW/k/oH5X0Hz7QP2rpP0T/qKX/UP2jlv5T6R+19B+mf9TSf7j+UUv/EfpHLf2n1j9q6T+N/lFL/2n1j1r6T6d/1NJ/ev2jlv4z6B+19H+B/lFL/xn1j1r6z6R/1NJ/Zv2jlv4v1D9q6T+L/lFL/xfpH7X0f7H+UUv/WfWPWvrPpn/U0n92/aOW/nPoH7X0n1P/qKX/XPpHLf1fon/U0v+l+kct/efWP2rpP4/+UUv/l+kftfSfV/+opf/L9Y9a+s+nf9TSf379o5b+C+gftfRfUP+opf9C+kct/RfWP2rpv4j+UUv/V+gftfR/pf5RS/9F9Y9a+r9K/6il/2L6Ry39F9c/aum/hP5RS/8l9Y9a+i+lf9TSf2n9o5b+y+gftfRfVv+opf+r9Y9a+i+nf9TSf3n9o5b+K+gftfRfUf+opf9r9I9a+q+kf9TS/7X6Ry39X6d/1NJ/Zf2jlv6r6B+19F9V/6il/0j9o5b+q+kftfRfXf+opf8a+kct/V+vf9TSf5T+UUv/NfWPWvqvpX/U0n9t/aOW/m/QP2rp/0b9o5b+6+gftfR/k/5RS/836x+19H+L/lFL/7fqH7X0X1f/aMrs/8RMg4n6r6d/NGX2H+up/dfXP2rpv4H+UUv/DfWPWvpvpH/U0v9t+kct/TfWP2rp/3b9o5b+m+gftfR/h/5RS/9N9Y9a+m+mf9TSf3P9o5b+W+gftfTfUv+opf9W+kct/bfWP2rpv43+UUv/bfWPWvpvp3/U0n97/aOW/jvoH7X031H/qKX/aP2jlv7v1D9q6b+T/lFL/531j1r676J/1NJ/V/2jlv676R+19N9d/6il/7v0j1r676F/1NJ/z8r+Q//pFi3996rs/8+19H+3/lFL//foH7X031v/qKX/PvpHLf331T9q6b+f/lFL//31j1r6H6B/1NL/vfpHLf3fp3/U0v9A/aOW/gfpH7X0P1j/qKX/+/WPWvofon/U0v9Q/aOW/h/QP2rp/0H9o5b+H9I/aul/mP5RS//D9Y9a+h+hf9TS/8P6Ry39j9Q/aul/lP5RS/+j9Y9a+h+jf9TS/1j9o5b+H9E/aul/nP5RS//j9Y9a+p+gf9TS/6P6Ry39P6Z/1NL/RP2jlv4n6R+19P+4/lFL/0/oH7X0P1n/qKX/J/WPWvqfon/U0v9T+kct/T+tf9TS/1T9o5b+p+kftfQ/Xf+opf8Z+kct/c/UP2rpf5b+UUv/z+gftfQ/W/+opf85+kct/c/VP2rpf57+UUv/8/WPWvp/Vv+opf/n9I9a+l+gf9TS//P6Ry39L9Q/aun/Bf2jlv4X6R+19L9Y/6il/yX6Ry39L9U/aun/Rf2jlv5f0j9q6X+Z/lFL/y/rH7X0v1z/qKX/V/SPWvpfoX/U0v9K/aOW/lfpH7X0/6r+UUv/q/WPWvp/Tf+opf/X9Y9a+n9D/6il/zf1j1r6f0v/qKX/t/WPWvp/R/+opf81+kct/a/VP2rpf53+UUv/6/WPWvrfoH/U0v9G/aOW/jfpH7X0v1n/qKX/LfpHLf2/G/uPXvqwof+9oT0ftfT/nvUftfT/vv5RS/9b9Y9a+t+mf9TS/3b9oym4/8xP7X+H/tEU3P9p6/8H+kct/X+of9TS/0f6Ry3979Q/aun/Y/2jlv536R+19P+J/lFL/5/qH7X0v1v/qKX/z/SPWvr/XP+opf89+kct/e/VP2rp/wv9o5b+9+kftfT/pf5RS/9f6R+19P+1/lFL/9/oH7X0/63+UUv/+/WPWvo/oH/U0v93+kct/R/UP2rp/3v9o5b+f9A/aun/R/2jlv5/0j9q6f9n/aOW/n/RP2rp/5D+UUv/h/WPWvr/Vf+opf/f9I9a+j+if9TS/+/6Ry39H9U/aun/mP5RS//H9Y9a+j+hf1TSf8RA/6il/xD9o5b+Q/WPWvpPpX/U0n+Y/lFL/+H6Ry39R+gftfSfWv+opf80+kct/afVP2rpP53+UUv/6fWPWvrPoH/U0v8F+kct/WfUP2rpP5P+UUv/mfWPWvq/UP+opf8s+kct/V+kf9TS/8X6Ry39Z9U/auk/m/5RS//Z9Y9a+s+hf9TSf079o5b+c+kftfR/if5RS/+X6h+19J9b/6il/zz6Ry39X6Z/1NJ/Xv2jlv4v1z9q6T+f/lFL//n1j1r6L6B/1NJ/Qf2jlv4L6R+19F9Y/6il/yL6Ry39X6F/1NL/lfpHLf0X1T9q6f8q/aOW/ovpH7X0X1z/qKX/EvpHLf2X1D9q6b+U/lFL/6X1j1r6L6N/1NJ/Wf2jlv6v1j9q6b+c/lFL/+X1j1r6r6B/1NJ/Rf2jlv6v0T9q6b+S/lFL/9fqH7X0f53+UUv/lfWPWvqvon/U0n9V/aOW/iP1j1r6r6Z/1NJ/df2jlv5r6B+19H+9/lFL/1H6Ry3919Q/aum/lv5RS/+19Y9a+r9B/6il/xv1j1r6r6N/1NL/TfpHLf3frH/U0v8t+kct/d+qf9TSf139o5b+6+kftfRfX/+opf8G+kct/TfUP2rpv5H+UUv/t+kftfTfWP+opf/b9Y9a+m+if9TS/x36Ry39N9U/aum/mf5RS//N9Y9a+m+hf9TSf0v9o5b+W+kftfTfWv+opf82+kct/bfVP2rpv53+UUv/7fWPWvrvoH/U0n9H/aMpuP9UT7l1xGj9oym4/9PW/zv1j1r676R/1NJ/Z/2jlv676B+19N9V/6il/276Ry39d9c/aun/Lv2jlv576B+19N9T/6il/176Ry39361/1NL/PfpHLf331j9q6b+P/lFL/331j1r676d/1NJ/f/2jlv4H6B+19H+v/lFL//fpH7X0P1D/qKX/QfpHLf0P1j9q6f9+/aOW/ofoH7X0P1T/qKX/B/SPWvp/UP+opf+H9I9a+h+mf9TS/3D9o5b+R+gftfT/sP5RS/8j9Y9a+h+lf9TS/2j9o5b+x+gftfQ/Vv+opf9H9I9a+h+nf9TS/3j9o5b+J+gftfT/qP5RS/+P6R+19D9R/6il/0n6Ry39P65/1NL/E/pHLf1P1j9q6f9J/aOW/qfoH7X0/5T+UUv/T+sftfQ/Vf+opf9p+kct/U/XP2rpf4b+UUv/M/WPWvqfpX/U0v8z+kct/c/WP2rpf47+UUv/c/WPWvqfp3/U0v98/aOW/p/VP2rp/zn9o5b+F+gftfT/vP5RS/8L9Y9a+n9B/6il/0X6Ry39L9Y/aul/if5RS/9L9Y9a+n9R/6il/5f0j1r6X6Z/1NL/y/pHLf0v1z9q6f8V/aOW/lfoH7X0v1L/qKX/VfpHLf2/qn/U0v9q/aOW/l/TP2rp/3X9o5b+39A/aun/Tf2jlv7f0j9q6f9t/aOW/t/RP2rpf43+UUv/a/WPWvpfp3/U0v96/aOW/jfoH7X0v1H/qKX/TfpHLf1v1j9q6X+L/lFL/+/qH7X0/57+UUv/7+sftfS/Vf+opf9t+kct/W/XP2rpf4f+UUv/H+gftfT/of5RS/8f6R+19L9T/6il/4/1j1r636V/1NL/J/pHLf1/qn/U0v9u/aOW/j/TP2rp/3P9o5b+9+gftfS/V/+opf8v9I9a+t+nf9TS/5f6Ry39f6V/1NL/1/pHLf1/o3/U0v+3+kct/e/XP2rp/4D+UUv/3+kftfR/UP+opf/v9Y9a+v9B/6il/x/1j1r6/0n/qKX/n/WPWvr/Rf+opf9D+kct/R/WP2rp/1f9o5b+f9M/aun/iP5RS/+/6x+19H9U/6il/2P6Ry39H9c/aun/hP5RSf+pB/pHLf2H6B+19B+qf9TSfyr9o5b+w/SPWvoP1z9q6T9C/6il/9T6Ry39p9E/auk/rf5RS//p9I9a+k+vf9TSfwb9o5b+L9A/auk/o/5RS/+Z9I9a+s+sf9TS/4X6Ry39Z9E/aun/Iv2jlv4v1j9q6T+r/lFL/9n0j1r6z65/1NJ/Dv2jlv5z6h+19J9L/6il/0v0j1r6v1T/qKX/3PpHLf3n0T9q6f8y/aOW/vPqH7X0f7n+UUv/+fSPWvrPr3/U0n8B/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6f8K/aOW/q/UP2rpv6j+UUv/V+kftfRfTP+opf/i+kct/ZfQP2rpv6T+UUv/pfSPWvovrX/U0n8Z/aOW/svqH7X0f7X+UUv/5fSPWvovr3/U0n8F/aOW/ivqH7X0f43+0ZTc/ym9p15J/2hK7v/U9f/a6v5DDprkPSX9X1fdf9Ja+q+sf9TSfxX9o5b+q+oftfQfqX/U0n81/aOW/qvrH7X0X0P/qKX/6/WPWvqP0j9q6b+m/lFL/7X0j1r6r61/1NL/DfpHLf3fqH/U0n8d/aOW/m/SP2rp/2b9o5b+b9E/aun/Vv2jlv7r6h+19F9P/6il//r6Ry39N9A/aum/of5RS/+N9I9a+r9N/6il/8b6Ry39365/1NJ/E/2jlv7v0D9q6b+p/lFL/830j1r6b65/1NJ/C/2jlv5b6h+19N9K/6il/9b6Ry39t9E/aum/rf5RS//t9I9a+m+vf9TSfwf9o5b+O+oftfQfrX/U0v+d+kct/XfSP2rpv7P+UUv/XfSPWvrvqn/U0n83/aOW/rvr/0zTjPtY0P9d+kct638P/aOW/nvqH7X030v/qKX/u/WPWvq/R/+opf/e+kct/ffRP2rpv6/+UUv//fSPWvrvr3/U0v8A/aOW/u/VP2rp/z79o5b+B+oftfQ/SP+opf/B+kct/d+vf9TS/xD9o5b+h+oftfT/gP5RS/8P6h+19P+Q/lFL/8P0j1r6H65/1NL/CP2jlv4f1j9q6X+k/lFL/6P0j1r6H61/1NL/GP2jlv7H6h+19P+I/lFL/+P0j1r6H69/1NL/BP2jlv4f1T9q6f8x/aOW/ifqH7X0P0n/qKX/x/WPWvp/Qv+opf/J+kct/T+pf9TS/xT9o5b+n9I/aun/af2jlv6n6h+19D9N/6il/+n6Ry39z9A/aul/pv5RS/+z9I9a+n9G/6il/9n6Ry39z9E/aul/rv5RS//z9I9a+p+vf9TS/7P6Ry39P6d/1NL/Av2jlv6f1z9q6X+h/lFL/y/oH7X0v0j/qKX/xfpHLf0v0T9q6X+p/lFL/y/qH7X0/5L+UUv/y/SPWvp/Wf+opf/l+kct/b+if9TS/wr9o5b+V+oftfS/Sv+opf9X9Y9a+l+tf9TS/2v6Ry39v65/1NL/G/pHLf2/qX/U0v9b+kct/b+tf9TS/zv6Ry39r9E/aul/rf5RS//r9I9a+l+vf9TS/wb9o5b+N+oftfS/Sf+opf/N+kct/W/RP2rp/139o5b+39M/aun/ff2jlv636h+19L9N/6il/+36Ry3979A/aun/A/2jlv4/fI79hzz6xJP+r4b3fNPS/0fWf9TS/079o5b+P9Y/aul/l/5RS/+f6B+19P+p/lFL/7v1j1r6/0z/qKX/z/WPWvrfo3/U0v9e/aOW/r/QP2rpf5/+UUv/X+oftfT/lf5RS/9f6x+19P+N/lFL/9/qH7X0v1//qKX/A/pHLf1/p3/U0v9B/aOW/r/XP2rp/wf9o5b+f9Q/aun/J/2jlv5/1j9q6f8X/aOW/g/pH7X0f1j/qKX/X/WPWvr/Tf+opf8j+kct/f+uf9TS/1H9o5b+j+kftfR/XP+opf8T+kcl/acZ6B+19B+if9TSf6j+UUv/qfSPWvoP0z9q6T9c/6il/wj9o5b+U+sftfSfRv+opf+0+kct/afTP2rpP73+UUv/GfSPWvq/QP+opf+M+kct/WfSP2rpP7P+UUv/F+oftfSfRf+opf+L9I9a+r9Y/6il/6z6Ry39Z9M/auk/u/5RS/859I9a+s+pf9TSfy79o5b+L9E/aun/Uv2jlv5z6x+19J9H/6il/8v0j1r6z6t/1NL/5fpHLf3n0z9q6T+//lFL/wX0j1r6L6h/1NJ/If2jlv4L6x+19F9E/6il/yv0j1r6v1L/qKX/ovpHLf1fpX/U0n8x/aOW/ovrH7X0X0L/qKX/kvpHLf2X0j9q6b+0/lFL/2X0j1r6L6t/1NL/1fpHLf2X0z9q6b+8/lFL/xX0j1r6r6h/1NL/NfpHLf1X0j9q6f9a/aOW/q/TP2rpv7L+UUv/VfSPWvqvqn/U0n+k/lFL/9X0j1r6r65/1NJ/Df2jlv6v1z9q6T9K/6il/5r6Ry3919I/aum/tv5RS/836B+19H+j/lFL/3X0j1r6v0n/qKX/m/WPWvq/Rf+opf9b9Y9a+q+rf9TSfz39o5b+6+sftfTfQP+opf+G+kct/TfSP2rp/zb9o5b+G+sftfR/u/5RS/9N9I9a+r9D/6il/6b6Ry39N9M/aum/uf5RS/8t9I9a+m+pf9TSfyv9o5b+W+sftfTfRv+opf+2+kct/bfTP2rpv73+UUv/HfSPWvrvqH/U0n+0/lFL/3fqH7X030n/qKX/zvpHLf130T9q6b+r/lFL/930j1r6765/1NL/XfpHLf330D9q6b+n/lFL/730j1r6v1v/qKX/e/SPWvrvrX/U0n8f/aOW/vvqH7X030//qKX//vpHLf0P0D9q6f9e/aOW/u/TP2rpf6D+UUv/g/SPWvofrH/U0v/9+kct/Q/RP2rpf6j+UUv/D+gftfT/oP5RS/8P6R+19D9M/6il/+H6Ry39j9A/aun/Yf2jlv5H6h+19D9K/6il/9H6Ry39j9E/aul/rP5RS/+P6B+19D9O/6il//H6Ry39T9A/aun/Uf2jlv4f0z9q6X+i/lFD/xsGg2lO0j9q6D9m/X9c/6il/yf0j1r6n6x/1NL/k/pHLf1P0T9q6f8p/aOW/p/WP2rpf6r+UUv/0/SPWvqfrn/U0v8M/aOW/mfqH7X0P0v/qKX/Z/SPWvqfrX/U0v8c/aOW/ufqH7X0P0//qKX/+fpHLf0/q3/U0v9z+kct/S/QP2rp/3n9o5b+F+oftfT/gv5RS/+L9I9a+l+sf9TS/xL9o5b+l+oftfT/ov5RS/8v6R+19L9M/6il/5f1j1r6X65/1NL/K/pHLf2v0D9q6X+l/lFL/6v0j1r6f1X/qKX/1fpHLf2/pn/U0v/r+kct/b+hf9TS/5v6Ry39v6V/1NL/2/pHLf2/o3/U0v8a/aOW/tfqH7X0v07/qKX/9fpHLf1v0D9q6X+j/lFL/5v0j1r636x/1NL/Fv2jlv7f1T9q6f89/aOW/t/XP2rpf6v+UUv/2/SPWvrfrn/U0v8O/aOW/j/QP2rp/8NJ9R/6XxrX81RL/x9Z/1FL/zv1j1r6/1j/qKX/XfpHLf1/on/U0v+n+kct/e/WP2rp/zP9o5b+P9c/aul/j/5RS/979Y9a+v9C/6il/336Ry39f6l/1NL/V/pHLf1/rX/U0v83+kct/X+rf9TS/379o5b+D+gftfT/nf5RS/8H9Y9a+v9e/6il/x/0j1r6/1H/qKX/n/SPWvr/Wf+opf9f9I9a+j+kf9TS/2H9o5b+f9U/aun/N/2jlv6P6B+19P+7/lFL/0f1j1r6P6Z/1NL/cf2jlv5P6B+V9J92oH/U0n+I/lFL/6H6Ry39p9I/auk/TP+opf9w/aOW/iP0j1r6T61/1NJ/Gv2jlv7T6h+19J9O/6il//T6Ry39Z9A/aun/Av2jlv4z6h+19J9J/6il/8z6Ry39X6h/1NJ/Fv2jlv4v0j9q6f9i/aOW/rPqH7X0n03/qKX/7PpHLf3n0D9q6T+n/lFL/7n0j1r6v0T/qKX/S/WPWvrPrX/U0n8e/aOW/i/TP2rpP6/+UUv/l+sftfSfT/+opf/8+kct/RfQP2rpv6D+UUv/hfSPWvovrH/U0n8R/aOW/q/QP2rp/0r9o5b+i+oftfR/lf5RS//F9I9a+i+uf9TSfwn9oymuPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPw/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3BQAAP//KTc12w==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) 0s ago: executing program 2 (id=3068): set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001200)={0xaa, 0x4}) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, '\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb6, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0xfffffffffffffbf7, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8, 0x0, 0x0, 0x6]}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000ab4000/0x3000)=nil, 0x800000}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x11c, 0x10, 0x1, 0x70bd27, 0x102, {{@in=@loopback, @in6=@private1, 0x4e23, 0x4, 0x4e21, 0x0, 0x0, 0xa0, 0x40, 0x3a, 0x0, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x3c}, @in=@rand_addr=0x64010101, {0x0, 0x9, 0x6, 0xffff, 0x8251b, 0x10000000002, 0x800083}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc, 0x80000001}, 0x70bd28, 0x0, 0x2, 0x1, 0xfd, 0x20}, [@user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xa}}]}, 0x11c}, 0x1, 0x0, 0x0, 0xc801}, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file4\x00', 0xa18c14, &(0x7f0000000040)={[{@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@uni_xlateno}, {@rodir}, {@utf8no}, {@shortname_lower}]}, 0x88, 0x2aa, &(0x7f0000000640)="$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") kernel console output (not intermixed with test programs): 967314][T14798] Tainted: [L]=SOFTLOCKUP [ 893.967322][T14798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 893.967335][T14798] Call Trace: [ 893.967344][T14798] [ 893.967353][T14798] dump_stack_lvl+0xe8/0x150 [ 893.967394][T14798] should_fail_ex+0x467/0x600 [ 893.967436][T14798] _copy_from_user+0x2d/0xb0 [ 893.967475][T14798] ipv6_set_mcast_msfilter+0x148/0x310 [ 893.967515][T14798] do_ipv6_setsockopt+0x1342/0x3180 [ 893.967559][T14798] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 893.967593][T14798] ? get_pid_task+0x20/0x1f0 [ 893.967639][T14798] ? __lock_acquire+0x6df/0x2e40 [ 893.967667][T14798] ? do_raw_spin_lock+0x12b/0x2f0 [ 893.967703][T14798] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 893.967734][T14798] ? lockdep_hardirqs_on+0x7a/0x110 [ 893.967769][T14798] ? lock_acquire+0x115/0x350 [ 893.967804][T14798] ? __fget_files+0x2a/0x420 [ 893.967834][T14798] ipv6_setsockopt+0x59/0x170 [ 893.967865][T14798] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 893.967906][T14798] do_sock_setsockopt+0x17c/0x1b0 [ 893.967941][T14798] __x64_sys_setsockopt+0x143/0x1b0 [ 893.967975][T14798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.967996][T14798] do_syscall_64+0x174/0x580 [ 893.968024][T14798] ? trace_irq_disable+0x3b/0x140 [ 893.968050][T14798] ? clear_bhb_loop+0x40/0x90 [ 893.968076][T14798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.968097][T14798] RIP: 0033:0x7f781004de59 [ 893.968117][T14798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.968136][T14798] RSP: 002b:00007f780e2a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 893.968159][T14798] RAX: ffffffffffffffda RBX: 00007f78102d5fa0 RCX: 00007f781004de59 [ 893.968175][T14798] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000003 [ 893.968189][T14798] RBP: 00007f780e2a6090 R08: 0000000000000090 R09: 0000000000000000 [ 893.968203][T14798] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 893.968215][T14798] R13: 00007f78102d6038 R14: 00007f78102d5fa0 R15: 00007ffd9ee7e658 [ 893.968247][T14798] [ 894.437647][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.440735][ T3351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.563843][T12795] Flush: task=udevd[12795] dev=loop1 state=2 [ 894.708995][T12795] Teardown: task=udevd[12795] dev=loop1 state=2 [ 895.128225][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.542772][T14820] loop1: detected capacity change from 0 to 1764 [ 895.545240][T14820] iso9660: Unknown parameter '0x0000000000000000' [ 895.616277][T12795] Flush: task=udevd[12795] dev=loop1 state=2 [ 895.803653][T12795] Teardown: task=udevd[12795] dev=loop1 state=2 [ 895.840518][ T3267] bridge_slave_1: left allmulticast mode [ 895.840554][ T3267] bridge_slave_1: left promiscuous mode [ 895.840849][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.052147][ T3267] bridge_slave_0: left allmulticast mode [ 896.052185][ T3267] bridge_slave_0: left promiscuous mode [ 896.089797][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.374087][T14832] loop1: detected capacity change from 0 to 4096 [ 896.818647][T14844] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 897.265000][ T38] audit: type=1800 audit(1783217717.236:1303): pid=14832 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.2462" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 897.344823][ T3267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.441798][T14832] NILFS (loop1): nilfs_sufile_do_free: segment 15 is already clean [ 897.463539][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2462'. [ 897.479692][ T3267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.514025][T14849] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2462'. [ 897.561528][ T3267] bond0 (unregistering): Released all slaves [ 897.621966][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2461'. [ 897.846038][T14856] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2463'. [ 898.279599][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.280050][ T3351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.280249][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.429050][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2 [ 898.509299][ T3267] hsr_slave_0: left promiscuous mode [ 898.519734][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2 [ 898.548977][ T3267] hsr_slave_1: left promiscuous mode [ 898.550859][ T3267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.590061][ T3267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.671064][T14868] loop1: detected capacity change from 0 to 128 [ 898.797581][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2 [ 898.869555][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2 [ 899.715520][ T1193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.031108][ T3267] team0 (unregistering): Port device team_slave_1 removed [ 900.069684][ T3267] team0 (unregistering): Port device team_slave_0 removed [ 900.205742][ T3351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.562791][T14883] loop2: detected capacity change from 0 to 512 [ 900.782869][T14883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 900.783012][T14883] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 900.835444][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2473'. [ 901.074340][T14883] gtp0: entered promiscuous mode [ 901.074362][T14883] gtp0: entered allmulticast mode [ 901.333179][ T5607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.422705][ T5607] Flush: task=syz-executor[5607] dev=loop2 state=2 [ 901.549751][ T5607] Teardown: task=syz-executor[5607] dev=loop2 state=2 [ 901.718494][T14539] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 901.993069][T14539] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 902.036635][T14539] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 902.092468][T14539] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 902.234151][T14539] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 902.653238][T14539] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 902.703979][T14539] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 902.776721][T14539] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 903.320336][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.457632][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.316115][T14904] random: crng reseeded on system resumption [ 904.403477][T14906] fuse: Bad value for 'fd' [ 904.761666][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.859107][T14918] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2479'. [ 905.251015][ T3267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.588000][T14300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 905.602364][T14906] loop1: detected capacity change from 0 to 32768 [ 905.609736][T14906] (syz.1.2478,14906,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 905.609834][T14906] (syz.1.2478,14906,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 905.609856][T14906] (syz.1.2478,14906,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 905.609878][T14906] (syz.1.2478,14906,0):ocfs2_initialize_super:2194 ERROR: status = -22 [ 905.609995][T14906] (syz.1.2478,14906,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 905.682849][T14300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 905.696113][T14300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 905.817875][T14300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 905.852047][T14300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 905.934279][T14300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 905.956321][T14300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 906.025141][T14926] comedi: No check for data length of config insn id 7 is implemented [ 906.025159][T14926] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 906.025234][T14926] comedi: Assuming n=15 is correct [ 906.060445][T12795] Flush: task=udevd[12795] dev=loop1 state=2 [ 906.117938][T14300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 906.170346][T12795] Teardown: task=udevd[12795] dev=loop1 state=2 [ 906.217291][T14934] loop2: detected capacity change from 0 to 1764 [ 906.276252][T14930] fuse: Bad value for 'user_id' [ 906.276272][T14930] fuse: Bad value for 'user_id' [ 906.461493][ T5607] Flush: task=syz-executor[5607] dev=loop2 state=2 [ 906.539708][ T5607] Teardown: task=syz-executor[5607] dev=loop2 state=2 [ 906.820427][T14539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.910752][ T5620] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 906.931387][T14539] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.012833][ T3368] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.013116][ T3368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.065431][ T5620] usb 3-1: config 0 has no interfaces? [ 907.067811][ T5620] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 907.067840][ T5620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.067863][ T5620] usb 3-1: Product: syz [ 907.067879][ T5620] usb 3-1: Manufacturer: syz [ 907.067896][ T5620] usb 3-1: SerialNumber: syz [ 907.068618][T14947] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2488'. [ 907.068658][T14947] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2488'. [ 907.138564][ T5620] usb 3-1: config 0 descriptor?? [ 907.192304][ T3368] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.192427][ T3368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.228396][T14947] loop1: detected capacity change from 0 to 1024 [ 907.355061][T14947] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (204800 > 6144). [ 907.364545][T14947] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 907.582423][T14947] EXT4-fs (loop1): mount failed [ 907.703534][T14947] Flush: task=syz.1.2488[14947] dev=loop1 state=2 [ 908.214388][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.659688][ T3309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.761984][T14947] Teardown: task=syz.1.2488[14947] dev=loop1 state=2 [ 909.095459][T14957] loop1: detected capacity change from 0 to 256 [ 909.126837][T14957] vfat: Bad value for 'gid' [ 909.126858][T14957] vfat: Bad value for 'gid' [ 909.176359][T14300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.265699][T12795] Flush: task=udevd[12795] dev=loop1 state=2 [ 909.419593][T12795] Teardown: task=udevd[12795] dev=loop1 state=2 [ 909.799064][ T197] usb 3-1: USB disconnect, device number 58 [ 909.887192][T14300] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.934243][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.934356][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.025107][T14972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2493'. [ 910.126709][ T829] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.126969][ T829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.469817][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.516098][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.824225][T14960] loop1: detected capacity change from 0 to 32768 [ 910.860912][T14960] btrfs: Deprecated parameter 'usebackuproot' [ 910.860937][T14960] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 910.871226][T14960] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2490 (14960) [ 911.255767][T14968] loop5: detected capacity change from 0 to 32768 [ 911.475961][T14960] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 911.475997][T14960] BTRFS info (device loop1): using crc32c checksum algorithm [ 911.594324][T14968] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2492 (14968) [ 911.922170][T15001] loop2: detected capacity change from 0 to 64 [ 911.991789][ T1193] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 911.993293][T14960] BTRFS error (device loop1): failed to load root extent [ 911.993337][T14960] BTRFS warning (device loop1): try to load backup roots slot 1 [ 911.994798][ T67] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 911.998943][T14960] BTRFS warning (device loop1): couldn't read tree root [ 911.998980][T14960] BTRFS warning (device loop1): try to load backup roots slot 2 [ 912.056772][ T1193] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 912.057559][T14960] BTRFS warning (device loop1): couldn't read tree root [ 912.057622][T14960] BTRFS warning (device loop1): try to load backup roots slot 3 [ 912.337673][T14968] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 912.337707][T14968] BTRFS info (device loop5): using sha256 checksum algorithm [ 912.461336][T14539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.806182][T14960] BTRFS error (device loop1): open_ctree failed: -4 [ 912.903762][ T5607] Flush: task=syz-executor[5607] dev=loop2 state=2 [ 912.928080][T14545] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 913.024523][T14545] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 913.050306][T14545] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 913.075317][T14545] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 913.076100][T14545] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 913.457042][ T5607] Teardown: task=syz-executor[5607] dev=loop2 state=2 [ 913.945613][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.343562][T15034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.345967][T15034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.346539][T15034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.348481][T15034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.348967][T15034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.363482][T15032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.616604][T14968] BTRFS error (device loop5): open_ctree failed: -4 [ 915.187490][T12871] Flush: task=udevd[12871] dev=loop1 state=2 [ 915.187757][T12795] Flush: task=udevd[12795] dev=loop5 state=2 [ 915.664030][ T4919] Bluetooth: hci4: command tx timeout [ 915.943731][T14539] veth0_vlan: entered promiscuous mode [ 915.972819][T14539] veth1_vlan: entered promiscuous mode [ 916.219684][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.220490][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.409003][T12871] Teardown: task=udevd[12871] dev=loop1 state=2 [ 916.413224][T14539] veth0_macvtap: entered promiscuous mode [ 916.429329][T12795] Teardown: task=udevd[12795] dev=loop5 state=2 [ 916.589023][ T9] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 916.684175][T14539] veth1_macvtap: entered promiscuous mode [ 916.840550][T15065] loop2: detected capacity change from 0 to 512 [ 916.917015][T15065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 916.927024][T15057] loop1: detected capacity change from 0 to 1764 [ 917.038075][T15065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.038197][T15065] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 917.107818][T14539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.321275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.444779][T15075] loop5: detected capacity change from 0 to 512 [ 917.692060][ T5607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.742193][ T5607] Flush: task=syz-executor[5607] dev=loop2 state=2 [ 917.879792][ T5607] Teardown: task=syz-executor[5607] dev=loop2 state=2 [ 917.907381][ T4919] Bluetooth: hci4: command tx timeout [ 917.960799][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2 [ 918.160573][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2 [ 918.501601][T15088] loop2: detected capacity change from 0 to 4096 [ 918.731238][T12795] Flush: task=udevd[12795] dev=loop2 state=2 [ 918.917852][T12795] Teardown: task=udevd[12795] dev=loop2 state=2 [ 919.015441][T15075] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 919.087615][T14539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.121845][T15077] vlan2: entered allmulticast mode [ 919.122229][T15077] bridge0: port 3(vlan2) entered blocking state [ 919.122524][T15077] bridge0: port 3(vlan2) entered disabled state [ 919.125429][T15077] vlan2: entered promiscuous mode [ 919.259415][ T3267] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.262799][ T3267] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.264276][ T3267] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.266540][ T3267] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.401750][ T3309] net_ratelimit: 4 callbacks suppressed [ 919.401772][ T3309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.740228][T11977] Flush: task=syz-executor[11977] dev=loop5 state=2 [ 919.958937][ T4919] Bluetooth: hci4: command tx timeout [ 921.065278][T11977] Teardown: task=syz-executor[11977] dev=loop5 state=2 [ 921.573214][T15102] loop5: detected capacity change from 0 to 64 [ 921.656386][T15102] hfs: unable to open catalog tree [ 921.656403][T15102] hfs: can't find a HFS filesystem on dev loop5 [ 921.691386][T12795] Flush: task=udevd[12795] dev=loop5 state=2 [ 921.765445][T15107] loop2: detected capacity change from 0 to 512 [ 921.776848][T15107] EXT4-fs: Ignoring removed i_version option [ 921.776872][T15107] EXT4-fs: Ignoring removed nobh option [ 921.828926][T15107] EXT4-fs: Mount option(s) incompatible with ext2 [ 921.946202][T12795] Teardown: task=udevd[12795] dev=loop5 state=2 [ 921.967509][T12871] Flush: task=udevd[12871] dev=loop2 state=2 [ 921.968567][ T3267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.971658][ T3267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.042998][ T4919] Bluetooth: hci4: command tx timeout [ 922.167837][T12871] Teardown: task=udevd[12871] dev=loop2 state=2 [ 922.423224][T15121] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2515'. [ 922.811997][ T197] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 922.845397][ T5624] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 923.030448][ T5624] usb 3-1: Using ep0 maxpacket: 16 [ 923.033482][ T5624] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 923.033511][ T5624] usb 3-1: config 254 has no interface number 0 [ 923.033552][ T5624] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 923.033576][ T5624] usb 3-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 923.033601][ T5624] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 923.033624][ T5624] usb 3-1: config 254 interface 235 has no altsetting 0 [ 923.117365][ T5624] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 923.117398][ T5624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.117419][ T5624] usb 3-1: Product: syz [ 923.117436][ T5624] usb 3-1: Manufacturer: syz [ 923.117451][ T5624] usb 3-1: SerialNumber: syz [ 923.129085][ T197] usb 2-1: Using ep0 maxpacket: 16 [ 923.132204][ T197] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 923.132254][ T197] usb 2-1: config 0 interface 0 has no altsetting 0 [ 923.132348][ T197] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 923.132412][ T197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.225380][T15123] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 923.273368][ T197] usb 2-1: config 0 descriptor?? [ 923.291676][ T5624] usbtest 3-1:254.235: couldn't get endpoints, -22 [ 923.291753][ T5624] usbtest 3-1:254.235: probe with driver usbtest failed with error -22 [ 923.361492][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.487661][ T5591] usb 3-1: USB disconnect, device number 60 [ 923.724292][ T197] bigben 0003:146B:0902.0008: unexpected rdesc, please submit for review [ 923.724987][ T197] bigben 0003:146B:0902.0008: ignoring exceeding usage max [ 923.726757][ T197] bigben 0003:146B:0902.0008: unknown main item tag 0x1 [ 923.784770][ T197] bigben 0003:146B:0902.0008: hidraw0: USB HID vc2.59 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 923.784797][ T197] bigben 0003:146B:0902.0008: missing HID_OUTPUT_REPORT 0 [ 923.784810][ T197] bigben 0003:146B:0902.0008: no output report found [ 925.345467][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.294285][T15144] loop2: detected capacity change from 0 to 512 [ 926.317114][T15144] EXT4-fs: Ignoring removed nobh option [ 926.353995][T15144] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2523: iget: bad i_size value: 38620345925642 [ 926.354031][T15144] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 926.359657][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 926.359682][ C0] EXT4-fs (loop2): initial error at time 1783217746: ext4_orphan_get:1399: inode 15 [ 926.359714][ C0] EXT4-fs (loop2): last error at time 1783217746: ext4_orphan_get:1399: inode 15 [ 926.423197][T15144] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2523: couldn't read orphan inode 15 (err -117) [ 926.423230][T15144] loop2: lost filesystem error report for type 5 error -117 [ 926.499640][T15144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.084501][T15135] loop5: detected capacity change from 0 to 32768 [ 927.124507][ T9] usb 2-1: USB disconnect, device number 53 [ 927.195605][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.311594][T15135] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 927.729449][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.731293][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.435854][T11977] ocfs2: Unmounting device (7,5) on (node local) [ 928.455747][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.455767][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.561693][T11977] Flush: task=syz-executor[11977] dev=loop5 state=2 [ 928.849251][T11977] Teardown: task=syz-executor[11977] dev=loop5 state=2 [ 928.999722][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.404438][T15163] loop5: detected capacity change from 0 to 64 [ 929.485386][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.485407][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.768383][T15166] hfs: request for non-existent node 131072 in B*Tree [ 929.768406][T15166] hfs: request for non-existent node 131072 in B*Tree [ 930.043249][ T5607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.104440][T11977] Flush: task=syz-executor[11977] dev=loop5 state=2 [ 930.286551][ T5607] Flush: task=syz-executor[5607] dev=loop2 state=2 [ 930.346766][T11977] Teardown: task=syz-executor[11977] dev=loop5 state=2 [ 930.369255][ T5607] Teardown: task=syz-executor[5607] dev=loop2 state=2 [ 930.548057][T15170] loop2: detected capacity change from 0 to 256 [ 930.626099][T15172] loop5: detected capacity change from 0 to 128 [ 930.637854][T15172] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 930.727900][T15172] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 930.929487][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.963336][T15172] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 930.963366][T15172] FAT-fs (loop5): Filesystem has been set read-only [ 931.246028][T11977] Flush: task=syz-executor[11977] dev=loop5 state=2 [ 931.319626][T11977] Teardown: task=syz-executor[11977] dev=loop5 state=2 [ 931.518926][ T5607] Flush: task=syz-executor[5607] dev=loop2 state=2 [ 931.549628][T14545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 931.604355][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.656862][T14545] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 931.675955][T14545] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 931.699746][T14545] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 931.703234][T14545] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 931.921504][ T5607] Teardown: task=syz-executor[5607] dev=loop2 state=2 [ 932.008904][ T197] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 932.161964][ T197] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 932.162000][ T197] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 932.162028][ T197] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 932.162051][ T197] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 932.162093][ T197] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 932.162117][ T197] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.246589][ T197] usb 6-1: config 0 descriptor?? [ 932.519553][ T1193] bridge_slave_1: left allmulticast mode [ 932.519602][ T1193] bridge_slave_1: left promiscuous mode [ 932.519882][ T1193] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.775487][ T1193] bridge_slave_0: left allmulticast mode [ 932.775525][ T1193] bridge_slave_0: left promiscuous mode [ 932.775830][ T1193] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.898927][ T197] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 933.539805][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.540756][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.962278][T14545] Bluetooth: hci3: command tx timeout [ 934.094443][T15195] loop1: detected capacity change from 0 to 256 [ 934.112888][T15195] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 934.243766][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2 [ 934.329222][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2 [ 934.401073][ T1193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.743759][ T1193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.848236][ T3267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.201713][ T1193] bond0 (unregistering): Released all slaves [ 936.028306][T15211] loop1: detected capacity change from 0 to 4096 [ 936.053169][T14545] Bluetooth: hci3: command tx timeout [ 936.252228][T15014] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.252631][T15014] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.252975][T15014] bridge_slave_0: entered allmulticast mode [ 936.290983][T15014] bridge_slave_0: entered promiscuous mode [ 936.342937][T15014] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.343233][T15014] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.343496][T15014] bridge_slave_1: entered allmulticast mode [ 936.375952][T15014] bridge_slave_1: entered promiscuous mode [ 936.664941][T15014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.683434][ T3309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.687632][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.723978][ T5591] usb 6-1: USB disconnect, device number 8 [ 936.919091][ T1193] hsr_slave_0: left promiscuous mode [ 936.947332][T15211] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 936.964645][ T1193] hsr_slave_1: left promiscuous mode [ 936.965785][ T1193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.990725][ T5620] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 936.990756][ T5620] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 936.990774][ T5620] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 937.092101][ T1193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.398528][ T5620] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 937.485292][T15211] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22. [ 937.608024][ T5605] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22. [ 937.681487][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2 [ 937.782691][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2 [ 937.911593][T15220] loop1: detected capacity change from 0 to 128 [ 938.020756][T15220] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 938.020813][T15220] hpfs: filesystem error: improperly stopped [ 938.020829][T15220] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 938.020844][T15220] hpfs: You really don't want any checks? You are crazy... [ 938.099408][T15220] hpfs: hpfs_map_sector(): read error [ 938.099499][T15220] hpfs: code page support is disabled [ 938.099649][T15220] hpfs: hpfs_map_4sectors(): unaligned read [ 938.099747][T15220] hpfs: hpfs_map_4sectors(): unaligned read [ 938.099758][T15220] hpfs: filesystem error: unable to find root dir [ 938.119004][T14545] Bluetooth: hci3: command tx timeout [ 938.496225][ T1193] team0 (unregistering): Port device team_slave_1 removed [ 939.227112][ T1193] team0 (unregistering): Port device team_slave_0 removed [ 939.251413][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.252942][ T3309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.273511][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2 [ 939.381564][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2 [ 939.801078][T15014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.989859][ T5620] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 940.039556][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.139010][ T5620] usb 2-1: Using ep0 maxpacket: 32 [ 940.143164][ T5620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.143225][ T5620] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 940.143250][ T5620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.199193][T14545] Bluetooth: hci3: command tx timeout [ 940.222262][ T5620] usb 2-1: config 0 descriptor?? [ 940.242588][ T5620] hub 2-1:0.0: USB hub found [ 940.291006][T15014] team0: Port device team_slave_0 added [ 940.423804][T15014] team0: Port device team_slave_1 added [ 940.721196][ T5620] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 941.135664][T15014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.135682][T15014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.135713][T15014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.379978][T15242] loop2: detected capacity change from 0 to 1764 [ 941.429671][T15014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.429688][T15014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.429714][T15014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.630555][T12795] Flush: task=udevd[12795] dev=loop2 state=2 [ 941.682831][T15124] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 941.828814][T15124] usb 6-1: Using ep0 maxpacket: 32 [ 941.851012][T12795] Teardown: task=udevd[12795] dev=loop2 state=2 [ 941.934669][T15124] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.934709][T15124] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.945395][T15124] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 941.945427][T15124] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 941.945473][T15124] usb 6-1: Product: syz [ 941.945489][T15124] usb 6-1: Manufacturer: syz [ 942.020495][T15124] hub 6-1:4.0: USB hub found [ 942.104244][T15254] binder: 15252:15254 ioctl 4018620d 0 returned -22 [ 942.318282][T15124] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 942.447976][ T3351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.566877][ T5265] 8021q: adding VLAN 0 to HW filter on device eth9 [ 942.601016][ T5620] usbhid 2-1:0.0: can't add hid device: -71 [ 942.601140][ T5620] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 942.690362][ T5620] usb 2-1: USB disconnect, device number 54 [ 942.757097][T15014] hsr_slave_0: entered promiscuous mode [ 942.762745][T15014] hsr_slave_1: entered promiscuous mode [ 942.767527][T15014] debugfs: 'hsr0' already exists in 'hsr' [ 942.767601][T15014] Cannot create hsr debugfs directory [ 942.953950][T15124] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 943.108876][T15124] usb 3-1: Using ep0 maxpacket: 16 [ 943.110786][T15124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 943.118654][T15124] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 943.119158][T15124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.119215][T15124] usb 3-1: Product: syz [ 943.119258][T15124] usb 3-1: Manufacturer: syz [ 943.119302][T15124] usb 3-1: SerialNumber: syz [ 943.178285][T15124] usb 3-1: config 0 descriptor?? [ 943.211611][T15124] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 943.211642][T15124] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 944.690964][T15276] evm: overlay not supported [ 945.012610][ T5620] usb 6-1: USB disconnect, device number 9 [ 945.028106][ T3351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.588936][ T5620] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 945.640217][ T3309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.739197][ T5620] usb 6-1: Using ep0 maxpacket: 32 [ 945.741999][ T5620] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 945.742054][ T5620] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 945.742084][ T5620] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 945.742112][ T5620] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 945.745676][ T5620] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 945.745715][ T5620] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.745737][ T5620] usb 6-1: Product: syz [ 945.745753][ T5620] usb 6-1: Manufacturer: syz [ 945.745769][ T5620] usb 6-1: SerialNumber: syz [ 945.877561][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 945.992071][ T5620] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input33 [ 946.061400][ T3351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.090961][T15124] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 946.298979][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.353976][ T1193] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.610774][ T5620] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 946.610797][ T5620] (id 0x00) [ 946.769953][ T5265] 8021q: adding VLAN 0 to HW filter on device eth10 [ 946.793585][T15124] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 946.793688][T15124] em28xx 3-1:0.0: board has no eeprom [ 946.831579][ T5620] rc_core: IR keymap rc-imon-pad not found [ 946.831601][ T5620] Registered IR keymap rc-empty [ 946.831683][ T5620] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 946.831702][ T5620] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 946.975175][ T5620] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 946.988736][ T5620] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input34 [ 947.143476][ T5620] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:10> initialized [ 947.258893][T15124] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 947.259009][T15124] em28xx 3-1:0.0: dvb set to bulk mode. [ 947.290155][ T9] em28xx 3-1:0.0: Binding DVB extension [ 948.200250][ T3309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.503376][ T1193] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.658953][T15294] em28xx 3-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 948.759296][ T5620] usb 3-1: USB disconnect, device number 61 [ 948.788672][T15303] loop1: detected capacity change from 0 to 32768 [ 948.809448][ T5620] em28xx 3-1:0.0: Disconnecting em28xx [ 949.258963][T15124] usb 6-1: USB disconnect, device number 10 [ 949.439549][T15303] jfs_rmdir: dtDelete returned -2 [ 949.707180][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2 [ 949.752873][ T9] em28xx 3-1:0.0: Registering input extension [ 949.757805][ T5620] em28xx 3-1:0.0: Closing input extension [ 949.810653][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2 [ 949.877052][ T1193] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.929185][T15308] loop2: detected capacity change from 0 to 32768 [ 949.972593][T15308] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2557 (15308) [ 949.999881][T15308] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 949.999914][T15308] BTRFS info (device loop2): using sha256 checksum algorithm [ 950.688308][T15308] BTRFS info (device loop2): turning off barriers [ 950.688338][T15308] BTRFS info (device loop2): enabling free space tree [ 950.763238][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.968872][T15124] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 951.160625][T15124] usb 6-1: Using ep0 maxpacket: 16 [ 951.201212][T15124] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 951.201244][T15124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.201264][T15124] usb 6-1: Product: syz [ 951.201279][T15124] usb 6-1: Manufacturer: syz [ 951.201293][T15124] usb 6-1: SerialNumber: syz [ 951.409492][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.410328][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.820304][T15124] usb 6-1: config 0 descriptor?? [ 951.907824][T15124] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 952.109058][ T5620] em28xx 3-1:0.0: Freeing device [ 952.166648][T15324] loop1: detected capacity change from 0 to 32768 [ 952.349548][T15324] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 952.583845][T15324] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 952.604178][T15324] XFS (loop1): Starting recovery (logdev: internal) [ 952.684306][T15124] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 952.768547][T15124] usb 6-1: USB disconnect, device number 11 [ 953.210444][ T5265] 8021q: adding VLAN 0 to HW filter on device eth11 [ 953.264114][T15324] XFS (loop1): Ending recovery (logdev: internal) [ 953.523052][ T38] audit: type=1800 audit(1783217773.496:1304): pid=15324 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.2558" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 953.816396][ T1193] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.838027][ T5605] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 953.976796][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.092906][ T5607] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 954.344532][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2 [ 954.517738][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2 [ 954.610964][ T5607] Flush: task=syz-executor[5607] dev=loop2 state=2 [ 954.759542][ T5607] Teardown: task=syz-executor[5607] dev=loop2 state=2 [ 954.994261][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2561'. [ 955.574421][T15366] loop5: detected capacity change from 0 to 32768 [ 955.683385][T15366] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 955.849323][T15366] XFS (loop5): Ending clean mount [ 955.889283][T15124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.900723][T15366] XFS (loop5): Quotacheck needed: Please wait. [ 956.152008][T15173] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.152368][T15173] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.152672][T15173] bridge_slave_0: entered allmulticast mode [ 956.156819][T15173] bridge_slave_0: entered promiscuous mode [ 956.547366][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.549851][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.855364][T15369] loop2: detected capacity change from 0 to 40427 [ 956.874207][T15369] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 956.874236][T15369] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 956.899345][T15369] F2FS-fs (loop2): invalid crc value [ 957.063869][T15366] XFS (loop5): Quotacheck: Done. [ 957.174539][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.729931][T15173] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.730385][T15173] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.730693][T15173] bridge_slave_1: entered allmulticast mode [ 957.760409][T15173] bridge_slave_1: entered promiscuous mode [ 958.146929][T15369] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 958.161965][T15366] overlayfs: failed to resolve './bus': -2 [ 958.182337][T15379] loop1: detected capacity change from 0 to 32768 [ 958.221235][T15173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.234433][T15382] kAFS: unable to lookup cell '/' [ 958.451536][T15369] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 958.451574][T15369] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 958.991327][T15173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.080705][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.166611][T11977] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 959.615924][T11977] Flush: task=syz-executor[11977] dev=loop5 state=2 [ 959.698837][T11977] Teardown: task=syz-executor[11977] dev=loop5 state=2 [ 960.219498][ T5607] Flush: task=syz-executor[5607] dev=loop2 state=2 [ 960.291639][T15173] team0: Port device team_slave_0 added [ 960.308109][T15173] team0: Port device team_slave_1 added [ 961.020167][ T5607] Teardown: task=syz-executor[5607] dev=loop2 state=2 [ 961.251762][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2 [ 961.476539][T15388] loop5: detected capacity change from 0 to 256 [ 961.480791][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2 [ 961.514047][T15173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.514062][T15173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.514085][T15173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.578904][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.593090][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.675141][T15173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.675157][T15173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.675183][T15173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.165141][T12795] Flush: task=udevd[12795] dev=loop5 state=2 [ 962.281615][T15173] hsr_slave_0: entered promiscuous mode [ 962.283466][T15173] hsr_slave_1: entered promiscuous mode [ 962.284928][T15173] debugfs: 'hsr0' already exists in 'hsr' [ 962.284950][T15173] Cannot create hsr debugfs directory [ 962.298492][T12795] Teardown: task=udevd[12795] dev=loop5 state=2 [ 963.326660][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.545693][T15391] loop2: detected capacity change from 0 to 32768 [ 963.606182][T15391] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 963.730194][T15391] XFS (loop2): Ending clean mount [ 964.312777][ T3351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.951338][ T5607] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 964.951543][ T1193] bridge_slave_1: left allmulticast mode [ 964.951606][ T1193] bridge_slave_1: left promiscuous mode [ 964.951891][ T1193] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.200313][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 965.305762][ T5607] Flush: task=syz-executor[5607] dev=loop2 state=2 [ 965.400087][ T1193] bridge_slave_0: left allmulticast mode [ 965.400116][ T1193] bridge_slave_0: left promiscuous mode [ 965.400338][ T1193] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.423444][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 965.496107][ T5607] Teardown: task=syz-executor[5607] dev=loop2 state=2 [ 965.514101][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.531225][ T9] usb 6-1: config 189 has an invalid interface number: 127 but max is 0 [ 965.531255][ T9] usb 6-1: config 189 has no interface number 0 [ 965.531288][ T9] usb 6-1: config 189 interface 127 has no altsetting 0 [ 965.533659][ T9] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 965.533688][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.533723][ T9] usb 6-1: Product: syz [ 965.533739][ T9] usb 6-1: Manufacturer: syz [ 965.533754][ T9] usb 6-1: SerialNumber: syz [ 966.776814][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.258854][ T5620] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 967.309868][ T1193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.370641][ T1193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.392152][ T1193] bond0 (unregistering): Released all slaves [ 967.400572][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.418924][ T5620] usb 3-1: Using ep0 maxpacket: 16 [ 967.421494][ T5620] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 967.421529][ T5620] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 81, changing to 10 [ 967.421557][ T5620] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 34763, setting to 1024 [ 967.421586][ T5620] usb 3-1: config 0 interface 0 has no altsetting 0 [ 967.421620][ T5620] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 967.421646][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.427669][ T5620] usb 3-1: config 0 descriptor?? [ 967.432976][T15430] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 967.947650][ T5620] hid (null): unknown global tag 0x9c [ 967.947921][ T5620] hid (null): unknown global tag 0xc [ 967.947941][ T5620] hid (null): invalid report_size -102239164 [ 967.948012][ T5620] hid (null): report_id 1411897191 is invalid [ 967.948056][ T5620] hid (null): unknown global tag 0xd [ 967.948088][ T5620] hid (null): unknown global tag 0x24 [ 967.948099][ T5620] hid (null): unknown global tag 0xd [ 967.948124][ T5620] hid (null): report_id 58670 is invalid [ 967.948187][ T5620] hid (null): unknown global tag 0x9f [ 967.948228][ T5620] hid (null): global environment stack overflow [ 967.948258][ T5620] hid (null): invalid report_count 41379 [ 967.948290][ T5620] hid (null): unknown global tag 0xd [ 968.040037][ T5620] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 968.040077][ T5620] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 968.040107][ T5620] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 968.040136][ T5620] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 968.040164][ T5620] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 968.040192][ T5620] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 968.040229][ T5620] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 968.040257][ T5620] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 968.040285][ T5620] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 968.040312][ T5620] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 968.040850][ T5620] cougar 0003:060B:500A.000B: unexpected long global item [ 968.041697][ T5620] cougar 0003:060B:500A.000B: parse failed [ 968.041806][ T5620] cougar 0003:060B:500A.000B: probe with driver cougar failed with error -22 [ 968.195577][ T5620] usb 3-1: USB disconnect, device number 62 [ 968.756262][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.803051][T15435] loop1: detected capacity change from 0 to 256 [ 968.939826][T15435] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 969.172389][T12795] Flush: task=udevd[12795] dev=loop1 state=2 [ 969.324140][T12795] Teardown: task=udevd[12795] dev=loop1 state=2 [ 969.383990][T15447] netlink: 'syz.1.2578': attribute type 1 has an invalid length. [ 969.441965][T15445] loop2: detected capacity change from 0 to 2048 [ 969.631166][T15445] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 969.751967][T15445] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 969.976135][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.420369][T15447] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 970.650330][ T9] usbserial_generic 6-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 970.650357][ T9] usbserial_generic 6-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 970.650394][ T9] usbserial_generic 6-1:189.127: device has no bulk endpoints [ 970.652591][ T9] safe_serial 6-1:189.127: safe_serial converter detected [ 970.652733][ T9] safe_serial 6-1:189.127: probe with driver safe_serial failed with error -22 [ 970.837673][ T5620] usb 6-1: USB disconnect, device number 12 [ 971.126739][T15483] misc userio: No port type given on /dev/userio [ 971.583355][T15495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2584'. [ 971.645185][T15488] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2583'. [ 971.645203][T15488] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2583'. [ 971.645232][T15488] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2583'. [ 972.152192][T15014] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 972.185605][T15014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 972.223619][T15495] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 972.522593][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.665025][ T4919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 972.702572][T15124] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 972.787441][ T4919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 972.806041][ T4919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 972.824650][ T4919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 972.827391][ T4919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 973.075143][T15124] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 973.075178][T15124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.075199][T15124] usb 2-1: Product: syz [ 973.075215][T15124] usb 2-1: Manufacturer: syz [ 973.075231][T15124] usb 2-1: SerialNumber: syz [ 973.105129][T15124] usb 2-1: config 0 descriptor?? [ 973.161227][ T3309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.544719][T15124] usb 2-1: Firmware: major: 108, minor: 101, hardware type: UNKNOWN (114) [ 973.701539][T15516] loop5: detected capacity change from 0 to 2048 [ 973.833315][T15124] usb 2-1: no permanent extended address found, random address set [ 973.833349][T15124] usb 2-1: atusb_probe: initialization failed, error = -524 [ 973.834376][T15124] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 973.862504][T15516] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 974.041239][T15516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 974.170383][ T821] usb 2-1: USB disconnect, device number 55 [ 974.236719][T11977] Flush: task=syz-executor[11977] dev=loop5 state=2 [ 974.312226][T11977] Teardown: task=syz-executor[11977] dev=loop5 state=2 [ 974.440787][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.588979][ T1193] hsr_slave_0: left promiscuous mode [ 974.726796][T15525] ufs: You didn't specify the type of your ufs filesystem [ 974.726796][T15525] [ 974.726796][T15525] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 974.726796][T15525] [ 974.726796][T15525] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 974.726861][T15525] ufs: ufstype=old is supported read-only [ 974.733249][T15525] ufs: ufs_fill_super(): bad magic number [ 975.399088][ T4919] Bluetooth: hci0: command tx timeout [ 975.523089][ T1193] hsr_slave_1: left promiscuous mode [ 975.524083][ T1193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.524106][ T1193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.567496][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.620840][ T1193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.620869][ T1193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.720232][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.261394][T15536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 976.997847][ T1193] veth1_macvtap: left promiscuous mode [ 976.997924][ T1193] veth0_macvtap: left promiscuous mode [ 976.998118][ T1193] veth1_vlan: left promiscuous mode [ 976.998278][ T1193] veth0_vlan: left promiscuous mode [ 977.478832][ T4919] Bluetooth: hci0: command tx timeout [ 977.705974][T15548] 9p: Bad value for 'rfdno' [ 978.781785][ T3309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.801043][T15546] loop1: detected capacity change from 0 to 32768 [ 978.896810][T15546] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2601 (15546) [ 979.969334][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.128528][ T4919] Bluetooth: hci0: command tx timeout [ 980.189945][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.190444][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.190889][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.215299][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.226214][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.226691][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.481467][T15546] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 980.481600][T15546] BTRFS info (device loop1): using crc32c checksum algorithm [ 980.715710][T15563] net_ratelimit: 45 callbacks suppressed [ 980.716005][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.806605][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.831212][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.884766][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.952845][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.002148][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.022452][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.028371][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.052388][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.052853][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.115752][T15546] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 981.116333][T15546] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 981.116700][T15546] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 981.117065][T15546] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 981.122865][T15546] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 981.132595][T15546] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 981.146519][T15546] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 981.170621][T15546] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 981.184993][T15546] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 981.192066][T15546] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 981.213290][T15546] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 981.280616][T15546] BTRFS error (device loop1): open_ctree failed: -12 [ 981.540327][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2 [ 981.636694][T15583] loop5: detected capacity change from 0 to 2048 [ 981.642533][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2 [ 981.661004][T15583] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 981.668460][T15583] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 982.209676][ T4919] Bluetooth: hci0: command tx timeout [ 982.556634][T15588] loop1: detected capacity change from 0 to 32768 [ 982.560505][T15588] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2610 (15588) [ 982.578282][T15588] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 982.578379][T15588] BTRFS info (device loop1): using sha256 checksum algorithm [ 982.596755][ T1193] team0 (unregistering): Port device team_slave_1 removed [ 982.805524][T15588] BTRFS info (device loop1): enabling ssd optimizations [ 982.805556][T15588] BTRFS info (device loop1): turning on sync discard [ 982.805573][T15588] BTRFS info (device loop1): enabling free space tree [ 982.831752][ T1193] team0 (unregistering): Port device team_slave_0 removed [ 983.132848][T11977] Flush: task=syz-executor[11977] dev=loop5 state=2 [ 983.632922][ T38] audit: type=1800 audit(1783217803.306:1305): pid=15606 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.2610" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 983.915628][T11977] Teardown: task=syz-executor[11977] dev=loop5 state=2 [ 985.095919][ T5605] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 985.959762][ T92] net_ratelimit: 478 callbacks suppressed [ 985.959784][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.084771][T12795] Flush: task=udevd[12795] dev=loop1 state=2 [ 986.232370][T12795] Teardown: task=udevd[12795] dev=loop1 state=2 [ 986.393529][ T821] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 986.623732][ T821] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 986.625322][ T821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.625347][ T821] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 986.626823][ T821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.626847][ T821] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 986.628337][ T821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.628363][ T821] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 986.631949][ T821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.632012][ T821] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 986.725604][ T821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.725643][ T821] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 986.727084][ T821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.727109][ T821] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 986.825641][ T821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.825669][ T821] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 986.846026][ T821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.846115][ T821] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 986.862890][ T821] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 986.862974][ T821] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 986.863037][ T821] usb 6-1: Product: syz [ 986.863079][ T821] usb 6-1: Manufacturer: syz [ 986.863107][ T821] usb 6-1: SerialNumber: syz [ 986.992204][ T821] usb 6-1: config 0 descriptor?? [ 987.133963][ T821] yurex 6-1:0.0: Could not find endpoints [ 987.233935][T15124] usb 6-1: USB disconnect, device number 13 [ 987.239926][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.966767][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.017046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.166726][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.960839][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.275018][ T5265] 8021q: adding VLAN 0 to HW filter on device eth9 [ 990.455713][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.999709][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.077815][T14545] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 992.092300][ T5620] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 992.125600][T14545] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 992.144780][T14545] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 992.159827][T14545] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 992.187941][T14545] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 992.259657][ T5620] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 992.259689][ T5620] usb 2-1: config 0 has no interface number 0 [ 992.259739][ T5620] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 25955, setting to 64 [ 992.271817][ T5620] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 992.271847][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 992.271869][ T5620] usb 2-1: Manufacturer: syz [ 992.271885][ T5620] usb 2-1: SerialNumber: syz [ 992.463579][ T5620] usb 2-1: config 0 descriptor?? [ 992.464527][T15684] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 993.010375][ T3351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.017914][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.049856][T15685] loop5: detected capacity change from 0 to 32768 [ 993.080462][T15685] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2624 (15685) [ 993.145383][T15685] BTRFS info (device loop5): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 993.145415][T15685] BTRFS info (device loop5): using blake2b checksum algorithm [ 993.177799][ T5620] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input36 [ 993.334875][ C1] usbtouchscreen 2-1:0.214: usbtouch_irq - usb_submit_urb failed with result: -1 [ 993.392496][ T5740] usb 2-1: USB disconnect, device number 56 [ 993.592037][T15685] BTRFS info (device loop5): enabling ssd optimizations [ 993.592068][T15685] BTRFS info (device loop5): turning on async discard [ 993.592086][T15685] BTRFS info (device loop5): enabling free space tree [ 993.717754][T15685] BTRFS critical (device loop5 state E): emergency shutdown [ 993.822749][T11977] BTRFS info (device loop5 state E): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 994.288390][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.477675][T11977] Flush: task=syz-executor[11977] dev=loop5 state=2 [ 994.554843][T15715] loop1: detected capacity change from 0 to 8 [ 994.572322][T11977] Teardown: task=syz-executor[11977] dev=loop5 state=2 [ 994.772799][ T4919] Bluetooth: hci4: command tx timeout [ 994.919842][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.526088][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.840260][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.851224][ T4919] Bluetooth: hci4: command tx timeout [ 997.357337][T15503] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.357688][T15503] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.358034][T15503] bridge_slave_0: entered allmulticast mode [ 997.375984][T15503] bridge_slave_0: entered promiscuous mode [ 997.477824][T15503] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.478098][T15503] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.478334][T15503] bridge_slave_1: entered allmulticast mode [ 997.522334][T15503] bridge_slave_1: entered promiscuous mode [ 998.169193][ T5620] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 998.503769][ T5620] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 998.503805][ T5620] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 998.535405][ T5620] usb 6-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 998.535436][ T5620] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.535456][ T5620] usb 6-1: Product: syz [ 998.535476][ T5620] usb 6-1: Manufacturer: syz [ 998.535488][ T5620] usb 6-1: SerialNumber: syz [ 998.760466][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.856070][T15754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.860726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.936071][ T4919] Bluetooth: hci4: command tx timeout [ 999.016346][ T5620] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 999.040685][ T5620] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 999.041197][ T5620] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 999.041627][ T5620] usb 6-1: 0:3 : does not exist [ 999.041647][ T5620] usb 6-1: 0:4 : does not exist [ 999.041663][ T5620] usb 6-1: 0:5 : does not exist [ 999.211643][ T5620] usb 6-1: USB disconnect, device number 14 [ 999.278604][T15503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.318902][T15503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.367622][T12795] udevd[12795]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1000.679770][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.998888][ T4919] Bluetooth: hci4: command tx timeout [ 1001.541657][T15503] team0: Port device team_slave_0 added [ 1001.636929][T15503] team0: Port device team_slave_1 added [ 1001.869194][T15503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.869209][T15503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.869229][T15503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.994796][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.995861][T15503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.995877][T15503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.041665][T15503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.603342][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.702207][T15503] hsr_slave_0: entered promiscuous mode [ 1002.735565][T15503] hsr_slave_1: entered promiscuous mode [ 1002.750829][T15503] debugfs: 'hsr0' already exists in 'hsr' [ 1002.750852][T15503] Cannot create hsr debugfs directory [ 1003.882620][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.885544][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.657366][T15791] loop5: detected capacity change from 0 to 32768 [ 1005.668915][T15791] btrfs: Unknown parameter 'fragment' [ 1005.889143][ T3309] bridge_slave_1: left allmulticast mode [ 1005.889182][ T3309] bridge_slave_1: left promiscuous mode [ 1005.889584][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.141386][T12795] Flush: task=udevd[12795] dev=loop5 state=2 [ 1006.801263][T12795] Teardown: task=udevd[12795] dev=loop5 state=2 [ 1006.824850][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.835202][ T3309] bridge_slave_0: left allmulticast mode [ 1006.835229][ T3309] bridge_slave_0: left promiscuous mode [ 1006.835441][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.692643][ T3309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1007.729930][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.821807][ T3309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1007.947593][ T3309] bond0 (unregistering): Released all slaves [ 1008.381010][ T1193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.963284][ T3309] hsr_slave_0: left promiscuous mode [ 1009.048917][ T3309] hsr_slave_1: left promiscuous mode [ 1009.050003][ T3309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.176245][ T3309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.652640][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.650538][T14545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1010.717067][T14545] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1010.809235][T14545] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1010.810924][T14545] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1010.811743][T14545] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1011.371070][ T3309] team0 (unregistering): Port device team_slave_1 removed [ 1011.451780][ T3309] team0 (unregistering): Port device team_slave_0 removed [ 1012.202674][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.658109][T15830] loop5: detected capacity change from 0 to 512 [ 1012.697383][T15830] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1012.790726][T15830] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.2653: bad orphan inode 131083 [ 1012.790760][T15830] loop5: lost filesystem error report for type 5 error -117 [ 1012.867101][T15830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.078915][ T4919] Bluetooth: hci3: command tx timeout [ 1013.254161][T15686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.256064][T15686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.256368][T15686] bridge_slave_0: entered allmulticast mode [ 1013.294385][T15686] bridge_slave_0: entered promiscuous mode [ 1013.495971][ T1193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.507182][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.671315][T15830] EXT4-fs error (device loop5): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.5.2653: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1013.806665][T15830] EXT4-fs error (device loop5) in ext4_delete_entry:2744: Corrupt filesystem [ 1013.809295][T15846] EXT4-fs (loop5): shut down requested (1) [ 1013.815719][T15830] EXT4-fs warning (device loop5): ext4_rename_delete:3739: inode #2: comm syz.5.2653: Deleting old file: nlink 5, error=-117 [ 1014.203646][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.230641][T11977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.282478][T15686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.282824][T15686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.283123][T15686] bridge_slave_1: entered allmulticast mode [ 1014.286116][T15686] bridge_slave_1: entered promiscuous mode [ 1014.308058][T11977] Flush: task=syz-executor[11977] dev=loop5 state=2 [ 1014.463863][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 1014.543487][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 1014.548985][T11977] Teardown: task=syz-executor[11977] dev=loop5 state=2 [ 1015.014846][ T3351] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1015.015390][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 1015.109362][T15686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.141511][ T5265] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1015.141888][ T3351] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1015.164464][T15686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.166235][ T4919] Bluetooth: hci3: command tx timeout [ 1015.177832][T15859] loop5: detected capacity change from 0 to 512 [ 1015.220654][T15859] EXT4-fs: Ignoring removed nobh option [ 1015.269115][T15859] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2658: iget: bad i_size value: 38620345925642 [ 1015.272020][T15859] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1015.273359][T15859] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2658: couldn't read orphan inode 15 (err -117) [ 1015.273401][T15859] loop5: lost filesystem error report for type 5 error -117 [ 1015.277121][T15859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.313684][ T3351] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1015.574550][ T3351] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1015.596196][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.710119][T15686] team0: Port device team_slave_0 added [ 1016.760435][T15686] team0: Port device team_slave_1 added [ 1017.080002][T11977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.135787][T11977] Flush: task=syz-executor[11977] dev=loop5 state=2 [ 1017.233637][T15686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.233654][T15686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.233678][T15686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.239076][ T4919] Bluetooth: hci3: command tx timeout [ 1017.260599][T11977] Teardown: task=syz-executor[11977] dev=loop5 state=2 [ 1017.439204][T15686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.439222][T15686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.439251][T15686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.975834][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.325696][T15876] loop5: detected capacity change from 0 to 256 [ 1018.373013][T15876] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1018.941857][T11977] Flush: task=syz-executor[11977] dev=loop5 state=2 [ 1019.039710][T11977] Teardown: task=syz-executor[11977] dev=loop5 state=2 [ 1019.046585][T15686] hsr_slave_0: entered promiscuous mode [ 1019.048475][T15686] hsr_slave_1: entered promiscuous mode [ 1019.069038][T15686] debugfs: 'hsr0' already exists in 'hsr' [ 1019.069060][T15686] Cannot create hsr debugfs directory [ 1019.251078][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.280437][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.319576][ T4919] Bluetooth: hci3: command tx timeout [ 1019.395606][T15882] loop5: detected capacity change from 0 to 512 [ 1019.408265][T15882] EXT4-fs: Ignoring removed oldalloc option [ 1019.507214][T15882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1019.565162][T15886] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2667'. [ 1019.584937][T15882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1019.585057][T15882] ext4 filesystem being mounted at /207/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1019.628237][ T38] audit: type=1800 audit(1783217839.596:1306): pid=15882 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.5.2665" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 1020.838314][T11977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.064862][T11977] Flush: task=syz-executor[11977] dev=loop5 state=2 [ 1021.149145][T11977] Teardown: task=syz-executor[11977] dev=loop5 state=2 [ 1021.230745][T15906] loop5: detected capacity change from 0 to 64 [ 1021.390365][T11977] Flush: task=syz-executor[11977] dev=loop5 state=2 [ 1021.482029][T11977] Teardown: task=syz-executor[11977] dev=loop5 state=2 [ 1021.801535][ T3351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.840068][T15904] tipc: Enabling of bearer rejected, failed to enable media [ 1023.095234][ T3351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.153052][ T38] audit: type=1326 audit(1783217843.096:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15916 comm="syz.2.2672" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f059dc7de59 code=0x0 [ 1023.799711][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.027406][ T1193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.260974][ T1193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.265323][ T1193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.667757][ T3351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.873485][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.480992][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.929559][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.167622][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.819452][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.790633][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.324959][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.611309][ T1193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.124450][T14545] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1036.315956][T14545] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1036.337437][T14545] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1036.358616][T14545] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1036.459597][T14545] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1036.557218][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.946974][T14545] Bluetooth: hci1: command tx timeout [ 1039.101891][ T3351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.175976][T15965] loop5: detected capacity change from 0 to 128 [ 1039.266751][T15965] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1039.720487][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.381212][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.999237][T14545] Bluetooth: hci1: command tx timeout [ 1041.025138][ T38] audit: type=1800 audit(1783217861.006:1308): pid=15965 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.5.2680" name="file1" dev="loop5" ino=94 res=0 errno=0 [ 1042.634569][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.081136][ T4919] Bluetooth: hci1: command tx timeout [ 1043.492432][ T5591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.120108][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.159283][ T4919] Bluetooth: hci1: command tx timeout [ 1045.480734][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.120280][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.538556][T15991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.574927][T11977] Flush: task=syz-executor[11977] dev=loop5 state=2 [ 1046.575684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.686585][T15991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.741116][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.824198][T11977] Teardown: task=syz-executor[11977] dev=loop5 state=2 [ 1046.899618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.112180][ T5265] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1047.583275][T15999] bond1 (unregistering): Released all slaves [ 1047.824203][T15995] net_ratelimit: 4 callbacks suppressed [ 1047.824226][T15995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.824659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.847177][T15995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.871233][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.879899][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.914610][T15992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.997079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.997895][T15992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.746230][T15818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.746600][T15818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.746886][T15818] bridge_slave_0: entered allmulticast mode [ 1048.779393][T15818] bridge_slave_0: entered promiscuous mode [ 1049.175742][T16012] loop5: detected capacity change from 0 to 8192 [ 1049.548079][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.749380][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.796613][ T3309] vlan2: left allmulticast mode [ 1050.796637][ T3309] vlan0: left allmulticast mode [ 1050.796650][ T3309] veth0_vlan: left allmulticast mode [ 1050.796917][ T3309] vlan2: left promiscuous mode [ 1050.796930][ T3309] vlan0: left promiscuous mode [ 1050.797755][ T3309] bridge0: port 2(vlan2) entered disabled state [ 1051.037200][T16007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1051.171852][T11977] Flush: task=syz-executor[11977] dev=loop5 state=2 [ 1051.268974][T11977] Teardown: task=syz-executor[11977] dev=loop5 state=2 [ 1051.399413][ T3309] bridge_slave_0: left allmulticast mode [ 1051.399451][ T3309] bridge_slave_0: left promiscuous mode [ 1051.399735][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.599026][ T3309] bridge_slave_1: left allmulticast mode [ 1051.599068][ T3309] bridge_slave_1: left promiscuous mode [ 1051.599588][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.629182][ T5624] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1051.734574][ T3309] bridge_slave_0: left allmulticast mode [ 1051.734613][ T3309] bridge_slave_0: left promiscuous mode [ 1051.734907][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.789589][ T5624] usb 6-1: Using ep0 maxpacket: 16 [ 1051.810967][ T5624] usb 6-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1051.810996][ T5624] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1051.811029][ T5624] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1051.811052][ T5624] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.961608][ T5624] usb 6-1: config 0 descriptor?? [ 1052.049780][ T5624] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1053.269091][ T3373] net_ratelimit: 2 callbacks suppressed [ 1053.269115][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.447142][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.051003][ T5624] usb 6-1: USB disconnect, device number 15 [ 1055.096677][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.234328][T14545] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1055.307036][T14545] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1055.362168][T14545] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1055.365109][T14545] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1055.383230][T14545] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1055.728384][T16034] loop5: detected capacity change from 0 to 512 [ 1055.746135][T16034] EXT4-fs: Ignoring removed mblk_io_submit option [ 1055.757655][T16033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.821822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.921375][T16034] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.2692: Invalid inode bitmap blk 4 in block_group 0 [ 1055.921410][T16034] loop5: lost filesystem error report for type 5 error -117 [ 1055.929777][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1055.929799][ C1] EXT4-fs (loop5): initial error at time 1783217875: ext4_read_inode_bitmap:141 [ 1055.929825][ C1] EXT4-fs (loop5): last error at time 1783217875: ext4_read_inode_bitmap:141 [ 1055.981305][T16034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.187726][T11977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.284438][T11977] Flush: task=syz-executor[11977] dev=loop5 state=2 [ 1056.359391][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.359992][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.719025][T11977] Teardown: task=syz-executor[11977] dev=loop5 state=2 [ 1056.836471][ T3309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.572480][ T4919] Bluetooth: hci0: command tx timeout [ 1058.277105][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2697'. [ 1058.289124][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.594966][ T3309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.675249][ T3309] bond0 (unregistering): Released all slaves [ 1058.729549][ T3309] bond1 (unregistering): Released all slaves [ 1058.804083][ T3309] bond2 (unregistering): Released all slaves [ 1059.182306][ T3309] team0: Port device bond3 removed [ 1059.206080][ T3309] bond3 (unregistering): Released all slaves [ 1059.653574][ T4919] Bluetooth: hci0: command tx timeout [ 1060.840007][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.073426][ T3309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.170184][ T3309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.285971][ T3309] bond0 (unregistering): Released all slaves [ 1061.338175][T15818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.338550][T15818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.338952][T15818] bridge_slave_1: entered allmulticast mode [ 1061.367036][T15818] bridge_slave_1: entered promiscuous mode [ 1061.718886][ T4919] Bluetooth: hci0: command tx timeout [ 1062.169904][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.184123][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.191762][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.225059][T16052] hsr_slave_0: left promiscuous mode [ 1062.324390][T16052] hsr_slave_1: left promiscuous mode [ 1063.442312][T15818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.813085][ T4919] Bluetooth: hci0: command tx timeout [ 1063.943436][T15818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.091449][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.683844][T16077] kAFS: No cell specified [ 1065.965666][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.015268][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.055539][ T1193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.835377][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.671296][T15932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.856221][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.156074][T14545] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1072.236809][T14545] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1072.260259][T14545] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1073.085702][T14545] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1073.120935][T14545] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1074.279437][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.382776][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.403594][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.558870][ T4919] Bluetooth: hci4: command tx timeout [ 1075.996098][T16129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 1076.037225][T16124] tipc: Started in network mode [ 1076.037263][T16124] tipc: Node identity ac14140f, cluster identity 4711 [ 1076.120485][T16124] tipc: New replicast peer: 100.1.1.0 [ 1076.121275][T16124] tipc: Enabled bearer , priority 10 [ 1077.287314][ T5744] tipc: Node number set to 2886997007 [ 1077.483656][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.642162][ T4919] Bluetooth: hci4: command tx timeout [ 1078.760335][T16137] 9p: Bad value for 'rfdno' [ 1079.562572][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.781673][ T4919] Bluetooth: hci4: command tx timeout [ 1080.315278][ T5265] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1081.800656][ T4919] Bluetooth: hci4: command tx timeout [ 1082.313363][ T3309] hsr_slave_0: left promiscuous mode [ 1082.376222][ T3309] hsr_slave_1: left promiscuous mode [ 1082.377765][ T3309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.435032][ T3309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.591134][ T3309] hsr_slave_0: left promiscuous mode [ 1082.610180][ T3309] hsr_slave_1: left promiscuous mode [ 1082.611322][ T3309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.650400][ T3309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.084036][ T3309] team0 (unregistering): Port device team_slave_1 removed [ 1086.203334][ T3309] team0 (unregistering): Port device team_slave_0 removed [ 1087.026387][ T3309] team0 (unregistering): Port device team_slave_1 removed [ 1087.084350][ T3309] team0 (unregistering): Port device team_slave_0 removed [ 1089.545807][T15946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.602991][T15946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.840165][T15946] bridge_slave_0: entered allmulticast mode [ 1089.924641][T15946] bridge_slave_0: entered promiscuous mode [ 1090.053065][T15946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.053415][T15946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.127779][T15946] bridge_slave_1: entered allmulticast mode [ 1090.146835][T15946] bridge_slave_1: entered promiscuous mode [ 1092.459926][T15946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.539438][T15946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.346964][T15946] team0: Port device team_slave_0 added [ 1094.348235][T16023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.348613][T16023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.376179][T16023] bridge_slave_0: entered allmulticast mode [ 1094.570503][T16023] bridge_slave_0: entered promiscuous mode [ 1094.695420][T15946] team0: Port device team_slave_1 added [ 1094.697154][T16023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.697519][T16023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.697808][T16023] bridge_slave_1: entered allmulticast mode [ 1094.822322][T16023] bridge_slave_1: entered promiscuous mode [ 1094.866126][ T5265] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1095.145884][T16023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.199435][T16023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.331228][T16099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.331654][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.331969][T16099] bridge_slave_0: entered allmulticast mode [ 1095.336939][T16099] bridge_slave_0: entered promiscuous mode [ 1095.696925][T16023] team0: Port device team_slave_0 added [ 1095.708075][T16099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.708438][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.727272][T16099] bridge_slave_1: entered allmulticast mode [ 1095.773363][T16099] bridge_slave_1: entered promiscuous mode [ 1095.993861][T16023] team0: Port device team_slave_1 added [ 1095.995818][ T5744] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1096.214368][ T5744] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.214428][ T5744] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1096.214456][ T5744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1096.214484][ T5744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1096.214507][ T5744] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1096.282260][ T5744] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1096.282293][ T5744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1096.282315][ T5744] usb 6-1: Product: syz [ 1096.282331][ T5744] usb 6-1: Manufacturer: syz [ 1096.282347][ T5744] usb 6-1: SerialNumber: syz [ 1096.356093][ T5744] usb 6-1: config 0 descriptor?? [ 1096.834182][ T5744] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1096.834213][ T5744] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1097.019736][ T5744] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 1097.019842][ T5744] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1097.019866][ T5744] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1097.225062][ T5744] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 1097.531504][T16099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.697980][T16023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1097.697999][T16023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.698031][T16023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.071380][T14545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1098.190421][T16099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.222661][T16023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.222679][T16023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.222703][T16023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.297436][T14545] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1098.346316][T14545] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1098.381023][T14545] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1098.462445][T14545] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1098.652951][ T5744] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1098.653346][ T5744] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 1099.385186][T16099] team0: Port device team_slave_0 added [ 1099.457039][T16099] team0: Port device team_slave_1 added [ 1100.280599][ T5744] usb 6-1: USB disconnect, device number 16 [ 1100.330989][T16023] hsr_slave_0: entered promiscuous mode [ 1100.485338][T16023] hsr_slave_1: entered promiscuous mode [ 1100.507099][T16099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.507118][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.507148][T16099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.605350][T16099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.605369][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.605401][T16099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.920828][ T4919] Bluetooth: hci3: command tx timeout [ 1101.954179][T16099] hsr_slave_0: entered promiscuous mode [ 1101.961918][T16099] hsr_slave_1: entered promiscuous mode [ 1101.976650][T16099] debugfs: 'hsr0' already exists in 'hsr' [ 1101.976677][T16099] Cannot create hsr debugfs directory [ 1102.777967][ T5265] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1103.034689][ T4919] Bluetooth: hci3: command tx timeout [ 1103.304595][T16289] loop5: detected capacity change from 0 to 256 [ 1103.534892][T16289] exfat: Bad value for 'uid' [ 1103.534913][T16289] exfat: Bad value for 'uid' [ 1103.535394][T16289] Flush: task=syz.5.2739[16289] dev=loop5 state=2 [ 1105.079249][ T4919] Bluetooth: hci3: command tx timeout [ 1105.387089][T16289] Teardown: task=syz.5.2739[16289] dev=loop5 state=2 [ 1105.462472][T16289] loop5: detected capacity change from 0 to 256 [ 1105.486385][T16289] exfat: Bad value for 'uid' [ 1105.486405][T16289] exfat: Bad value for 'uid' [ 1105.601617][T16244] Flush: task=udevd[16244] dev=loop5 state=2 [ 1105.942913][T16244] Teardown: task=udevd[16244] dev=loop5 state=2 [ 1106.164011][ T3309] IPVS: stop unused estimator thread 0... [ 1107.166596][ T4919] Bluetooth: hci3: command tx timeout [ 1108.816839][T16377] tmpfs: Bad value for 'mpol' [ 1108.829625][T16377] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2775'. [ 1114.066523][T16245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.066871][T16245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.067185][T16245] bridge_slave_0: entered allmulticast mode [ 1114.096161][T16245] bridge_slave_0: entered promiscuous mode [ 1114.129798][T16245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.130302][T16245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.130565][T16245] bridge_slave_1: entered allmulticast mode [ 1114.137466][T16245] bridge_slave_1: entered promiscuous mode [ 1114.267793][T16245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.292606][T16245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.768883][ T821] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1115.003651][ T821] usb 6-1: Using ep0 maxpacket: 32 [ 1115.038101][ T821] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1115.038136][ T821] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1115.038158][ T821] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1115.038180][ T821] usb 6-1: config 1 has no interface number 0 [ 1115.038237][ T821] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1115.038265][ T821] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1115.038309][ T821] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1115.038333][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.111458][ T821] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1115.591271][T16477] loop5: detected capacity change from 0 to 512 [ 1115.822658][T16477] FAT-fs (loop5): data area starts beyond volume (68 > 0) [ 1115.822684][T16477] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1115.877507][T16245] team0: Port device team_slave_0 added [ 1115.930963][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.245028][T16245] team0: Port device team_slave_1 added [ 1116.954641][T16480] Flush: task=udevd[16480] dev=loop5 state=2 [ 1117.398602][ T821] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1117.814334][ T5624] usb 6-1: USB disconnect, device number 17 [ 1117.833726][T16480] Teardown: task=udevd[16480] dev=loop5 state=2 [ 1117.869965][ T5624] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1118.461339][T16245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.461359][T16245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.461391][T16245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.565624][T16245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.565641][T16245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.565673][T16245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.637893][T14545] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1118.707667][T14545] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1118.847111][T14545] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1118.848434][T14545] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1118.849407][T14545] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1121.004811][ T4919] Bluetooth: hci1: command tx timeout [ 1123.080625][ T4919] Bluetooth: hci1: command tx timeout [ 1123.095063][ T821] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1123.262573][ T821] usb 6-1: Using ep0 maxpacket: 16 [ 1123.266723][ T821] usb 6-1: config 4 has an invalid interface number: 129 but max is 1 [ 1123.266753][ T821] usb 6-1: config 4 has an invalid interface number: 214 but max is 1 [ 1123.266777][ T821] usb 6-1: config 4 has no interface number 0 [ 1123.266795][ T821] usb 6-1: config 4 has no interface number 1 [ 1123.266876][ T821] usb 6-1: config 4 interface 129 altsetting 182 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1123.266907][ T821] usb 6-1: config 4 interface 129 altsetting 182 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1123.266937][ T821] usb 6-1: config 4 interface 129 altsetting 182 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1123.266981][ T821] usb 6-1: config 4 interface 214 altsetting 5 endpoint 0xB has an invalid bInterval 181, changing to 7 [ 1123.267012][ T821] usb 6-1: config 4 interface 214 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 1123.267036][ T821] usb 6-1: config 4 interface 214 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 1123.267060][ T821] usb 6-1: config 4 interface 129 has no altsetting 0 [ 1123.267080][ T821] usb 6-1: config 4 interface 214 has no altsetting 0 [ 1123.394138][ T821] usb 6-1: New USB device found, idVendor=05f9, idProduct=4002, bcdDevice=93.f3 [ 1123.394169][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.394289][ T821] usb 6-1: Product: 윟J섐℈ꚇ [ 1123.394307][ T821] usb 6-1: Manufacturer: 궸똶鿑ȫ稪ꟿ駂႓惞加솊찕쐤ᤗ帚ᄙ䣑굑麗荃좿䴭袬ԃ憷ⵀ遰돌䉻໶Áᮮ똸઒Ӫ䑟ᱳ觢㋌懍⫿᪪繀畴䃀쉼ꮸ쳂蹬奨ﰶ헾቞ᾂ퐖贾 [ 1123.394333][ T821] usb 6-1: SerialNumber: ⢵衇莺䥜梧綉话饎鐭䃼筷죓湐⌽伟占庐졒ꁹ蓩逮⯒ᲒⰝ㺴閐퇃澋䆹⶧쫬⏍픝䢯篮ᦓ㥼꺜尒篒뼸䐭䓌啀紖餝旔蜓僵ஓ䘧붻ᬄ窒𥳐緪胪䨵砿쎒뗨졅럸ꉔ욏ꮯꌦ貦鏅逖덡俅睒嚎ꪵ⅝瑟듞秸뗨ꆍ쀂ꭼ⯱⌍ﱖ姼꩹悘铝濬憣躠 [ 1124.110257][ T821] usb 6-1: USB disconnect, device number 18 [ 1125.159373][ T4919] Bluetooth: hci1: command tx timeout [ 1126.744392][T16245] hsr_slave_0: entered promiscuous mode [ 1126.751536][T16245] hsr_slave_1: entered promiscuous mode [ 1126.762845][T16245] debugfs: 'hsr0' already exists in 'hsr' [ 1126.762875][T16245] Cannot create hsr debugfs directory [ 1127.239007][ T4919] Bluetooth: hci1: command tx timeout [ 1127.876880][T16590] loop5: detected capacity change from 0 to 40427 [ 1127.928943][T16590] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1127.928972][T16590] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1127.985420][T16590] F2FS-fs (loop5): Mismatch valid blocks 4 vs. 14 [ 1128.156480][T16590] loop5: lost filesystem error report for type 5 error -117 [ 1128.156505][T16590] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 1128.484490][T16590] Flush: task=syz.5.2849[16590] dev=loop5 state=2 [ 1128.669554][T16590] Teardown: task=syz.5.2849[16590] dev=loop5 state=2 [ 1129.306457][ T38] audit: type=1326 audit(1783217949.276:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16618 comm="syz.2.2862" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dc7de59 code=0x7ffc0000 [ 1129.308443][ T38] audit: type=1326 audit(1783217949.276:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16618 comm="syz.2.2862" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dc7de59 code=0x7ffc0000 [ 1129.382599][ T38] audit: type=1326 audit(1783217949.276:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16618 comm="syz.2.2862" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f059dc7de59 code=0x7ffc0000 [ 1129.412655][ T38] audit: type=1326 audit(1783217949.356:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16618 comm="syz.2.2862" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dc7de59 code=0x7ffc0000 [ 1129.414659][ T38] audit: type=1326 audit(1783217949.386:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16618 comm="syz.2.2862" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dc7de59 code=0x7ffc0000 [ 1129.414974][ T38] audit: type=1326 audit(1783217949.386:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16618 comm="syz.2.2862" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f059dc7de59 code=0x7ffc0000 [ 1129.415460][ T38] audit: type=1326 audit(1783217949.386:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16618 comm="syz.2.2862" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dc7de59 code=0x7ffc0000 [ 1129.416041][ T38] audit: type=1326 audit(1783217949.386:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16618 comm="syz.2.2862" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dc7de59 code=0x7ffc0000 [ 1129.418172][ T38] audit: type=1326 audit(1783217949.386:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16618 comm="syz.2.2862" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f059dc7de59 code=0x7ffc0000 [ 1132.137121][T14545] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1132.495166][T14545] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1132.517244][T14545] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1132.538310][T14545] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1132.562373][T14545] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1134.846653][ T4919] Bluetooth: hci0: command tx timeout [ 1136.935573][ T4919] Bluetooth: hci0: command tx timeout [ 1138.999172][ T4919] Bluetooth: hci0: command tx timeout [ 1141.078737][ T4919] Bluetooth: hci0: command tx timeout [ 1143.367044][T16486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.367451][T16486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.367831][T16486] bridge_slave_0: entered allmulticast mode [ 1143.413679][T16486] bridge_slave_0: entered promiscuous mode [ 1143.685812][T16486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.686161][T16486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.686913][T16486] bridge_slave_1: entered allmulticast mode [ 1143.721178][T16486] bridge_slave_1: entered promiscuous mode [ 1144.928978][ T3309] bridge_slave_1: left allmulticast mode [ 1144.929018][ T3309] bridge_slave_1: left promiscuous mode [ 1144.929311][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.029336][ T3309] bridge_slave_0: left allmulticast mode [ 1146.029387][ T3309] bridge_slave_0: left promiscuous mode [ 1146.029731][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.729665][T16873] fuse: Bad value for 'fd' [ 1146.730520][T16873] fuse: Bad value for 'fd' [ 1147.399348][ T3309] bridge_slave_1: left allmulticast mode [ 1147.399388][ T3309] bridge_slave_1: left promiscuous mode [ 1147.399673][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.116924][ T3309] bridge_slave_0: left allmulticast mode [ 1148.116967][ T3309] bridge_slave_0: left promiscuous mode [ 1148.117264][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.469985][ T3309] bridge_slave_1: left allmulticast mode [ 1148.470027][ T3309] bridge_slave_1: left promiscuous mode [ 1148.470315][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.137648][ T3309] bridge_slave_0: left allmulticast mode [ 1149.137685][ T3309] bridge_slave_0: left promiscuous mode [ 1149.138282][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.289165][ T821] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1150.448073][ T821] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.448121][ T821] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1150.482908][ T821] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1150.482941][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.482963][ T821] usb 6-1: Product: syz [ 1150.482980][ T821] usb 6-1: Manufacturer: syz [ 1150.482996][ T821] usb 6-1: SerialNumber: syz [ 1150.737146][ T3309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1150.801441][T16911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.817003][T16911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.872103][ T821] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1150.918201][ T821] usb 6-1: USB disconnect, device number 19 [ 1151.386109][ T3309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1151.439246][ T821] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1151.467261][ T3309] bond0 (unregistering): Released all slaves [ 1151.589196][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 1151.591754][ T821] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 1151.591783][ T821] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.591833][ T821] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1151.591856][ T821] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1151.591881][ T821] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1151.591908][ T821] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.591947][ T821] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1151.591971][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.917844][ T821] usb 6-1: usb_control_msg returned -32 [ 1151.917895][ T821] usbtmc 6-1:16.0: can't read capabilities [ 1152.264936][ T821] usb 6-1: USB disconnect, device number 20 [ 1152.841221][ T3309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1152.981319][ T3309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1153.046523][ T3309] bond0 (unregistering): Released all slaves [ 1153.131287][T16961] loop5: detected capacity change from 0 to 512 [ 1153.554720][T16961] EXT4-fs (loop5): unable to read superblock [ 1154.156318][ T3309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1154.254913][ T3309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1154.334981][ T3309] bond0 (unregistering): Released all slaves [ 1154.990030][T16486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.085989][T16961] Flush: task=syz.5.2990[16961] dev=loop5 state=2 [ 1155.370328][T16961] Teardown: task=syz.5.2990[16961] dev=loop5 state=2 [ 1157.051199][T16486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.521346][T17009] overlayfs: failed to resolve './file0': -2 [ 1157.649803][T14545] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1157.892882][T14545] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1157.901429][T14545] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1157.902702][T14545] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1157.963573][T14545] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1159.237334][T16486] team0: Port device team_slave_0 added [ 1160.276982][ T4919] Bluetooth: hci4: command tx timeout [ 1160.928954][ T3309] hsr_slave_0: left promiscuous mode [ 1160.973012][ T3309] hsr_slave_1: left promiscuous mode [ 1160.974142][ T3309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.087957][ T3309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1162.020003][ T3309] hsr_slave_0: left promiscuous mode [ 1162.060850][ T3309] hsr_slave_1: left promiscuous mode [ 1162.062167][ T3309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.101099][ T3309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1162.359141][ T4919] Bluetooth: hci4: command tx timeout [ 1163.859220][ T5835] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 1164.013075][ T5835] usb 6-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1164.013114][ T5835] usb 6-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1164.013143][ T5835] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1164.013193][ T5835] usb 6-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 1164.013218][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.091616][ T5835] usb 6-1: config 0 descriptor?? [ 1164.121828][T17084] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1164.439062][ T4919] Bluetooth: hci4: command tx timeout [ 1164.643154][ T5835] hid_parser_main: 37 callbacks suppressed [ 1164.643221][ T5835] sony 0003:1430:474C.000C: unknown main item tag 0x2 [ 1164.643256][ T5835] sony 0003:1430:474C.000C: unknown main item tag 0x7 [ 1164.643403][ T5835] sony 0003:1430:474C.000C: unknown main item tag 0x0 [ 1164.814043][ T5835] sony 0003:1430:474C.000C: hidraw0: USB HID v9.0c Device [HID 1430:474c] on usb-dummy_hcd.5-1/input0 [ 1164.814090][ T5835] sony 0003:1430:474C.000C: failed to claim input [ 1165.106750][ T5835] usb 6-1: USB disconnect, device number 21 [ 1165.558006][ T3309] team0 (unregistering): Port device team_slave_1 removed [ 1165.733718][ T3309] team0 (unregistering): Port device team_slave_0 removed [ 1166.571765][ T4919] Bluetooth: hci4: command tx timeout [ 1167.872046][ T3309] team0 (unregistering): Port device team_slave_1 removed [ 1167.938014][ T3309] team0 (unregistering): Port device team_slave_0 removed [ 1168.388902][ T5835] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1168.556291][ T5835] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.556349][ T5835] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1168.556374][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1168.556401][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1168.556423][ T5835] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1168.981198][ T5835] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1168.981233][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1168.981255][ T5835] usb 6-1: Product: syz [ 1168.981272][ T5835] usb 6-1: Manufacturer: syz [ 1168.981288][ T5835] usb 6-1: SerialNumber: syz [ 1169.025496][ T5835] usb 6-1: config 0 descriptor?? [ 1169.208024][T16486] team0: Port device team_slave_1 added [ 1169.302638][ T5835] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1169.302668][ T5835] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1169.507637][ T5835] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1169.507664][ T5835] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1169.507966][ T5835] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1169.559889][ T5265] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1169.764780][ T5835] usb 6-1: USB disconnect, device number 22 [ 1170.335644][T17163] loop5: detected capacity change from 0 to 512 [ 1170.894197][T17163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1170.894342][T17163] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1171.440664][T16486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1171.440685][T16486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1171.440717][T16486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1171.643793][T16486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1171.643813][T16486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1171.643846][T16486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1173.479781][ T39] INFO: task kworker/0:4:5592 blocked for more than 143 seconds. [ 1173.479812][ T39] Tainted: G L syzkaller #0 [ 1173.479827][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1173.479838][ T39] task:kworker/0:4 state:D stack:20888 pid:5592 tgid:5592 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1173.479904][ T39] Workqueue: events drain_vmap_area_work [ 1173.479936][ T39] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1173.480027][ T39] [ 1173.480095][ T39] __schedule+0x1709/0x5530 [ 1173.480203][ T39] ? __pfx___schedule+0x10/0x10 [ 1173.480269][ T39] ? schedule+0x90/0x2b0 [ 1173.480309][ T39] schedule+0x164/0x2b0 [ 1173.480449][ T39] schedule_timeout+0xc0/0x2c0 [ 1173.480481][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 1173.480511][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 1173.480548][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1173.480579][ T39] ? wait_for_completion+0x272/0x5e0 [ 1173.480610][ T39] wait_for_completion+0x2ca/0x5e0 [ 1173.480656][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 1173.480695][ T39] ? __flush_work+0x101/0xd70 [ 1173.480734][ T39] __flush_work+0x9c2/0xd70 [ 1173.480766][ T39] ? __flush_work+0x101/0xd70 [ 1173.480804][ T39] ? __pfx___flush_work+0x10/0x10 [ 1173.480841][ T39] ? __pfx_wq_barrier_func+0x10/0x10 [ 1173.480897][ T39] ? flush_work+0xd/0x30 [ 1173.480897][ T39] ? flush_work+0xd/0x30 [ 1173.480933][ T39] __purge_vmap_area_lazy+0x880/0xb40 [ 1173.480964][ T39] ? process_one_work+0x7fd/0x1480 [ 1173.480994][ T39] drain_vmap_area_work+0x27/0x40 [ 1173.481017][ T39] process_one_work+0xaaf/0x1480 [ 1173.481071][ T39] ? __pfx_process_one_work+0x10/0x10 [ 1173.481099][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 1173.481131][ T39] ? assign_work+0x3cf/0x5d0 [ 1173.481180][ T39] worker_thread+0xb05/0x10d0 [ 1173.481239][ T39] kthread+0x388/0x470 [ 1173.481263][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1173.481299][ T39] ? __pfx_kthread+0x10/0x10 [ 1173.481324][ T39] ret_from_fork+0x514/0xb70 [ 1173.481490][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1173.481515][ T39] ? __switch_to+0xc89/0x1420 [ 1173.481553][ T39] ? __pfx_kthread+0x10/0x10 [ 1173.481578][ T39] ret_from_fork_asm+0x1a/0x30 [ 1173.481621][ T39] [ 1173.481706][ T39] [ 1173.481706][ T39] Showing all locks held in the system: [ 1173.481717][ T39] 4 locks held by ktimers/0/16: [ 1173.481731][ T39] #0: ffffffff8e0592e0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1173.481805][ T39] #1: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1173.481868][ T39] #2: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: hrtimer_run_softirq+0x7f/0x260 [ 1173.481921][ T39] #3: ffff8880b86284b8 (_T->lock){....}-{2:2}, at: rt_spin_lock+0x1e0/0x400 [ 1173.481976][ T39] 1 lock held by khungtaskd/39: [ 1173.481990][ T39] #0: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1173.482050][ T39] 6 locks held by kworker/u8:4/67: [ 1173.482064][ T39] #0: ffff88813fe5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1173.482125][ T39] #1: ffffc9000152fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1173.482186][ T39] #2: ffff88806912e310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1173.482264][ T39] #3: ffff88806176e120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1173.482432][ T39] #4: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1173.482488][ T39] #5: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1173.482551][ T39] 3 locks held by kworker/1:2/821: [ 1173.482565][ T39] #0: ffff88813fe1a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1173.482626][ T39] #1: ffffc900056ffc60 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1173.482685][ T39] #2: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1173.482739][ T39] 2 locks held by kworker/u8:6/829: [ 1173.482753][ T39] #0: ffff88813fe5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1173.482813][ T39] #1: ffffc9000579fc60 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1173.482890][ T39] 6 locks held by kworker/u8:13/3267: [ 1173.482904][ T39] #0: ffff88813fe5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1173.482964][ T39] #1: ffffc9000fc5fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1173.483067][ T39] #2: ffff88801eed4310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1173.483137][ T39] #3: ffff8880388cbd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1173.483203][ T39] #4: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1173.483255][ T39] #5: ffff8880b8736d10 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0 [ 1173.483319][ T39] 5 locks held by kworker/u8:14/3309: [ 1173.483421][ T39] #0: ffff88801bea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1173.483484][ T39] #1: ffffc9000fb8fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1173.483542][ T39] #2: ffffffff8f59cfc0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1173.483602][ T39] #3: ffff88802bb29978 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 1173.483655][ T39] #4: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1173.483718][ T39] 3 locks held by kworker/u8:18/3351: [ 1173.483732][ T39] #0: ffff88813fe5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1173.483792][ T39] #1: ffffc9000ff7fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1173.483850][ T39] #2: ffffffff8f5ac2f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1173.483919][ T39] 2 locks held by dhcpcd/5265: [ 1173.483932][ T39] #0: ffff88803cabe928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 1173.483992][ T39] #1: ffffffff8f5ac2f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14b0 [ 1173.484051][ T39] 2 locks held by getty/5357: [ 1173.484064][ T39] #0: ffff888035ace0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1173.484124][ T39] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1173.484180][ T39] 3 locks held by kworker/0:4/5592: [ 1173.484194][ T39] #0: ffff88813fe1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1173.484252][ T39] #1: ffffc9000441fc60 (drain_vmap_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1173.484318][ T39] #2: ffffffff8e2ea858 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 1173.484465][ T39] 2 locks held by kworker/0:5/5740: [ 1173.484479][ T39] #0: ffff88813fe1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1173.484537][ T39] #1: ffffc900055ffc60 ((work_completion)(&vn->purge_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1173.484604][ T39] 7 locks held by syz-executor/16245: [ 1173.484618][ T39] #0: ffff888034a30510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1173.484768][ T39] #1: ffff888060ca4c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1173.484832][ T39] #2: ffff888029b51a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1173.484898][ T39] #3: ffffffff8ee20a38 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1173.484953][ T39] #4: ffff888069ed2160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1173.485020][ T39] #5: ffff888066d06310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1173.485097][ T39] #6: ffffffff8f5ac2f8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1173.485149][ T39] 2 locks held by syz-executor/16486: [ 1173.485162][ T39] #0: ffffffff8fb10998 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1173.485225][ T39] #1: ffffffff8f5ac2f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1173.485289][ T39] 2 locks held by syz-executor/16647: [ 1173.485302][ T39] #0: ffffffff8faf5578 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1173.485470][ T39] #1: ffffffff8f5ac2f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1173.485531][ T39] 8 locks held by syz.5.3064/17163: [ 1173.485544][ T39] #0: ffff888063964510 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1173.485608][ T39] #1: ffff8880637d9000 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: chown_common+0x313/0x640 [ 1173.485677][ T39] #2: ffff8880637d8c90 (&ei->xattr_sem){++++}-{4:4}, at: ext4_setattr+0x891/0x1d70 [ 1173.485741][ T39] #3: ffff8880635d8a98 (&dquot->dq_lock){+.+.}-{4:4}, at: dquot_acquire+0x67/0x620 [ 1173.485804][ T39] #4: ffff888063964278 (&s->s_dquot.dqio_sem){++++}-{4:4}, at: v2_write_dquot+0xab/0x260 [ 1173.485859][ T39] #5: ffff8880637db1e8 (&ei->i_data_sem#2/2){++++}-{4:4}, at: ext4_map_blocks+0x7cc/0x1240 [ 1173.485927][ T39] #6: ffffe8ffffd437a8 (&lg->lg_mutex){+.+.}-{4:4}, at: ext4_mb_initialize_context+0x854/0xc20 [ 1173.485989][ T39] #7: ffff8880238575d8 (&mapping->i_private_lock){+.+.}-{3:3}, at: bdev_getblk+0x2de/0x6e0 [ 1173.486051][ T39] 1 lock held by syz.5.3064/17171: [ 1173.486064][ T39] #0: ffff8880637d9000 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: lookup_slow+0x46/0x70 [ 1173.486125][ T39] 2 locks held by modprobe/17173: [ 1173.486139][ T39] #0: ffff888083040430 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 1173.486199][ T39] #1: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 1173.486255][ T39] [ 1173.486262][ T39] ============================================= [ 1173.486262][ T39] [ 1173.487945][ T39] NMI backtrace for cpu 1 [ 1173.487968][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1173.487999][ T39] Tainted: [L]=SOFTLOCKUP [ 1173.488007][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1173.488018][ T39] Call Trace: [ 1173.488028][ T39] [ 1173.488038][ T39] dump_stack_lvl+0xe8/0x150 [ 1173.488076][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1173.488103][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1173.488143][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1173.488173][ T39] sys_info+0x135/0x170 [ 1173.488194][ T39] watchdog+0xfd7/0x1030 [ 1173.488227][ T39] ? watchdog+0x1c7/0x1030 [ 1173.488260][ T39] kthread+0x388/0x470 [ 1173.488290][ T39] ? __pfx_watchdog+0x10/0x10 [ 1173.488312][ T39] ? __pfx_kthread+0x10/0x10 [ 1173.488338][ T39] ret_from_fork+0x514/0xb70 [ 1173.488364][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1173.488386][ T39] ? __switch_to+0xc89/0x1420 [ 1173.488420][ T39] ? __pfx_kthread+0x10/0x10 [ 1173.488461][ T39] ret_from_fork_asm+0x1a/0x30 [ 1173.488501][ T39] [ 1173.488528][ T39] Sending NMI from CPU 1 to CPUs 0: [ 1173.488567][ C0] NMI backtrace for cpu 0 [ 1173.488585][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1173.488613][ C0] Tainted: [L]=SOFTLOCKUP [ 1173.488621][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1173.488633][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1d/0x80 [ 1173.488655][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 28 53 d8 10 65 8b 35 49 53 d8 10 81 e6 00 00 ff 00 00 01 00 00 23 91 fc 0b 00 00 89 d7 09 f7 74 11 85 f6 75 39 85 [ 1173.488672][ C0] RSP: 0018:ffffc90000157b08 EFLAGS: 00000046 [ 1173.488747][ C0] RAX: ffffffff81b1e57c RBX: 00000111219cdc80 RCX: ffff88801dab0000 [ 1173.488762][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1173.488780][ C0] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 1173.488791][ C0] R10: dffffc0000000000 R11: fffff5200002af58 R12: ffff8880b8628528 [ 1173.488806][ C0] R13: 0000000000000000 R14: ffff8880b862848f R15: 00000111219cdc80 [ 1173.488819][ C0] FS: 0000000000000000(0000) GS:ffff888125c49000(0000) knlGS:0000000000000000 [ 1173.488835][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1173.488848][ C0] CR2: 00007f0c8f9d2068 CR3: 0000000084ec4000 CR4: 00000000003526f0 [ 1173.488865][ C0] Call Trace: [ 1173.488873][ C0] [ 1173.488879][ C0] hrtimer_rearm_event+0x1c/0x200 [ 1173.488901][ C0] __hrtimer_rearm_deferred+0x26f/0x430 [ 1173.488933][ C0] irqentry_exit+0x8b7/0x8f0 [ 1173.488957][ C0] ? trace_irq_disable+0x3b/0x140 [ 1173.488982][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1173.489002][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1173.489028][ C0] Code: f7 e8 3d 79 5a f6 f7 c3 00 02 00 00 74 05 e8 c0 87 86 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 14 b4 4c f6 65 8b 05 5d 9b 56 07 85 c0 74 18 5b 41 5e e9 41 3c [ 1173.489044][ C0] RSP: 0018:ffffc90000157c88 EFLAGS: 00000206 [ 1173.489058][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000001 [ 1173.489070][ C0] RDX: 0000000000000002 RSI: ffffffff8d87e102 RDI: 0000000000000001 [ 1173.489082][ C0] RBP: ffff8880b86286e8 R08: ffffffff8faf37f7 R09: 1ffffffff1f5e6fe [ 1173.489097][ C0] R10: dffffc0000000000 R11: fffffbfff1f5e6ff R12: 7fffffffffffffff [ 1173.489112][ C0] R13: 0000000000000246 R14: ffff8880b8628440 R15: dffffc0000000000 [ 1173.489137][ C0] hrtimer_run_softirq+0x212/0x260 [ 1173.489158][ C0] handle_softirqs+0x1d9/0x6c0 [ 1173.489188][ C0] run_ktimerd+0x69/0x100 [ 1173.489214][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1173.489242][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1173.489273][ C0] kthread+0x388/0x470 [ 1173.489291][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1173.489316][ C0] ? __pfx_kthread+0x10/0x10 [ 1173.489333][ C0] ret_from_fork+0x514/0xb70 [ 1173.489352][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1173.489370][ C0] ? __switch_to+0xc89/0x1420 [ 1173.489396][ C0] ? __pfx_kthread+0x10/0x10 [ 1173.489414][ C0] ret_from_fork_asm+0x1a/0x30 [ 1173.489440][ C0] [ 1173.639010][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1173.639037][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1173.639070][ T39] Tainted: [L]=SOFTLOCKUP [ 1173.639079][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1173.639094][ T39] Call Trace: [ 1173.639105][ T39] [ 1173.639116][ T39] vpanic+0x56c/0xa60 [ 1173.639145][ T39] ? __pfx___schedule+0x10/0x10 [ 1173.639175][ T39] ? __pfx_vpanic+0x10/0x10 [ 1173.639208][ T39] panic+0xc5/0xd0 [ 1173.639229][ T39] ? __pfx_panic+0x10/0x10 [ 1173.639249][ T39] ? preempt_schedule_common+0x82/0xd0 [ 1173.639279][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 1173.639310][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1173.639345][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1173.639375][ T39] watchdog+0x1030/0x1030 [ 1173.639410][ T39] ? watchdog+0x1c7/0x1030 [ 1173.639442][ T39] kthread+0x388/0x470 [ 1173.639465][ T39] ? __pfx_watchdog+0x10/0x10 [ 1173.639489][ T39] ? __pfx_kthread+0x10/0x10 [ 1173.639513][ T39] ret_from_fork+0x514/0xb70 [ 1173.639541][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1173.639564][ T39] ? __switch_to+0xc89/0x1420 [ 1173.639599][ T39] ? __pfx_kthread+0x10/0x10 [ 1173.639624][ T39] ret_from_fork_asm+0x1a/0x30 [ 1173.639665][ T39] [ 1173.640300][ T39] Kernel Offset: disabled