last executing test programs: 28m12.386434743s ago: executing program 0 (id=1): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) r5 = openat$cgroup(r4, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004000)={0x2020}, 0x2020) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)=r4}, 0x20) eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r8, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000540)={r7, &(0x7f0000000380), &(0x7f0000000440)=""/236}, 0x20) mmap(&(0x7f0000888000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r9, 0x2000, 0x0) 28m8.17466816s ago: executing program 0 (id=8): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@discard}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f0000005600)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ptrace(0x8, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r4 = add_key$user(0x0, 0x0, &(0x7f0000002880), 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)="d5be14db64c726df55d4e3465d5409caf4eb2b78c8c34ebb2cbbeb79f10302c6bfb9a42a0734cff0c6967a2ff8b665cb02aece4326111bbe5626a207bb0ba741303afb07c5b7047801a97615148afbcacf34b14bfdd1718f0ed73c5939a80be76ca2ba5347d5", 0x66, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r3, r4}, 0x0, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0xa25436, &(0x7f00000001c0)=ANY=[]) fsopen(0x0, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x143042, 0xd1) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000", @ANYRESOCT=r5, @ANYRES16=r3], 0x50) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000000000)={0x2, 0xffffffffff7ffe01, 0x1, 0x53d9, 0x3, [0xe, 0x2500, 0x1000000, 0x7fffffff]}) 28m7.776992711s ago: executing program 1 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240000d0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x407, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = creat(&(0x7f0000000580)='./file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) 28m2.028373652s ago: executing program 0 (id=10): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xce4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_KEY(r2, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000740)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa77, &(0x7f0000000e80)="$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") unlink(0x0) epoll_create1(0x80000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000340), 0x8) 27m53.599832495s ago: executing program 0 (id=15): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xce4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_KEY(r2, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000740)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa77, &(0x7f0000000e80)="$eJzs3U1sHFcBAOA3a68TJynZlISaJLRJgbb81G4cE34iaKrmQtRU3CpVXKI0LRFpQKQStKpEklNvtKrClR9xKocKEFJ7QVFPXCrRSFx6Khw4EAWpEgcoJItsv7c/L7vM2LG9u97vk57fvnmz+96MZ2ZnZ+a9F4CxVVv6u7AwU4Rw5e3Xj//9gb9NL055tDVHY+nvZEeqHkIoYnoy+7wPJpbjmx++fLpXXIT5pb8pHZ680Xrv9hDCxXAgXA2NsPfKtdfenX/i5KUTlw++98bR6+uz9AAAMF6+dfXowp6//Gnfro/evPdY2NKans7PGzG9I573H4sn/un8vxa600VH6DSVzTcZQy2bb6LHfJ3l1LP5JvuUP5V9br2Vv69rvi0l5U90TOu13DDK0nbcCEVttitdq83OLv8mD0u/66eK2fNnzz17YUAVBdbcP+8LIRwQVhqazeaPl1bgENRFEFYbmjsHfQQCWJbfL7zNxfzKwp1pfdpktfJvPFbr/X5YAxu9/f+/8vNraBtdfs8Zxrz8X11yxGHtbNatKS1X2o92xHR+HyF/fmml+3/6vPx+RL1iPfvdRxiV+wv96jmxwfVYrX71z7eLzerrMU7r4RtZfuf+k/9PR+V/DPT2rzG7/n9gCOqwqUN9COogVA7NQR+AgKHVfm5uWTNK+flzfXn+lpL8rSX50yX520ryt5fkwzj73Qs/Ca8W7d/5+W/6lV4PS9fZ7orxx1ZYn/x65ErL73nPYgPLz58nhmH21qmnznzlmaevLT//X7S2/1txez8Q0424b12NM6Trhfl19daz/43ucmp95rs7q89dt83fXC5xd/d8xe7254SO48xt9Zjpft/OfvPt756vkc03HcPWrL75+cm27H3p/CMdV9P6msyWt54tx1RWj3Rc2RXjvB6wGml77Pf8f9o+Z0K9ePbsuTOPxHTaTv84Ud+yOP1Q54f+emPqDtyZqu1/ZkJ3+58dren1WudxYWd7etF5XGhk0+eXk63b5Gn64ZhO33PfmZhemj57+nvnnlnrhYcxd+HFl7576ty5Mz/wIr2YtlrW6cXFMBTV8KLKi0EfmYD1NvfC89+fu/DiSw+fff7Uc2eeO3P+8JEjh+fnj3z18MLc0nn9XOfZPbCZtL/0B10TAAAAAAAAAAAAoKofnjh+7c/vfPn95fb/7fZ/qf1/evI3tf9/JWv/n7eTT+3gUzvAXT3yl8bde6u7HlPZfPUYPp7Vd3dWzp7sfZ+IcWscv9j+P7W3z/t1TfW5J5ue99+b5su6E7itv5SprA+SfLzA+2N8Oca/DDBAxXTvyTEu6986beupfwr9Uoym9H9LW0PqxyS1/+7Xr1M6/u/agDqy9jaiOeGglxHo7R9D3/93x5n4wOsyBsF6HqvQbBrFAxgOgx7/M133TPH5P3xz62JIs914rPt4mfdfCndi2MefVP7mGv+zNf5dpeNfj97Vu/p5rj66wr9/dv39jmLD3krlN8KNfPlTP9C7qyxt20ex/LT8D4Yq5YfQ/EVWfn5DqKL/ZOVvq1j+4vK/0vkVtH915f83lp9W20Ofrlr+co2LWvd6yK8bp/t/+XXj5Ga2/KlvzyrL32WVAzXeiuXDOOs/zmzVEWyH06iM/9tP/hzGl2I6HQjTcw75N/JK65+er0jfA3uyzy9Kvt9GZZzifsZ9/N+vxbhsf0jj/6btsdEjXetI13us21HfVmCz+WDo7/+NWLg4BHUQNiDc396JKr9negjq3R2azeb6XtAqMdDCGfj6H/Td50GXP+j1XyYf/zc/h8/H/61lPyDy8X/z9+fj/+b5+fh6eX4+/m++PvPxf/P8e7LPza9gz5Tkf7Ikf29J/r52/nSv/P0l7/9USf7Bkvx7S/LvK8m/uyR/oiT/MyX5ny3Jf6Ak/6GS/M+V5G926SxmXJcfxlnePs/+D+Mj3f/pt//vLskHRtdP3zz0+NO//XZjuf3/VOv3WrqPdyym6/G3849iOr/vHTrSi3nvxPRfs/xhv94B4yTvPyP/fn+wJB8YXek5L/s3jKGid489Vfut6neez2j5fIy/EOMvxvjhGM/GeC7Gh2I8v0H1Y308/pvfH321aP/e35nlV32ePG8PlPcTdbhiffLrAyt9nj3vx2+l7rT8VTYHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGJja0t+FhZkihCtvv378qZNn5xanPNqao7H0d7IjVW+9L4RHYjwR45/HFzc/fPl0Z3wrxkWYD0UoWtPDkzdaJW0PIVwMB8LV0Ah7r1x77d35J05eOnH54HtvHL2+fmsAAAAANr//BQAA//9uaBiO") unlink(0x0) epoll_create1(0x80000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000340), 0x8) 27m49.523817564s ago: executing program 32 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240000d0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x407, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = creat(&(0x7f0000000580)='./file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) 27m37.014029123s ago: executing program 33 (id=15): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xce4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_KEY(r2, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000740)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa77, &(0x7f0000000e80)="$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") unlink(0x0) epoll_create1(0x80000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000340), 0x8) 26m44.354497959s ago: executing program 2 (id=63): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 26m44.001177312s ago: executing program 2 (id=64): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240000d0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x407, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = creat(&(0x7f0000000580)='./file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) 26m37.62462703s ago: executing program 2 (id=68): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) r3 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000038, 0x3, 0x2a8, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x6, 0x5, 0x7f, 0x3, 0x2, 0x7, 0x4]}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [0x0, 0xffffffff], [0x0, 0x0, 0xff000000], 'veth1\x00', 'veth0_to_batadv\x00', {0x8499377069aa4b5f}, {}, 0x3a, 0x80, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x7fffffff, 0xfffffffc, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x5, 0x9, 0x0, 0x2, 0x6, 0xff, 0x0, 0xfffffeff}}) io_pgetevents(r4, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(r4, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_getevents(r4, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) shutdown(r2, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201) pwritev2(r7, &(0x7f0000001b00)=[{&(0x7f00000000c0)="05", 0x1}], 0x1, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r8, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x44) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x44050) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0x7f, 0x11457213}}, 0x0, 0x1200) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0xc, 0x8, 0x77}, {@remote, 0x4e20, 0x10002, 0xcd, 0x80000}}, 0x44) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 26m34.344477315s ago: executing program 2 (id=71): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x80000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00", 0x57}], 0x1) 26m33.453480209s ago: executing program 2 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 26m29.762618733s ago: executing program 2 (id=77): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@discard}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f0000005600)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ptrace(0x8, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r3 = add_key$user(0x0, 0x0, &(0x7f0000002880), 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)="d5be14db64c726df55d4e3465d5409caf4eb2b78c8c34ebb2cbbeb79f10302c6bfb9a42a0734cff0c6967a2ff8b665cb02aece4326111bbe5626a207bb0ba741303afb07c5b7047801a97615148afbcacf34b14bfdd1718f0ed73c5939a80be76ca2ba5347d5", 0x66, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r2, r3}, 0x0, 0x0, 0x0) gettimeofday(0x0, 0xfffffffffffffffe) mount$9p_virtio(0x0, 0x0, 0x0, 0xa25436, &(0x7f00000001c0)=ANY=[]) fsopen(0x0, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x143042, 0xd1) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000", @ANYRESOCT=r4, @ANYRES16=r2], 0x50) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000000)={0x2, 0xffffffffff7ffe01, 0x1, 0x53d9, 0x3, [0xe, 0x2500, 0x1000000, 0x7fffffff]}) 26m14.20135839s ago: executing program 34 (id=77): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@discard}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f0000005600)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ptrace(0x8, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r3 = add_key$user(0x0, 0x0, &(0x7f0000002880), 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)="d5be14db64c726df55d4e3465d5409caf4eb2b78c8c34ebb2cbbeb79f10302c6bfb9a42a0734cff0c6967a2ff8b665cb02aece4326111bbe5626a207bb0ba741303afb07c5b7047801a97615148afbcacf34b14bfdd1718f0ed73c5939a80be76ca2ba5347d5", 0x66, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r2, r3}, 0x0, 0x0, 0x0) gettimeofday(0x0, 0xfffffffffffffffe) mount$9p_virtio(0x0, 0x0, 0x0, 0xa25436, &(0x7f00000001c0)=ANY=[]) fsopen(0x0, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x143042, 0xd1) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000", @ANYRESOCT=r4, @ANYRES16=r2], 0x50) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000000)={0x2, 0xffffffffff7ffe01, 0x1, 0x53d9, 0x3, [0xe, 0x2500, 0x1000000, 0x7fffffff]}) 11m36.358487748s ago: executing program 5 (id=16): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 11m35.710716195s ago: executing program 5 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) wait4(r6, 0x0, 0x2, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 11m18.749384351s ago: executing program 35 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) wait4(r6, 0x0, 0x2, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 9.686167312s ago: executing program 6 (id=1849): mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000400)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x15, 0x3, 'rr\x00', 0x1, 0x3, 0x6f}, 0x2c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.238434454s ago: executing program 7 (id=1852): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000002940)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 8.663129733s ago: executing program 4 (id=1854): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 8.146096844s ago: executing program 6 (id=1856): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0xa00, 0x4000000}, 0x28) 6.927664841s ago: executing program 8 (id=1859): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 6.651179598s ago: executing program 4 (id=1860): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0x6, 0x9, 0x9, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 6.585719988s ago: executing program 6 (id=1861): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/174, 0xae}], 0x1, &(0x7f0000000200)=""/24, 0x18}, 0x6}, {{0x0, 0x0, 0x0}, 0xf8d}], 0x2, 0x140, 0x0) 6.475024339s ago: executing program 3 (id=1862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x1, 0x2, 0x40, 0x41, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000003c0), 0x1003, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 6.137254707s ago: executing program 8 (id=1863): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5411, 0x0) 5.501247729s ago: executing program 8 (id=1864): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000240)={0x0, 0x17, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.371073696s ago: executing program 3 (id=1865): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000180)="27050200160014000600002fb96d", 0xe}, {&(0x7f0000000700)="83ea8b7f91f30000810000000000000000b7f77d74000000", 0x18}, {&(0x7f0000000200)="1749d9733a2c56741e9d17e119c84082455c83fde60b1e", 0x17}], 0x3}, 0x24000000) 5.311682548s ago: executing program 4 (id=1866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000e1ff00000000000004000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.795807135s ago: executing program 3 (id=1867): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 4.4860666s ago: executing program 6 (id=1868): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x102) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x1, 0x12) 4.413655365s ago: executing program 7 (id=1869): r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc000000b}) signalfd4(r1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 4.181414875s ago: executing program 3 (id=1870): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x9, 0x0, 0xfffffffd, {}, [{0x4}]}, 0x18}}, 0x8000) 3.493993076s ago: executing program 3 (id=1871): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x6a) 3.462672919s ago: executing program 4 (id=1872): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 2.897341142s ago: executing program 6 (id=1873): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2.896862702s ago: executing program 7 (id=1874): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xd2}}, {}, [], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.616102194s ago: executing program 3 (id=1875): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000000)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.139828116s ago: executing program 7 (id=1876): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0x6, 0x9, 0x9, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 2.006067299s ago: executing program 4 (id=1877): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000180)="27050200160014000600002fb96d", 0xe}, {&(0x7f0000000700)="83ea8b7f91f30000810000000000000000b7f77d74000000", 0x18}, {&(0x7f0000000200)="1749d9733a2c56741e9d17e119c84082455c83fde60b1e", 0x17}], 0x3}, 0x24000000) 1.841991369s ago: executing program 6 (id=1878): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x1c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/174, 0xae}], 0x1, &(0x7f0000000200)=""/24, 0x18}, 0x6}, {{0x0, 0x0, 0x0}, 0xf8d}], 0x2, 0x140, 0x0) 1.572449099s ago: executing program 8 (id=1879): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000008f000000be00000000000000180000000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) 1.526894451s ago: executing program 7 (id=1880): syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x208008da, &(0x7f0000001b80)=ANY=[], 0x1, 0x1503, &(0x7f0000000580)="$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") mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000102c0)={0x2020, 0x0, 0x0}, 0x2046) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r0, {0x7, 0x27, 0x0, 0x1001a, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000001a240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x8, 0x4, 0xfffffffe, 0x0, {0x0, 0x400000000000000, 0x0, 0x8, 0x9, 0x40}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') truncate(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x4ad0b7da) 849.330729ms ago: executing program 8 (id=1881): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x9, 0x0, 0xfffffffd, {}, [{0x4}]}, 0x18}}, 0x8000) 643.369934ms ago: executing program 4 (id=1882): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x40}}, 0x24000080) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 269.254628ms ago: executing program 7 (id=1883): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x200088c4}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8b07, &(0x7f0000000240)={'wlan1\x00', @random="8dffffffebff"}) 0s ago: executing program 8 (id=1884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x200040c5) kernel console output (not intermixed with test programs): 0573][ T154] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1637.270744][ T154] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1637.270888][ T154] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1637.271022][ T154] do_writepages+0x3f2/0x860 [ 1637.271198][ T154] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1637.271369][ T154] ? queue_io+0x7a1/0x7b0 [ 1637.271522][ T154] ? kmsan_get_metadata+0xf1/0x160 [ 1637.271707][ T154] __writeback_single_inode+0x101/0x10a0 [ 1637.271902][ T154] writeback_sb_inodes+0xb1a/0x1d50 [ 1637.272178][ T154] ? kmsan_get_metadata+0xf1/0x160 [ 1637.272346][ T154] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1637.272526][ T154] wb_writeback+0x4d3/0xc50 [ 1637.272714][ T154] ? queue_io+0x4a1/0x7b0 [ 1637.272884][ T154] wb_workfn+0x3a2/0x1970 [ 1637.273031][ T154] ? kmsan_get_metadata+0xf1/0x160 [ 1637.273217][ T154] ? __pfx_wb_workfn+0x10/0x10 [ 1637.273359][ T154] process_scheduled_works+0xb65/0x1e40 [ 1637.273578][ T154] worker_thread+0xee4/0x1590 [ 1637.273770][ T154] kthread+0x53f/0x600 [ 1637.273938][ T154] ? __pfx_worker_thread+0x10/0x10 [ 1637.274098][ T154] ? __pfx_kthread+0x10/0x10 [ 1637.274254][ T154] ret_from_fork+0x20f/0x8d0 [ 1637.274395][ T154] ? __switch_to+0x573/0x7a0 [ 1637.274560][ T154] ? __pfx_kthread+0x10/0x10 [ 1637.274728][ T154] ret_from_fork_asm+0x1a/0x30 [ 1637.274915][ T154] [ 1637.662630][ T154] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1638.124568][T14325] overlay: Unknown parameter '/' [ 1639.983446][T14320] loop4: detected capacity change from 0 to 2048 [ 1640.131173][T14333] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1640.659371][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1642.736142][T14352] overlay: Unknown parameter '/' [ 1643.656086][T14049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1644.252056][ T7390] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1644.548090][ T7390] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 1644.589205][ T7390] usb 5-1: config 0 has no interface number 0 [ 1644.628487][ T7390] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1644.670223][ T7390] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1644.761778][ T7390] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1644.798606][ T7390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.841379][ T7390] usb 5-1: Product: syz [ 1644.876267][ T7390] usb 5-1: Manufacturer: syz [ 1644.888972][ T7390] usb 5-1: SerialNumber: syz [ 1644.930704][ T7390] usb 5-1: config 0 descriptor?? [ 1644.960021][T14360] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1645.091832][ T7390] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1645.153286][ T7390] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1645.568900][ T7390] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1645.751054][T14360] loop4: detected capacity change from 0 to 512 [ 1645.812680][ T7390] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 1645.888312][ T7390] usb 7-1: config 0 has no interface number 0 [ 1645.966557][ T7390] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1646.083442][ T7390] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1646.529630][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1646.662725][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1647.173137][ T7390] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1647.198079][T14360] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1647.319117][ T7390] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.441556][ T7390] usb 7-1: Product: syz [ 1647.546849][ T7390] usb 7-1: Manufacturer: syz [ 1647.579311][T14360] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 1647.619013][ T7390] usb 7-1: SerialNumber: syz [ 1648.810783][ T7390] usb 7-1: config 0 descriptor?? [ 1649.392381][ T7390] usb 7-1: can't set config #0, error -71 [ 1649.467938][ T7390] usb 7-1: USB disconnect, device number 27 [ 1649.764847][ T7390] usb 5-1: USB disconnect, device number 17 [ 1649.857327][ T7390] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1651.527988][ T7390] cyberjack 5-1:0.69: device disconnected [ 1651.890715][T14402] loop7: detected capacity change from 0 to 2048 [ 1652.247031][T14406] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1652.688294][T14049] veth0_vlan: entered promiscuous mode [ 1652.888068][T14049] veth1_vlan: entered promiscuous mode [ 1653.508858][T14049] veth0_macvtap: entered promiscuous mode [ 1654.230597][T14420] loop7: detected capacity change from 0 to 2048 [ 1654.883958][T14423] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1656.750077][T14049] veth1_macvtap: entered promiscuous mode [ 1656.951950][T14049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1657.131648][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 1657.172074][T14049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1658.167725][T14437] loop7: detected capacity change from 0 to 1024 [ 1658.462319][T14437] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1658.472610][T14437] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1658.581655][T14437] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1658.599975][T14437] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1658.619115][T14437] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm syz.7.1382: Inode bitmap for bg 0 marked uninitialized [ 1658.637503][T14437] loop7: lost filesystem error report for type 5 error -117 [ 1658.640809][T14437] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1659.024573][T11254] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.068214][T11254] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.100350][T11254] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.197442][T11254] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.444853][T13753] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1659.872024][T12164] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1660.189519][T12164] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 1660.246125][T12164] usb 7-1: config 0 has no interface number 0 [ 1660.501681][T12164] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1660.941622][T12164] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1661.400565][T12164] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1661.423329][T12164] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.431926][T12164] usb 7-1: Product: syz [ 1661.911736][T12164] usb 7-1: Manufacturer: syz [ 1662.553436][T14454] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1662.788696][T12164] usb 7-1: SerialNumber: syz [ 1662.962933][T12164] usb 7-1: config 0 descriptor?? [ 1663.442369][T12164] usb 7-1: can't set config #0, error -71 [ 1663.520831][T12164] usb 7-1: USB disconnect, device number 28 [ 1663.660264][T12366] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1663.890949][T12366] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1663.932421][T12366] usb 4-1: config 0 has no interface number 0 [ 1663.951694][T12366] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1664.095896][T14474] overlay: Unknown parameter '/' [ 1664.155382][ T8590] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1664.880679][T12366] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1664.908347][T12366] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1664.918532][T12366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.935741][T12366] usb 4-1: Product: syz [ 1664.940209][T12366] usb 4-1: Manufacturer: syz [ 1664.945110][T12366] usb 4-1: SerialNumber: syz [ 1664.965748][T12366] usb 4-1: config 0 descriptor?? [ 1664.973968][T14464] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1664.993312][T12366] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1665.042693][T12366] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1665.113231][ T8590] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1665.126676][ T8590] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1665.159413][ T8590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.290812][ T8590] usb 5-1: config 0 descriptor?? [ 1665.408951][T14464] loop3: detected capacity change from 0 to 512 [ 1665.531219][T14464] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1665.833024][T14464] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1665.864235][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1665.866420][T14464] Quota error (device loop3): write_blk: dquota write failed [ 1665.870874][ C0] EXT4-fs (loop3): initial error at time 1778733773: ext4_mb_generate_buddy:1317 [ 1665.887861][ C0] EXT4-fs (loop3): last error at time 1778733773: ext4_mb_generate_buddy:1317 [ 1665.974273][T14464] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 1666.062758][T14464] Quota error (device loop3): write_blk: dquota write failed [ 1666.163527][T14464] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1666.227390][T14464] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.1387: Failed to acquire dquot type 1 [ 1666.284892][T14464] loop3: lost filesystem error report for type 5 error -28 [ 1666.304406][T14464] EXT4-fs (loop3): 1 truncate cleaned up [ 1666.521159][T12366] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1666.533192][T14464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1666.784478][ T8590] video4linux radio48: keene_cmd_main failed (-110) [ 1666.813080][T12366] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 1666.850211][ T8590] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 1666.911306][T12366] usb 8-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice= 0.40 [ 1666.960162][ T8590] usb 5-1: USB disconnect, device number 18 [ 1667.013456][T12366] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.053274][T12366] usb 8-1: Product: syz [ 1667.081838][T12366] usb 8-1: Manufacturer: Љ [ 1667.126782][T12366] usb 8-1: SerialNumber: syz [ 1667.275416][ T7389] usb 4-1: USB disconnect, device number 19 [ 1667.319472][T12366] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1667.356488][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1667.374262][T12366] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1667.389078][ T7389] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1667.495025][ T7389] cyberjack 4-1:0.69: device disconnected [ 1667.513613][T12366] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1667.579572][T12366] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1667.660443][T14491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.730625][T14491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.734243][T12366] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1668.014957][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1393'. [ 1668.320179][T12366] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1668.379952][T12366] usb 8-1: USB disconnect, device number 2 [ 1668.855773][T12496] udevd[12496]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1669.179147][T14508] loop3: detected capacity change from 0 to 1024 [ 1669.246062][T14508] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1669.309097][T14508] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1669.541299][T14508] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1669.668851][T14508] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1671.070005][T14508] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.1395: Inode bitmap for bg 0 marked uninitialized [ 1671.975728][T14508] loop3: lost filesystem error report for type 5 error -117 [ 1671.984383][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1671.998988][ C1] EXT4-fs (loop3): initial error at time 1778733779: ext4_read_inode_bitmap:167 [ 1672.008605][ C1] EXT4-fs (loop3): last error at time 1778733779: ext4_read_inode_bitmap:167 [ 1672.073144][T14508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1673.457697][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1673.617206][ T5577] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1673.635562][ T5577] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1673.644972][ T5577] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1673.662257][ T5577] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1673.673665][ T5577] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1674.523786][T14540] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1675.927700][ T5577] Bluetooth: hci3: command tx timeout [ 1676.569195][T14556] loop3: detected capacity change from 0 to 2048 [ 1677.644814][T14560] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1678.240308][T13525] Bluetooth: hci3: command tx timeout [ 1679.653471][ T7389] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1679.836051][T14566] loop3: detected capacity change from 0 to 64 [ 1679.878481][ T7389] usb 8-1: Using ep0 maxpacket: 8 [ 1679.892270][ T7389] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1679.937223][ T7389] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1679.980363][ T7390] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1680.005722][ T7389] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1680.072242][ T7389] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1680.137160][ T7389] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 16389, setting to 1024 [ 1680.149567][T11810] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.197503][ T7390] usb 5-1: Using ep0 maxpacket: 8 [ 1680.258510][ T7390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1680.344559][ T7390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1680.429411][ T7390] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1680.444258][T13525] Bluetooth: hci3: command tx timeout [ 1680.515244][ T7390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1680.602026][ T7390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 16389, setting to 1024 [ 1680.704255][ T7390] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1680.753874][ T7389] usb 8-1: string descriptor 0 read error: -71 [ 1680.765519][ T7390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=114 [ 1680.796624][ T7389] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1680.828419][ T7390] usb 5-1: SerialNumber: syz [ 1680.847579][ T7389] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=114 [ 1680.890582][ T7390] usb 5-1: config 0 descriptor?? [ 1680.939669][T11810] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.978929][ T7389] usb 8-1: config 0 descriptor?? [ 1681.047639][ T7389] usb 8-1: can't set config #0, error -71 [ 1681.115140][ T7389] usb 8-1: USB disconnect, device number 3 [ 1681.336750][T11810] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.374532][ T7389] usb 5-1: USB disconnect, device number 19 [ 1681.702856][T11810] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.725898][T12054] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1681.951750][T12054] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1681.982395][T12054] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1682.025908][T12054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.096907][T12054] usb 4-1: config 0 descriptor?? [ 1682.686469][T13525] Bluetooth: hci3: command tx timeout [ 1683.271686][T11810] bridge_slave_1: left allmulticast mode [ 1683.322993][T11810] bridge_slave_1: left promiscuous mode [ 1683.380517][T12054] video4linux radio48: keene_cmd_main failed (-110) [ 1683.404987][T12054] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 1683.439925][T11810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.521998][T11810] bridge_slave_0: left allmulticast mode [ 1683.557953][T11810] bridge_slave_0: left promiscuous mode [ 1683.602332][T11810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.177211][T11810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1685.185050][ T8590] usb 4-1: USB disconnect, device number 20 [ 1685.475540][T14612] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1686.018098][T11810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1686.076760][ T7390] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1686.158148][T11810] bond0 (unregistering): Released all slaves [ 1686.287967][ T7390] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 1686.316605][ T7390] usb 8-1: config 0 has no interface number 0 [ 1686.345284][ T7390] usb 8-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1686.393920][ T7390] usb 8-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1686.417552][T14613] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1686.464429][ T7390] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1686.479781][ T8590] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1686.525802][ T7390] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.554252][ T7390] usb 8-1: Product: syz [ 1686.563079][ T7390] usb 8-1: Manufacturer: syz [ 1686.583423][ T7390] usb 8-1: SerialNumber: syz [ 1686.606752][ T7390] usb 8-1: config 0 descriptor?? [ 1686.619856][T11810] hsr_slave_0: left promiscuous mode [ 1686.633732][T14614] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1686.662331][T11810] hsr_slave_1: left promiscuous mode [ 1686.678546][ T8590] usb 7-1: Using ep0 maxpacket: 8 [ 1686.687714][ T7390] cyberjack 8-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1686.716415][ T8590] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1686.733094][T11810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1686.757432][ T8590] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1686.769120][T11810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1686.810423][ T8590] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1686.812865][ T7390] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1686.847794][T11810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1686.870458][ T8590] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1686.908134][T11810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1686.953240][ T8590] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 16389, setting to 1024 [ 1687.034578][ T8590] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1687.089919][ T8590] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=114 [ 1687.103764][T11810] veth1_macvtap: left promiscuous mode [ 1687.124984][T11810] veth0_macvtap: left promiscuous mode [ 1687.131017][ T8590] usb 7-1: SerialNumber: syz [ 1687.152140][T11810] veth1_vlan: left promiscuous mode [ 1687.724064][T11810] veth0_vlan: left promiscuous mode [ 1687.730675][ T8590] usb 7-1: config 0 descriptor?? [ 1687.834600][T14613] loop7: detected capacity change from 0 to 512 [ 1687.921019][T14613] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1688.667950][T14613] EXT4-fs: error -4 creating inode table initialization thread [ 1688.702613][T14613] EXT4-fs (loop7): mount failed [ 1689.299708][ T7390] usb 8-1: USB disconnect, device number 4 [ 1689.594560][ T7390] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1689.791065][ T7390] cyberjack 8-1:0.69: device disconnected [ 1690.103077][T14638] loop3: detected capacity change from 0 to 40427 [ 1690.121195][T14638] F2FS-fs (loop3): invalid crc value [ 1690.202293][ T7390] usb 7-1: USB disconnect, device number 29 [ 1690.434788][T14638] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1690.450184][T14638] F2FS-fs (loop3): Start checkpoint disabled! [ 1690.460882][T14638] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1690.471930][T14638] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1690.565928][T14638] syz.3.1420: attempt to access beyond end of device [ 1690.565928][T14638] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1690.940691][T11254] kworker/u8:11: attempt to access beyond end of device [ 1690.940691][T11254] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1691.000624][T11254] CPU: 1 UID: 0 PID: 11254 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 1691.000765][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1691.000867][T11254] Workqueue: writeback wb_workfn (flush-7:3) [ 1691.001041][T11254] Call Trace: [ 1691.001097][T11254] [ 1691.001146][T11254] __dump_stack+0x26/0x30 [ 1691.001290][T11254] dump_stack_lvl+0x14c/0x1c0 [ 1691.001458][T11254] dump_stack+0x1e/0x25 [ 1691.001589][T11254] f2fs_stop_checkpoint+0xac3/0xc70 [ 1691.001806][T11254] f2fs_write_end_io+0x1207/0x2200 [ 1691.002003][T11254] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1691.002149][T11254] bio_endio+0xfcc/0x1120 [ 1691.002298][T11254] submit_bio_noacct+0x533/0x2920 [ 1691.002489][T11254] submit_bio+0x57a/0x620 [ 1691.002639][T11254] f2fs_submit_write_bio+0x115/0x310 [ 1691.002824][T11254] __submit_merged_bio+0x16b/0x700 [ 1691.002989][T11254] ? kmsan_get_metadata+0xf1/0x160 [ 1691.003178][T11254] __submit_merged_write_cond+0x4ba/0xae0 [ 1691.003380][T11254] f2fs_write_data_pages+0x4f4d/0x5c60 [ 1691.003620][T11254] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1691.003816][T11254] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1691.003986][T11254] ? kmsan_get_metadata+0xf1/0x160 [ 1691.004148][T11254] ? kmsan_get_metadata+0xf1/0x160 [ 1691.004306][T11254] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1691.004484][T11254] ? kmsan_get_metadata+0xf1/0x160 [ 1691.004641][T11254] ? kmsan_get_metadata+0xf1/0x160 [ 1691.004797][T11254] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1691.004962][T11254] ? kmsan_get_metadata+0xf1/0x160 [ 1691.005129][T11254] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1691.005297][T11254] ? kmsan_get_metadata+0xf1/0x160 [ 1691.005457][T11254] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1691.005623][T11254] ? kmsan_get_metadata+0xf1/0x160 [ 1691.005779][T11254] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1691.005947][T11254] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1691.006083][T11254] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1691.006210][T11254] do_writepages+0x3f2/0x860 [ 1691.006379][T11254] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1691.006548][T11254] ? queue_io+0x7a1/0x7b0 [ 1691.006692][T11254] ? kmsan_get_metadata+0xf1/0x160 [ 1691.006868][T11254] __writeback_single_inode+0x101/0x10a0 [ 1691.007071][T11254] writeback_sb_inodes+0xb1a/0x1d50 [ 1691.007336][T11254] ? kmsan_get_metadata+0xf1/0x160 [ 1691.007494][T11254] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1691.007666][T11254] wb_writeback+0x4d3/0xc50 [ 1691.007842][T11254] ? queue_io+0x4a1/0x7b0 [ 1691.008001][T11254] wb_workfn+0x3a2/0x1970 [ 1691.008143][T11254] ? kmsan_get_metadata+0xf1/0x160 [ 1691.008324][T11254] ? __pfx_wb_workfn+0x10/0x10 [ 1691.008456][T11254] process_scheduled_works+0xb65/0x1e40 [ 1691.008667][T11254] worker_thread+0xee4/0x1590 [ 1691.008845][T11254] kthread+0x53f/0x600 [ 1691.009008][T11254] ? __pfx_worker_thread+0x10/0x10 [ 1691.009170][T11254] ? __pfx_kthread+0x10/0x10 [ 1691.009328][T11254] ret_from_fork+0x20f/0x8d0 [ 1691.009461][T11254] ? __switch_to+0x573/0x7a0 [ 1691.009622][T11254] ? __pfx_kthread+0x10/0x10 [ 1691.009785][T11254] ret_from_fork_asm+0x1a/0x30 [ 1691.009961][T11254] [ 1691.484443][T11254] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1691.896307][T11810] team0 (unregistering): Port device team_slave_1 removed [ 1692.046517][T11810] team0 (unregistering): Port device team_slave_0 removed [ 1695.848898][ T8590] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1696.706885][ T6229] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1696.867387][ T7389] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1697.085356][ T7389] usb 8-1: Using ep0 maxpacket: 8 [ 1697.087241][T12366] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1697.114984][ T7390] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1697.155686][ T7389] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1697.214584][ T7389] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1697.242352][ T7389] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1697.277218][ T7389] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1697.305968][ T7389] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 16389, setting to 1024 [ 1697.359243][ T7390] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 1697.381841][ T7389] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1697.408595][ T7390] usb 7-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice= 0.40 [ 1697.422699][ T7389] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=114 [ 1697.454564][ T7390] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.500675][ T7389] usb 8-1: SerialNumber: syz [ 1697.524769][ T7390] usb 7-1: Product: syz [ 1697.563018][ T7390] usb 7-1: Manufacturer: Љ [ 1697.584142][ T7389] usb 8-1: config 0 descriptor?? [ 1697.601273][ T7390] usb 7-1: SerialNumber: syz [ 1697.852384][ T1145] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1697.861843][ T7390] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1697.911109][ T7389] usb 8-1: USB disconnect, device number 5 [ 1697.933598][ T7390] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1697.952709][ T1145] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1698.223029][ T7390] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1698.237407][T14694] loop4: detected capacity change from 0 to 40427 [ 1698.258008][T14694] F2FS-fs (loop4): invalid crc value [ 1698.290256][ T7390] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1698.432979][ T7390] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1698.593691][T14694] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1698.604841][T14694] F2FS-fs (loop4): Start checkpoint disabled! [ 1698.616932][T14694] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 1698.626685][T14694] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1698.661047][T14694] syz.4.1433: attempt to access beyond end of device [ 1698.661047][T14694] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1698.811512][ T7389] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1698.814325][ T6229] kworker/u8:18: attempt to access beyond end of device [ 1698.814325][ T6229] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1698.919879][ T6229] CPU: 0 UID: 0 PID: 6229 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 1698.920019][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1698.920128][ T6229] Workqueue: writeback wb_workfn (flush-7:4) [ 1698.920298][ T6229] Call Trace: [ 1698.920345][ T6229] [ 1698.920392][ T6229] __dump_stack+0x26/0x30 [ 1698.920531][ T6229] dump_stack_lvl+0x14c/0x1c0 [ 1698.920679][ T6229] dump_stack+0x1e/0x25 [ 1698.920811][ T6229] f2fs_stop_checkpoint+0xac3/0xc70 [ 1698.921025][ T6229] f2fs_write_end_io+0x1207/0x2200 [ 1698.921228][ T6229] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1698.921369][ T6229] bio_endio+0xfcc/0x1120 [ 1698.921519][ T6229] submit_bio_noacct+0x533/0x2920 [ 1698.921715][ T6229] submit_bio+0x57a/0x620 [ 1698.921866][ T6229] f2fs_submit_write_bio+0x115/0x310 [ 1698.922058][ T6229] __submit_merged_bio+0x16b/0x700 [ 1698.922238][ T6229] ? kmsan_get_metadata+0xf1/0x160 [ 1698.922422][ T6229] __submit_merged_write_cond+0x4ba/0xae0 [ 1698.922621][ T6229] f2fs_write_data_pages+0x4f4d/0x5c60 [ 1698.922899][ T6229] ? update_cfs_rq_load_avg+0x747/0x8c0 [ 1698.923074][ T6229] ? kmsan_get_metadata+0xf1/0x160 [ 1698.923241][ T6229] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1698.923412][ T6229] ? kmsan_get_metadata+0xf1/0x160 [ 1698.923572][ T6229] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1698.923754][ T6229] ? kmsan_get_metadata+0xf1/0x160 [ 1698.923918][ T6229] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1698.924090][ T6229] ? kmsan_get_metadata+0xf1/0x160 [ 1698.924263][ T6229] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1698.924445][ T6229] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1698.924583][ T6229] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1698.924715][ T6229] do_writepages+0x3f2/0x860 [ 1698.924893][ T6229] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1698.925071][ T6229] ? queue_io+0x7a1/0x7b0 [ 1698.925227][ T6229] ? kmsan_get_metadata+0xf1/0x160 [ 1698.925412][ T6229] __writeback_single_inode+0x101/0x10a0 [ 1698.925614][ T6229] writeback_sb_inodes+0xb1a/0x1d50 [ 1698.925893][ T6229] ? kmsan_get_metadata+0xf1/0x160 [ 1698.926056][ T6229] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1698.926238][ T6229] wb_writeback+0x4d3/0xc50 [ 1698.926416][ T6229] ? queue_io+0x4a1/0x7b0 [ 1698.926578][ T6229] wb_workfn+0x3a2/0x1970 [ 1698.926714][ T6229] ? kmsan_get_metadata+0xf1/0x160 [ 1698.926896][ T6229] ? __pfx_wb_workfn+0x10/0x10 [ 1698.927028][ T6229] process_scheduled_works+0xb65/0x1e40 [ 1698.927244][ T6229] worker_thread+0xee4/0x1590 [ 1698.927430][ T6229] kthread+0x53f/0x600 [ 1698.927596][ T6229] ? __pfx_worker_thread+0x10/0x10 [ 1698.927753][ T6229] ? __pfx_kthread+0x10/0x10 [ 1698.927910][ T6229] ret_from_fork+0x20f/0x8d0 [ 1698.928050][ T6229] ? __switch_to+0x573/0x7a0 [ 1698.928226][ T6229] ? __pfx_kthread+0x10/0x10 [ 1698.928395][ T6229] ret_from_fork_asm+0x1a/0x30 [ 1698.928577][ T6229] [ 1699.247727][ T7390] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1699.344098][ T6229] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1699.387320][ T7390] usb 7-1: USB disconnect, device number 30 [ 1700.002215][T12488] udevd[12488]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1700.935102][T14525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.989428][T14525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.022515][T14525] bridge_slave_0: entered allmulticast mode [ 1701.129908][T14525] bridge_slave_0: entered promiscuous mode [ 1701.285446][T14525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.396241][T14525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.462810][T14525] bridge_slave_1: entered allmulticast mode [ 1701.519067][T14525] bridge_slave_1: entered promiscuous mode [ 1701.779191][T12366] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1702.235750][T14525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1702.286777][T14525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1702.336905][T12366] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 1702.371028][T12366] usb 7-1: config 0 has no interface number 0 [ 1702.413108][T12366] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1702.461804][T12366] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1702.536008][T12366] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1702.586337][T12366] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.877341][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1702.968059][T14525] team0: Port device team_slave_0 added [ 1703.118754][T14525] team0: Port device team_slave_1 added [ 1703.206678][T12366] usb 7-1: Product: syz [ 1703.212359][T12366] usb 7-1: Manufacturer: syz [ 1703.217318][T12366] usb 7-1: SerialNumber: syz [ 1703.233174][T12366] usb 7-1: config 0 descriptor?? [ 1703.251452][T14725] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1703.315323][T12366] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1703.376641][T12366] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1703.896937][T14525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1703.931767][T14721] loop6: detected capacity change from 0 to 512 [ 1703.935748][T14525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1704.000964][T14721] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1704.062477][T14525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1704.155622][T14525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1704.162845][T14525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1704.191044][T14525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1704.213628][T14721] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1704.252425][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1704.253893][T14721] Quota error (device loop6): write_blk: dquota write failed [ 1704.259073][ C0] EXT4-fs (loop6): initial error at time 1778733808: ext4_mb_generate_buddy:1317 [ 1704.276118][ C0] EXT4-fs (loop6): last error at time 1778733808: ext4_mb_generate_buddy:1317 [ 1704.302562][T14721] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 1704.413560][T14721] Quota error (device loop6): write_blk: dquota write failed [ 1704.460171][T14721] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1704.563721][T14721] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.1439: Failed to acquire dquot type 1 [ 1704.644890][T14721] loop6: lost filesystem error report for type 5 error -28 [ 1704.646990][T14721] EXT4-fs (loop6): 1 truncate cleaned up [ 1704.695085][T14747] loop3: detected capacity change from 0 to 512 [ 1704.764936][T14721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1704.842978][T14525] hsr_slave_0: entered promiscuous mode [ 1704.921853][T14747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1704.954980][T14525] hsr_slave_1: entered promiscuous mode [ 1704.962599][T14747] ext4 filesystem being mounted at /622/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1705.044773][T14525] debugfs: 'hsr0' already exists in 'hsr' [ 1705.105051][T14525] Cannot create hsr debugfs directory [ 1705.391084][ T7390] usb 7-1: USB disconnect, device number 31 [ 1705.553482][ T7390] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1705.685260][ T7390] cyberjack 7-1:0.69: device disconnected [ 1705.700538][T10796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1706.197051][T14756] loop7: detected capacity change from 0 to 40427 [ 1706.252993][T14756] F2FS-fs (loop7): invalid crc value [ 1706.557252][T14756] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1706.573501][T14756] F2FS-fs (loop7): Start checkpoint disabled! [ 1706.609025][T14756] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 1706.621167][T14756] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1706.674218][T14756] syz.7.1443: attempt to access beyond end of device [ 1706.674218][T14756] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1706.924663][T14761] loop4: detected capacity change from 0 to 40427 [ 1706.949034][T14761] F2FS-fs (loop4): invalid crc value [ 1707.191248][ T52] kworker/u8:3: attempt to access beyond end of device [ 1707.191248][ T52] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1707.264907][T14761] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1707.280199][T14761] F2FS-fs (loop4): Start checkpoint disabled! [ 1707.282946][ T5580] EXT4-fs error (device loop3): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 1707.291204][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 1707.291340][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1707.291440][ T52] Workqueue: writeback wb_workfn (flush-7:7) [ 1707.291624][ T52] Call Trace: [ 1707.291673][ T52] [ 1707.291722][ T52] __dump_stack+0x26/0x30 [ 1707.291868][ T52] dump_stack_lvl+0x14c/0x1c0 [ 1707.292028][ T52] dump_stack+0x1e/0x25 [ 1707.292161][ T52] f2fs_stop_checkpoint+0xac3/0xc70 [ 1707.292381][ T52] f2fs_write_end_io+0x1207/0x2200 [ 1707.292578][ T52] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1707.292717][ T52] bio_endio+0xfcc/0x1120 [ 1707.292869][ T52] submit_bio_noacct+0x533/0x2920 [ 1707.293072][ T52] submit_bio+0x57a/0x620 [ 1707.293226][ T52] f2fs_submit_write_bio+0x115/0x310 [ 1707.293421][ T52] __submit_merged_bio+0x16b/0x700 [ 1707.293594][ T52] ? kmsan_get_metadata+0xf1/0x160 [ 1707.293780][ T52] __submit_merged_write_cond+0x4ba/0xae0 [ 1707.293993][ T52] f2fs_write_data_pages+0x4f4d/0x5c60 [ 1707.294130][ T52] ? kmsan_get_metadata+0xf1/0x160 [ 1707.294400][ T52] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1707.294600][ T52] ? kmsan_get_metadata+0xf1/0x160 [ 1707.294771][ T52] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1707.294961][ T52] ? ktime_get+0x545/0x5a0 [ 1707.295129][ T52] ? kmsan_get_metadata+0xf1/0x160 [ 1707.295295][ T52] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1707.295480][ T52] ? kmsan_get_metadata+0xf1/0x160 [ 1707.295654][ T52] ? kmsan_get_metadata+0xf1/0x160 [ 1707.295822][ T52] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1707.296014][ T52] ? kmsan_get_metadata+0xf1/0x160 [ 1707.296204][ T52] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1707.296378][ T52] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1707.296519][ T52] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1707.296656][ T52] do_writepages+0x3f2/0x860 [ 1707.296832][ T52] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1707.297020][ T52] ? queue_io+0x7a1/0x7b0 [ 1707.297176][ T52] ? kmsan_get_metadata+0xf1/0x160 [ 1707.297366][ T52] __writeback_single_inode+0x101/0x10a0 [ 1707.297571][ T52] writeback_sb_inodes+0xb1a/0x1d50 [ 1707.297854][ T52] ? kmsan_get_metadata+0xf1/0x160 [ 1707.298030][ T52] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1707.298215][ T52] wb_writeback+0x4d3/0xc50 [ 1707.298402][ T52] ? queue_io+0x4a1/0x7b0 [ 1707.298571][ T52] wb_workfn+0x3a2/0x1970 [ 1707.298717][ T52] ? kmsan_get_metadata+0xf1/0x160 [ 1707.298911][ T52] ? __pfx_wb_workfn+0x10/0x10 [ 1707.299061][ T52] process_scheduled_works+0xb65/0x1e40 [ 1707.299283][ T52] worker_thread+0xee4/0x1590 [ 1707.299474][ T52] kthread+0x53f/0x600 [ 1707.299648][ T52] ? __pfx_worker_thread+0x10/0x10 [ 1707.299819][ T52] ? __pfx_kthread+0x10/0x10 [ 1707.299979][ T52] ret_from_fork+0x20f/0x8d0 [ 1707.300122][ T52] ? __switch_to+0x573/0x7a0 [ 1707.300289][ T52] ? __pfx_kthread+0x10/0x10 [ 1707.300458][ T52] ret_from_fork_asm+0x1a/0x30 [ 1707.300646][ T52] [ 1707.305458][ T52] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1707.574895][ T5580] EXT4-fs (loop3): Remounting filesystem read-only [ 1707.700542][T14761] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 1707.715280][T14761] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1707.744263][ T7390] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1707.778069][ T5771] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1707.792150][ T5771] Quota error (device loop3): write_blk: dquota write failed [ 1707.801118][ T5771] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 1707.808661][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1707.937547][ T7390] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1707.976155][ T7390] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1708.032507][ T7390] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.159508][ T7390] usb 7-1: config 0 descriptor?? [ 1709.479194][ T5577] Bluetooth: hci0: command 0x0406 tx timeout [ 1710.121582][T14525] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1710.147099][ T7390] video4linux radio48: keene_cmd_main failed (-110) [ 1710.167415][ T7390] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 1710.280049][T14525] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1710.342319][T14525] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1710.412717][T12366] usb 7-1: USB disconnect, device number 32 [ 1710.536152][T14525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1710.597494][T14525] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1710.725870][T14525] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1710.775667][T14525] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1711.522889][T14782] loop3: detected capacity change from 0 to 2048 [ 1711.532884][T14525] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1712.433601][T14783] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1712.756705][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1713.019813][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1713.051256][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1716.486673][T14800] loop4: detected capacity change from 0 to 64 [ 1716.605022][T14525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1716.689601][T14800] netlink: 'syz.4.1453': attribute type 32 has an invalid length. [ 1716.762823][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 1716.826681][T14525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1717.288506][T14800] bond3: Setting coupled_control to off (0) [ 1717.415485][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.422990][ T5878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1717.627835][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1717.635423][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1717.723207][T14816] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1456'. [ 1717.814468][ T7390] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1718.066985][ T7390] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1718.105540][ T7390] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1718.148659][ T7390] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.239722][ T7390] usb 8-1: config 0 descriptor?? [ 1719.603421][ T7390] video4linux radio48: keene_cmd_main failed (-110) [ 1719.751439][ T7390] radio-keene 8-1:0.0: V4L2 device registered as radio48 [ 1720.361459][ T7390] usb 8-1: USB disconnect, device number 6 [ 1721.465699][T12054] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1721.678969][T12054] usb 5-1: Using ep0 maxpacket: 8 [ 1721.740973][T12054] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1721.767082][T12054] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1721.790504][T12054] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1721.802803][T12054] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1721.819957][T12054] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 16389, setting to 1024 [ 1721.924707][T12054] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1721.968542][T12054] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=114 [ 1722.013940][T12054] usb 5-1: SerialNumber: syz [ 1722.101884][T12054] usb 5-1: config 0 descriptor?? [ 1722.437592][T12054] usb 5-1: USB disconnect, device number 20 [ 1722.925217][T14862] loop7: detected capacity change from 0 to 64 [ 1723.125458][T14862] netlink: 'syz.7.1466': attribute type 32 has an invalid length. [ 1723.203705][T14862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1466'. [ 1723.719015][T14876] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1468'. [ 1723.743381][T14862] bond1: Setting coupled_control to off (0) [ 1724.209261][T12366] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1724.562879][T14882] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1724.701931][T12366] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1724.789271][T12366] usb 4-1: config 0 has no interface number 0 [ 1724.822371][T12366] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1724.999923][T12366] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1725.346307][T12366] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1725.398914][T12366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.435840][T12366] usb 4-1: Product: syz [ 1725.443999][T12366] usb 4-1: Manufacturer: syz [ 1725.467179][T12366] usb 4-1: SerialNumber: syz [ 1725.509839][T12366] usb 4-1: config 0 descriptor?? [ 1725.532196][T14878] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1725.557382][T12366] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1725.636839][T12366] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1725.899743][T14878] loop3: detected capacity change from 0 to 512 [ 1725.995233][T14878] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1726.168695][T14878] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1726.187123][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1726.193780][ C0] EXT4-fs (loop3): initial error at time 1778733829: ext4_mb_generate_buddy:1317 [ 1726.203447][ C0] EXT4-fs (loop3): last error at time 1778733829: ext4_mb_generate_buddy:1317 [ 1726.260769][T14878] Quota error (device loop3): write_blk: dquota write failed [ 1726.317809][T14878] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 1726.381187][T14878] Quota error (device loop3): write_blk: dquota write failed [ 1726.417063][T14878] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1726.466746][T14878] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.1469: Failed to acquire dquot type 1 [ 1726.531077][T14878] loop3: lost filesystem error report for type 5 error -28 [ 1726.553115][T14878] EXT4-fs (loop3): 1 truncate cleaned up [ 1726.596411][T14878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1726.766956][T14525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1726.768070][T14878] EXT4-fs: Ignoring removed bh option [ 1726.805123][T14878] ext4: Unknown parameter 'no' [ 1726.861548][T12366] usb 4-1: USB disconnect, device number 21 [ 1726.911898][T12366] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1726.955540][T12366] cyberjack 4-1:0.69: device disconnected [ 1727.323266][T14904] vivid-000: disconnect [ 1727.353288][T14901] vivid-000: reconnect [ 1727.743332][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1728.112599][T14525] veth0_vlan: entered promiscuous mode [ 1728.162949][T14525] veth1_vlan: entered promiscuous mode [ 1728.315081][T14525] veth0_macvtap: entered promiscuous mode [ 1728.347069][T14525] veth1_macvtap: entered promiscuous mode [ 1728.415934][T14525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1728.490966][T14525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1728.543054][ T1145] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.566038][ T1145] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.600460][ T1145] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.612842][ T1145] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.797244][T11810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1730.818588][T11810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.930661][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1730.938991][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1732.167402][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1732.283844][T12366] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1732.435144][T14975] batman_adv: batadv0: Adding interface: macvtap1 [ 1732.765332][T14975] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.879822][T12366] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 1732.983510][T14975] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1733.117289][T12366] usb 8-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice= 0.40 [ 1733.180905][T12366] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.234512][T12366] usb 8-1: Product: syz [ 1733.277083][T12366] usb 8-1: Manufacturer: Љ [ 1733.302997][T12366] usb 8-1: SerialNumber: syz [ 1733.341772][T14983] batman_adv: batadv0: Adding interface: macvtap1 [ 1733.448929][T14983] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.485620][T12366] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1733.520873][T14983] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1733.540317][T12366] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1733.684005][T12366] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1733.729356][T12366] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1733.838294][T12366] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1734.170433][T13525] Bluetooth: hci3: command tx timeout [ 1735.286374][T14999] loop4: detected capacity change from 0 to 64 [ 1735.744730][T14775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1735.853990][T14775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1735.867165][T14775] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1735.894694][T14775] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1735.923957][T14775] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1736.098665][T15005] netlink: 'syz.4.1479': attribute type 32 has an invalid length. [ 1736.855267][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'. [ 1737.835668][T12366] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1738.243261][T14775] Bluetooth: hci5: command tx timeout [ 1738.997151][T12366] usb 8-1: USB disconnect, device number 7 [ 1739.258006][T15019] loop6: detected capacity change from 0 to 512 [ 1739.326507][T15005] bond4: Setting coupled_control to off (0) [ 1739.477091][T15023] faux_driver vgem: [drm] Unknown color mode 2147483649; guessing buffer size. [ 1739.550263][T15027] EXT4-fs (loop7): unable to read superblock [ 1740.051559][T12496] udevd[12496]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1740.393628][T15033] loop6: detected capacity change from 0 to 512 [ 1740.497606][T14775] Bluetooth: hci5: command tx timeout [ 1740.844058][ T7390] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1741.090516][ T7390] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 1741.199759][ T7390] usb 8-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice= 0.40 [ 1741.274246][ T7390] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.287434][ T8590] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1741.312361][ T7390] usb 8-1: Product: syz [ 1741.342074][ T7390] usb 8-1: Manufacturer: Љ [ 1741.383287][ T7390] usb 8-1: SerialNumber: syz [ 1741.502903][ T7390] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1741.520359][ T8590] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 1741.562538][ T7390] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1741.601572][ T8590] usb 5-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice= 0.40 [ 1741.651865][ T8590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.693332][ T7390] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1741.705503][ T8590] usb 5-1: Product: syz [ 1741.740619][ T8590] usb 5-1: Manufacturer: Љ [ 1741.746792][ T7390] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1741.756592][ T8590] usb 5-1: SerialNumber: syz [ 1741.779419][ T5945] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.845710][ T8590] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1741.865125][ T8590] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1741.949653][ T7390] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1742.225757][ T5945] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.503622][ T5945] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.623663][ T7390] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1742.635600][ T8590] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1742.659447][ T7390] usb 8-1: USB disconnect, device number 8 [ 1742.708529][ T8590] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1742.739013][T14775] Bluetooth: hci5: command tx timeout [ 1742.788436][ T8590] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1742.822548][ T5945] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.949689][T12498] udevd[12498]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1743.489741][ T8590] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1743.529547][ T8590] usb 5-1: USB disconnect, device number 21 [ 1743.829542][T12496] udevd[12496]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1744.016854][ T8590] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1744.263526][ T8590] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1744.315743][ T8590] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1744.392661][ T8590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.498087][ T8590] usb 5-1: config 0 descriptor?? [ 1744.580603][T15068] loop7: detected capacity change from 0 to 40427 [ 1744.611164][T15068] F2FS-fs (loop7): invalid crc value [ 1744.870514][T15068] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1744.917244][T15068] F2FS-fs (loop7): Start checkpoint disabled! [ 1744.927599][T15068] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 1744.937996][T15068] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1744.971914][T15071] loop8: detected capacity change from 0 to 512 [ 1745.002697][T14775] Bluetooth: hci5: command tx timeout [ 1745.975419][ T5945] bridge_slave_1: left allmulticast mode [ 1745.991035][ T8590] video4linux radio48: keene_cmd_main failed (-110) [ 1746.016415][ T8590] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 1746.054055][ T5945] bridge_slave_1: left promiscuous mode [ 1746.061079][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.093275][ T5945] bridge_slave_0: left allmulticast mode [ 1746.107074][ T5945] bridge_slave_0: left promiscuous mode [ 1746.137604][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1747.480072][T12366] usb 5-1: USB disconnect, device number 22 [ 1747.727820][ T5945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1747.804367][ T5945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1747.869152][ T5945] bond0 (unregistering): Released all slaves [ 1747.987357][ T5945] bond1 (unregistering): Released all slaves [ 1748.025833][ T7389] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1748.083399][ T5945] bond2 (unregistering): Released all slaves [ 1748.128466][ T5945] bond3 (unregistering): Released all slaves [ 1748.271168][ T7389] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1748.298928][ T7389] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1748.334341][ T7389] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.408858][ T7389] usb 9-1: config 0 descriptor?? [ 1748.713659][ T5945] batman_adv: batadv0: Removing interface: macvtap1 [ 1749.692492][ T7390] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1749.715003][ T7389] video4linux radio48: keene_cmd_main failed (-110) [ 1749.744542][ T7389] radio-keene 9-1:0.0: V4L2 device registered as radio48 [ 1749.857127][ T5945] hsr_slave_0: left promiscuous mode [ 1749.885774][ T5945] hsr_slave_1: left promiscuous mode [ 1749.922106][ T7390] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 1749.951864][ T5945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1749.990267][ T7390] usb 7-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice= 0.40 [ 1750.016953][ T5945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1750.039299][ T7390] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.059646][ T5945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1750.094276][ T7390] usb 7-1: Product: syz [ 1750.121653][ T5945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1750.138552][ T7390] usb 7-1: Manufacturer: Љ [ 1750.154416][ T7390] usb 7-1: SerialNumber: syz [ 1750.236593][ T5945] veth1_macvtap: left promiscuous mode [ 1750.253797][ T5945] veth0_macvtap: left promiscuous mode [ 1750.263482][ T7390] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1750.272311][ T5945] veth1_vlan: left promiscuous mode [ 1750.278904][ T7390] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1750.289590][ T5945] veth0_vlan: left promiscuous mode [ 1750.329053][ T7390] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1750.361072][ T7390] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1750.468008][ T7390] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1750.739742][T15120] loop4: detected capacity change from 0 to 512 [ 1751.052392][ T7390] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1751.110717][ T7390] usb 7-1: USB disconnect, device number 33 [ 1751.928566][T15122] loop4: detected capacity change from 0 to 40427 [ 1751.978886][T15122] F2FS-fs (loop4): invalid crc value [ 1751.992417][ T8590] usb 9-1: USB disconnect, device number 2 [ 1752.286482][T12496] udevd[12496]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1752.359484][T15122] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1752.372260][T15125] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1752.430720][T15122] F2FS-fs (loop4): Start checkpoint disabled! [ 1752.699609][T15122] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 1752.818719][T15122] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1753.527090][ T7390] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1753.719874][ T7390] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1753.752242][ T7390] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1753.806405][ T7390] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.858162][ T7390] usb 9-1: config 0 descriptor?? [ 1753.937033][ T5945] team0 (unregistering): Port device team_slave_1 removed [ 1754.060316][ T5945] team0 (unregistering): Port device team_slave_0 removed [ 1754.209489][ T8590] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1754.448967][ T8590] usb 7-1: Using ep0 maxpacket: 8 [ 1754.477318][ T8590] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1754.494314][ T5945] team0 (unregistering): Port device veth0 removed [ 1754.521222][ T8590] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1754.559459][ T8590] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1754.612240][ T8590] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1754.662619][ T8590] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 16389, setting to 1024 [ 1754.716767][ T8590] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1754.744110][ T8590] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=114 [ 1754.779089][ T8590] usb 7-1: SerialNumber: syz [ 1754.832379][ T8590] usb 7-1: config 0 descriptor?? [ 1754.917777][T15116] batman_adv: batadv0: Adding interface: macvtap1 [ 1754.959593][T15116] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.064530][T15116] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1755.191829][ T7390] video4linux radio48: keene_cmd_main failed (-110) [ 1755.210028][ T7390] radio-keene 9-1:0.0: V4L2 device registered as radio48 [ 1755.688741][T15142] loop7: detected capacity change from 0 to 64 [ 1755.859601][ T29] audit: type=1800 audit(1778733856.522:191): pid=15142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1512" name="bus" dev="loop7" ino=8 res=0 errno=0 [ 1756.654440][T15151] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1513'. [ 1756.791252][ T7390] usb 9-1: USB disconnect, device number 3 [ 1757.099160][T15155] loop4: detected capacity change from 0 to 256 [ 1757.243669][T15157] loop8: detected capacity change from 0 to 64 [ 1757.333947][ T8590] usb 7-1: USB disconnect, device number 34 [ 1757.360349][T15001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.396737][T15001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.424386][ T29] audit: type=1800 audit(1778733857.972:192): pid=15157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1515" name="bus" dev="loop8" ino=8 res=0 errno=0 [ 1757.440975][T15001] bridge_slave_0: entered allmulticast mode [ 1757.552256][T15001] bridge_slave_0: entered promiscuous mode [ 1757.575844][T15155] FAT-fs (loop4): Directory bread(block 64) failed [ 1757.621907][T15155] FAT-fs (loop4): Directory bread(block 65) failed [ 1757.651537][T15001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.691193][T15155] FAT-fs (loop4): Directory bread(block 66) failed [ 1757.708235][T15001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.728472][T15001] bridge_slave_1: entered allmulticast mode [ 1757.749463][T15155] FAT-fs (loop4): Directory bread(block 67) failed [ 1757.782767][T15001] bridge_slave_1: entered promiscuous mode [ 1757.797724][T15155] FAT-fs (loop4): Directory bread(block 68) failed [ 1757.851560][T15155] FAT-fs (loop4): Directory bread(block 69) failed [ 1757.893047][T15155] FAT-fs (loop4): Directory bread(block 70) failed [ 1757.928900][T15155] FAT-fs (loop4): Directory bread(block 71) failed [ 1757.956254][T15155] FAT-fs (loop4): Directory bread(block 72) failed [ 1757.998562][T15155] FAT-fs (loop4): Directory bread(block 73) failed [ 1758.272052][T15001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1758.418761][T15168] loop8: detected capacity change from 0 to 512 [ 1758.463469][T15163] batman_adv: batadv0: Adding interface: macvtap2 [ 1758.495612][T15163] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1758.566784][T15163] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 1758.569645][T15168] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1758.606185][T15168] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1758.636952][T15001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1758.868363][T15001] team0: Port device team_slave_0 added [ 1758.959042][T15001] team0: Port device team_slave_1 added [ 1759.400535][T15001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1759.567581][T15182] FAULT_INJECTION: forcing a failure. [ 1759.567581][T15182] name failslab, interval 1, probability 0, space 0, times 0 [ 1759.663555][T14525] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1759.752583][T15182] CPU: 1 UID: 0 PID: 15182 Comm: syz.4.1519 Not tainted syzkaller #0 PREEMPT(full) [ 1759.752728][T15182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1759.752818][T15182] Call Trace: [ 1759.752867][T15182] [ 1759.752916][T15182] __dump_stack+0x26/0x30 [ 1759.753073][T15182] dump_stack_lvl+0x14c/0x1c0 [ 1759.753224][T15182] dump_stack+0x1e/0x25 [ 1759.753356][T15182] should_fail_ex+0x7e2/0x8c0 [ 1759.753553][T15182] should_failslab+0x158/0x200 [ 1759.753728][T15182] kmem_cache_alloc_lru_noprof+0x14d/0x1260 [ 1759.753919][T15182] ? __d_alloc+0x55/0xa00 [ 1759.754090][T15182] __d_alloc+0x55/0xa00 [ 1759.754219][T15182] ? __filename_parentat+0x730/0x990 [ 1759.754361][T15182] ? kmsan_get_metadata+0xf1/0x160 [ 1759.754525][T15182] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1759.754707][T15182] d_alloc+0x57/0x300 [ 1759.754845][T15182] ? kmsan_get_metadata+0xf1/0x160 [ 1759.755004][T15182] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1759.755185][T15182] lookup_one_qstr_excl+0x19d/0x7b0 [ 1759.755329][T15182] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1759.755501][T15182] filename_create+0x2c1/0x570 [ 1759.755678][T15182] filename_mkdirat+0xab/0xa60 [ 1759.755946][T15182] __se_sys_mkdirat+0x82/0x330 [ 1759.756108][T15182] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1759.756290][T15182] __x64_sys_mkdirat+0x97/0xe0 [ 1759.756463][T15182] x64_sys_call+0x37fc/0x3ea0 [ 1759.756621][T15182] do_syscall_64+0x134/0xf80 [ 1759.756782][T15182] ? clear_bhb_loop+0x50/0xa0 [ 1759.756922][T15182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.757063][T15182] RIP: 0033:0x7f26d019bcc7 [ 1759.757163][T15182] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1759.757282][T15182] RSP: 002b:00007f26d1038e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1759.757416][T15182] RAX: ffffffffffffffda RBX: 00007f26d1038ee0 RCX: 00007f26d019bcc7 [ 1759.757512][T15182] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c [ 1759.757612][T15182] RBP: 0000200000000040 R08: 00002000000000c0 R09: 0000000000000000 [ 1759.757701][T15182] R10: 0000200000000040 R11: 0000000000000246 R12: 0000200000000080 [ 1759.757810][T15182] R13: 00007f26d1038ea0 R14: 0000000000000000 R15: 0000000000000000 [ 1759.757927][T15182] [ 1760.262198][T15179] loop6: detected capacity change from 0 to 40427 [ 1760.274694][T15001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1760.301148][T15001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1760.368983][T15179] F2FS-fs (loop6): invalid crc value [ 1760.383763][T15001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1760.441571][T15001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1760.729700][T15001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1760.758408][T15179] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1760.773472][T15179] F2FS-fs (loop6): Start checkpoint disabled! [ 1760.806439][T15179] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1760.815130][T15179] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1760.877048][T15179] syz.6.1521: attempt to access beyond end of device [ 1760.877048][T15179] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1761.334211][ T1323] kworker/u8:8: attempt to access beyond end of device [ 1761.334211][ T1323] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1761.407884][T15001] hsr_slave_0: entered promiscuous mode [ 1761.426014][ T1323] CPU: 0 UID: 0 PID: 1323 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 1761.426145][ T1323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1761.426244][ T1323] Workqueue: writeback wb_workfn (flush-7:6) [ 1761.426468][ T1323] Call Trace: [ 1761.426530][ T1323] [ 1761.426582][ T1323] __dump_stack+0x26/0x30 [ 1761.426728][ T1323] dump_stack_lvl+0x14c/0x1c0 [ 1761.426877][ T1323] dump_stack+0x1e/0x25 [ 1761.427011][ T1323] f2fs_stop_checkpoint+0xac3/0xc70 [ 1761.427226][ T1323] f2fs_write_end_io+0x1207/0x2200 [ 1761.427429][ T1323] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1761.427566][ T1323] bio_endio+0xfcc/0x1120 [ 1761.427720][ T1323] submit_bio_noacct+0x533/0x2920 [ 1761.427919][ T1323] submit_bio+0x57a/0x620 [ 1761.428071][ T1323] f2fs_submit_write_bio+0x115/0x310 [ 1761.428261][ T1323] __submit_merged_bio+0x16b/0x700 [ 1761.428451][ T1323] ? kmsan_get_metadata+0xf1/0x160 [ 1761.428636][ T1323] __submit_merged_write_cond+0x4ba/0xae0 [ 1761.428846][ T1323] f2fs_write_data_pages+0x4f4d/0x5c60 [ 1761.429117][ T1323] ? update_cfs_rq_load_avg+0x747/0x8c0 [ 1761.429255][ T1323] ? kmsan_get_metadata+0xf1/0x160 [ 1761.429426][ T1323] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1761.429605][ T1323] ? clockevents_program_event+0x111/0x830 [ 1761.429752][ T1323] ? filter_irq_stacks+0x49/0x190 [ 1761.429886][ T1323] ? kmsan_get_metadata+0xf1/0x160 [ 1761.430052][ T1323] ? kmsan_get_metadata+0xf1/0x160 [ 1761.430218][ T1323] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1761.430392][ T1323] ? kmsan_get_metadata+0xf1/0x160 [ 1761.430551][ T1323] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1761.430719][ T1323] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1761.430855][ T1323] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1761.430984][ T1323] do_writepages+0x3f2/0x860 [ 1761.431152][ T1323] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1761.431356][ T1323] ? queue_io+0x7a1/0x7b0 [ 1761.431514][ T1323] ? kmsan_get_metadata+0xf1/0x160 [ 1761.431701][ T1323] __writeback_single_inode+0x101/0x10a0 [ 1761.431904][ T1323] writeback_sb_inodes+0xb1a/0x1d50 [ 1761.432169][ T1323] ? kmsan_get_metadata+0xf1/0x160 [ 1761.432334][ T1323] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1761.432541][ T1323] wb_writeback+0x4d3/0xc50 [ 1761.432728][ T1323] ? queue_io+0x4a1/0x7b0 [ 1761.432902][ T1323] wb_workfn+0x3a2/0x1970 [ 1761.433047][ T1323] ? kmsan_get_metadata+0xf1/0x160 [ 1761.433238][ T1323] ? __pfx_wb_workfn+0x10/0x10 [ 1761.433385][ T1323] process_scheduled_works+0xb65/0x1e40 [ 1761.433605][ T1323] worker_thread+0xee4/0x1590 [ 1761.433795][ T1323] kthread+0x53f/0x600 [ 1761.433959][ T1323] ? __pfx_worker_thread+0x10/0x10 [ 1761.434117][ T1323] ? __pfx_kthread+0x10/0x10 [ 1761.434268][ T1323] ret_from_fork+0x20f/0x8d0 [ 1761.434413][ T1323] ? __switch_to+0x573/0x7a0 [ 1761.434579][ T1323] ? __pfx_kthread+0x10/0x10 [ 1761.434742][ T1323] ret_from_fork_asm+0x1a/0x30 [ 1761.434928][ T1323] [ 1761.476091][T15001] hsr_slave_1: entered promiscuous mode [ 1761.491395][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1522'. [ 1761.746414][ T1323] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1762.672954][T15202] loop8: detected capacity change from 0 to 512 [ 1762.721204][T15202] ext4: Unknown parameter 'rootcontext' [ 1763.206339][T12053] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1763.459823][T12053] usb 9-1: config 0 has an invalid interface number: 48 but max is 0 [ 1763.488630][T12053] usb 9-1: config 0 has no interface number 0 [ 1763.508183][T12053] usb 9-1: too many endpoints for config 0 interface 48 altsetting 48: 44, using maximum allowed: 30 [ 1763.560365][T12053] usb 9-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 44 [ 1763.616476][T12053] usb 9-1: config 0 interface 48 has no altsetting 0 [ 1763.659595][T12053] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1763.696670][T12053] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1763.719147][T15208] loop4: detected capacity change from 0 to 1024 [ 1763.748396][T12053] usb 9-1: Product: syz [ 1763.762181][T12053] usb 9-1: Manufacturer: syz [ 1763.775734][T12053] usb 9-1: SerialNumber: syz [ 1763.842108][T12053] usb 9-1: config 0 descriptor?? [ 1763.906254][T12053] ch341 9-1:0.48: ch341-uart converter detected [ 1765.093352][T15001] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1765.103689][T12053] usb 9-1: failed to receive control message: -110 [ 1765.158537][T12053] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1765.191540][T15001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1765.266882][T15001] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1765.401222][T15001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1765.451794][T15001] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1765.574897][T15001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1765.588687][T15215] kAFS: unable to lookup cell '(,' [ 1765.622325][T15001] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1765.735664][T15001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1766.775009][ T8590] usb 9-1: USB disconnect, device number 4 [ 1766.852778][ T8590] ch341 9-1:0.48: device disconnected [ 1767.367427][T15001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1767.667866][T15001] 8021q: adding VLAN 0 to HW filter on device team0 [ 1767.810011][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.817746][ T5878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1768.051795][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.059630][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1768.107837][ T7390] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1768.312927][ T7390] usb 9-1: Using ep0 maxpacket: 32 [ 1768.346888][ T7390] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 1768.382841][ T7390] usb 9-1: config 0 has no interface number 0 [ 1768.402763][ T7390] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1768.439663][ T7390] usb 9-1: config 0 interface 89 has no altsetting 0 [ 1768.460351][ T7390] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1768.479729][ T7390] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.494240][T15253] loop4: detected capacity change from 0 to 64 [ 1768.549747][ T7390] usb 9-1: Product: syz [ 1768.580975][ T7390] usb 9-1: Manufacturer: syz [ 1768.614856][ T7390] usb 9-1: SerialNumber: syz [ 1768.672728][ T7390] usb 9-1: config 0 descriptor?? [ 1768.758137][ T7390] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1768.799523][ T7390] em28xx 9-1:0.89: Video interface 89 found: [ 1769.321745][T15262] tmpfs: Bad value for 'mpol' [ 1769.426781][ T7390] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 1770.179516][ T7390] em28xx 9-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1770.248072][ T7390] em28xx 9-1:0.89: board has no eeprom [ 1770.338162][ T7390] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 1770.371059][ T7390] em28xx 9-1:0.89: analog set to bulk mode. [ 1770.379531][T12053] em28xx 9-1:0.89: Registering V4L2 extension [ 1770.449308][ T7390] usb 9-1: USB disconnect, device number 5 [ 1770.488318][ T7390] em28xx 9-1:0.89: Disconnecting em28xx [ 1770.871776][T12053] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 1770.923181][T12053] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 1770.977301][T12053] em28xx 9-1:0.89: No AC97 audio processor [ 1771.023720][T12053] usb 9-1: Decoder not found [ 1771.036032][T15273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.044150][T15273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1771.045376][T12053] em28xx 9-1:0.89: failed to create media graph [ 1771.124025][T12053] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 1771.178419][T12053] em28xx 9-1:0.89: Registering snapshot button... [ 1771.266005][T12053] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input15 [ 1771.320246][T12053] em28xx 9-1:0.89: Remote control support is not available for this card. [ 1771.364648][ T7390] em28xx 9-1:0.89: Closing input extension [ 1771.402708][ T7390] em28xx 9-1:0.89: Deregistering snapshot button [ 1771.530728][ T7390] em28xx 9-1:0.89: Freeing device [ 1772.088922][T15273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1772.222347][T15273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1772.421714][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1773.577189][T15285] tipc: Started in network mode [ 1773.595836][T15285] tipc: Node identity 7781, cluster identity 2 [ 1773.618061][T15285] tipc: Node number set to 30593 [ 1773.656743][ T5878] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.782788][ T5878] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.833744][ T5878] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.875527][ T5878] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.717037][T15309] lo speed is unknown, defaulting to 1000 [ 1774.726404][T15309] lo speed is unknown, defaulting to 1000 [ 1774.745384][T15309] lo speed is unknown, defaulting to 1000 [ 1774.769753][T15309] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1774.784688][T15309] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1774.802643][T15309] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1774.899304][T15309] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1775.161029][T15309] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1776.769339][T15309] lo speed is unknown, defaulting to 1000 [ 1776.829457][T15309] lo speed is unknown, defaulting to 1000 [ 1776.881155][T15309] lo speed is unknown, defaulting to 1000 [ 1776.930896][T15309] lo speed is unknown, defaulting to 1000 [ 1776.989467][T15309] lo speed is unknown, defaulting to 1000 [ 1777.808530][T14775] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1777.949239][T15336] loop6: detected capacity change from 0 to 512 [ 1778.000041][T15336] EXT4-fs: Ignoring removed orlov option [ 1778.148863][T15336] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1778.194344][T15336] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1778.540242][T15348] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.1555: iget: bad i_size value: 2533274857506816 [ 1779.060926][T15358] loop4: detected capacity change from 0 to 1024 [ 1779.176835][T12053] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1779.214379][T10796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1779.317214][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1779.324005][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1779.527362][T12053] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1779.564889][T12053] usb 8-1: no configurations [ 1779.570667][T15001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1779.590350][T12053] usb 8-1: can't read configurations, error -22 [ 1780.314696][T15373] netlink: 'syz.8.1564': attribute type 298 has an invalid length. [ 1780.444697][T15001] veth0_vlan: entered promiscuous mode [ 1780.603456][T15001] veth1_vlan: entered promiscuous mode [ 1781.136788][T15001] veth0_macvtap: entered promiscuous mode [ 1781.244255][T15001] veth1_macvtap: entered promiscuous mode [ 1781.739663][T15001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1781.856120][T15001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1782.119782][ T8645] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.143915][ T8645] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.198298][ T8645] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.228721][ T8645] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.748164][T15402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1571'. [ 1783.697967][ T7390] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1783.925436][ T7390] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1783.959142][T15415] loop4: detected capacity change from 0 to 256 [ 1783.966328][ T7390] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1783.996117][T15417] loop8: detected capacity change from 0 to 1024 [ 1784.005410][ T7390] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1784.063144][ T7390] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.111388][ T7390] usb 7-1: config 0 descriptor?? [ 1784.113236][T15415] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1784.206946][T15417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1784.302939][T15415] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10) [ 1784.315555][T15417] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1784.661672][ T7390] hid_parser_main: 22 callbacks suppressed [ 1784.661770][ T7390] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1784.745435][ T7390] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1784.787791][ T7390] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1784.838469][ T7390] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1784.884482][ T7390] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1784.928599][ T7390] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1784.972595][ T7390] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1785.001187][T14525] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1785.075750][ T7390] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1785.194425][ T7390] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 1785.804744][ T7390] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 1786.091024][ T7390] usb 7-1: USB disconnect, device number 35 [ 1786.132125][T15432] fido_id[15432]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:10C4:EA90.0004/report_descriptor': No such file or directory [ 1786.249938][ T29] audit: type=1804 audit(1778733884.587:193): pid=15442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1579" name="/newroot/54/file0" dev="tmpfs" ino=311 res=1 errno=0 [ 1787.483503][T15459] capability: warning: `syz.8.1584' uses deprecated v2 capabilities in a way that may be insecure [ 1789.741285][T15486] loop7: detected capacity change from 0 to 4096 [ 1789.929542][T15495] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1791.089166][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1791.135911][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1791.548533][T11254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1791.593273][T11254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.161826][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1600'. [ 1792.778372][T15526] syz.4.1603 uses obsolete (PF_INET,SOCK_PACKET) [ 1792.782161][T12053] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1793.018733][T12053] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1793.063212][T12053] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1793.116025][T12053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.221310][T12053] usb 4-1: config 0 descriptor?? [ 1793.401108][ T7775] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1793.635066][ T7775] usb 8-1: Using ep0 maxpacket: 8 [ 1793.694963][ T7775] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1793.762781][ T7775] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1793.814125][ T7775] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.872072][ T7775] usb 8-1: config 0 descriptor?? [ 1794.268219][ T7775] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1794.529376][T12053] video4linux radio48: keene_cmd_main failed (-110) [ 1794.566816][T12053] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 1794.757819][ T7775] usb 8-1: USB disconnect, device number 11 [ 1796.028445][T12053] usb 4-1: USB disconnect, device number 22 [ 1796.142159][ T7775] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1796.379892][ T7775] usb 7-1: Using ep0 maxpacket: 8 [ 1796.432922][ T7775] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1796.498766][ T7775] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1796.573470][ T7775] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1796.631072][ T7775] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1796.719407][ T7775] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1796.794530][ T7775] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1796.862397][ T7775] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1796.925892][T13525] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1796.941660][T13525] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1796.950780][ T7775] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1796.951218][T13525] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1796.976594][T12366] IPVS: starting estimator thread 0... [ 1796.986039][T13525] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1797.000668][T13525] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1797.013543][ T7775] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1797.094952][ T7775] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1797.170429][T15570] IPVS: using max 240 ests per chain, 12000 per kthread [ 1797.201838][ T7775] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1797.261976][ T7775] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1797.325031][ T7775] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1797.373517][ T7775] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1797.434066][T15575] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 1797.454612][ T7775] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1797.493559][ T7775] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1797.515750][ T7775] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1797.525332][ T7775] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1797.584760][ T7775] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1797.628951][ T7775] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1797.693052][ T7775] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1797.743501][ T7775] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1797.767707][ T7775] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1797.829654][ T7775] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1797.887955][ T7775] usb 7-1: string descriptor 0 read error: -22 [ 1797.912641][ T7775] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1797.965955][ T7775] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.075892][ T7775] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1798.674639][ T7775] usb 7-1: USB disconnect, device number 36 [ 1799.240243][T13525] Bluetooth: hci1: command tx timeout [ 1800.210297][T15609] vxcan1: entered promiscuous mode [ 1800.659475][T15566] lo speed is unknown, defaulting to 1000 [ 1801.491662][T13525] Bluetooth: hci1: command tx timeout [ 1801.923969][T12366] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1802.232016][T12366] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1802.252276][T12366] usb 8-1: no configurations [ 1802.258109][T12366] usb 8-1: can't read configurations, error -22 [ 1803.540244][T15637] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1635'. [ 1803.586247][T15636] vlan2: entered allmulticast mode [ 1803.634495][T15636] bond0: entered allmulticast mode [ 1803.661236][T15636] bond_slave_0: entered allmulticast mode [ 1803.683584][T15636] bond_slave_1: entered allmulticast mode [ 1803.743672][T13525] Bluetooth: hci1: command tx timeout [ 1804.050692][T15637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1804.109753][T15637] bond_slave_0: left allmulticast mode [ 1804.158105][T15637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1804.174729][T15637] bond_slave_1: left allmulticast mode [ 1804.204755][T15637] bond0 (unregistering): Released all slaves [ 1804.617809][T15566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.646680][T15566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.704880][T15566] bridge_slave_0: entered allmulticast mode [ 1804.743333][T15566] bridge_slave_0: entered promiscuous mode [ 1804.839389][T15566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.863986][T15566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.905210][T15566] bridge_slave_1: entered allmulticast mode [ 1804.921083][T15647] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1639'. [ 1804.980775][T15566] bridge_slave_1: entered promiscuous mode [ 1805.585373][T12053] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1805.654075][T15566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1805.696331][T15566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1805.780142][T12053] usb 4-1: Using ep0 maxpacket: 16 [ 1805.804037][T12053] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 1805.892018][T12053] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1805.921151][T12053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 1805.937521][T12053] usb 4-1: Product: syz [ 1805.950920][T12053] usb 4-1: Manufacturer: syz [ 1805.960112][T15566] team0: Port device team_slave_0 added [ 1805.966334][T12053] usb 4-1: SerialNumber: syz [ 1805.983862][T12053] usb 4-1: config 0 descriptor?? [ 1805.996936][T13525] Bluetooth: hci1: command tx timeout [ 1806.037941][T15566] team0: Port device team_slave_1 added [ 1806.051922][T12053] pwc: Philips SPC 880NC USB webcam detected. [ 1806.290855][T15566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1806.332939][T15566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1806.405035][T12053] pwc: Warning: more than 1 configuration available. [ 1806.447448][T15566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1806.450789][T12053] pwc: Failed to set LED on/off time (-71) [ 1806.493351][T15566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1806.519943][T15566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1806.557264][T12053] pwc: send_video_command error -71 [ 1806.589015][T12053] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1806.619302][T12053] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1806.630152][T15566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1806.676607][T12053] usb 4-1: USB disconnect, device number 23 [ 1806.873397][T15667] loop6: detected capacity change from 0 to 2048 [ 1806.918033][T12366] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1806.942329][T15667] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 1807.022841][T15667] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1807.121809][T12366] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1807.172461][T12366] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.241443][T12366] usb 9-1: config 0 descriptor?? [ 1807.298700][T15673] loop7: detected capacity change from 0 to 256 [ 1807.534804][T15566] hsr_slave_0: entered promiscuous mode [ 1807.629334][T15566] hsr_slave_1: entered promiscuous mode [ 1807.634357][T12366] ath6kl: Failed to submit usb control message: -71 [ 1807.651359][T12366] ath6kl: unable to send the bmi data to the device: -71 [ 1807.704905][T15566] debugfs: 'hsr0' already exists in 'hsr' [ 1807.716115][T12366] ath6kl: Unable to send get target info: -71 [ 1807.758856][T15566] Cannot create hsr debugfs directory [ 1807.765234][T12366] ath6kl: Failed to init ath6kl core: -71 [ 1807.807633][T15673] FAT-fs (loop7): Directory bread(block 64) failed [ 1807.844680][T12366] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1807.862985][T15673] FAT-fs (loop7): Directory bread(block 65) failed [ 1807.910906][T15673] FAT-fs (loop7): Directory bread(block 66) failed [ 1807.973147][T15673] FAT-fs (loop7): Directory bread(block 67) failed [ 1808.002950][T12366] usb 9-1: USB disconnect, device number 6 [ 1808.031838][T15673] FAT-fs (loop7): Directory bread(block 68) failed [ 1808.078268][T15673] FAT-fs (loop7): Directory bread(block 69) failed [ 1808.132854][T15673] FAT-fs (loop7): Directory bread(block 70) failed [ 1808.170721][T15673] FAT-fs (loop7): Directory bread(block 71) failed [ 1808.212416][T15673] FAT-fs (loop7): Directory bread(block 72) failed [ 1808.261242][T15673] FAT-fs (loop7): Directory bread(block 73) failed [ 1809.060679][T15688] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1651'. [ 1809.406743][T15692] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1652'. [ 1809.431076][T15684] lo speed is unknown, defaulting to 1000 [ 1811.086360][T15566] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1811.214572][T15566] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1811.272217][T15566] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1811.396537][T15566] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1811.600935][T12053] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1811.611484][T15566] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1811.767474][T15566] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1811.801005][T15566] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1811.822212][T12053] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1811.871464][T12053] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.885073][T15566] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1811.923684][T12053] usb 8-1: config 0 descriptor?? [ 1812.201887][T12053] ath6kl: Failed to submit usb control message: -71 [ 1812.209393][T12053] ath6kl: unable to send the bmi data to the device: -71 [ 1812.218851][T12053] ath6kl: Unable to send get target info: -71 [ 1812.233535][T12053] ath6kl: Failed to init ath6kl core: -71 [ 1812.270196][T12053] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1812.374757][T12053] usb 8-1: USB disconnect, device number 14 [ 1812.681257][T15736] loop8: detected capacity change from 0 to 128 [ 1813.580700][T15566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1813.859510][T15566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1814.048188][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.055892][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1814.331276][ T8645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.338913][ T8645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1814.551824][T15757] loop7: detected capacity change from 0 to 1764 [ 1815.293980][T12366] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 1815.526846][T12366] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1815.581691][T12366] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1815.641184][T12366] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1815.847276][T15774] input: syz1 as /devices/virtual/input/input16 [ 1815.919584][T12053] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1816.871026][T12053] usb 9-1: Using ep0 maxpacket: 8 [ 1817.416511][T12366] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.509269][T12366] usb 7-1: config 0 descriptor?? [ 1818.579662][T12053] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1818.609489][T12053] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1818.634147][T12053] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1818.709848][T12053] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1818.762135][T12053] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1818.807601][T12053] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1818.902763][T12053] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1819.003485][T12053] usb 9-1: config 168 interface 0 has no altsetting 0 [ 1819.271464][T12053] usb 9-1: unable to read config index 1 descriptor/start: -71 [ 1819.299810][T12366] usb 7-1: can't set config #0, error -71 [ 1819.366652][T12366] usb 7-1: USB disconnect, device number 37 [ 1819.391025][T12053] usb 9-1: can't read configurations, error -71 [ 1820.785555][T12366] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1820.992218][T12366] usb 7-1: Using ep0 maxpacket: 32 [ 1821.038477][T12366] usb 7-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 1821.115902][T12366] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1821.152781][T12366] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.186384][T12366] usb 7-1: Product: syz [ 1821.201977][T12366] usb 7-1: Manufacturer: syz [ 1821.228011][T12366] usb 7-1: SerialNumber: syz [ 1821.273533][T12366] usb 7-1: config 0 descriptor?? [ 1821.316162][T12366] cdc_ether 7-1:0.0: skipping garbage [ 1821.341331][T12366] usb 7-1: No union descriptors [ 1821.382681][T12366] usb 7-1: unsupported MDLM descriptors [ 1822.068045][T15566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1823.394864][ T8590] usb 7-1: USB disconnect, device number 38 [ 1823.592766][ T7775] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1823.819942][ T7775] usb 9-1: config 150 has an invalid interface number: 204 but max is 2 [ 1823.860621][ T7775] usb 9-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1823.902806][ T7775] usb 9-1: config 150 has no interface number 0 [ 1823.931478][ T7775] usb 9-1: config 150 interface 204 has no altsetting 0 [ 1823.993525][ T7775] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1824.015745][ T7775] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.033835][ T7775] usb 9-1: Product: syz [ 1824.048896][ T7775] usb 9-1: Manufacturer: syz [ 1824.060991][ T7775] usb 9-1: SerialNumber: syz [ 1824.100398][ T5226] veth0_vlan: left promiscuous mode [ 1824.149696][ T5226] veth0_vlan: entered promiscuous mode [ 1824.296985][ T7390] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 1824.503387][ T7390] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1824.505723][ T7775] xr_serial 9-1:150.204: skipping garbage [ 1824.528747][ T7390] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1824.528943][ T7390] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1824.529075][ T7390] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.607777][ T7390] usb 7-1: config 0 descriptor?? [ 1824.620587][ T7775] xr_serial 9-1:150.204: xr_serial converter detected [ 1824.961100][T15566] veth0_vlan: entered promiscuous mode [ 1825.044659][T15566] veth1_vlan: entered promiscuous mode [ 1825.121392][ T7775] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1825.143306][ T7390] usbhid 7-1:0.0: can't add hid device: -71 [ 1825.160835][ T7390] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1825.161352][ T7775] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1825.228760][ T7390] usb 7-1: USB disconnect, device number 39 [ 1825.305659][ T7775] usb 9-1: USB disconnect, device number 9 [ 1825.401462][ T7775] xr_serial 9-1:150.204: device disconnected [ 1825.631130][T15566] veth0_macvtap: entered promiscuous mode [ 1825.783710][T15566] veth1_macvtap: entered promiscuous mode [ 1826.098982][T15566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1826.272225][T15566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1826.470349][ T1145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.517951][ T1145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.579816][ T1145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.616764][ T1145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1827.396713][ T7389] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1827.629562][ T7389] usb 4-1: Using ep0 maxpacket: 16 [ 1827.668051][ T7389] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1827.717455][ T7389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.794716][ T7389] usb 4-1: config 0 descriptor?? [ 1827.893426][ T7389] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1828.907754][T12366] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1829.144705][T12366] usb 9-1: config 150 has an invalid interface number: 204 but max is 2 [ 1829.194469][ T7390] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 1829.205080][T12366] usb 9-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1829.205220][T12366] usb 9-1: config 150 has no interface number 0 [ 1829.205338][T12366] usb 9-1: config 150 interface 204 has no altsetting 0 [ 1829.242452][T12366] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1829.296664][T12366] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.346888][T12366] usb 9-1: Product: syz [ 1829.359938][T12366] usb 9-1: Manufacturer: syz [ 1829.388097][T12366] usb 9-1: SerialNumber: syz [ 1829.434433][ T7390] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1829.454104][ T7390] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1829.465759][ T7390] usb 8-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1829.481298][ T7390] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.510115][ T7390] usb 8-1: config 0 descriptor?? [ 1829.749799][T12366] xr_serial 9-1:150.204: skipping garbage [ 1829.783764][T12366] xr_serial 9-1:150.204: xr_serial converter detected [ 1830.094748][ T7390] usbhid 8-1:0.0: can't add hid device: -71 [ 1830.140422][ T7390] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1830.218075][ T7390] usb 8-1: USB disconnect, device number 15 [ 1830.413980][T12366] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1830.457436][T12366] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1830.558413][T12366] usb 9-1: USB disconnect, device number 10 [ 1830.635416][ T7389] gspca_sonixj: reg_w1 err -71 [ 1830.638169][T12366] xr_serial 9-1:150.204: device disconnected [ 1830.672108][ T7389] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1830.740015][ T7389] usb 4-1: USB disconnect, device number 24 [ 1832.256004][T15942] siw: device registration error -23 [ 1833.034958][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1713'. [ 1834.592976][T15159] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1834.820315][T15159] usb 7-1: Using ep0 maxpacket: 16 [ 1834.873698][T15159] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1834.904881][T15159] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.940958][T15159] usb 7-1: config 0 descriptor?? [ 1834.987816][T15159] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1835.664242][ T5771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1835.717598][ T5771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1836.026113][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.054102][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.799335][T15159] gspca_sonixj: reg_w1 err -71 [ 1837.832562][T15159] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 1837.890995][T15159] usb 7-1: USB disconnect, device number 40 [ 1837.902285][T16015] Bluetooth: MGMT ver 1.23 [ 1838.596791][T15159] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1838.839280][T15159] usb 9-1: Using ep0 maxpacket: 16 [ 1838.870662][T15159] usb 9-1: too many configurations: 60, using maximum allowed: 8 [ 1839.079876][T15159] usb 9-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1839.108992][T15159] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 1839.134658][T15159] usb 9-1: Product: syz [ 1839.161087][T15159] usb 9-1: Manufacturer: syz [ 1839.202674][T15159] usb 9-1: SerialNumber: syz [ 1839.275093][T15159] usb 9-1: config 0 descriptor?? [ 1839.353442][T15159] pwc: Philips SPC 880NC USB webcam detected. [ 1839.717807][T15159] pwc: Warning: more than 1 configuration available. [ 1839.763632][T15159] pwc: Failed to set LED on/off time (-71) [ 1839.776939][T15159] pwc: send_video_command error -71 [ 1839.804767][T15159] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1839.831485][ T7775] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1839.834172][T15159] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 1839.946863][T15159] usb 9-1: USB disconnect, device number 11 [ 1840.094210][ T7775] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1840.135543][ T7775] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1840.177979][ T7775] usb 5-1: config 150 has no interface number 0 [ 1840.235727][ T7775] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1840.302628][ T7775] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1840.362987][T16052] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1745'. [ 1840.374327][ T7775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.419254][ T7775] usb 5-1: Product: syz [ 1840.440635][ T7775] usb 5-1: Manufacturer: syz [ 1840.458591][ T7775] usb 5-1: SerialNumber: syz [ 1840.802516][ T7775] xr_serial 5-1:150.204: skipping garbage [ 1840.824212][ T7775] xr_serial 5-1:150.204: xr_serial converter detected [ 1841.266530][T15159] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1841.467811][ T7775] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1841.481837][T15159] usb 4-1: Using ep0 maxpacket: 16 [ 1841.503613][ T7775] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1841.539137][T15159] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1841.617711][T15159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.661910][ T7775] usb 5-1: USB disconnect, device number 23 [ 1841.684060][T16067] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1751'. [ 1841.718693][T15159] usb 4-1: config 0 descriptor?? [ 1841.764436][ T7775] xr_serial 5-1:150.204: device disconnected [ 1841.828862][T15159] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1842.892020][ T7775] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1842.908521][T16075] loop8: detected capacity change from 0 to 1764 [ 1843.093305][ T7775] usb 7-1: device descriptor read/64, error -71 [ 1843.403600][ T7775] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1843.583650][ T7775] usb 7-1: device descriptor read/64, error -71 [ 1843.731952][ T7775] usb usb7-port1: attempt power cycle [ 1844.159743][ T7775] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1844.224429][ T7775] usb 7-1: device descriptor read/8, error -71 [ 1844.468380][T16094] netlink: 'syz.4.1759': attribute type 4 has an invalid length. [ 1844.517381][ T7775] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1844.521571][T15159] gspca_sonixj: reg_w1 err -71 [ 1844.571733][ T7775] usb 7-1: device descriptor read/8, error -71 [ 1844.576426][T15159] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1844.646948][T15159] usb 4-1: USB disconnect, device number 25 [ 1844.711043][ T7775] usb usb7-port1: unable to enumerate USB device [ 1845.814168][T16111] siw: device registration error -23 [ 1845.940365][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1846.159184][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1846.175337][T16111] smbdirect: ib_dev[syz2] removed [ 1848.757875][T16139] loop8: detected capacity change from 0 to 1764 [ 1849.356730][T15159] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1849.562478][T15159] usb 5-1: Using ep0 maxpacket: 16 [ 1849.602441][T15159] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1849.670752][T15159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.726849][T15159] usb 5-1: config 0 descriptor?? [ 1849.775744][T15159] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1849.948400][ T5677] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1850.180722][ T5677] usb 4-1: Using ep0 maxpacket: 32 [ 1850.253751][ T5677] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1850.290208][ T5677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.300385][ T5677] usb 4-1: Product: syz [ 1850.307046][ T5677] usb 4-1: Manufacturer: syz [ 1850.313423][ T5677] usb 4-1: SerialNumber: syz [ 1850.344155][ T5677] usb 4-1: config 0 descriptor?? [ 1850.439149][ T5677] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1851.407938][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1852.283107][ T5677] gspca_ov534_9: reg_r err -71 [ 1852.578021][T15159] gspca_sonixj: reg_w1 err -71 [ 1852.596650][ T5677] gspca_ov534_9: Unknown sensor 0000 [ 1852.597122][ T5677] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1852.629854][T15159] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1852.671059][T15159] usb 5-1: USB disconnect, device number 24 [ 1852.692241][ T5677] usb 4-1: USB disconnect, device number 26 [ 1854.310344][T16201] loop4: detected capacity change from 0 to 1764 [ 1855.674617][T15159] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1855.881917][T15159] usb 7-1: Using ep0 maxpacket: 32 [ 1855.899003][ T5677] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1856.021479][T15159] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1856.067718][T15159] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.110458][T15159] usb 7-1: Product: syz [ 1856.130762][T15159] usb 7-1: Manufacturer: syz [ 1856.164808][T15159] usb 7-1: SerialNumber: syz [ 1856.171844][ T5677] usb 8-1: Using ep0 maxpacket: 16 [ 1856.208377][ T5677] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1856.222225][T15159] usb 7-1: config 0 descriptor?? [ 1856.272034][ T5677] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.301780][T15159] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1856.338163][ T5677] usb 8-1: config 0 descriptor?? [ 1856.423721][ T5677] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1858.129242][T15159] gspca_ov534_9: reg_r err -71 [ 1858.445351][T15159] gspca_ov534_9: Unknown sensor 0000 [ 1858.445910][T15159] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 1858.565209][T15159] usb 7-1: USB disconnect, device number 45 [ 1859.128961][ T5677] gspca_sonixj: reg_w1 err -71 [ 1859.154885][ T5677] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 1859.218109][ T5677] usb 8-1: USB disconnect, device number 16 [ 1860.682114][T16282] Bluetooth: hci0: service_discovery: too big uuid_count value 65532 [ 1862.010516][ T5677] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1862.214182][ T5677] usb 9-1: Using ep0 maxpacket: 32 [ 1862.277931][ T5677] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1862.321028][ T5677] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.361046][ T5677] usb 9-1: Product: syz [ 1862.383992][ T5677] usb 9-1: Manufacturer: syz [ 1862.418390][ T5677] usb 9-1: SerialNumber: syz [ 1862.465181][ T5677] usb 9-1: config 0 descriptor?? [ 1862.544192][ T5677] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1863.741355][T12366] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1864.007332][T12366] usb 5-1: Using ep0 maxpacket: 16 [ 1864.102791][T12366] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1864.130728][T12366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.216304][T12366] usb 5-1: config 0 descriptor?? [ 1864.352038][T12366] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1864.367545][T16320] Bluetooth: hci0: service_discovery: too big uuid_count value 65532 [ 1864.387798][ T5677] gspca_ov534_9: reg_r err -71 [ 1864.696782][ T5677] gspca_ov534_9: Unknown sensor 0000 [ 1864.697105][ T5677] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 1864.817294][ T5677] usb 9-1: USB disconnect, device number 12 [ 1867.367556][T12366] gspca_sonixj: reg_w1 err -71 [ 1867.387194][T12366] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1867.468493][T12366] usb 5-1: USB disconnect, device number 25 [ 1868.911852][ T5677] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1869.125165][ T5677] usb 8-1: Using ep0 maxpacket: 32 [ 1869.182669][ T5677] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1869.212176][ T5677] usb 8-1: config 0 has no interface number 0 [ 1869.231518][ T5677] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1869.297333][ T5677] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1869.358243][ T5677] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1869.400158][ T5677] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.439800][ T5677] usb 8-1: Product: syz [ 1869.473815][ T5677] usb 8-1: Manufacturer: syz [ 1869.496027][ T5677] usb 8-1: SerialNumber: syz [ 1869.543582][ T5677] usb 8-1: config 0 descriptor?? [ 1869.550146][T15159] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1869.670113][ T5677] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1869.728153][ T5677] em28xx 8-1:0.89: Video interface 89 found: [ 1869.785676][T15159] usb 5-1: Using ep0 maxpacket: 32 [ 1869.869431][T15159] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1869.933987][T15159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.964263][T15159] usb 5-1: Product: syz [ 1869.979243][T15159] usb 5-1: Manufacturer: syz [ 1869.999246][T15159] usb 5-1: SerialNumber: syz [ 1870.097765][T15159] usb 5-1: config 0 descriptor?? [ 1870.189140][T15159] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1870.294818][ T5577] Bluetooth: hci3: command 0x0406 tx timeout [ 1870.297111][T11271] Bluetooth: hci5: command 0x0406 tx timeout [ 1870.399681][ T5677] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1871.199984][ T5677] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1871.251186][ T5677] em28xx 8-1:0.89: board has no eeprom [ 1871.356651][ T5677] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1871.397430][ T5677] em28xx 8-1:0.89: analog set to bulk mode. [ 1871.441830][T12053] em28xx 8-1:0.89: Registering V4L2 extension [ 1871.529975][ T5677] usb 8-1: USB disconnect, device number 17 [ 1871.589432][ T5677] em28xx 8-1:0.89: Disconnecting em28xx [ 1872.008416][T12053] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1872.072347][T12053] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1872.122508][T12053] em28xx 8-1:0.89: No AC97 audio processor [ 1872.178588][T15159] gspca_ov534_9: reg_r err -71 [ 1872.227385][T12053] usb 8-1: Decoder not found [ 1872.263703][T12053] em28xx 8-1:0.89: failed to create media graph [ 1872.300399][T12053] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1872.373425][T12053] em28xx 8-1:0.89: Registering snapshot button... [ 1872.437656][T12053] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input17 [ 1872.493661][T15159] gspca_ov534_9: Unknown sensor 0000 [ 1872.493964][T15159] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1872.534032][T12053] em28xx 8-1:0.89: Remote control support is not available for this card. [ 1872.605980][ T5677] em28xx 8-1:0.89: Closing input extension [ 1872.653885][T15159] usb 5-1: USB disconnect, device number 26 [ 1872.662690][ T5677] em28xx 8-1:0.89: Deregistering snapshot button [ 1872.825759][ T5677] em28xx 8-1:0.89: Freeing device [ 1873.771621][T12108] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1873.990222][T12108] usb 8-1: Using ep0 maxpacket: 16 [ 1874.040859][T12108] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1874.074098][T12108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.112476][T12108] usb 8-1: config 0 descriptor?? [ 1874.201213][T12108] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1876.437636][T12108] gspca_sonixj: reg_r err -32 [ 1876.472878][T12108] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 1877.371450][ T8590] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1877.586612][ T8590] usb 9-1: Using ep0 maxpacket: 32 [ 1877.655438][ T8590] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1877.707562][ T8590] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.747258][ T8590] usb 9-1: Product: syz [ 1877.771359][ T8590] usb 9-1: Manufacturer: syz [ 1877.802174][ T8590] usb 9-1: SerialNumber: syz [ 1877.842809][ T5677] usb 8-1: USB disconnect, device number 18 [ 1877.856259][ T8590] usb 9-1: config 0 descriptor?? [ 1877.984821][ T8590] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1879.820846][ T8590] gspca_ov534_9: reg_r err -71 [ 1880.141485][ T8590] gspca_ov534_9: Unknown sensor 0000 [ 1880.141801][ T8590] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 1880.219051][ T8590] usb 9-1: USB disconnect, device number 13 [ 1880.278788][ T7775] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1880.489481][ T7775] usb 4-1: Using ep0 maxpacket: 16 [ 1880.544208][ T7775] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1880.602676][ T7775] usb 4-1: config 0 has no interface number 0 [ 1880.647599][ T7775] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1880.706302][ T7775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.756727][ T7775] usb 4-1: Product: syz [ 1880.791562][ T7775] usb 4-1: Manufacturer: syz [ 1880.828391][ T7775] usb 4-1: SerialNumber: syz [ 1880.877649][ T7775] usb 4-1: config 0 descriptor?? [ 1880.945492][ T7775] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1881.262343][T16484] loop7: detected capacity change from 0 to 256 [ 1881.453419][T16484] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1881.617658][T16484] fuse: Bad value for 'fd' [ 1882.631299][T16493] ===================================================== [ 1882.640533][T16493] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x9a4/0xa30 [ 1882.648692][T16493] ieee802154_hdr_push+0x9a4/0xa30 [ 1882.654332][T16493] ieee802154_header_create+0x854/0xb90 [ 1882.663513][T16493] dgram_sendmsg+0xb55/0x16f0 [ 1882.669460][T16493] ieee802154_sock_sendmsg+0x91/0xe0 [ 1882.675231][T16493] ____sys_sendmsg+0xf37/0xfd0 [ 1882.680288][T16493] ___sys_sendmsg+0x271/0x3b0 [ 1882.685258][T16493] __x64_sys_sendmsg+0x211/0x3e0 [ 1882.690618][T16493] x64_sys_call+0x1e20/0x3ea0 [ 1882.695614][T16493] do_syscall_64+0x134/0xf80 [ 1882.700659][T16493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1882.706850][T16493] [ 1882.709464][T16493] Uninit was stored to memory at: [ 1882.714846][T16493] ieee802154_hdr_push+0x99d/0xa30 [ 1882.720420][T16493] ieee802154_header_create+0x854/0xb90 [ 1882.726495][T16493] dgram_sendmsg+0xb55/0x16f0 [ 1882.731649][T16493] ieee802154_sock_sendmsg+0x91/0xe0 [ 1882.737267][T16493] ____sys_sendmsg+0xf37/0xfd0 [ 1882.742421][T16493] ___sys_sendmsg+0x271/0x3b0 [ 1882.747390][T16493] __x64_sys_sendmsg+0x211/0x3e0 [ 1882.752702][T16493] x64_sys_call+0x1e20/0x3ea0 [ 1882.757745][T16493] do_syscall_64+0x134/0xf80 [ 1882.762703][T16493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1882.769037][T16493] [ 1882.774517][T16493] Local variable hdr created at: [ 1882.779545][T16493] ieee802154_header_create+0x4e/0xb90 [ 1882.786567][T16493] dgram_sendmsg+0xb55/0x16f0 [ 1882.791515][T16493] [ 1882.793954][T16493] CPU: 0 UID: 0 PID: 16493 Comm: syz.7.1883 Not tainted syzkaller #0 PREEMPT(full) [ 1882.803673][T16493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1882.813976][T16493] ===================================================== [ 1882.821226][T16493] Disabling lock debugging due to kernel taint [ 1882.849093][ T7775] gspca_spca1528: reg_r err -71 [ 1882.873571][ T7775] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 1882.952954][ T7775] usb 4-1: USB disconnect, device number 27 [ 1882.965912][T16493] Kernel panic - not syncing: kmsan.panic set ... [ 1882.972514][T16493] CPU: 1 UID: 0 PID: 16493 Comm: syz.7.1883 Tainted: G B syzkaller #0 PREEMPT(full) [ 1882.983653][T16493] Tainted: [B]=BAD_PAGE [ 1882.987899][T16493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1882.998107][T16493] Call Trace: [ 1883.001654][T16493] [ 1883.004685][T16493] __dump_stack+0x26/0x30 [ 1883.009197][T16493] dump_stack_lvl+0x50/0x1c0 [ 1883.014057][T16493] ? dump_stack+0x12/0x25 [ 1883.018575][T16493] dump_stack+0x1e/0x25 [ 1883.022917][T16493] vpanic+0x7b4/0x1430 [ 1883.027250][T16493] panic+0x15d/0x160 [ 1883.031377][T16493] kmsan_report+0x31a/0x320 [ 1883.036082][T16493] ? __msan_warning+0x1b/0x30 [ 1883.041292][T16493] ? ieee802154_hdr_push+0x9a4/0xa30 [ 1883.046761][T16493] ? ieee802154_header_create+0x854/0xb90 [ 1883.052697][T16493] ? dgram_sendmsg+0xb55/0x16f0 [ 1883.057760][T16493] ? ieee802154_sock_sendmsg+0x91/0xe0 [ 1883.063453][T16493] ? ____sys_sendmsg+0xf37/0xfd0 [ 1883.068580][T16493] ? ___sys_sendmsg+0x271/0x3b0 [ 1883.073609][T16493] ? __x64_sys_sendmsg+0x211/0x3e0 [ 1883.078915][T16493] ? x64_sys_call+0x1e20/0x3ea0 [ 1883.083982][T16493] ? do_syscall_64+0x134/0xf80 [ 1883.088945][T16493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.095175][T16493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.101507][T16493] ? dgram_sendmsg+0xb55/0x16f0 [ 1883.106548][T16493] ? ieee802154_sock_sendmsg+0x91/0xe0 [ 1883.112228][T16493] ? ____sys_sendmsg+0xf37/0xfd0 [ 1883.117341][T16493] ? ___sys_sendmsg+0x271/0x3b0 [ 1883.122359][T16493] ? __x64_sys_sendmsg+0x211/0x3e0 [ 1883.127645][T16493] ? x64_sys_call+0x1e20/0x3ea0 [ 1883.132675][T16493] ? do_syscall_64+0x134/0xf80 [ 1883.137620][T16493] ? kmsan_get_metadata+0xf1/0x160 [ 1883.142937][T16493] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1883.148973][T16493] ? ieee802154_hdr_push+0x21/0xa30 [ 1883.154346][T16493] ? filter_irq_stacks+0x49/0x190 [ 1883.159528][T16493] ? kmsan_get_metadata+0xf1/0x160 [ 1883.164843][T16493] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1883.171279][T16493] ? kmsan_get_metadata+0xf1/0x160 [ 1883.176585][T16493] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 1883.183136][T16493] ? kmsan_get_metadata+0xf1/0x160 [ 1883.188456][T16493] __msan_warning+0x1b/0x30 [ 1883.193146][T16493] ieee802154_hdr_push+0x9a4/0xa30 [ 1883.198450][T16493] ? __msan_memcpy+0x105/0x1c0 [ 1883.203416][T16493] ieee802154_header_create+0x854/0xb90 [ 1883.209207][T16493] ? kmsan_get_metadata+0xf1/0x160 [ 1883.214535][T16493] dgram_sendmsg+0xb55/0x16f0 [ 1883.219422][T16493] ? __pfx_ieee802154_header_create+0x10/0x10 [ 1883.225905][T16493] ? __pfx_dgram_sendmsg+0x10/0x10 [ 1883.231202][T16493] ieee802154_sock_sendmsg+0x91/0xe0 [ 1883.236688][T16493] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1883.242891][T16493] ____sys_sendmsg+0xf37/0xfd0 [ 1883.247874][T16493] ___sys_sendmsg+0x271/0x3b0 [ 1883.252734][T16493] ? kmsan_get_metadata+0xf1/0x160 [ 1883.258068][T16493] ? __rcu_read_unlock+0x6c/0xd0 [ 1883.263163][T16493] ? __fget_files+0x3b4/0x4a0 [ 1883.268013][T16493] ? __fget_files+0x3b9/0x4a0 [ 1883.272848][T16493] ? kmsan_get_metadata+0xf1/0x160 [ 1883.278160][T16493] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1883.284166][T16493] __x64_sys_sendmsg+0x211/0x3e0 [ 1883.289290][T16493] ? kmsan_get_metadata+0xf1/0x160 [ 1883.294603][T16493] x64_sys_call+0x1e20/0x3ea0 [ 1883.299452][T16493] do_syscall_64+0x134/0xf80 [ 1883.304193][T16493] ? clear_bhb_loop+0x50/0xa0 [ 1883.309018][T16493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.315055][T16493] RIP: 0033:0x7fc7cb99ce59 [ 1883.319573][T16493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1883.339335][T16493] RSP: 002b:00007fc7c9bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1883.347902][T16493] RAX: ffffffffffffffda RBX: 00007fc7cbc15fa0 RCX: 00007fc7cb99ce59 [ 1883.356080][T16493] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 1883.364151][T16493] RBP: 00007fc7cba32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1883.372232][T16493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1883.380392][T16493] R13: 00007fc7cbc16038 R14: 00007fc7cbc15fa0 R15: 00007ffc81588a58 [ 1883.388654][T16493] [ 1883.392101][T16493] Kernel Offset: disabled [ 1883.396514][T16493] Rebooting in 86400 seconds..