last executing test programs: 5m46.396464558s ago: executing program 1 (id=21): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 5m45.793893996s ago: executing program 1 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 5m45.574646274s ago: executing program 1 (id=25): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) recvmsg(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x20) 5m44.563242245s ago: executing program 1 (id=31): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file2\x00', 0x42, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x141042, 0x100) 5m44.053951875s ago: executing program 1 (id=35): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0x20) 5m43.467368272s ago: executing program 1 (id=41): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 5m42.953123053s ago: executing program 32 (id=41): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 2m49.60342124s ago: executing program 3 (id=1163): ptrace$setregset(0x4205, 0x0, 0x6, &(0x7f0000000100)={&(0x7f0000000000)="277100597b18ed15fe2470b860d962a5e851a991a548a9514f11e43ccc00f55a60ca4d96e5800c089fc4b687632902778b9ce860abf19bb1fb7caf1317d0b870e708d3c164d97e9ee5c83c70a8f856c2c7a7a477691e325aad522b9e0f2e74b5ce2c588c9738dbb363d0f3094a6b2853e2f6cdbfe65d96c6affcab1e46667c85eab212eb79348b1a17cf27f21e887bd2a8155c7a5ff6821e47e76641b3c4d35a6cfc05f1f8700252164cb848b5c5145630f2da56cee215", 0xb7}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x106}, 0x1c) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m49.457324001s ago: executing program 3 (id=1166): unshare(0x20060400) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x300}, 0x8) 2m49.194696692s ago: executing program 3 (id=1169): mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) 2m48.903628036s ago: executing program 3 (id=1172): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x11, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/179, 0xb3) 2m48.140625826s ago: executing program 3 (id=1176): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000140)=0x8, 0x4) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5dc) 2m47.411378914s ago: executing program 3 (id=1180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 2m46.944015112s ago: executing program 33 (id=1180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 2m3.491220377s ago: executing program 5 (id=1525): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r0}, &(0x7f00000017c0), &(0x7f0000001800)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2m3.417447994s ago: executing program 5 (id=1527): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x22, &(0x7f0000000380)="318e7bfd179078f1bdf075c3e4d2345e903e07c6db72816d69d0db89d1d22f1566dd"}], 0x1}) 2m1.917152103s ago: executing program 5 (id=1534): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$eJzs28tvG8UfAPDv2nH76+uXUJVHH0CgICIeSZOW0gMHQCBxAAkJDuUYkrQKdRvUBIlWEQSEyhFV4o44IvEHIE5wQcAJqVe4o0oVyqWFk9Hau4nt2s6jTlzw5yNtMrM7zszXu2PP7GQD6FvD6Y8kYm9E/BYRg7VsY4Hh2q9by4tTfy0vTiVRqbz5Z1Itd3N5cSovmr9uT54ZiCh8msThFvXOX7p8brJcnrmY5ccWzr83Nn/p8jOz5yfPzpyduTBx6tSJ4+PPnZx4titxpnHdPPTh3JGDr7599fWp01ff+fmbJI+/KY4uGe508PFKpcvV9da+unQy0MOGsCHFWjeNUrX/D0YxVk/eYLzySU8bB2ypSqVSua/94aUK8B+WRK9bAPRG/kWfzn/zbZuGHneFGy/WJkBp3LeyrXZkIApZmVLT/LabhiPi9NLfX6ZbbM19CACABt+n45+nW43/ClF/X+j/2RrKUETcExH7I+JkRByIiHsjqmXvj4gHNlh/8yLJ7eOfwvVNBbZO6fjv+Wxtq3H8l4/+YqiY5fZV4y8lZ2bLM8ey92QkSjvT/HiHOn54+drn7Y7Vj//SLa0/Hwtm7bg+sLPxNdOTC5N3EnO9Gx9HHBpoFX+yshKQRMTBiDjU/s9c+7ZDHbNPfn2k3bG14++gC+tMla8inqid/6Voij+XdF6fHPtflGeOjeVXRbMX4pdfr7zRrv47ir8L0vO/u+X1vxL/UFK/Xju/8Tqu/P5Z2znNZq//HclbDfs+mFxYuDgesSN5rdbo+v0TTeUmVsun8Y8cbd3/98fqO3E4ItKL+MGIeCgiHs7a/khEPBoRRzvE/9NLj727ofhje8//9IbO/2piRzTvaZ0onvvxu4ZKh9aI/7bzf6KaGsn2rOfzbz3t2tzVDAAAAP8+hYjYG0lhdCVdKIyO1v6H/0DsLpTn5heeOjP3/oXp2jMCQ1Eq5He6Buvuh45n0/o8P9GUP57dN/6iuKuaH52aK0/3Onjoc3va9P/UH8Vetw7Ycp7Xgv6l/0P/0v+hf+n/0L9a9P9dvWgHsP1aff9/1IN2ANuvqf9b9oM+Yv4P/Uv/h/6l/0Nfmt8V2ZPwpVj7aXkJiTwRhbuiGRJblOj1JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB3/BMAAP//DqDnMg==") r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400add427323b472545b45602117fffffff81004e204e227f000001925aa80020007b0009008003000000000000000000ff0000f03ac71002000000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2m1.443236421s ago: executing program 5 (id=1535): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000008, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 2m0.164915533s ago: executing program 5 (id=1544): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 1m59.031362673s ago: executing program 5 (id=1547): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)="aa", 0x1}], 0x1}}], 0x1, 0x20000001) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) 1m58.428936001s ago: executing program 34 (id=1547): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)="aa", 0x1}], 0x1}}], 0x1, 0x20000001) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) 3.349585852s ago: executing program 2 (id=2575): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 3.115404491s ago: executing program 2 (id=2579): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r0, &(0x7f0000000540)=""/4090, 0xffa) 2.974917883s ago: executing program 2 (id=2581): r0 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) ptrace(0x4208, r0) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0) 2.826790514s ago: executing program 6 (id=2582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x34, r3, 0x3543e6e81ea609f9, 0x70bd28, 0x25dfdc01, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x20008810) 2.675573546s ago: executing program 2 (id=2583): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x4, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x4a9c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2ec2, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00', {0xfffc, 0x800, 0xb, 0x3}, 0x44, [0x2, 0x3, 0x5, 0xec3, 0x6, 0x3, 0x7, 0x6, 0xffff, 0xfffffffe, 0xb, 0x6, 0x8001, 0xfffffff7, 0x4, 0x5, 0x3, 0xc769, 0x80, 0x1, 0xfffffff7, 0x2, 0x5, 0x7, 0x40005, 0xf, 0x10, 0x100, 0x1, 0x1, 0x6, 0x1, 0x8000, 0x4, 0x7f, 0x75f8, 0xd4, 0xa, 0x7eebae84, 0x4, 0x1, 0x5, 0x0, 0x1, 0x7, 0x4260, 0x5, 0x6, 0x401, 0xfff, 0xfffffff9, 0x1ff, 0x1, 0xf, 0xd, 0x1, 0x8, 0x6, 0x6f, 0x9, 0x28, 0x59, 0x638a29c3, 0xfffffff7], [0x83a4, 0x8a2, 0xaa97, 0x4, 0x8bbf, 0x8, 0x4, 0x3, 0x3, 0xc, 0x7fffffff, 0x4, 0x10001, 0xda2, 0x8001, 0x5, 0x46, 0x1, 0x2, 0x12e, 0x1, 0x9, 0xe84, 0x8, 0x2, 0x1, 0x7f, 0x7, 0x7, 0x9, 0xd9, 0x5, 0x0, 0x94f, 0x4, 0x2, 0x6, 0x80000001, 0x1, 0x24, 0x4, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0xfffffffa, 0xf, 0x8, 0x5, 0x6, 0x34, 0x6, 0x0, 0x8, 0x2, 0x922e, 0x4, 0x4, 0x3, 0x25f, 0x5, 0x5, 0x7ffffffb, 0x4], [0xa8000000, 0x80000000, 0x3, 0x7, 0x1ff, 0x40, 0x3, 0xeaf, 0x7, 0x4, 0x7063, 0x1000, 0xf860400d, 0x4, 0x5, 0x2, 0xf, 0x8, 0x400, 0x6, 0x978, 0x6, 0x80000000, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1, 0x9e4, 0x4, 0xd4fe, 0x1, 0x7, 0x264, 0x7fff, 0x6, 0x1, 0x3, 0x3, 0x3, 0x3, 0x8000, 0x1, 0x76e, 0xad08, 0x9, 0x3, 0xd119, 0x2, 0xc, 0xc, 0x26b, 0x1, 0xd, 0x0, 0x3, 0x8, 0x4, 0x0, 0x2, 0x1ff, 0x0, 0x5], [0x3b3, 0x9, 0xd383, 0x4, 0x8, 0x7, 0x4, 0x0, 0x9, 0xff, 0x81, 0x7fffffff, 0x4, 0xf, 0x9, 0x8, 0x3, 0x2, 0xb, 0x6, 0x5, 0x3d, 0x3, 0x7f, 0xf, 0x9, 0x7, 0x1000, 0x6, 0x9, 0x5, 0x6, 0x9, 0xd, 0x9, 0x4, 0x4, 0x1, 0x7f, 0xdf, 0x5, 0x100, 0xff, 0x0, 0x7, 0x10001, 0x6407f4b, 0x6, 0x2, 0x1, 0x1000, 0x4, 0xf, 0xffffffff, 0x0, 0x4, 0x10040, 0x5, 0x7, 0x1, 0x54e, 0x1ff, 0x3, 0x20007]}, 0x45c) 2.529014458s ago: executing program 6 (id=2584): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001300)={[{@numtail}, {@shortname_lower}, {@shortname_mixed}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {}, {@shortname_mixed}, {@shortname_win95}, {@fat=@errors_remount}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlateno}, {@numtail}, {@fat=@discard}, {@nonumtail}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@numtail}, {@shortname_winnt}, {@shortname_win95}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x36b, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x308801d, 0x0, 0xfd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 2.259385439s ago: executing program 2 (id=2586): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x4468, &(0x7f0000010780)="$eJzs3c9rG1ceAPA3spPY2SRrZxPIwsIKNrDL7mLsnHbrQB3H+WEnborbhNKLIttK4la2gi2XHnJwb4GeCj2UHkIK7cmnkEOv6Z/QSw89pKceQttDoRQKoS6SRrZmZNVKsGycfj4Hj+a9ee99re/M6I1AM5lY+dbcUnZuKZtfyJZmbiydyr5TKi7PF0JmhyTG74nH37dz49OeTuwnu73v/ZFdOXv+tWunQvhi9qsna2tra6GiO2xqqOH1zz/emWlc1mVSbSr9bt7bdnkzhHCsKa6KrhDCG5+HEIUQzsRlo/GyN4RwONTqrt15/3p2m6J58LhwOvd08u7D4ZMTq/cetv7foxA+Lv71vzfnv/9H1/A3/96m4QEAAAAAAAAAAAAAAAAA2OMuTF25+urgUHgUhe7VqOH3ur1xfbxdq9/Hrm2bv7eM8bv0j4oBAAAAAAAAAAAAAAAAAADgBbPx+/9sdDRqfl73WLwcadF+7eXOx0jnjL9yZezc4FD8/Peoqf5/cdEPZ7pC/ybPfU8///1Mqv3mz39vHud51eOrj9sXosxAYj2TGRgI4ZP4we8nooOZYmmp/J8bpeWF2W0LY89K5r92o41EduJ7b7Sb/9FU/51//v9fmvamyvr17dvFXmjJ/He13O7T96K28n821W4n8v+s3E5mQzL/3dWy3sYNRmrvViX/H3Rvnf+xVP9t5b/32eM+EkLIRpWm2cQZoDKHqZS3mq+QlMz/vmpZ4tQZv5Gtjv9fUvk/l+p/t87/K+kPIjaVzP/+allPYouN47//p/hWXb9z/J9P9b8b+a/Ev1ItnPqss2Pvfcn8H6gVdic2qb6T7Z7/LySa7u9Y/q9m4jiPRIk9YDWqlbe6Xx1Jyfz3NNVvXP9l2pr/XUy136nrv/q4fSFUr//qp/9/RbXrPzaXzH/TROzr4/GFVLvH/3iqg06f/0eq8z+eVzL/B6tlyblzX/Vvu/mfSPWfzv+3f9qeuKuzkp56/jfOJ78eqJXfN/9rSzL/cXIyjd8DrFT/Vud/0dbz/0up/ndj/lfZOVZSF/n7OxvEnpXM/6F09fHh+EUl/1+28fl/OdVB5/MfwqDv+p5bMv+HW25XPf57ts7/ZKpdp/P/zy3q059HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+a0XjZF6LMQGI9kxkYCOFsvH4iHIym87O56WJp5u2lEMbi8mw4Gt0slqbzxdzcQmm2kMsXi6WZEM7F9cdCT7RULJVz8/nb59f76o1uFfKL5elCvhxCuBCX/y0crvc1PVeez98OIVxcr/tzprR4+1Z+ITc7t/jS4ODgYBhfj6E/KrxbLiyUa6PXakOYWG/bFzUEV62+tB7Loeit0vLiQr5YLb/c0KZYmskXG9pMxnUfhv6ovLi8MJMvF3LF0s36eLtpJF6OjU+9PnV5qKn+elRbju5sWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8o0fD//8ohNBdW8uEEEbqL6LNtn/wuHA693Ty7sPhkxOr9+4/abUdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVdukYJWIgCgPwm7GJncewCklnG1FECyOCJ9BjeBg9ipfwDhYWtlaCzCxhdwLb7Fbf10zIT/IezA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs5+ZxfnoYxogUXY6Ij5fPr2V+V863y/b3J0fYkcO5vZ+vroex3HvayS/Kq+8p/6e/P6/P0Tir962ebPqUlv+uz6ere7X61jXKVverc88i5T4ippKfp5z7fnUMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W2fRtQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzAoAAP//v5Ynrg==") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') symlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file0\x00') 1.892681599s ago: executing program 6 (id=2587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x2000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000001c0)={0x5, 0x100, 0x200, 0x0}) 1.487457341s ago: executing program 6 (id=2589): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x24, &(0x7f0000000940)={@broadcast, @local, @void, {@llc={0x8864, {@snap={0xab, 0xaa, '\"', "fd27a7", 0x21, "f73f02001b5d8ef2180000f0b727"}}}}}, 0x0) 1.415667787s ago: executing program 4 (id=2590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 1.350209643s ago: executing program 0 (id=2591): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) 1.239458321s ago: executing program 6 (id=2592): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.172180277s ago: executing program 4 (id=2593): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}}, 0x80) 1.00045022s ago: executing program 0 (id=2594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008", @ANYBLOB="00000013"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) syslog(0x2, &(0x7f0000000200)=""/4096, 0x1000) 948.792114ms ago: executing program 4 (id=2595): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x2b0, 0x150, 0x150, 0x8, 0xf8010000, 0x380, 0x238, 0x238, 0x2b0, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 752.10183ms ago: executing program 0 (id=2596): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) 715.786923ms ago: executing program 4 (id=2597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000280000006000000000282b00fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef) 711.704673ms ago: executing program 2 (id=2598): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 497.76211ms ago: executing program 0 (id=2599): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 265.546579ms ago: executing program 4 (id=2600): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x10800) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 183.673476ms ago: executing program 6 (id=2601): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0x10000018}) 173.170626ms ago: executing program 0 (id=2602): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r2, 0x10000}, &(0x7f0000000100)=0x8) 53.955836ms ago: executing program 4 (id=2603): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 0s ago: executing program 0 (id=2604): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0x2, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71017000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): 04 failed with error -22 [ 235.566304][ T5779] usb 1-1: Using ep0 maxpacket: 32 [ 235.576751][ T5779] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 235.584906][ T5779] usb 1-1: config 0 has no interface number 0 [ 235.624072][ T5779] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 235.656199][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.674565][ T5779] usb 1-1: Product: syz [ 235.689352][ T5779] usb 1-1: Manufacturer: syz [ 235.694035][ T5779] usb 1-1: SerialNumber: syz [ 235.738107][ T5779] usb 1-1: config 0 descriptor?? [ 235.756254][ T5779] smsc95xx v2.0.0 [ 235.863060][ T7143] usb 3-1: USB disconnect, device number 20 [ 235.883133][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.897164][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.916693][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.944954][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.957105][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 235.966268][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.667253][ T8746] sctp: [Deprecated]: syz.2.905 (pid 8746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.667253][ T8746] Use struct sctp_sack_info instead [ 236.808933][ T5779] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 236.829307][ T5779] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 236.839700][ T5779] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 236.870895][ T5779] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 236.899697][ T5779] usb 1-1: USB disconnect, device number 19 [ 237.040811][ T8728] chnl_net:caif_netlink_parms(): no params data found [ 237.163817][ T1120] hsr_slave_0: left promiscuous mode [ 237.179471][ T1120] hsr_slave_1: left promiscuous mode [ 237.186306][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.193780][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.210679][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.219824][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.232954][ T1120] bridge_slave_1: left allmulticast mode [ 237.240183][ T1120] bridge_slave_1: left promiscuous mode [ 237.262069][ T1120] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.275366][ T1120] bridge_slave_0: left allmulticast mode [ 237.288538][ T1120] bridge_slave_0: left promiscuous mode [ 237.294465][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.343112][ T1120] bond_slave_0: left promiscuous mode [ 237.348703][ T1120] bond_slave_1: left promiscuous mode [ 237.363410][ T1120] veth1_macvtap: left promiscuous mode [ 237.370433][ T1120] veth1_vlan: left promiscuous mode [ 237.375821][ T1120] veth0_vlan: left promiscuous mode [ 238.062589][ T5795] Bluetooth: hci1: command tx timeout [ 238.498688][ T1120] team0 (unregistering): Port device team_slave_1 removed [ 238.564239][ T1120] team0 (unregistering): Port device team_slave_0 removed [ 238.624623][ T1120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.686253][ T1120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.388384][ T1120] bond0 (unregistering): Released all slaves [ 239.670104][ T8728] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.705441][ T8728] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.723148][ T8728] bridge_slave_0: entered allmulticast mode [ 239.732942][ T8728] bridge_slave_0: entered promiscuous mode [ 239.761213][ T8728] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.798176][ T8728] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.805497][ T8728] bridge_slave_1: entered allmulticast mode [ 239.820176][ T8728] bridge_slave_1: entered promiscuous mode [ 239.866189][ T8] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 239.989092][ T8728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.054896][ T8728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.093252][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.117018][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.141608][ T5795] Bluetooth: hci1: command tx timeout [ 240.161335][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.171136][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.195426][ T8] usb 3-1: Product: syz [ 240.238376][ T8] usb 3-1: Manufacturer: syz [ 240.243041][ T8] usb 3-1: SerialNumber: syz [ 240.295280][ T8728] team0: Port device team_slave_0 added [ 240.344512][ T8728] team0: Port device team_slave_1 added [ 240.424264][ T8728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.434756][ T8728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.460776][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.467118][ T8728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.481269][ T8728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.491312][ T8728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.553742][ T8728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.566210][ T8] usb 3-1: 0:2 : does not exist [ 240.582376][ T8] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 240.661541][ T8] usb 3-1: USB disconnect, device number 21 [ 240.786379][ T6193] udevd[6193]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.811741][ T8728] hsr_slave_0: entered promiscuous mode [ 240.827284][ T8728] hsr_slave_1: entered promiscuous mode [ 240.833970][ T8728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.846050][ T8728] Cannot create hsr debugfs directory [ 241.604329][ T1120] IPVS: stop unused estimator thread 0... [ 241.958661][ T8821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.965970][ T8821] IPv6: NLM_F_CREATE should be set when creating new route [ 241.973274][ T8821] IPv6: NLM_F_CREATE should be set when creating new route [ 241.980578][ T8821] IPv6: NLM_F_CREATE should be set when creating new route [ 242.216549][ T5795] Bluetooth: hci1: command tx timeout [ 242.585190][ T8728] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 242.636903][ T8728] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 242.743716][ T8728] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 242.820160][ T8728] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 243.370318][ T8728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.468907][ T8728] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.532658][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.539948][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.587554][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.594807][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.296025][ T5790] Bluetooth: hci1: command tx timeout [ 244.512052][ T8728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.633191][ T8728] veth0_vlan: entered promiscuous mode [ 244.674346][ T8728] veth1_vlan: entered promiscuous mode [ 244.785719][ T8728] veth0_macvtap: entered promiscuous mode [ 244.817525][ T8728] veth1_macvtap: entered promiscuous mode [ 244.890357][ T8728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.902581][ T8728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.934052][ T8728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.963490][ T8728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.975175][ T8728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.002169][ T8728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.028399][ T8728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.063336][ T8728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.100465][ T8728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.120318][ T8728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.150837][ T8728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.199252][ T8728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.233161][ T8728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.285346][ T8728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.335723][ T8728] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.382544][ T8728] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.412544][ T8728] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.455938][ T8728] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.783550][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.823891][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.936561][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.977396][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.496002][ T7143] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 246.686661][ T7143] usb 3-1: Using ep0 maxpacket: 32 [ 246.705295][ T7143] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 246.734116][ T7143] usb 3-1: config 0 has no interface number 0 [ 246.753192][ T7143] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 246.782346][ T7143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.815789][ T7143] usb 3-1: Product: syz [ 246.822250][ T7143] usb 3-1: Manufacturer: syz [ 246.836538][ T7143] usb 3-1: SerialNumber: syz [ 246.848311][ T7143] usb 3-1: config 0 descriptor?? [ 246.883922][ T7143] smsc95xx v2.0.0 [ 247.222339][ T8931] loop3: detected capacity change from 0 to 2048 [ 247.286485][ T8931] EXT4-fs (loop3): failed to initialize system zone (-117) [ 247.296668][ T8931] EXT4-fs (loop3): mount failed [ 247.338615][ T7143] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 247.389706][ T7143] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 247.829135][ T7143] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 247.855313][ T7143] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 247.882644][ T7143] usb 3-1: USB disconnect, device number 22 [ 248.681847][ T8980] loop3: detected capacity change from 0 to 512 [ 248.802636][ T8980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 248.829490][ T8984] netlink: 'syz.2.969': attribute type 33 has an invalid length. [ 248.851184][ T8980] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.865551][ T8984] netlink: 152 bytes leftover after parsing attributes in process `syz.2.969'. [ 249.047965][ T8728] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 250.185941][ T9007] netlink: 'syz.4.979': attribute type 33 has an invalid length. [ 250.226030][ T9007] netlink: 152 bytes leftover after parsing attributes in process `syz.4.979'. [ 250.305723][ T9000] loop3: detected capacity change from 0 to 32768 [ 250.346426][ T9000] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 250.531760][ T9000] XFS (loop3): Ending clean mount [ 250.697023][ T8728] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 251.586105][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 251.802448][ T9] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 251.835945][ T9] usb 3-1: config 0 has no interface number 0 [ 251.862184][ T9] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 251.886010][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.902638][ T9] usb 3-1: Product: syz [ 251.912446][ T9] usb 3-1: Manufacturer: syz [ 251.917485][ T9] usb 3-1: SerialNumber: syz [ 251.931200][ T9048] netlink: 'syz.3.989': attribute type 33 has an invalid length. [ 251.933757][ T9] usb 3-1: config 0 descriptor?? [ 251.940894][ T9048] netlink: 152 bytes leftover after parsing attributes in process `syz.3.989'. [ 252.220101][ T9] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 252.250675][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 252.271122][ T9] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 252.293297][ T9] usb 3-1: media controller created [ 252.314644][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.473716][ T9] DVB: Unable to find symbol dib7000p_attach() [ 252.482566][ T9] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 252.494208][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 252.503855][ T9] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 252.520943][ T9] usb 3-1: media controller created [ 252.544689][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.574164][ T9] dib0700: the master dib7090 has to be initialized first [ 252.596326][ T9] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 252.705938][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 252.712700][ T9] Registered IR keymap rc-empty [ 252.722957][ T9053] loop3: detected capacity change from 0 to 32768 [ 252.731567][ T9] dvb-usb: could not initialize remote control. [ 252.739126][ T9053] XFS: attr2 mount option is deprecated. [ 252.756016][ T9] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 252.786217][ T9] usb 3-1: USB disconnect, device number 23 [ 252.856437][ T9053] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 252.878960][ T9] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 253.217342][ T9053] XFS (loop3): Ending clean mount [ 253.249864][ T9053] XFS (loop3): Quotacheck needed: Please wait. [ 253.376129][ T9053] XFS (loop3): Quotacheck: Done. [ 253.808025][ T8728] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 255.046237][ T7143] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 255.258041][ T7143] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 255.296802][ T7143] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.315980][ T7143] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 255.325093][ T7143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.359832][ T7143] usb 1-1: config 0 descriptor?? [ 255.790794][ T9116] loop3: detected capacity change from 0 to 40427 [ 255.812169][ T7143] savu 0003:1E7D:2D5A.0011: unknown main item tag 0x0 [ 255.830529][ T9116] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 255.845274][ T7143] savu 0003:1E7D:2D5A.0011: collection stack underflow [ 255.846208][ T9116] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 255.864184][ T7143] savu 0003:1E7D:2D5A.0011: item 0 4 0 12 parsing failed [ 255.878554][ T7143] savu 0003:1E7D:2D5A.0011: parse failed [ 255.892565][ T9116] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x7ffff [ 255.896334][ T7143] savu: probe of 0003:1E7D:2D5A.0011 failed with error -22 [ 255.915277][ T9116] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 255.948629][ T9116] F2FS-fs (loop3): invalid crc value [ 255.996097][ T9116] F2FS-fs (loop3): Found nat_bits in checkpoint [ 256.045390][ T7143] usb 1-1: USB disconnect, device number 20 [ 256.132654][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.139659][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.214275][ T9116] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 256.247357][ T9116] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 256.337252][ T9116] syz.3.1016: attempt to access beyond end of device [ 256.337252][ T9116] loop3: rw=2049, sector=45096, nr_sectors = 136 limit=40427 [ 256.399067][ T9116] syz.3.1016: attempt to access beyond end of device [ 256.399067][ T9116] loop3: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 256.509890][ T8728] syz-executor: attempt to access beyond end of device [ 256.509890][ T8728] loop3: rw=2049, sector=45232, nr_sectors = 8 limit=40427 [ 256.551734][ T8728] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 258.040991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 258.055429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 258.245901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 258.937231][ T28] kauditd_printk_skb: 1363 callbacks suppressed [ 258.937248][ T28] audit: type=1326 audit(1754629174.857:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62c98ebe9 code=0x7ffc0000 [ 258.966790][ T28] audit: type=1326 audit(1754629174.887:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62c98ebe9 code=0x7ffc0000 [ 260.026727][ T28] audit: type=1326 audit(1754629175.887:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb62c92add9 code=0x7ffc0000 [ 260.104769][ T28] audit: type=1326 audit(1754629175.887:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb62c92add9 code=0x7ffc0000 [ 260.138749][ T28] audit: type=1326 audit(1754629175.887:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb62c92add9 code=0x7ffc0000 [ 260.238435][ T28] audit: type=1326 audit(1754629175.887:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb62c92add9 code=0x7ffc0000 [ 260.317494][ T28] audit: type=1326 audit(1754629175.887:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb62c92add9 code=0x7ffc0000 [ 260.391900][ T9168] netlink: 'syz.3.1038': attribute type 13 has an invalid length. [ 260.411296][ T9168] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1038'. [ 260.412155][ T28] audit: type=1326 audit(1754629175.887:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb62c92add9 code=0x7ffc0000 [ 260.490073][ T28] audit: type=1326 audit(1754629175.887:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb62c92add9 code=0x7ffc0000 [ 260.526398][ T28] audit: type=1326 audit(1754629175.887:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb62c92add9 code=0x7ffc0000 [ 260.670204][ T9178] loop9: detected capacity change from 0 to 7 [ 260.686596][ T6193] loop9: [POWERTEC] p1 p2 p3 [ 260.694288][ T6193] loop9: p1 start 1600481121 is beyond EOD, truncated [ 260.703799][ T6193] loop9: p2 size 1680801792 extends beyond EOD, truncated [ 260.715640][ T6193] loop9: p3 start 1680801792 is beyond EOD, truncated [ 260.746802][ T9178] loop9: [POWERTEC] p1 p2 p3 [ 260.751983][ T9178] loop9: p1 start 1600481121 is beyond EOD, truncated [ 260.759064][ T9178] loop9: p2 size 1680801792 extends beyond EOD, truncated [ 260.774646][ T9178] loop9: p3 start 1680801792 is beyond EOD, truncated [ 260.900237][ T6193] udevd[6193]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 261.085493][ T6193] udevd[6193]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 262.569996][ T9219] loop3: detected capacity change from 0 to 32768 [ 262.619075][ T9219] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 262.755390][ T9219] XFS (loop3): Ending clean mount [ 263.154264][ T8728] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 263.931094][ T9289] bond0: option mode: unable to set because the bond device has slaves [ 264.227475][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 264.467255][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 264.478135][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 264.488217][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 264.506335][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.524700][ T9] usb 1-1: Product: syz [ 264.529036][ T9] usb 1-1: Manufacturer: syz [ 264.533737][ T9] usb 1-1: SerialNumber: syz [ 264.560727][ T9] usb 1-1: config 0 descriptor?? [ 264.572025][ T9] gs_usb 1-1:0.0: Required endpoints not found [ 264.830189][ T9311] loop3: detected capacity change from 0 to 1024 [ 264.847217][ T9311] hfsplus: session requires an argument [ 264.852829][ T9311] hfsplus: unable to parse mount options [ 266.940615][ T5879] usb 1-1: USB disconnect, device number 21 [ 267.915943][ T7143] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 268.122055][ T7143] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.147509][ T7143] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.161061][ T7143] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 268.175515][ T7143] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.185622][ T7143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.198463][ T7143] usb 1-1: config 0 descriptor?? [ 268.650965][ T7143] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 268.690770][ T7143] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 268.700861][ T7143] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 268.725159][ T7143] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 268.749159][ T7143] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 268.768133][ T7143] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 268.783276][ T7143] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 268.811521][ T7143] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 269.076807][ T5879] usb 1-1: USB disconnect, device number 22 [ 269.333374][ T9434] sctp: [Deprecated]: syz.3.1149 (pid 9434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.333374][ T9434] Use struct sctp_sack_info instead [ 269.546706][ T9436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1150'. [ 269.840389][ T9447] netlink: 'syz.0.1154': attribute type 12 has an invalid length. [ 270.873230][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x7 [ 270.902045][ T9] hid-generic 0000:0000:0000.0013: ignoring exceeding usage max [ 270.925546][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 270.955376][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x6 [ 270.963604][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0xd [ 271.021803][ T9] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 271.247212][ T9485] fido_id[9485]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 271.385793][ T9494] loop3: detected capacity change from 0 to 512 [ 271.430942][ T9494] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 271.479731][ T9494] EXT4-fs (loop3): invalid journal inode [ 271.506923][ T9494] EXT4-fs (loop3): can't get journal size [ 271.542582][ T9494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 271.602396][ T9494] System zones: 1-12, 13-13 [ 271.626614][ T9494] EXT4-fs (loop3): orphan cleanup on readonly fs [ 271.692616][ T9494] EXT4-fs (loop3): 1 truncate cleaned up [ 271.734678][ T9494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.971752][ T8728] EXT4-fs error (device loop3): __ext4_iget:5053: inode #11: block 1828716567: comm syz-executor: invalid block [ 272.032047][ T8728] EXT4-fs error (device loop3): __ext4_iget:5053: inode #11: block 1828716567: comm syz-executor: invalid block [ 272.538587][ T9461] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.750300][ T1069] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.011917][ T1069] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.145516][ T1069] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.336677][ T1069] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.916769][ T5879] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 274.037129][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.051967][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.061254][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.075316][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.086774][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.095611][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.126058][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 274.135163][ T5879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 274.147499][ T5879] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 274.161600][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.180727][ T5879] usb 3-1: Product: syz [ 274.197014][ T5879] usb 3-1: Manufacturer: syz [ 274.210823][ T5879] usb 3-1: SerialNumber: syz [ 274.245290][ T5879] usb 3-1: config 0 descriptor?? [ 274.511369][ T9545] sctp: [Deprecated]: syz.4.1193 (pid 9545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.511369][ T9545] Use struct sctp_sack_info instead [ 274.706489][ T5879] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 274.929380][ T9555] team_slave_0: entered promiscuous mode [ 274.936332][ T9555] team_slave_1: entered promiscuous mode [ 274.945655][ T9555] macsec1: entered promiscuous mode [ 274.952521][ T9555] team0: entered promiscuous mode [ 274.959381][ T9555] macsec1: entered allmulticast mode [ 274.964916][ T9555] team0: entered allmulticast mode [ 274.970543][ T9555] team_slave_0: entered allmulticast mode [ 274.976615][ T9555] team_slave_1: entered allmulticast mode [ 274.984233][ T9555] team0: Device macsec1 is already an upper device of the team interface [ 274.996250][ T9555] team0: left allmulticast mode [ 275.001440][ T9555] team_slave_0: left allmulticast mode [ 275.008195][ T9555] team_slave_1: left allmulticast mode [ 275.013758][ T9555] team0: left promiscuous mode [ 275.020009][ T9555] team_slave_0: left promiscuous mode [ 275.025499][ T9555] team_slave_1: left promiscuous mode [ 275.115381][ T5879] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 275.129423][ T5879] gs_usb: probe of 3-1:0.0 failed with error -22 [ 275.324144][ T9528] chnl_net:caif_netlink_parms(): no params data found [ 275.390421][ T27] usb 3-1: USB disconnect, device number 24 [ 275.518950][ T9564] syz.4.1198 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 275.703893][ T1069] hsr_slave_0: left promiscuous mode [ 275.733915][ T1069] hsr_slave_1: left promiscuous mode [ 275.752128][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.761610][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.771083][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.786191][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.800358][ T1069] bridge_slave_1: left allmulticast mode [ 275.808450][ T1069] bridge_slave_1: left promiscuous mode [ 275.815807][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.835446][ T1069] bridge_slave_0: left allmulticast mode [ 275.846116][ T1069] bridge_slave_0: left promiscuous mode [ 275.856099][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.982960][ T1069] veth1_macvtap: left promiscuous mode [ 275.993927][ T1069] veth0_macvtap: left promiscuous mode [ 276.006069][ T1069] veth1_vlan: left promiscuous mode [ 276.011518][ T1069] veth0_vlan: left promiscuous mode [ 276.206121][ T5795] Bluetooth: hci1: command tx timeout [ 276.361126][ T9598] sctp: [Deprecated]: syz.0.1205 (pid 9598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.361126][ T9598] Use struct sctp_sack_info instead [ 277.204022][ T1069] team0 (unregistering): Port device team_slave_1 removed [ 277.299111][ T1069] team0 (unregistering): Port device team_slave_0 removed [ 277.380697][ T1069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.457713][ T1069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.159267][ T1069] bond0 (unregistering): Released all slaves [ 278.286922][ T5795] Bluetooth: hci1: command tx timeout [ 278.577072][ T9528] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.594573][ T9528] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.618044][ T9528] bridge_slave_0: entered allmulticast mode [ 278.637695][ T9528] bridge_slave_0: entered promiscuous mode [ 278.721408][ T9528] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.741420][ T9528] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.760708][ T9528] bridge_slave_1: entered allmulticast mode [ 278.796269][ T9528] bridge_slave_1: entered promiscuous mode [ 278.960126][ T9528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.072743][ T9528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.218492][ T9528] team0: Port device team_slave_0 added [ 279.232342][ T9528] team0: Port device team_slave_1 added [ 279.297879][ T9528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.304892][ T9528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.333330][ T9528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.354156][ T9528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.363331][ T9528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.390003][ T9528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.490585][ T9528] hsr_slave_0: entered promiscuous mode [ 279.499984][ T9528] hsr_slave_1: entered promiscuous mode [ 279.506586][ T9528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.514278][ T9528] Cannot create hsr debugfs directory [ 279.791498][ T5879] hid-generic 0000:0000:0000.0014: unknown main item tag 0x7 [ 279.814147][ T5879] hid-generic 0000:0000:0000.0014: ignoring exceeding usage max [ 279.835132][ T5879] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 279.854236][ T5879] hid-generic 0000:0000:0000.0014: unknown main item tag 0x6 [ 279.888828][ T5879] hid-generic 0000:0000:0000.0014: unknown main item tag 0xd [ 279.935306][ T5879] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 280.104216][ T9650] fido_id[9650]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 280.150009][ T9528] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 280.190520][ T9528] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 280.240865][ T9528] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 280.290417][ T9528] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 280.312244][ T9659] sctp: [Deprecated]: syz.2.1218 (pid 9659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.312244][ T9659] Use struct sctp_sack_info instead [ 280.366682][ T5795] Bluetooth: hci1: command tx timeout [ 280.415355][ T9668] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1220'. [ 280.627775][ T9528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.667286][ T9528] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.697521][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.704724][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.767116][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.774770][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.427064][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 281.427079][ T28] audit: type=1326 audit(1754629197.347:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.0.1229" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f668fb8ebe9 code=0x0 [ 281.548179][ T9528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.254542][ T9724] kernel read not supported for file /file1 (pid: 9724 comm: syz.2.1234) [ 282.297117][ T28] audit: type=1800 audit(1754629198.217:1640): pid=9724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1234" name="file1" dev="mqueue" ino=22967 res=0 errno=0 [ 282.363089][ T9528] veth0_vlan: entered promiscuous mode [ 282.407372][ T9528] veth1_vlan: entered promiscuous mode [ 282.446596][ T5795] Bluetooth: hci1: command tx timeout [ 282.559482][ T9528] veth0_macvtap: entered promiscuous mode [ 282.591497][ T9528] veth1_macvtap: entered promiscuous mode [ 282.714368][ T9732] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.1236'. [ 282.732643][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.774456][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.805985][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.836063][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.865988][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.894500][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.910537][ T9528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.979916][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.008854][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.026264][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.051539][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.067035][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.077699][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.089787][ T9528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.146357][ T9528] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.155160][ T9528] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.188466][ T9528] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.215973][ T9528] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.363863][ T9749] loop6: detected capacity change from 0 to 524287999 [ 283.469105][ T1069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.508683][ T1069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.632236][ T1069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.661497][ T1069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.213774][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 284.269407][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 286.618710][ T9825] loop5: detected capacity change from 0 to 32768 [ 286.760942][ T9825] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 286.858362][ T9825] (syz.5.1267,9825,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 286.908470][ T9825] (syz.5.1267,9825,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 287.069064][ T9528] ocfs2: Unmounting device (7,5) on (node local) [ 288.277985][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 288.346209][ T9] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 289.160510][ T9874] loop5: detected capacity change from 0 to 32768 [ 289.262361][ T9874] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 289.701218][ T9528] ocfs2: Unmounting device (7,5) on (node local) [ 289.896655][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1289'. [ 289.941844][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1289'. [ 290.197640][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1294'. [ 291.056239][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 291.267441][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 291.280698][ T8] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 291.295905][ T8] usb 6-1: config 0 has no interface number 0 [ 291.312621][ T8] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.339525][ T8] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 291.355920][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.374625][ T8] usb 6-1: Product: syz [ 291.379019][ T8] usb 6-1: Manufacturer: syz [ 291.383655][ T8] usb 6-1: SerialNumber: syz [ 291.417133][ T8] usb 6-1: config 0 descriptor?? [ 291.457515][ T8] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 291.490013][ T8] em28xx 6-1:0.132: Video interface 132 found: [ 291.887577][ T8] em28xx 6-1:0.132: chip ID is em2884 [ 292.492792][ T9971] IPVS: You probably need to specify IP address on multicast interface. [ 292.512605][ T8] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 292.538900][ T9971] IPVS: Error connecting to the multicast addr [ 292.562292][ T8] em28xx 6-1:0.132: board has no eeprom [ 292.666185][ T8] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 292.684414][ T8] em28xx 6-1:0.132: analog set to bulk mode. [ 292.692386][ T9] em28xx 6-1:0.132: Registering V4L2 extension [ 292.710641][ T8] usb 6-1: USB disconnect, device number 2 [ 292.734032][ T8] em28xx 6-1:0.132: Disconnecting em28xx [ 292.979904][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1325'. [ 293.113053][ T9] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 293.156340][ T9] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 293.164244][ T9] em28xx 6-1:0.132: No AC97 audio processor [ 293.229419][ T9] usb 6-1: Decoder not found [ 293.238971][ T9] em28xx 6-1:0.132: failed to create media graph [ 293.245443][ T9] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 293.334961][ T9] em28xx 6-1:0.132: Remote control support is not available for this card. [ 293.366539][ T8] em28xx 6-1:0.132: Closing input extension [ 293.447442][ T8] em28xx 6-1:0.132: Freeing device [ 293.914703][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1335'. [ 294.219905][T10029] netlink: 'syz.0.1338': attribute type 13 has an invalid length. [ 294.229176][T10029] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1338'. [ 294.875379][T10055] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1349'. [ 295.052646][T10060] ipvlan2: entered promiscuous mode [ 295.077279][T10060] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 295.452236][T10061] loop5: detected capacity change from 0 to 32768 [ 295.475629][T10061] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 295.540322][T10061] XFS (loop5): Ending clean mount [ 295.550731][T10061] XFS (loop5): Quotacheck needed: Please wait. [ 295.607302][T10061] XFS (loop5): Quotacheck: Done. [ 295.773397][ T9528] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 296.520020][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802725bc00: rx timeout, send abort [ 296.734435][T10111] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1368'. [ 296.753198][T10111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1368'. [ 297.014218][T10121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1372'. [ 297.030587][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802725bc00: abort rx timeout. Force session deactivation [ 297.490772][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1379'. [ 297.526927][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1379'. [ 298.124506][T10152] loop5: detected capacity change from 0 to 512 [ 298.278957][T10152] EXT4-fs (loop5): 1 orphan inode deleted [ 298.284808][T10161] netlink: 'syz.4.1388': attribute type 1 has an invalid length. [ 298.284833][T10161] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1388'. [ 298.321965][ T1069] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 298.357763][ T1069] EXT4-fs error (device loop5): ext4_release_dquot:6974: comm kworker/u4:5: Failed to release dquot type 1 [ 298.380620][T10152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.427447][T10152] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.612441][ T9528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.113115][T10176] loop5: detected capacity change from 0 to 40427 [ 300.160938][T10176] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 300.181188][T10176] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 300.226959][T10176] F2FS-fs (loop5): invalid crc value [ 300.264198][T10176] F2FS-fs (loop5): Found nat_bits in checkpoint [ 300.376051][ T9] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 300.406261][T10176] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 300.413380][T10176] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 300.597502][ T9] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 300.629946][ T9] usb 1-1: config 5 has no interface number 0 [ 300.646509][ T9528] syz-executor: attempt to access beyond end of device [ 300.646509][ T9528] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 300.647086][ T9] usb 1-1: config 5 interface 123 altsetting 7 has an invalid endpoint with address 0xEB, skipping [ 300.693932][ T9] usb 1-1: config 5 interface 123 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.715183][ T9] usb 1-1: config 5 interface 123 has no altsetting 0 [ 300.723914][ T9528] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 300.733607][ T9] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 300.743793][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.769606][ T9] usb 1-1: Product: syz [ 300.784194][ T9] usb 1-1: Manufacturer: syz [ 300.794585][ T9] usb 1-1: SerialNumber: syz [ 301.106257][ T9] comedi comedi5: Wrong number of endpoints [ 301.112688][ T9] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 301.199446][ T9] usb 1-1: USB disconnect, device number 23 [ 302.250377][T10234] loop5: detected capacity change from 0 to 32768 [ 302.371807][T10234] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 302.382401][T10234] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 302.435061][T10234] XFS (loop5): Ending clean mount [ 302.471006][T10234] XFS (loop5): Quotacheck needed: Please wait. [ 302.655536][T10234] XFS (loop5): Quotacheck: Done. [ 302.703702][ T28] audit: type=1800 audit(1754629218.617:1641): pid=10234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1405" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 302.910853][ T9528] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 305.159568][T10320] input: syz0 as /devices/virtual/input/input30 [ 305.231380][T10322] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 306.197899][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 306.405942][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 306.414008][ T23] usb 6-1: config 0 interface 0 has no altsetting 0 [ 306.428764][ T23] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 306.449990][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.470304][ T23] usb 6-1: config 0 descriptor?? [ 306.941452][ T23] corsair-cpro 0003:1B1C:0C10.0016: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 307.132551][ T23] corsair-cpro: probe of 0003:1B1C:0C10.0016 failed with error -71 [ 307.163773][ T23] usb 6-1: USB disconnect, device number 3 [ 307.276707][T10381] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1442'. [ 307.813088][T10399] capability: warning: `syz.5.1448' uses deprecated v2 capabilities in a way that may be insecure [ 307.986597][ T8] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 308.207942][ T8] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 308.221590][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.252868][ T8] usb 3-1: config 0 descriptor?? [ 308.276492][ T8] gspca_main: spca508-2.14.0 probing 8086:0110 [ 308.483854][ T8] gspca_spca508: reg_read err -32 [ 308.507076][ T8] gspca_spca508: reg_read err -32 [ 308.519765][ T8] gspca_spca508: reg_read err -32 [ 308.748021][ T8] gspca_spca508: reg_read err -71 [ 308.771030][ T8] gspca_spca508: reg write: error -71 [ 308.776876][ T8] spca508: probe of 3-1:0.0 failed with error -71 [ 308.793383][ T8] usb 3-1: USB disconnect, device number 25 [ 309.790126][T10434] loop5: detected capacity change from 0 to 40427 [ 309.836415][T10434] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x7 [ 309.881074][T10434] F2FS-fs (loop5): invalid crc value [ 309.912030][T10434] F2FS-fs (loop5): Found nat_bits in checkpoint [ 310.056360][T10434] F2FS-fs (loop5): Start checkpoint disabled! [ 310.080484][T10434] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 310.281784][ T28] audit: type=1800 audit(1754629226.197:1642): pid=10434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1455" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 310.511519][ T1120] kworker/u4:10: attempt to access beyond end of device [ 310.511519][ T1120] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 310.542825][ T1120] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 310.559013][ T1120] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 311.595973][ T23] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 311.648712][T10480] loop5: detected capacity change from 0 to 32768 [ 311.769204][T10480] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 311.769204][T10480] [ 311.795964][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 311.805895][T10480] xtLookup: xtSearch returned -5 [ 311.818421][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.839765][T10480] add_index: get/read_metapage failed! [ 311.857811][T10489] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 311.857811][T10489] [ 311.859306][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.875961][T10489] xtLookup: xtSearch returned -5 [ 311.887346][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 311.900971][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.916479][T10489] free_index: error reading directory table [ 311.920055][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.925887][T10489] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 311.925887][T10489] [ 311.932545][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 311.955716][ T23] usb 3-1: SerialNumber: syz [ 311.966248][T10489] xtLookup: xtSearch returned -5 [ 311.971346][T10489] free_index: error reading directory table [ 311.972025][ T23] hub 3-1:1.0: bad descriptor, ignoring hub [ 311.990552][ T23] hub: probe of 3-1:1.0 failed with error -5 [ 311.997069][T10489] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 311.997069][T10489] [ 311.998281][ T23] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 312.025906][T10489] xtLookup: xtSearch returned -5 [ 312.030961][T10489] free_index: error reading directory table [ 312.067638][T10489] find_entry called with index = 0 [ 312.097540][T10480] ialloc: diAlloc returned -5! [ 314.118323][T10558] netlink: 'syz.0.1498': attribute type 29 has an invalid length. [ 314.136407][T10558] netlink: 'syz.0.1498': attribute type 29 has an invalid length. [ 314.184181][T10558] netlink: 'syz.0.1498': attribute type 29 has an invalid length. [ 314.226908][ T23] usb 3-1: USB disconnect, device number 26 [ 314.226916][T10558] netlink: 'syz.0.1498': attribute type 29 has an invalid length. [ 314.281136][T10558] netlink: 'syz.0.1498': attribute type 29 has an invalid length. [ 314.347118][ T5858] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 314.550072][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.587949][ T5858] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.616025][ T5858] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.636057][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.665004][ T5858] usb 6-1: config 0 descriptor?? [ 315.009839][T10576] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 315.108808][ T5858] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 315.132399][ T5858] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 315.161487][ T5858] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 315.399988][ T27] usb 6-1: USB disconnect, device number 4 [ 316.223021][T10607] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 316.396113][ T5879] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 316.585953][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 316.597826][ T5879] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 316.619865][ T5879] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 316.650851][ T5879] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 316.671373][ T5879] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 316.700453][ T5879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.725715][ T5879] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 316.746594][ T5879] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 316.755535][ T5879] usb 3-1: Product: syz [ 316.760282][ T5879] usb 3-1: Manufacturer: syz [ 316.764966][ T5879] usb 3-1: SerialNumber: syz [ 316.786098][ T27] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 316.797241][ T5879] usb 3-1: config 0 descriptor?? [ 316.828138][ T5879] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 316.841135][ T5879] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 316.976640][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 316.984454][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.006199][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.016741][ T27] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 317.031005][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.046084][ T5858] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 317.070225][ T27] usb 1-1: config 0 descriptor?? [ 317.169257][ T5879] usb 3-1: USB disconnect, device number 27 [ 317.169377][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 317.202555][T10602] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 317.226074][T10631] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 317.234467][ T5879] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 317.265420][ T5858] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 317.287394][ T5858] usb 6-1: config 0 has no interface number 0 [ 317.295118][ T5858] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 317.304755][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.323851][ T5858] usb 6-1: config 0 descriptor?? [ 317.354054][ T5858] usb 6-1: selecting invalid altsetting 1 [ 317.375400][ T5858] dvb_ttusb_budget: ttusb_init_controller: error [ 317.393833][ T5858] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 317.508162][ T27] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 317.529811][ T5858] DVB: Unable to find symbol cx22700_attach() [ 317.575174][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.582668][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.676664][ T5858] DVB: Unable to find symbol tda10046_attach() [ 317.683172][ T5858] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 317.696593][ T27] ft260 0003:0403:6030.0018: chip code: 6424 8183 [ 317.736325][ T5858] usb 6-1: USB disconnect, device number 5 [ 318.116303][ T5779] usb 1-1: USB disconnect, device number 24 [ 318.330711][T10644] loop5: detected capacity change from 0 to 512 [ 318.381905][T10644] EXT4-fs (loop5): Test dummy encryption mode enabled [ 318.398130][T10644] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 318.454606][T10644] EXT4-fs (loop5): 1 truncate cleaned up [ 318.464468][T10644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.647657][ T9528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.469371][T10650] loop5: detected capacity change from 0 to 40427 [ 319.506639][T10650] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 319.524619][T10650] F2FS-fs (loop5): invalid crc value [ 319.564334][T10650] F2FS-fs (loop5): Found nat_bits in checkpoint [ 319.693798][T10650] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 319.856838][T10650] F2FS-fs (loop5): inject slab alloc in f2fs_alloc_inode of new_inode_pseudo+0x63/0x1d0 [ 319.883356][T10650] overlayfs: failed to create directory ./bus/work (errno: 12); mounting read-only [ 319.962557][ T9528] syz-executor: attempt to access beyond end of device [ 319.962557][ T9528] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 319.989648][ T9528] syz-executor: attempt to access beyond end of device [ 319.989648][ T9528] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 320.406369][ T9528] syz-executor: attempt to access beyond end of device [ 320.406369][ T9528] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 320.448486][ T9528] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 320.456009][ T9528] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 320.557150][ T1120] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.725740][ T1120] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.856099][ T5858] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 320.881864][ T1120] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.987265][ T1120] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.038491][ T5858] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 321.057177][ T5858] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 321.073404][ T5858] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.110353][ T5858] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 321.127922][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.146844][ T5858] usb 1-1: Product: syz [ 321.151096][ T5858] usb 1-1: Manufacturer: syz [ 321.155733][ T5858] usb 1-1: SerialNumber: syz [ 321.476494][ T5858] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 321.716004][ T5858] usb 1-1: USB disconnect, device number 25 [ 321.751087][ T5858] usblp0: removed [ 322.534486][T10684] mkiss: ax0: crc mode is auto. [ 322.544628][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.559127][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.571975][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.606671][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.621739][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 322.631505][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1550'. [ 322.641694][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.649335][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 322.658813][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1550'. [ 323.111483][ T1120] hsr_slave_0: left promiscuous mode [ 323.122127][ T1120] hsr_slave_1: left promiscuous mode [ 323.129410][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.137101][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.146056][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.153949][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.164559][ T1120] bridge_slave_1: left allmulticast mode [ 323.175083][ T1120] bridge_slave_1: left promiscuous mode [ 323.183958][ T1120] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.199594][ T1120] bridge_slave_0: left allmulticast mode [ 323.205465][ T1120] bridge_slave_0: left promiscuous mode [ 323.226210][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.295610][ T1120] veth1_macvtap: left promiscuous mode [ 323.302578][ T1120] veth0_macvtap: left promiscuous mode [ 323.312364][ T1120] veth1_vlan: left promiscuous mode [ 323.318788][ T1120] veth0_vlan: left promiscuous mode [ 324.229310][ T1120] team0 (unregistering): Port device team_slave_1 removed [ 324.343233][ T1120] team0 (unregistering): Port device team_slave_0 removed [ 324.459810][ T1120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.537268][ T1120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.694904][ T5790] Bluetooth: hci1: command tx timeout [ 325.377508][ T1120] bond0 (unregistering): Released all slaves [ 325.477024][T10711] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.908199][T10689] chnl_net:caif_netlink_parms(): no params data found [ 326.218442][T10689] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.227781][T10689] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.235158][T10689] bridge_slave_0: entered allmulticast mode [ 326.265095][T10689] bridge_slave_0: entered promiscuous mode [ 326.276507][T10689] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.283796][T10689] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.297187][T10689] bridge_slave_1: entered allmulticast mode [ 326.304738][T10689] bridge_slave_1: entered promiscuous mode [ 326.365797][T10689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.400100][T10689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.475007][T10689] team0: Port device team_slave_0 added [ 326.490539][T10689] team0: Port device team_slave_1 added [ 326.646979][T10689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.654270][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.713287][T10689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.727878][T10689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.734988][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.791131][ T5790] Bluetooth: hci1: command tx timeout [ 326.841361][T10689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.944462][T10689] hsr_slave_0: entered promiscuous mode [ 326.970947][T10689] hsr_slave_1: entered promiscuous mode [ 326.978025][T10689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.985640][T10689] Cannot create hsr debugfs directory [ 327.782626][T10689] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 327.849671][T10689] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 327.876667][T10689] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 327.909745][T10689] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.196401][T10689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.277776][T10689] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.325269][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.332578][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.381089][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.388397][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.484253][T10689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.515930][T10689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.847285][ T5790] Bluetooth: hci1: command tx timeout [ 328.956856][T10829] netlink: 'syz.2.1587': attribute type 16 has an invalid length. [ 329.008551][T10829] netlink: 'syz.2.1587': attribute type 3 has an invalid length. [ 329.056129][T10829] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1587'. [ 329.261009][T10689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.311440][T10689] veth0_vlan: entered promiscuous mode [ 330.414588][T10689] veth1_vlan: entered promiscuous mode [ 330.540025][T10689] veth0_macvtap: entered promiscuous mode [ 330.578330][T10689] veth1_macvtap: entered promiscuous mode [ 330.649971][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.686226][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.721978][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.754840][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.775519][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.795332][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.807728][T10689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.830096][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.845719][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.873857][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.886189][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.905116][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.926332][ T5790] Bluetooth: hci1: command tx timeout [ 330.945031][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.982722][T10689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.095651][T10689] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.135740][T10689] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.165488][T10689] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.184634][T10689] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.414491][ T1069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.448112][ T1069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.557294][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.581168][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.496067][ T5779] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 333.646503][ T5795] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 333.652719][ T5790] Bluetooth: hci2: command 0x206a tx timeout [ 333.705995][ T5779] usb 3-1: Using ep0 maxpacket: 8 [ 333.756268][ T5779] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 333.796783][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.804883][ T5779] usb 3-1: Product: syz [ 333.839489][ T5779] usb 3-1: Manufacturer: syz [ 333.865774][ T5779] usb 3-1: SerialNumber: syz [ 333.886450][ T5779] usb 3-1: config 0 descriptor?? [ 334.050370][T10928] loop6: detected capacity change from 0 to 32768 [ 334.149950][ T5779] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 334.962905][ T5779] usb write operation failed. (-71) [ 334.982701][ T5779] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 335.015010][ T5779] dvbdev: DVB: registering new adapter (Terratec H7) [ 335.030852][ T5779] usb 3-1: media controller created [ 335.046765][ T5779] usb read operation failed. (-71) [ 335.056260][ T5779] usb write operation failed. (-71) [ 335.081070][ T5779] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5 [ 335.099494][T10955] fuse: Bad value for 'fd' [ 335.110632][ T5779] usb 3-1: USB disconnect, device number 28 [ 335.449326][ T5779] kernel write not supported for file bpf-prog (pid: 5779 comm: kworker/0:3) [ 335.562509][T10973] raw_sendmsg: syz.4.1625 forgot to set AF_INET. Fix it! [ 335.596170][ T27] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 335.817088][ T27] usb 7-1: Using ep0 maxpacket: 32 [ 335.829523][T10979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.856229][ T27] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 335.876181][ T27] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 335.899389][ T27] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 335.940558][ T27] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 335.987824][ T27] usb 7-1: config 0 interface 0 has no altsetting 0 [ 336.002164][ T27] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 336.026066][ T27] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 336.055927][ T27] usb 7-1: Product: syz [ 336.075981][ T27] usb 7-1: Manufacturer: syz [ 336.080840][ T27] usb 7-1: SerialNumber: syz [ 336.113857][ T27] usb 7-1: config 0 descriptor?? [ 336.143007][ T27] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 336.165551][ T27] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 336.548675][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 336.554957][ T27] usb 7-1: USB disconnect, device number 2 [ 336.563643][T10960] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 336.598379][T11002] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 336.608693][ T27] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 337.773260][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 337.783455][T11043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1645'. [ 337.976948][T11048] capability: warning: `syz.2.1647' uses 32-bit capabilities (legacy support in use) [ 338.006159][ T27] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 338.200082][ T27] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 338.230312][ T27] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 338.265690][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 338.290583][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 338.321596][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 338.377927][ T27] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 338.405932][ T27] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 338.436090][ T27] usb 1-1: Product: syz [ 338.444650][ T27] usb 1-1: Manufacturer: syz [ 338.478751][ T27] cdc_wdm 1-1:1.0: skipping garbage [ 338.495601][ T27] cdc_wdm 1-1:1.0: skipping garbage [ 338.517537][ T27] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 338.536048][ T27] cdc_wdm 1-1:1.0: Unknown control protocol [ 339.004258][ T27] usb 1-1: USB disconnect, device number 26 [ 340.737083][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'. [ 341.696972][T11141] loop6: detected capacity change from 0 to 32768 [ 341.754375][ T28] audit: type=1800 audit(1754629257.667:1643): pid=11141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1682" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 341.932559][T11139] 9pnet_fd: Insufficient options for proto=fd [ 343.696111][T11177] loop6: detected capacity change from 0 to 128 [ 343.755358][T11177] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 343.866626][T11177] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 344.024355][T10689] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.032499][T11197] loop6: detected capacity change from 0 to 32768 [ 345.055416][T11197] (syz.6.1701,11197,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "~" or missing value [ 345.097057][T11197] (syz.6.1701,11197,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 345.246541][ T5790] Bluetooth: hci2: command 0x206a tx timeout [ 346.485987][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 346.686585][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 346.701976][ T8] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 346.715030][ T8] usb 3-1: config 0 has no interface number 0 [ 346.730476][ T8] usb 3-1: config 0 interface 184 has no altsetting 0 [ 346.741524][ T8] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 346.751809][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.769921][ T8] usb 3-1: Product: syz [ 346.777305][ T8] usb 3-1: Manufacturer: syz [ 346.781984][ T8] usb 3-1: SerialNumber: syz [ 346.793403][T11253] fuse: Bad value for 'fd' [ 346.793829][ T8] usb 3-1: config 0 descriptor?? [ 346.808221][ T8] smsc75xx v1.0.0 [ 347.035122][T11261] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 347.396104][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 347.535936][ T27] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 347.596122][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 347.608989][ T9] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 347.624620][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 347.636747][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.656201][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 347.668717][ T9] usb 7-1: config 0 descriptor?? [ 347.691212][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 347.708227][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 347.718486][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 347.731324][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 347.744206][ T8] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 347.753324][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.759266][ T8] usb 3-1: USB disconnect, device number 29 [ 347.790722][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 347.806937][T10952] udevd[10952]: setting mode of /dev/bus/usb/003/029 to 020664 failed: No such file or directory [ 347.831136][T10952] udevd[10952]: setting owner of /dev/bus/usb/003/029 to uid=0, gid=0 failed: No such file or directory [ 347.854035][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.870402][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.892526][ T27] usb 1-1: Product: syz [ 347.901973][ T27] usb 1-1: Manufacturer: syz [ 347.906825][ T27] usb 1-1: SerialNumber: syz [ 347.914986][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 347.946123][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 347.971229][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 347.980009][ T9] usb 7-1: media controller created [ 348.009828][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 348.130512][ T9] az6027: usb out operation failed. (-71) [ 348.146365][ T9] az6027: usb out operation failed. (-71) [ 348.159866][ T9] stb0899_attach: Driver disabled by Kconfig [ 348.169112][ T9] az6027: no front-end attached [ 348.169112][ T9] [ 348.182430][ T9] az6027: usb out operation failed. (-71) [ 348.189521][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 348.206993][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input32 [ 348.251829][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 348.262410][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 348.294135][ T9] usb 7-1: USB disconnect, device number 3 [ 348.417794][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1738'. [ 348.448699][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 348.464051][T11276] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 348.980031][ T27] cdc_ncm 1-1:1.0: bind() failure [ 349.005326][ T27] usbtest: probe of 1-1:1.1 failed with error -71 [ 349.047855][ T27] usb 1-1: USB disconnect, device number 27 [ 349.343036][T11298] loop6: detected capacity change from 0 to 8192 [ 349.375460][T11298] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 349.428271][T11298] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 349.437934][T11298] REISERFS (device loop6): using ordered data mode [ 349.444693][T11298] reiserfs: using flush barriers [ 349.461303][T11298] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 349.481471][T11298] REISERFS (device loop6): checking transaction log (loop6) [ 349.524256][T11298] REISERFS (device loop6): Using r5 hash to sort names [ 349.552913][T11298] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 349.809164][ T23] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 350.046089][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 350.058122][ T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 350.073959][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 350.118815][ T23] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 350.129636][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.148197][ T23] usb 3-1: Product: syz [ 350.152442][ T23] usb 3-1: Manufacturer: syz [ 350.165982][ T23] usb 3-1: SerialNumber: syz [ 350.204337][ T23] usb 3-1: config 0 descriptor?? [ 350.224101][ T23] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 350.442820][ T23] usb 3-1: USB disconnect, device number 30 [ 351.080964][T11352] loop6: detected capacity change from 0 to 1024 [ 351.148982][T11352] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 351.274693][T11352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.418790][T11352] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 351.665311][T10689] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.904991][T11445] xt_bpf: check failed: parse error [ 354.363962][T11460] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1792'. [ 354.536343][ T23] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 354.706739][ T28] audit: type=1326 audit(1754629270.617:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62c98ebe9 code=0x7ffc0000 [ 354.756583][ T23] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 354.767893][ T28] audit: type=1326 audit(1754629270.617:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62c98ebe9 code=0x7ffc0000 [ 354.782328][ T23] usb 1-1: config 0 has no interface number 0 [ 354.817031][ T28] audit: type=1326 audit(1754629270.617:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62c98ebe9 code=0x7ffc0000 [ 354.857909][ T23] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 354.865984][ T28] audit: type=1326 audit(1754629270.617:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb62c98ebe9 code=0x7ffc0000 [ 354.896340][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.908619][ T23] usb 1-1: Product: syz [ 354.932123][ T28] audit: type=1326 audit(1754629270.677:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62c98ebe9 code=0x7ffc0000 [ 354.946507][ T23] usb 1-1: Manufacturer: syz [ 354.974223][ T23] usb 1-1: SerialNumber: syz [ 355.000508][ T28] audit: type=1326 audit(1754629270.677:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62c98ebe9 code=0x7ffc0000 [ 355.004646][ T23] usb 1-1: config 0 descriptor?? [ 355.071685][ T28] audit: type=1326 audit(1754629270.727:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62c98ebe9 code=0x7ffc0000 [ 355.125324][ T28] audit: type=1326 audit(1754629270.727:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb62c98ec23 code=0x7ffc0000 [ 355.178140][ T28] audit: type=1326 audit(1754629270.727:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb62c98eca7 code=0x7ffc0000 [ 355.258778][ T28] audit: type=1326 audit(1754629270.727:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb62c94618d code=0x7ffc0000 [ 355.512554][ T23] usb 1-1: Firmware version (0.0) predates our first public release. [ 355.530445][ T23] usb 1-1: Please update to version 0.2 or newer [ 355.551267][ T23] usb 1-1: Firmware: build [ 355.790061][ T23] usb 1-1: USB disconnect, device number 28 [ 356.836143][ T5858] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 357.015976][ T5858] usb 3-1: Using ep0 maxpacket: 16 [ 357.033979][ T5858] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 357.043572][ T5858] usb 3-1: config 1 has no interface number 0 [ 357.061071][ T5858] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 357.096038][ T5858] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 357.136808][ T5858] usb 3-1: config 1 interface 105 has no altsetting 0 [ 357.154703][ T5858] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 357.184869][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.194308][ T5858] usb 3-1: Product: syz [ 357.216035][ T5858] usb 3-1: Manufacturer: syz [ 357.230587][ T5858] usb 3-1: SerialNumber: syz [ 357.276405][T11517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.283870][T11517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.771503][T11517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.802795][T11517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 358.098381][T11527] loop6: detected capacity change from 0 to 32768 [ 358.135980][T11527] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1808 (11527) [ 358.206227][T11527] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 358.237652][T11527] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 358.276176][T11527] BTRFS info (device loop6): metadata ratio 2 [ 358.282737][T11527] BTRFS info (device loop6): allowing degraded mounts [ 358.308392][T11527] BTRFS info (device loop6): force zlib compression, level 3 [ 358.317730][T11527] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 358.330050][T11527] BTRFS info (device loop6): use zstd compression, level 3 [ 358.339131][T11527] BTRFS info (device loop6): force clearing of disk cache [ 358.347772][T11527] BTRFS info (device loop6): max_inline at 0 [ 358.354077][T11527] BTRFS info (device loop6): using free space tree [ 358.450807][ T5858] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 358.473047][ T5858] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 358.529829][T11527] BTRFS info (device loop6): enabling ssd optimizations [ 358.538717][ T5858] aqc111 3-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8a:35:53:15:2b:a4 [ 358.548923][T11576] input: syz1 as /devices/virtual/input/input33 [ 358.566032][ T5858] usb 3-1: USB disconnect, device number 31 [ 358.597500][ T5858] aqc111 3-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 358.616985][T11527] BTRFS info (device loop6): rebuilding free space tree [ 358.836384][ T5858] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 358.857260][ T5858] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 358.897142][ T5858] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 359.323324][T10689] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 360.555393][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1829'. [ 361.520194][T11653] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1840'. [ 362.810164][ T5795] Bluetooth: hci1: Malformed LE Event: 0x1d [ 364.144167][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e5fa000: rx timeout, send abort [ 364.152669][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e5fa000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 367.548359][T11803] dummy0: entered promiscuous mode [ 367.575137][T11803] macsec1: entered promiscuous mode [ 367.601214][T11803] macsec1: entered allmulticast mode [ 367.616053][T11803] dummy0: entered allmulticast mode [ 367.644723][T11803] dummy0: left allmulticast mode [ 367.656587][T11803] dummy0: left promiscuous mode [ 368.136946][T11819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1912'. [ 370.799387][T11896] loop6: detected capacity change from 0 to 256 [ 370.828948][T11896] FAT-fs (loop6): Unrecognized mount option "dmask=0100000L000000000000000" or missing value [ 371.406228][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 371.615878][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 371.639238][ T9] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 371.669080][ T9] usb 7-1: config 0 has no interface number 0 [ 371.700393][ T9] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 371.730028][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.768268][ T9] usb 7-1: Product: syz [ 371.793397][ T9] usb 7-1: Manufacturer: syz [ 371.836456][ T9] usb 7-1: SerialNumber: syz [ 371.847369][ T9] usb 7-1: config 0 descriptor?? [ 371.884996][ T9] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 372.103368][T11904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.166986][T11904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.282499][ T9] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 372.323459][ T9] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 372.686737][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 372.687236][ T5858] usb 7-1: USB disconnect, device number 4 [ 372.747785][ T5858] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 372.784969][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1960'. [ 372.817290][ T5858] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 372.861067][ T5858] quatech2 7-1:0.51: device disconnected [ 374.882557][T11989] loop6: detected capacity change from 0 to 256 [ 374.897506][T11989] exfat: Deprecated parameter 'namecase' [ 374.917072][T11989] exfat: Deprecated parameter 'utf8' [ 374.999221][T11989] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 376.564367][T12026] loop6: detected capacity change from 0 to 1764 [ 376.800114][T12026] ISOFS: Unable to identify CD-ROM format. [ 377.124733][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2004'. [ 378.236190][ T27] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 378.245241][ T23] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 378.364829][T12079] netlink: 'syz.4.2020': attribute type 3 has an invalid length. [ 378.387016][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2020'. [ 378.439572][ T23] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 378.450741][ T27] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 378.460633][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.470173][ T27] usb 7-1: config 8 has no interface number 0 [ 378.477765][ T27] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 378.492163][ T23] usb 3-1: config 0 descriptor?? [ 378.498620][ T27] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 378.520925][ T27] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 378.535908][ T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.554645][ T27] usb 7-1: Product: syz [ 378.559419][ T27] usb 7-1: Manufacturer: syz [ 378.564188][ T27] usb 7-1: SerialNumber: syz [ 378.721244][ T23] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 378.743773][ T23] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 378.814345][ T27] usb 7-1: USB disconnect, device number 5 [ 378.966948][ T23] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 378.990982][ T23] [drm] Initialized udl on minor 2 [ 379.014036][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.026235][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.334102][ T23] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 379.385383][ T23] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 379.432161][ T27] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 379.446083][ T23] usb 3-1: USB disconnect, device number 32 [ 379.478184][ T27] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 379.662162][T12106] loop6: detected capacity change from 0 to 64 [ 379.743476][ T28] kauditd_printk_skb: 152 callbacks suppressed [ 379.743494][ T28] audit: type=1804 audit(1754629295.657:1806): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2031" name="/newroot/78/file0/file1" dev="loop6" ino=21 res=1 errno=0 [ 380.008478][T12110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.029868][T12110] batadv_slave_0: entered promiscuous mode [ 380.535974][ T8] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 380.547799][T12108] loop6: detected capacity change from 0 to 32768 [ 380.601943][T12108] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 380.728455][ T8] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 380.746114][ T8] usb 1-1: config 0 has no interface number 0 [ 380.768264][ T8] usb 1-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 380.828568][T12108] XFS (loop6): Ending clean mount [ 380.834620][ T8] usb 1-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 380.871955][ T8] usb 1-1: config 0 interface 153 has no altsetting 0 [ 380.875995][T12108] XFS (loop6): Quotacheck needed: Please wait. [ 380.896704][ T8] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 380.918604][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.952043][ T8] usb 1-1: Product: syz [ 380.960204][ T8] usb 1-1: Manufacturer: syz [ 380.965521][ T8] usb 1-1: SerialNumber: syz [ 380.988171][ T8] usb 1-1: config 0 descriptor?? [ 381.027299][ T8] hub 1-1:0.153: bad descriptor, ignoring hub [ 381.033561][ T8] hub: probe of 1-1:0.153 failed with error -5 [ 381.047212][ T8] sierra 1-1:0.153: Sierra USB modem converter detected [ 381.069438][T12108] XFS (loop6): Quotacheck: Done. [ 381.277059][ T8] usb 1-1: USB disconnect, device number 29 [ 381.288978][ T8] sierra 1-1:0.153: device disconnected [ 381.470168][T10689] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 381.754360][ T27] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 381.871176][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2045'. [ 381.946885][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 381.982958][ T27] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 382.004734][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 382.022433][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 382.045917][ T27] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.072814][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 382.088067][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.168473][T12156] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 382.233510][T12156] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 382.333429][ T27] usb 3-1: GET_CAPABILITIES returned 0 [ 382.344267][ T27] usbtmc 3-1:16.0: can't read capabilities [ 382.421959][T12165] loop6: detected capacity change from 0 to 128 [ 382.481196][T12165] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 382.526682][T12165] hpfs: filesystem error: improperly stopped [ 382.539466][T12165] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 382.551912][T12165] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 382.564707][ T27] usb 3-1: USB disconnect, device number 33 [ 382.572074][T12165] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 382.757119][T12169] netlink: 'syz.6.2054': attribute type 6 has an invalid length. [ 383.293266][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2069'. [ 385.096301][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 385.260479][T12244] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2088'. [ 385.306283][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 385.315115][ T9] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 385.328892][ T9] usb 7-1: config 0 has no interface number 0 [ 385.348201][ T9] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 385.367141][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.385586][ T9] usb 7-1: Product: syz [ 385.393412][ T9] usb 7-1: Manufacturer: syz [ 385.410674][ T9] usb 7-1: SerialNumber: syz [ 385.428843][ T9] usb 7-1: config 0 descriptor?? [ 385.460672][ T9] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 385.553570][T12246] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 385.701437][ T9] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 385.742388][T12254] overlayfs: failed to resolve './file0': -2 [ 385.749960][ T9] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 386.001619][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 97 [ 386.213539][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 386.224580][ T5828] usb 7-1: USB disconnect, device number 6 [ 386.269988][ T5828] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 386.333494][ T5828] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 386.372577][ T5828] quatech2 7-1:0.51: device disconnected [ 386.399355][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 386.605558][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 386.622309][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 386.645880][ T9] usb 1-1: config 0 has no interface number 0 [ 386.665183][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 386.684991][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.717012][ T9] usb 1-1: Product: syz [ 386.722728][ T9] usb 1-1: Manufacturer: syz [ 386.729910][ T9] usb 1-1: SerialNumber: syz [ 386.738330][ T9] usb 1-1: config 0 descriptor?? [ 386.747041][ T9] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 386.766007][ T9] usb 1-1: selecting invalid altsetting 1 [ 386.775863][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 386.796219][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 386.838621][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 386.860067][ T9] usb 1-1: media controller created [ 386.921206][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.104945][T12288] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 387.223872][ T9] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 387.235722][ T9] zl10353_read_register: readreg error (reg=127, ret==-32) [ 387.246599][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 387.262267][ T28] audit: type=1326 audit(1754629303.177:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.6.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec958ebe9 code=0x7ffc0000 [ 387.302318][ T28] audit: type=1326 audit(1754629303.177:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.6.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec958ebe9 code=0x7ffc0000 [ 387.372221][ T28] audit: type=1326 audit(1754629303.177:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.6.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7efec958ebe9 code=0x7ffc0000 [ 387.401979][ T9] usb 1-1: USB disconnect, device number 30 [ 387.454806][ T28] audit: type=1326 audit(1754629303.177:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.6.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec958ebe9 code=0x7ffc0000 [ 388.198259][T12322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2122'. [ 388.481851][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2125'. [ 388.956206][ T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 389.145992][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 389.187735][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.216535][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.231868][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 389.266234][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.287084][ T8] usb 3-1: config 0 descriptor?? [ 389.298612][ T8] hub 3-1:0.0: USB hub found [ 389.508914][ T8] hub 3-1:0.0: 1 port detected [ 389.934835][ T8] usb 3-1: USB disconnect, device number 34 [ 391.035050][ T28] audit: type=1326 audit(1754629306.947:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12388 comm="syz.2.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833078ebe9 code=0x7ffc0000 [ 391.082666][ T28] audit: type=1326 audit(1754629306.977:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12388 comm="syz.2.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833078ebe9 code=0x7ffc0000 [ 391.686202][T12405] sp0: Synchronizing with TNC [ 391.724223][T12406] sp0: Found TNC [ 391.837642][T12411] loop6: detected capacity change from 0 to 8 [ 392.098901][T12417] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 392.386925][T12427] syzkaller1: entered promiscuous mode [ 392.393683][T12427] syzkaller1: entered allmulticast mode [ 392.457003][ T23] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 392.668019][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.701883][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.721474][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.735659][ T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.747776][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.761553][ T23] usb 1-1: config 0 descriptor?? [ 392.986167][ T8] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 393.178340][ T8] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 393.183696][ T23] plantronics 0003:047F:FFFF.0019: unknown main item tag 0xd [ 393.188066][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.212055][ T23] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 393.217604][ T8] usb 3-1: config 0 descriptor?? [ 393.233875][ T23] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 393.248914][ T8] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 393.458273][ T23] usb 1-1: USB disconnect, device number 31 [ 393.657669][ T8] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 394.042520][T12442] loop6: detected capacity change from 0 to 32768 [ 394.060646][ T8] gspca_cpia1: usb_control_msg 02, error -71 [ 394.075527][ T8] gspca_cpia1: usb_control_msg 05, error -71 [ 394.092208][ T8] cpia1 3-1:0.0: unexpected systemstate: 00 [ 394.115747][ T8] usb 3-1: USB disconnect, device number 35 [ 394.133419][T12442] JBD2: Ignoring recovery information on journal [ 394.256934][T12442] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 394.423019][T12442] (syz.6.2174,12442,1):ocfs2_remove_inode_range:1793 ERROR: status = -22 [ 394.457939][T12442] (syz.6.2174,12442,0):__ocfs2_change_file_space:2044 ERROR: status = -22 [ 394.583057][T10689] ocfs2: Unmounting device (7,6) on (node local) [ 395.284724][T12468] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2185'. [ 395.386070][ T27] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 395.580180][ T27] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 395.612142][ T27] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 395.626307][ T27] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 395.635415][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.658782][ T27] usb 7-1: config 0 descriptor?? [ 396.093462][ T27] kye 0003:0458:0138.001A: item fetching failed at offset 0/1 [ 396.110635][ T27] kye 0003:0458:0138.001A: parse failed [ 396.118545][ T27] kye: probe of 0003:0458:0138.001A failed with error -22 [ 396.299547][ T27] usb 7-1: USB disconnect, device number 7 [ 396.998913][T12514] loop6: detected capacity change from 0 to 16 [ 397.088903][T12514] erofs: (device loop6): mounted with root inode @ nid 36. [ 398.118464][T12533] netlink: 'syz.2.2213': attribute type 4 has an invalid length. [ 398.156069][T12533] netlink: 'syz.2.2213': attribute type 7 has an invalid length. [ 398.170014][T12533] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.2213'. [ 399.896660][T12572] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2232'. [ 400.181963][T12578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.189531][T12578] IPv6: NLM_F_CREATE should be set when creating new route [ 400.196874][T12578] IPv6: NLM_F_CREATE should be set when creating new route [ 400.456826][T12589] gre0: Master is either lo or non-ether device [ 400.615889][ T5828] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 400.816382][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 400.828243][ T5828] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.855368][ T5828] usb 3-1: config 0 has no interfaces? [ 400.872825][ T5828] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 400.888823][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.912784][ T5828] usb 3-1: Product: syz [ 400.919660][ T5828] usb 3-1: Manufacturer: syz [ 400.926413][ T5828] usb 3-1: SerialNumber: syz [ 400.937900][ T5828] usb 3-1: config 0 descriptor?? [ 401.167263][ T5828] usb 3-1: USB disconnect, device number 36 [ 401.670919][T12601] loop6: detected capacity change from 0 to 32768 [ 401.736015][T12601] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 402.001959][T12601] XFS (loop6): Ending clean mount [ 402.040836][T12601] XFS (loop6): Quotacheck needed: Please wait. [ 402.212461][T12601] XFS (loop6): Quotacheck: Done. [ 402.456809][T10689] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 402.998375][T12646] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 404.059704][T12670] tipc: Started in network mode [ 404.070301][T12670] tipc: Node identity 8, cluster identity 4711 [ 404.078781][T12670] tipc: Node number set to 8 [ 404.748921][T12690] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 404.793023][T12690] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 405.003252][T12697] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 406.493574][T12740] input: syz1 as /devices/virtual/input/input35 [ 406.671408][T12745] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 406.980647][T12755] netlink: 'syz.0.2313': attribute type 11 has an invalid length. [ 407.380414][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2317'. [ 407.767587][T12774] syzkaller1: entered promiscuous mode [ 407.767634][T12772] loop6: detected capacity change from 0 to 4096 [ 407.795643][T12774] syzkaller1: entered allmulticast mode [ 407.961091][T12772] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 408.208396][T10689] ntfs3: loop6: ino=9, ntfs_sync_fs failed, -22. [ 408.724282][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2334'. [ 408.954680][T12798] sock: sock_timestamping_bind_phc: sock not bind to device [ 409.397654][T12808] input: syz1 as /devices/virtual/input/input36 [ 409.422987][T12808] input: failed to attach handler leds to device input36, error: -6 [ 409.835194][T12821] loop6: detected capacity change from 0 to 512 [ 410.176899][T12829] netlink: 'syz.4.2343': attribute type 4 has an invalid length. [ 410.198296][T12829] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2343'. [ 411.500082][T12846] loop6: detected capacity change from 0 to 32768 [ 411.547165][T12846] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 411.893618][T12846] XFS (loop6): Ending clean mount [ 411.937339][T12846] XFS (loop6): Quotacheck needed: Please wait. [ 412.024574][T12880] vlan2: entered promiscuous mode [ 412.046548][T12880] bond0: entered promiscuous mode [ 412.085488][T12846] XFS (loop6): Quotacheck: Done. [ 412.149505][ T28] audit: type=1800 audit(1754629328.067:1813): pid=12846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2349" name="file1" dev="loop6" ino=9286 res=0 errno=0 [ 412.209091][ T28] audit: type=1804 audit(1754629328.097:1814): pid=12846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2349" name="/newroot/153/file0/file1" dev="loop6" ino=9286 res=1 errno=0 [ 412.355070][T10689] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 412.423973][T12884] netlink: 'syz.2.2362': attribute type 3 has an invalid length. [ 412.442560][T12884] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2362'. [ 413.126580][ T8] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 413.337055][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 413.345193][ T8] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 413.360295][ T8] usb 7-1: config 0 has no interface number 0 [ 413.386862][ T8] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 413.406674][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.425136][ T8] usb 7-1: Product: syz [ 413.435274][ T8] usb 7-1: Manufacturer: syz [ 413.445397][ T8] usb 7-1: SerialNumber: syz [ 413.477380][ T8] usb 7-1: config 0 descriptor?? [ 413.497164][ T8] smsc95xx v2.0.0 [ 413.947743][ T8] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 413.972372][ T8] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 413.988513][T12915] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2377'. [ 414.046141][ T5779] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 414.236612][ T5779] usb 3-1: Using ep0 maxpacket: 8 [ 414.249864][ T5779] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.279060][ T5779] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.291274][ T5779] usb 3-1: config 0 interface 0 has no altsetting 0 [ 414.298500][ T5779] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 414.311546][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.339569][ T5779] usb 3-1: config 0 descriptor?? [ 414.406776][ T8] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 414.420245][ T8] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 414.466000][ T8] usb 7-1: USB disconnect, device number 8 [ 414.795668][ T5779] steelseries 0003:1038:1410.001B: unknown main item tag 0x1 [ 414.814893][ T5779] steelseries 0003:1038:1410.001B: item fetching failed at offset 3/5 [ 414.834309][ T5779] steelseries 0003:1038:1410.001B: parse failed [ 414.843814][ T5779] steelseries: probe of 0003:1038:1410.001B failed with error -22 [ 415.037525][ T5779] usb 3-1: USB disconnect, device number 37 [ 415.895316][T12936] loop6: detected capacity change from 0 to 8192 [ 415.941278][T12936] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 415.976677][T12936] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 416.046778][T12936] REISERFS (device loop6): using ordered data mode [ 416.084145][T12936] reiserfs: using flush barriers [ 416.128924][T12936] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 416.176530][T12936] REISERFS (device loop6): checking transaction log (loop6) [ 416.189609][T12936] REISERFS (device loop6): Using r5 hash to sort names [ 416.207828][T12936] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 416.339770][T12936] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3257, free_space(entry_count) 2 [ 416.390309][T12936] REISERFS error (device loop6): vs-5150 search_by_key: invalid format found in block 540. Fsck? [ 416.416092][T12936] REISERFS (device loop6): Remounting filesystem read-only [ 416.423453][T12936] REISERFS error (device loop6): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 416.736809][ T28] audit: type=1326 audit(1754629332.647:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.0.2393" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f668fb8ebe9 code=0x0 [ 417.959119][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2409'. [ 417.988431][T12993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2409'. [ 418.115946][ T8] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 418.324585][ T8] usb 3-1: config 0 has no interfaces? [ 418.359895][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 418.382706][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 418.402524][ T8] usb 3-1: SerialNumber: syz [ 418.415903][ T8] usb 3-1: config 0 descriptor?? [ 419.005174][T13006] loop6: detected capacity change from 0 to 1024 [ 419.062633][T13006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.205707][ T5779] usb 3-1: USB disconnect, device number 38 [ 419.363780][T10689] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.805237][T13048] loop6: detected capacity change from 0 to 512 [ 420.864020][T13048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.946102][T13048] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.173110][T10689] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.420738][T13093] netlink: 'syz.6.2450': attribute type 10 has an invalid length. [ 422.429423][T13093] netlink: 55 bytes leftover after parsing attributes in process `syz.6.2450'. [ 422.465949][ T27] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 422.662083][ T27] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 422.675897][ T27] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 422.691681][ T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 422.712382][ T27] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 422.723806][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 422.740972][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 422.752754][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 422.776463][ T27] usb 3-1: string descriptor 0 read error: -22 [ 422.786469][ T27] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 422.802354][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.818651][ T27] usb 3-1: config 0 descriptor?? [ 422.831998][ T27] hub 3-1:0.0: bad descriptor, ignoring hub [ 422.846199][ T27] hub: probe of 3-1:0.0 failed with error -5 [ 422.868825][ T27] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input37 [ 422.897698][T13107] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2456'. [ 423.164657][ T5828] usb 3-1: USB disconnect, device number 39 [ 424.573730][T13158] loop6: detected capacity change from 0 to 256 [ 424.588442][T13158] exfat: Deprecated parameter 'utf8' [ 424.645247][T13158] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 425.749704][T13178] syzkaller1: entered promiscuous mode [ 425.767020][T13178] syzkaller1: entered allmulticast mode Stopping sshd: stopped /usr/sbin/sshd (pid 5549) OK Stopping crond: stopped /usr/sbin/crond (pid 5533) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5454) Stopping network: [ 430.076282][T13276] all (unregistering): Released all slaves [ 431.017021][T13313] netlink: 'syz.0.2528': attribute type 12 has an invalid length. OK [ 431.059325][ T8] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 431.213678][ T48] Bluetooth: hci4: Frame reassembly failed (-84) Stopping iptables: [ 431.266056][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 431.296774][ T8] usb 3-1: config 0 has an invalid interface number: 33 but max is 1 [ 431.305237][ T8] usb 3-1: config 0 has no interface number 1 [ 431.347056][ T8] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 431.376963][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 431.400815][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 431.415822][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.442267][ T8] usb 3-1: Product: syz OK [ 431.466397][ T8] usb 3-1: Manufacturer: syz [ 431.486097][ T8] usb 3-1: SerialNumber: syz [ 431.504536][ T8] usb 3-1: config 0 descriptor?? [ 431.540260][ T8] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx Stopping system message bus: [ 431.782687][ T2323] pvrusb2: Invalid read control endpoint [ 431.786810][ T8] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 431.817881][ T8] usb 3-1: USB disconnect, device number 40 [ 431.818354][ T2323] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 431.864586][ T2323] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw done [ 433.085914][T13370] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 433.247477][ T5790] Bluetooth: hci4: command 0xfc11 tx timeout [ 433.247958][ T5795] Bluetooth: hci4: Entering manufacturer mode failed (-110) Stopping klogd: OK Stopping acpid: [ 435.855030][T13437] loop6: detected capacity change from 0 to 128 [ 435.884203][T13437] EXT4-fs (loop6): Test dummy encryption mode enabled [ 435.927368][T13437] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 435.948420][T13437] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) OK [ 436.250754][T13437] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 436.352396][T10689] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. Stopping syslogd: stopped /sbin/syslogd (pid 5142) OK umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 437.636843][T13487] input: syz1 as /devices/virtual/input/input38 [ 437.754886][T13490] loop6: detected capacity change from 0 to 512 [ 437.787432][T13490] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 438.028408][T13490] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 438.061324][T13490] FAT-fs (loop6): Filesystem has been set read-only [ 438.822490][T13504] IPv6: Can't replace route, no match found [ 439.107317][T13508] loop6: detected capacity change from 0 to 1024 [ 439.115420][T13508] EXT4-fs: Ignoring removed orlov option [ 439.174289][T13508] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 439.263427][T13508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.891156][T10689] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 440.227157][ T5160] udevd[5160]: could not touch /run/udev/queue: Read-only file system Connection to 10.128.0.20 closed by remote host. [ 440.453681][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.460392][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.324150][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.346336][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.578204][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.616242][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.796324][ T9698] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.808408][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.824615][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.961407][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.971950][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.110973][ T12] tipc: Left network mode Sent SIGKILL to all processes Requesting system poweroff [ 443.023387][ T12] hsr_slave_0: left promiscuous mode [ 443.030027][ T12] hsr_slave_1: left promiscuous mode [ 443.037613][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.045479][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.052981][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.062166][ T12] bridge_slave_1: left allmulticast mode [ 443.067957][ T12] bridge_slave_1: left promiscuous mode [ 443.073691][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.082514][ T12] bridge_slave_0: left allmulticast mode [ 443.088446][ T12] bridge_slave_0: left promiscuous mode [ 443.094184][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.127658][ T12] veth1_macvtap: left promiscuous mode [ 443.133236][ T12] veth0_macvtap: left promiscuous mode [ 443.139007][ T12] veth1_vlan: left promiscuous mode [ 443.144337][ T12] veth0_vlan: left promiscuous mode [ 443.739475][ T2323] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 443.749394][ T2323] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 443.758511][ T2323] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 443.770714][ T2323] pvrusb2: Failure uploading firmware1 [ 443.776302][ T2323] pvrusb2: Device initialization was not successful. [ 443.783009][ T2323] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 443.793172][ T8] pvrusb2: Device being rendered inoperable [ 443.793798][ T2323] pvrusb2: Failed to submit write-control URB status=-19 [ 443.841816][ T2323] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 443.851089][ T2323] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 443.860360][ T2323] ------------[ cut here ]------------ [ 443.874352][ T2323] WARNING: CPU: 0 PID: 2323 at drivers/base/firmware_loader/fallback.c:144 firmware_fallback_sysfs+0x713/0x940 [ 443.886509][ T2323] Modules linked in: [ 443.890460][ T2323] CPU: 0 PID: 2323 Comm: pvrusb2-context Not tainted 6.6.101-syzkaller #0 [ 443.899183][ T2323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 443.909374][ T2323] RIP: 0010:firmware_fallback_sysfs+0x713/0x940 [ 443.915639][ T2323] Code: e7 e8 71 55 f9 ff 41 89 ef eb c1 e8 f7 46 49 fc c6 05 3a dd f8 08 01 48 c7 c7 00 97 21 8b e8 94 7c 25 05 eb ac e8 dd 46 49 fc <0f> 0b 4c 89 f7 48 c7 c6 e0 97 21 8b 4c 89 e2 e8 29 a1 29 05 eb 91 [ 443.935433][ T2323] RSP: 0018:ffffc900051e7730 EFLAGS: 00010293 [ 443.941598][ T2323] RAX: ffffffff853c4eb3 RBX: dffffc0000000000 RCX: ffff888026c3da00 [ 443.949725][ T2323] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 443.957762][ T2323] RBP: 0000000000000001 R08: ffffffff90da3707 R09: 1ffffffff21b46e0 [ 443.965798][ T2323] R10: dffffc0000000000 R11: fffffbfff21b46e1 R12: ffffffff8b7877c0 [ 443.973793][ T2323] R13: 0000000000001770 R14: ffff888079bc00a8 R15: 00000000fffffff5 [ 443.981793][ T2323] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 443.990795][ T2323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.997467][ T2323] CR2: 00007fb62d6e7d60 CR3: 0000000032002000 CR4: 00000000003506f0 [ 444.005594][ T2323] Call Trace: [ 444.008924][ T2323] [ 444.011871][ T2323] ? _request_firmware+0xe0c/0x1510 [ 444.017126][ T2323] ? kmem_cache_free+0xf8/0x280 [ 444.022013][ T2323] _request_firmware+0xed9/0x1510 [ 444.027091][ T2323] ? request_firmware+0x50/0x50 [ 444.031956][ T2323] ? pvr2_hdw_initialize+0x30d/0x3a90 [ 444.037383][ T2323] ? __lock_acquire+0x7c80/0x7c80 [ 444.042448][ T2323] request_firmware+0x36/0x50 [ 444.047202][ T2323] pvr2_locate_firmware+0xb3/0x500 [ 444.052473][ T2323] pvr2_upload_firmware1+0x1b5/0x900 [ 444.057859][ T2323] ? mutex_unlock+0x10/0x10 [ 444.062406][ T2323] ? pvr2_hdw_set_input_allowed+0x570/0x570 [ 444.068343][ T2323] ? verify_lock_unused+0x140/0x140 [ 444.073549][ T2323] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 444.079621][ T2323] ? verify_lock_unused+0x140/0x140 [ 444.084877][ T2323] pvr2_hdw_initialize+0x3e0/0x3a90 [ 444.090131][ T2323] ? pvr2_hdw_set_stream_type+0x420/0x420 [ 444.095954][ T2323] ? pvr2_context_thread_func+0x264/0xac0 [ 444.101882][ T2323] ? __lock_acquire+0x7c80/0x7c80 [ 444.106979][ T2323] ? rcu_is_watching+0x15/0xb0 [ 444.111791][ T2323] ? trace_contention_end+0x39/0xe0 [ 444.117183][ T2323] ? __mutex_lock+0x304/0xcc0 [ 444.121926][ T2323] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 444.127733][ T2323] ? mutex_unlock+0x10/0x10 [ 444.132294][ T2323] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 444.138281][ T2323] ? _raw_spin_unlock+0x40/0x40 [ 444.143250][ T2323] ? finish_wait+0xc7/0x1d0 [ 444.147821][ T2323] pvr2_context_thread_func+0x482/0xac0 [ 444.153407][ T2323] ? pvr2_context_global_init+0x60/0x60 [ 444.159055][ T2323] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 444.164996][ T2323] ? wake_bit_function+0x200/0x200 [ 444.170171][ T2323] ? __kthread_parkme+0x7a/0x1c0 [ 444.175143][ T2323] kthread+0x2fa/0x390 [ 444.179257][ T2323] ? pvr2_context_global_init+0x60/0x60 [ 444.184816][ T2323] ? kthread_blkcg+0xd0/0xd0 [ 444.189451][ T2323] ret_from_fork+0x48/0x80 [ 444.193890][ T2323] ? kthread_blkcg+0xd0/0xd0 [ 444.198512][ T2323] ret_from_fork_asm+0x11/0x20 [ 444.203429][ T2323] [ 444.206602][ T2323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 444.213894][ T2323] CPU: 0 PID: 2323 Comm: pvrusb2-context Not tainted 6.6.101-syzkaller #0 [ 444.222407][ T2323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 444.232470][ T2323] Call Trace: [ 444.235758][ T2323] [ 444.238706][ T2323] dump_stack_lvl+0x16c/0x230 [ 444.243402][ T2323] ? show_regs_print_info+0x20/0x20 [ 444.248611][ T2323] ? load_image+0x3b0/0x3b0 [ 444.254799][ T2323] panic+0x2c0/0x710 [ 444.258724][ T2323] ? bpf_jit_dump+0xd0/0xd0 [ 444.263253][ T2323] ? ret_from_fork_asm+0x11/0x20 [ 444.268324][ T2323] __warn+0x2e0/0x470 [ 444.272326][ T2323] ? firmware_fallback_sysfs+0x713/0x940 [ 444.278122][ T2323] ? firmware_fallback_sysfs+0x713/0x940 [ 444.283836][ T2323] report_bug+0x2be/0x4f0 [ 444.288201][ T2323] ? firmware_fallback_sysfs+0x713/0x940 [ 444.293864][ T2323] ? firmware_fallback_sysfs+0x713/0x940 [ 444.299518][ T2323] ? firmware_fallback_sysfs+0x715/0x940 [ 444.305179][ T2323] handle_bug+0xcf/0x120 [ 444.309439][ T2323] exc_invalid_op+0x1a/0x50 [ 444.313961][ T2323] asm_exc_invalid_op+0x1a/0x20 [ 444.318848][ T2323] RIP: 0010:firmware_fallback_sysfs+0x713/0x940 [ 444.325124][ T2323] Code: e7 e8 71 55 f9 ff 41 89 ef eb c1 e8 f7 46 49 fc c6 05 3a dd f8 08 01 48 c7 c7 00 97 21 8b e8 94 7c 25 05 eb ac e8 dd 46 49 fc <0f> 0b 4c 89 f7 48 c7 c6 e0 97 21 8b 4c 89 e2 e8 29 a1 29 05 eb 91 [ 444.345110][ T2323] RSP: 0018:ffffc900051e7730 EFLAGS: 00010293 [ 444.351199][ T2323] RAX: ffffffff853c4eb3 RBX: dffffc0000000000 RCX: ffff888026c3da00 [ 444.359190][ T2323] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 444.367179][ T2323] RBP: 0000000000000001 R08: ffffffff90da3707 R09: 1ffffffff21b46e0 [ 444.375158][ T2323] R10: dffffc0000000000 R11: fffffbfff21b46e1 R12: ffffffff8b7877c0 [ 444.383145][ T2323] R13: 0000000000001770 R14: ffff888079bc00a8 R15: 00000000fffffff5 [ 444.391141][ T2323] ? firmware_fallback_sysfs+0x713/0x940 [ 444.396809][ T2323] ? _request_firmware+0xe0c/0x1510 [ 444.402028][ T2323] ? kmem_cache_free+0xf8/0x280 [ 444.406900][ T2323] _request_firmware+0xed9/0x1510 [ 444.411961][ T2323] ? request_firmware+0x50/0x50 [ 444.416938][ T2323] ? pvr2_hdw_initialize+0x30d/0x3a90 [ 444.422335][ T2323] ? __lock_acquire+0x7c80/0x7c80 [ 444.427381][ T2323] request_firmware+0x36/0x50 [ 444.432103][ T2323] pvr2_locate_firmware+0xb3/0x500 [ 444.437250][ T2323] pvr2_upload_firmware1+0x1b5/0x900 [ 444.442543][ T2323] ? mutex_unlock+0x10/0x10 [ 444.447075][ T2323] ? pvr2_hdw_set_input_allowed+0x570/0x570 [ 444.452990][ T2323] ? verify_lock_unused+0x140/0x140 [ 444.458206][ T2323] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 444.464206][ T2323] ? verify_lock_unused+0x140/0x140 [ 444.469440][ T2323] pvr2_hdw_initialize+0x3e0/0x3a90 [ 444.474787][ T2323] ? pvr2_hdw_set_stream_type+0x420/0x420 [ 444.480537][ T2323] ? pvr2_context_thread_func+0x264/0xac0 [ 444.486274][ T2323] ? __lock_acquire+0x7c80/0x7c80 [ 444.491316][ T2323] ? rcu_is_watching+0x15/0xb0 [ 444.496095][ T2323] ? trace_contention_end+0x39/0xe0 [ 444.501315][ T2323] ? __mutex_lock+0x304/0xcc0 [ 444.506016][ T2323] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 444.511667][ T2323] ? mutex_unlock+0x10/0x10 [ 444.516184][ T2323] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 444.522091][ T2323] ? _raw_spin_unlock+0x40/0x40 [ 444.526966][ T2323] ? finish_wait+0xc7/0x1d0 [ 444.531483][ T2323] pvr2_context_thread_func+0x482/0xac0 [ 444.537047][ T2323] ? pvr2_context_global_init+0x60/0x60 [ 444.542596][ T2323] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 444.548503][ T2323] ? wake_bit_function+0x200/0x200 [ 444.553626][ T2323] ? __kthread_parkme+0x7a/0x1c0 [ 444.558594][ T2323] kthread+0x2fa/0x390 [ 444.562674][ T2323] ? pvr2_context_global_init+0x60/0x60 [ 444.568228][ T2323] ? kthread_blkcg+0xd0/0xd0 [ 444.572829][ T2323] ret_from_fork+0x48/0x80 [ 444.577262][ T2323] ? kthread_blkcg+0xd0/0xd0 [ 444.581858][ T2323] ret_from_fork_asm+0x11/0x20 [ 444.586652][ T2323] [ 444.589921][ T2323] Kernel Offset: disabled [ 444.594372][ T2323] Rebooting in 86400 seconds..