last executing test programs: 11m35.315019337s ago: executing program 32 (id=1421): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040), 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) io_uring_setup(0x7a5c, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x3}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 10m27.378429172s ago: executing program 4 (id=1530): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @ipv4={'\x00', '\xff\xff', @remote}}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r1, 0x9dffffff}}, 0x48) 10m26.568824863s ago: executing program 4 (id=1532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x3, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 10m25.827615521s ago: executing program 4 (id=1533): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 10m25.019655516s ago: executing program 4 (id=1535): r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e51326bd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01030300ff"], 0x38}}, 0x0) 10m22.820451079s ago: executing program 4 (id=1538): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(0x0, 0x1d24, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @raw_data="a42ab7921b57a55cf889000e3e33d610b1f9e834d944945aa93b469aa58408dbe7ff72e02c104c7814cd20be19335437618246404ace9e94f38c74ebbaca97b2fe2b8bb71702482e2799dd799ed2de7ef55f4c8e9685cea9804024322e85d7696ce60fbc1976c50c8c80148490864f561c289fc334ba1c9c687798b118173016ca4dc4dd5780d4ac3864e5feace966fc3e2d9d22515269e77f473a6a1c5c5d756268f21d879ef8d1d43274b2345b7b1da5f57522703f7619516a8d4e1bf993283c987122a6a6258f"}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x2, @raw_data="fd0cc50c46b64b559aa329803f1356c40e4d69a3508912dd7c8e8e23e1c051756ed36f9fd16f69ca3fde805126665af5b90dfbf749bce7a0e208c82412875dc18d108a37afd18a103de557a1b95b0857c1ecbdccdcb19fdb731529c8d84df473f0b6099d875cd051751dc3c674400310efdd1df2db8c0b29bde4deb2564df48e42d03cbf500f0639f8444d16f46d610f71c490907532a70da75eef7427057704c5994d1ce587e64aaf014f5144a9e8a47ea6215f3be3bdf7d94ec86cb85db3d38ff4458c68b525dd"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10m18.051488825s ago: executing program 3 (id=1546): socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000380)={0x1, 0x20, 0xfffffd0a, 0x10001, 0x0, 0x6, 0x5, 0x0, 0xfbfffffffffffffd, 0x9, 0xffffffbb, 0x1}) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x3}}, 0x20) 10m17.397252297s ago: executing program 3 (id=1547): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r2, &(0x7f00000046c0)={0x2020}, 0x2020) 10m12.401502342s ago: executing program 33 (id=1529): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10m5.916623286s ago: executing program 34 (id=1538): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(0x0, 0x1d24, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @raw_data="a42ab7921b57a55cf889000e3e33d610b1f9e834d944945aa93b469aa58408dbe7ff72e02c104c7814cd20be19335437618246404ace9e94f38c74ebbaca97b2fe2b8bb71702482e2799dd799ed2de7ef55f4c8e9685cea9804024322e85d7696ce60fbc1976c50c8c80148490864f561c289fc334ba1c9c687798b118173016ca4dc4dd5780d4ac3864e5feace966fc3e2d9d22515269e77f473a6a1c5c5d756268f21d879ef8d1d43274b2345b7b1da5f57522703f7619516a8d4e1bf993283c987122a6a6258f"}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x2, @raw_data="fd0cc50c46b64b559aa329803f1356c40e4d69a3508912dd7c8e8e23e1c051756ed36f9fd16f69ca3fde805126665af5b90dfbf749bce7a0e208c82412875dc18d108a37afd18a103de557a1b95b0857c1ecbdccdcb19fdb731529c8d84df473f0b6099d875cd051751dc3c674400310efdd1df2db8c0b29bde4deb2564df48e42d03cbf500f0639f8444d16f46d610f71c490907532a70da75eef7427057704c5994d1ce587e64aaf014f5144a9e8a47ea6215f3be3bdf7d94ec86cb85db3d38ff4458c68b525dd"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10m2.159998013s ago: executing program 35 (id=1547): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r2, &(0x7f00000046c0)={0x2020}, 0x2020) 8m19.250397309s ago: executing program 8 (id=1561): r0 = socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000003c0)=0x202, 0x12) mkdirat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x1ff) 8m2.50367816s ago: executing program 36 (id=1561): r0 = socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000003c0)=0x202, 0x12) mkdirat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x1ff) 5m28.336677618s ago: executing program 2 (id=1965): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) openat$vsock(0xffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0x2, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6aa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m27.031259242s ago: executing program 2 (id=1967): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x1}, 0x8) 5m26.451777098s ago: executing program 2 (id=1969): r0 = syz_io_uring_setup(0x45b2, &(0x7f00000035c0)={0x0, 0xfffffffc, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) 5m25.696766869s ago: executing program 2 (id=1974): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x62108d1, &(0x7f0000000040)=ANY=[], 0xfa, 0x6231, &(0x7f0000012ec0)="$eJzs3c1vHGcdB/DfvvolkFo9VCVCyE3LSylN4qSEQIG2Bzhw6QHlihK5bhWRAkoCSiuLuPKFAyf+AhASR4Q4Ig79A3rgyo0TJyLZSKCeGDTe54lnN7tdu4531p7PR3JmfvPMeJ/xd2dfsjP7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQP/j+D9daEXHjF2nBSsRnohPRjlgq69WIWFpdyet3I+LZ2GuOZyKitxBRbr/3z1MRr0TER2cjdnY318vFlw/Yj+/96e+//9GZN//2x97F//75XufVSevdv//r//zlwdH2GQAAAJqmKIqild7mn0vv79t1dwoAmIn8/F8kefmpr3/zzzf/Ok/9UavVarV6BnVVMd6DahERW9VtytcMPo4HgBNmKz6uuwvUSP6N1o2IM3V3Aphrrbo7wLHY2d1cb6V8W9Xng9VBez4XZCj/rdaj6zsmTacZPcdkVvev7ejE0xP6szSjPsyTnH97NP8bg/Z+Wu+485+VSfn3B5c+NU7OvzOa/4jTk397bP5NlfPvHir/jvwBAAAAAGCO5f//X6n589+Fo+/KgXzS57+rM+oDAAAAAAAAADxpRx3/7xHj/wEAAMDcKt+rl357dn/ZpO9iK5dfb0V8dmR9oGE+HEyW6+4HAAAAAAAAAAAAADRJd3AO7/VWRG9wWX9RFMvFsNH6sI66/UnX9P2HJqv7QR4AAAY+OjtyLX8rYjEirkd777v+esvLy0WxuLRcLBdLC/n1bH9hsViqvK/N03LZQv8AL4i7/aL8ZYuV7aqmvV+e1j76+8rb6hedA3TsCemlv+aE5prCBoBk8Gy04xnplCmKpya9+IAhjv9TaCVW6r5fMf/qvpsCAAAAx68oiqKVhvk7l8b3a9fdKQBgJvLz/+jnAgeqI8a3tw+5vlqtVqvV6pnUVcV4D6pFRGxVtylfMxiOHwBOmK34uO4uUCP5N1o3Ip6tuxPAXGvV3QGOxc7u5nor5duqPh+sDtrzuSBD+W+19rbL24+bTjN6jsms7l/b0YmnJ/TnmRn1YZ7k/Nuj+d8YtPfTesed/6xMyr+/d8lc8+T8O6P5jzg9+bfH5t9UOf/uofLvyB8AAAAAAOZY/v//FZ//5l0GAAAAAAAAgBNnZ3dzPV/3mj////yY9Vz/eTrl/FuHzX8pzcv/RMv5t0fy/8rIep3K/MM39o//f+9urv/h3r8+l6cHzX8hz7TSPauV7hGtdEutbpoeZe8et93r9Mtb6rXanW4656fovR234nZsxKWhddvp77HfvjbUXva0N9R+eai9+1j7laH2XvregWIpt1+I9fhp3I639trLtoUp+784pb2Y0p7z73j8b6Scf7fyU+a/nNpbI9PSww/ajx331em423n91hd+den4d2eq7eg82reqcv/O19Cfvb/JmX78/O7GnQv3b967d2ct0mRo6eVIkycs59/b+1nYf/x/ftCeH/erx+vDD/qHzn9ebEd3Yv7PV+bL/X1xxn2rQ86/n35y/m+l9vHH/0nOf/Lx/1IN/QEAAAAAAAAAAAAAAIBPUhTF3iWir0fE1XT9T13XZgIAs5Wf/4skL1er1Wq1+vTVxaMl89Gf2ddVxXivVYuI+LC6Tfma4ZfjfhkAMM/+FxH/qLsT1Eb+DZa/76+cvlB3Z4CZuvve+z++efv2xp27dfcEAAAAAAAAAPi08vifq5Xxn1+IiJWR9YbGf30jVo86/mc3zzwaYPQJD/Q9wXa732lXhht/LvbG574wafzv8/H4+N95TNxOdT8m6E1p709pX5jSvjh26X5aYy/0qMj5P1cZ77zM/9zI8OtNGP91dMz7Jsj5n6/cn8v8vzyyXjX/4ndzl//WQVfcjvZQ/hfvvfuzi3ffe//lW+/efGfjnY2fXFlbu3Tl6tVr165dfPvW7Y1Lg3+Pp9dzIOefx752Hmiz5Pxz5vJvlpz/F1Mt/2bJ+X8p1fJvlpx/fr0n/2bJ+ef3PvJvlpz/i6mWf7Pk/L+aavk3y87u5kKZ/0upln+z5OP/a6mWf7Pk/F9OtfybJed/IdXyb5ac/8VUHyB/Xw9/iuT88ydcjv9myfmvpVr+zZLzv5xq+TdLzv9KquXfLDn/V1It/2bJ+X891fJvlpz/1VTLv1ly/t9ItfybJed/LdXyb5ac/zdTLf9myfl/K9Xyb5ac/6upln+z5Py/nWr5N0vO/zupln+z5Py/m2r5N0vO/7VUy79Z9r//34wZM2byTN2PTAAAAAAAAAAAAADAqFmcTlz3PgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus7wD+Jn1rr12CDEQgpMa2CQmhMRk1x/xB22KCQRogFIgodAPHNe7Ngv+wmuXQJFsGiiRMCqqqJpetAUUtZGqiqjiglaU5qLqx1VpL+hNRVUJqVEVUEBFaiuarWbO+76emZ2dGXtn12fP+/tJ9rM7c86cd8685+w8a//nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC7W98897lGURTNP62/thbFi5pfb57a2rrtDdd6hAAAAMBK/V/r7+dvSDccGmKltmX+7lX/+PXFxcXF4gMbfnfiS4uL6Y6popjYVBSt+6Kn//2DjfZlgseKycZY2/djAza/YcD94wPunxhw/8YB928acP/kgPuX7IAlNpe/j2k92I7Wl1vLXVrcWEy07tvRY63HGpvGxuLvcloarXUWJ44V88WJYq6Y6Vi+XLbRWv6btza39fYibmusbVvbmzPkh586GsfQCPt4R8e2Lj9m9P03FVM/+uGnjv7xuedu7lUH7oaOxyvHeedtzXF+JtxSjrVRbEr7JI5zrG2c23u8Jhs6xtlordf8unuczw85zg2Xh7mmul/zyWKs9fW3W/tpvP3Xemk/bQ+3/fftRVFcvDzs7mWWbKsYK7Z03DJ2+fWZLGdk8zGaU+mlxfgVzdNbh5inzTq7o3Oedh8T8fW/Naw3vswY2l+m739645LX/UrnadR81ssdK91zcNTHSlXmYJwX32496cd7zsEd4fl/6o7l52DPudNjDqbn3TYHbxs0B8c2bmiNOb0IjdY6l+fgro7lN7S21GjVZ+/oPwenz508M73wiU++fv7kkeNzx+dO7dm1a2bPvn0HDhyYPjZ/Ym6m/Psq93b1bSnG0jFwW9h38Rh4bdey7VN18SujOw4n+xyHW7uWHfVxON795Bprc0AundPlsfFQc6dPXhorljnGWq/PXSs/DtPzbjsOx9uOw54/U3och+NDHIfNZc7cNdx7lvG2P73GsFo/C7a2zcHu9yPdc3DU70eqMgcnw7z417uW/1mwPYz38Z1X+n5kw5I5mJ5uOPc0b0nv9ycPtEqveXlL847rNhbnF+bO3vPokXPnzu4qQlkTL2ubK93zdUvbcyqWzNexK56vh+Zf9fgtPW7fGvbV5Oubf00u+1o1l9l7T//XqvXTrff+7Lh1dxHKiK31/uz107y5P1Mv2Wd/Npf5zPTK34unvrTt/DuxzPk39v0vlNtLD/XYhonx8vjdkPbORMf5uPOlGm+duxqtbT8/Pdz5eCL8Wevz8Y19zsfbupYd9fl4ovvJxfNxY9BvO1am+/WcDPPkxEz/83FzmW27r3ROjvc9H98eaiPs/9eFTiH1RW1zZ7l5m7Y1Pj4Rntd43ELnPN3TsfxE6M2a23pq99XN0ztvLx9rQ3p2l63VPJ3qWnbU8zSdr5abp41Bv327Ot2v52SYFzfu6T9Pm8s8s3fl587N8cu2c+fGQXNwYsPG5pgn0iQsz/eLm+McvKc4WpwuThSzrXs3tuZTo7WtnfcONwc3hj9rfa7c1mcO3tm17KjnYPo5ttzca4wvffIj0P16ToZ58cS9/edgc5m37B/te9c7wy1pmbb3rt2/X1vud163dO2m1fydV3Ocf7O//+9mm8ucOHClfWb//XR3uOW6Hvup+/hd7piaLdZmP20L43zuwPL7qTme5jJfOjjkfDpUFMWFj93f+n1v+PeVPz//na93/LtLr3/TufCx+39w/bG/vZLxA7D+vVCWLeXPurZ/mer37/97V+e9PwAAALA6Yt8/FmoyzP//BwAAANaF2PfH/xWe6P8BAACgNmLfPx5qkkn/v+0tz82/cKFIyfzFIN6fdsOD5XIx+TATvp9avKx5+/1Pzv34Ly8Mt+2xoih+8uBv9Fx+24NxXKWpMM6nH+i8femKF4ba/iMPX16uPb/+5fD48fkMOw16RXBniqL45g1faG1n6oOXWvWZBx9p1fdefPyx5jLPHyy/j+s/+7Jy+T8I4d9Dx450rP9s2A/fC3XmHb33R1zva5det33/+y9vL67XuO3Fraf9xIfKx42fk/PFx8rl435ebvx/9fmnvtZc/tHX9B7/hbHe438qPO6TDzw335xx//PKcvn216D5fVzvs2H8cXtPhvXv+eq3eo7/6c+Vy595a7ncI6HG7d8Zvt/x1ufm2/fXo40jHc+reFu5XNz+zHd+u3V/fLz4+N3jnzx8qWN/dM+PZ/65fJzpruXj7XE70V90bb/5OO3zM27/qd96pGM/D9r+0+999pXNx+3e/t1dy23oWr/7E5v+8LNf6Lm9OJ5Df3am4/kcek84jsP2n/hQmI/h/v99+gsd240eeU/n+Scu/+WtFzqeT/T2H5Xbf/qNx1v1P6Z+/PvXvej6F198dXPfFcW331c+3qDtH/+j0x3j/8pNd7Vej3h/zOh3b385cftnP77z1OmF8/OzbXu19dk57yzHs2ly85bmeG8I59bu7w+fPvfhubNTM1MzRTFV34/Qu2pfDfUHZbl4pevf9XB4PW/5vW9uueOfPh9v/5eHytsvvaP8ufXasNwXw+1by9dvsbHC7T9x602t47vxTPl9R459BLbv+M8DQy0Ynn/3+4I438+8/MOt/dC8r/VzIx7XKxz/d2fLx/lG2K+L4ZOZb7vp8vbal4+fjXDpfeXxvuL9F05z8XX9k/B6v+t75ePHccXn+93wPuZb2zrPd3F+fOPCWPfjtz7F42I4nxQXy/vjUnF/X3r+pp7Di59DUly8ufX976THufmKnuZyFj6xMH1i/tT5R6fPzS2cm174xCcPnzx9/tS5w63P8jz8kUHrXz4/bWmdn2bn9u0tZjYXRXG6mFmDE9bqjL/51XDjP/Pw0dn9M3fMzh07cv7YuYfPzJ09fnRh4ejc7MIdR44dm/v4oPXnZ+/btfvgnv27dx6fn73vwMGDew7unD91ujmMclAD7Jv56M5TZw+3Vlm4b+/BXffeu3dm58nTs3P37Z+Z2Xl+0Pqtn007m2v/+s6zcyeOnJs/ObdzYf6Tc/ftOrhv3+6BnwZ48syxhanps+dPTZ9fmDs7XT6XqXOtm5s/+watTz0t/Fv5frZbo/wgvuLdd+9Ln8/a9OSnl32ocpGuDxB9LnwWzT+85MyBYb6Pff9EqEkm/T8AAADkIPb9G0NN9P8AAABQG7Hv3xRqov8HAACA2oh9/2SoSSb9v/y//P9w+f/y/lHm/3vl5wv5/0rl/898rMyVrvf8f8zPy//n4Rrn/1e8ffl/+f/65f+Hz8+v9/HL/8v/s1TV8v+x799cFFn2/wAAAJCD2PdvCTXR/wMAAEBtxL7/ulAT/T8AAADURuz7XxRqkkn/L/8/VP5/96DAVf3z/6O//r/8v/z/muT/44sj/5+NK87fv/+hjm/l/wP5f/l/+X/5f/l/Vmxi2XuuVf4/9v3Xh5pk0v8DAABADmLf/+JQE/0/AAAA1Ebs+28INdH/AwAAQG3Evn9rqEkm/b/8v+v/y//L/9c6/7/S6/+3DUb+f31w/f/+5P8HuOr8/6T8/3rM/0+MdvzVzv8PHL78P6uiatf/j33/S0JNMun/AQAAIAex739pqIn+HwAAAGoj9v0vCzXR/wMAAEBtxL7/xlCTTPr/leT/Y+Za/l/+X/6/JP9fqlX+v+/1/8uv5P+rRf6/P/n/AVz/P6/8/4jHX+38/6iv/z/xQPf68v/0UrX8f+z7Xx5qkkn/DwAAADmIff9NoSb6fwAAAKiN2Pe/ItRE/w8AAAC1Efv+baEmmfT/rv8v/y//L/8v/997+4Pz/yX5/2qR/+9P/n8A+X/5f/n/4fL/Pd78yv/TS9Xy/7HvvznUJJP+HwAAAHIQ+/5bQk30/wAAAFAbse//qVAT/T8AAADURuz7t4eaZNL/y//L/8v/55X/v3uj/L/8f73J//cn/z+A/L/8v/z/kNf/X+pK8v+bBj0YtVG1/H/s+18ZapJJ/w8AAAA5iH3/q0JN9P8AAABQG7Hvf3Woif4fAAAAaiP2/VOhJpn0//L/9cr//+lfP/HqQv5f/n/A9iuc/2/Vq8z/x2kg/585+f/+5P8HkP+X/5f/X5P8P/moWv4/9v23hppk0v8DAABADmLff1uoif4fAAAAaiP2/beHmuj/AQAAoDZi378j1CST/l/+v175/0j+X/6/3/YrnP93/X/5/xWT/++h7SCV/x9A/l/+P/v8f3z3K//PaFQt/x/7/teEmmTS/wMAAEAOYt9/R6iJ/h8AAABqI/b9rw010f8DAABAbcS+/85Qk0z6f/l/+X/5f/l/+f/e25f/X5/WV/5/05Jbqnb9/43y//L/8v+Z5f9d/5/Rqlr+P/b9rws1yaT/BwAAgBzEvv+uUBP9PwAAANRG/J935f971f8DAABAHcW+f2eoSSb9v/y//H9O+f+G/L/8v/x/7a2v/P9SVcv/u/6//L/8v/y//D8rUbX8f+z7Xx9qkkn/DwAAADmIff89oSb6fwAAAKiN2PdPh5ro/wEAAKA2Yt8/E2qSSf8v/y//n1P+3/X/5f/l/+tP/r8/+f8B5P/l/+uW/y8K+X+uqarl/2PfvyvUJJP+HwAAAHIQ+/7doSb6fwAAAKiN2PfvCTXR/wMAAEBtxL5/b6hJJv2//L/8v/x/JfL/8SHk/+X/5f9XSP6/P/n/AeT/1yY/3+uN03oa/zIqmf93/X+usarl/2Pff2+oSSb9PwAAAOQg9v37Qk30/wAAAFAbse/fH2oS+v9V+u9JAAAAwBqKff+BUJNM/v1f/r8m+f/f/PuObcv/r7v8/zq8/v9m+f9Q5f+rpab5/+7D4qrJ/w8g/79q+flibCRDvGbjl/+X/+fqVC3/H/v+g6EmmfT/AAAAkIPY978h1ET/DwAAALUR+/6fDjXR/wMAAEBtxL7/Z0JNMun/5f9rkv/vIv8v/99v+67/L/9fZzXN/49MrfL/Y/L/6yn/P0x+fr2PX/5f/p+lVj//H78aLv8f+/77Qk0y6f8BAAAgB7Hv/9lQE/0/AAAA1Ebs+98YaqL/BwAAgNqIff+hUJNM+n/5f/l/+X/5/9XJ/7+x6FbF/H9z8sj/10uF8/8Tw2xf/t/1/+X/12T83T9qRjJ++X/5f5aq2vX/Y9//plCTTPp/AAAAyEHs++8PNdH/AwAAQG3Evv/NoSb6fwAAAKiN2Pe/JdQkk/5f/l/+X/5f/t/1/3tvX/5/fapw/n8o8v/y//L/63f88v/y/yxVtfx/7PsfCDXJpP8HAACAHMS+/62hJvp/AAAAqI3Y978t1ET/DwAAALUR+/63h5pk0v/L/8v/y//L/8v/996+/P/6JP/fn/z/APL/8v/y//L/jFTV8v+x7/+5UJNM+n8AAADIQez7Hww10f8DAABAbcS+/x2hJvp/AAAAqI3Y978z1CST/l/+X/5f/l/+X/6/9/bl/9cn+f/+5P8HkP+X/5f/l/9npKqW/499/7tCTTLp/wEAACAHse//+VAT/T8AAADURuz73x1qov8HAACA2oh9/y+EmmTS/8v/y/9XK/+/eKF9Pfl/+f9iVPn/5kry/1mQ/+9P/n+AHvn/TfL/8v/y//L/XLWq5f9j3/+eUJNM+n8AAADIQez73xtqov8HAACA2oh9//tCTfT/AAAAUBux738o1CST/l/+P8v8f3rK1cv/u/6//L/r/8v/r4z8f3/y/wO4/r/8v/y//D8jVbX8f+z7Hw41yaT/BwAAgBzEvv/9oSb6fwAAAKiN2Pf/YqiJ/h8AAABqI/b9Hwg1yaT/l//PMv9f4ev/1y3/P94xP3LK/0+2vZ5pXsr/y/+vAfn//uT/B5D/l/+vcv4/zObNy6wv/08VVS3/H/v+D4aaZNL/AwAAQA5i3/9LoSb6fwAAAKiN2Pf/cqiJ/h8AAABqI/b9vxJqkkn/X8P8/8VC/l/+vzL5/875kVP+3/X/l5L/Xxvy//3J/w8g/y//X+X8/wDy/1RR1fL/se//1VCTZRu/H/zXEE8TAAAAqJDY938o1CSTf/8HAACAHMS+/3Coif4fAAAAaiP2/Y+EmmTS/9cw/7/C6//HK6rK/8v/jzr/Pyb/L/8v/78GRpf/f8X1RSH/L/8v/y//L/8v/89KVC3/H/v+I6EmmfT/AAAAkIPY9/9aqIn+HwAAAGoj9v1HQ030/wAAAFB54ykR3F/s+2dDTTLp/69h/n+imvn/a3f9/y2rkv9vhLGtfv7/J/L/rv8fyP/3Jv+/Nlz/vz/5/wHk/+X/5f/l/xmpquX/Y98/F2qSSf8PAAAANZZ+HRz7/mOhJvp/AAAAqI3Y9x8PNdH/AwAAQG3Evv/DoSaZ9P+u/1+d/H/h+v8teeT/xzuWl/8vyf/L/4+C/H9/8v8DyP/L/8v/y/8zUlXL/8e+fz7UJJP+HwAAAHIQ+/6PhJro/wEAAKA2Yt//0VAT/T8AAADURuz7T4SaZNL/y//L/+ee/28UxUXX/5f/77V9+f/1Sf6/P/n/AeT/5f/l/+X/Gamq5f9j338y1CST/p//Z+8+muS6qz6OX/tRXD28BNasWMLKvAS27KhiTTY5yCJnMDkHkzE5Y4JNzjlnk3M0NmCoEmXNOUea6da9Gk1r+t7///PZHEvlUfdYI1E/pr51AQAA6EHu/vvFLfY/AAAANCN3//3jFvsfAAAAmpG7/wFxSyf7X/+v/++9/x+28vz/3f++/n+H/l//vwkr/f2R9f/ehaLwC/b/d73b1ffW/+v/9f+j9P/6f/0/e82t/8/d/8C4pZP9DwAAAD3I3f+guMX+BwAAgGbk7n9w3GL/AwAAQDNy918dt3Sy//X/+n/9/yL6/yvy17js/f9N+n/9/7J5/v84/f8E/b/+X/+v/2ej5tb/5+5/SNzSyf4HAACAHuTuf2jcYv8DAABAM3L3Pyxusf8BAACgGbn7Hx63dLL/9f/6f/3/Ivr/W284dczz//d8Pvp//f86+v9x+v8J+n/9v/5f/89Gza3/z93/iLilk/0PAAAAPcjd/8i4xf4HAACAZuTuf1TcYv8DAABAM3L3Pzpu6WT/6//1//r/Dfb/p4dhuGz9/6D/3/P56P/1/+tcN5z7O0H/v0r/P2Gi/x8G/f+Yi+7n1396y3n/F6D/1/+zam79f+7+x8Qt9xiGY5f6SQIAAACzkrv/sXFLJ9//BwAAgB7k7j8Vt9j/AAAA0Izc/dfELZ3sf/2//l//v5Tn/+v/9f/6/4vh+f/jDt7/3+VO971Pv/2/5/+P8/z/Tff/d3xl6P9Ztrn1/7n7T8ctnex/AAAA6EHu/sfFLfY/AAAANCN3/+PjFvsfAAAAmpG7/wlxSyf7X//fWv//f7s+7rz+/2ztov/X/19K/3+0fiX9//z6/yPTL9wZ/f84z/+fcPavuZP1Q/2//t/z//X/HMzc+v/c/U+MWzrZ/wAAANCD3P1PilvsfwAAAGhG7v4nxy32PwAAADQjd/9T4pZO9r/+v7X+f/fHef6//n/d63v+f0v9//Tr9kb/P07/P6GV5/9f4lfNtvv5g9r2+9f/6/9ZNbf+P3f/U+OWTvY/AAAA9CB3/9PiFvsfAAAAmpG7/+lxi/0PAAAAzcjd/4y4pZP9r//X/y+j/89X0P/r/y9//5/0/8uk/x+n/5/QSv9/ibbdzy/9/ev/9f+smlv/n7v/mXFLJ/sfAAAAepC7/1lxi/0PAAAAzcjd/+y4xf4HAACAZuTuf07c0sn+1//r/5fR/3v+f2v9/87v3zz7f8//Xzb9/zj9/wT9v/5f/6//Z6Pm1v/n7r82bulk/wMAAEAPcvc/N26x/wEAAKAZufufF7fsZ/8f3fS7AgAAADYpd//z45ZOvv+v/9f/6//1/57/v/719f/LpP8fp/+f0Hn/P1yj/9f/6//ZrBn1/+d91InhBXFLJ/sfAAAAepC7/4Vxi/0PAAAAzcjd/6K4xf4HAACAZuTuf3Hc0sn+b6//P77U/v9sztdW/39yGIa++/+je74+eur/T573+1lfl/p//f8h0P+Pa67/Pxb/oP/f16d5Idvu55f+/vX/+n9Wzaj/P/vj3P0viVs62f8AAADQg9z9L41b7H8AAABoRu7+l8Ut9j8AAAA0I3f/y+OWTvZ/e/2/5/8Ps+n/Pf9/79dHT/2/5/+v0v8fDv3/uOb6/7ie/6//n8P71//r/1k1t/4/d/8r4qZjRy/5UwQAAABmJnf/K+OWTr7/DwAAAD3I3f+quMX+BwAAgIW6duVncve/Om7pZP/r/zfb/x877+f0//r/vV8f+n/9v/7/8tP/j9P/Tzhg/39b9KP6f/2//l//z4659f+5+18Tt3Sy/wEAAKAHufuvi1vsfwAAAGhG7v7Xxi32PwAAADQjd//r4pZO9r/+3/P/9f/6/6n+/9zjUPX/+v/50/+P0/9P8Px//f92+//j5/5R/08b9tH/nzlz5tRl7/9z978+bulk/wMAAEAPcve/IW6x/wEAAKAZufvfGLfY/wAAANCM3P1vils62f/6/077//xSX1b/f80w6P89/1//r/8fp/8fp/+foP/X/3v+v/6fjZrb8/9z9785bulk/wMAAEAPcve/JW6x/wEAAKAZufuvj1vsfwAAAGhG7v63xi2d7H/9f6f9v+f/6//1/4fd/98+6P8PxSL6/5MXfv259/+n9f/6/xHd9f/3vPuuH+r/9f+smlv/n7v/bXFLJ/sfAAAAepC7/+1xi/0PAAAAzcjd/464xf4HAACAZuTuf2fcdKST/a//1//r//X/+v/1r3/Iz/8/NgyD/n8DFtH/j5h7/7+Z5//v/VN+jv5f/7/k96//1/+zam79f+7+d8Utnex/AAAA6EHu/nfHLfY/AAAANCN3/3viFvsfAAAAmpG7/71xSyf7X/+v/9f/6/+b7/9PL6L/9/z/DdH/j5tH/39hbfT/R4ZB/6//1//r/xm1rf4/d//74pZO9j8AAAD0IHf/++MW+x8AAACakbv/A3GL/Q8AAADNyN3/wbilk/2v/9f/76f/z/ep/99I/19/dLbd/x+fXf9/Ytev18nz//X/G6L/H6f/n+D5//p//f+1+n82aW7P/8/d/6G4pZP9DwAAAD3I3X9D3Pq/bu1/AAAAaEbu/g/HLfY/AAAANCN3/0filk72v/5f/+/5/57/3/zz//X/XVlW/3985Wf0//p//f9y338j/b/n/7NRc+v/c/d/NG7pZP8DAABAD3L3fyxusf8BAACgGbn7b4xb7H8AAABoRu7+m+KWTva//l//r//X/+v/d34P9f9tWFb/v6qN/v+k/l//X/38FfGnQP+v/5/6eNo0t/4/d//H45ZO9j8AAAD0IHf/J+IW+x8AAACakbv/k3GL/Q8AAACLdGTNz+Xu/1Tc0sn+1//r//X/+n/9//rX1/8v01b6//yimFX/v+5/mTz/f5L+f5/9/J13/Whpz//f+6dE/6//Z/Pm1v/n7v903NLJ/gcAAIAe5O7/TNxi/wMAAEAzcvd/Nm6x/wEAAKAZufs/F7d0sv/1//p//b/+X/+//vX1/8vk+f/j9P8T9P9bfX7+0t+//l//z6q59f+5+z8ft3Sy/wEAAKAHufu/ELfY/wAAANCM3P1fjFvsfwAAAGjG2d2fcVmH+1//r//X/+v/9f/rX1//v0z6/3H6/wn6f/2//l//z0bNrf//0tmPOjF8OW7pZP8DAABAD3L3fyVusf8BAACgGbn7vxq32P8AAADQjNz9X4tbOtn/+n/9/zL6/zNnzpzS/+v/d38+5/r/m/X/FP3/OP3/BP2//l//r/9no+bW/+fu/3rc0sn+BwAAgB7k7v9G3GL/AwAAQDNy938zbrH/AQAAoBm5+78Vt3Sy//X/M+j/T+j/Pf9f/z94/v9q/3/lzl/K+v/90f+P0/9PaLH/P3Hxn/62+/mD2vb71//r/1k1t/4/d/+345ZO9j8AAAD0IHf/d+IW+x8AAACakbv/u3GL/Q8AAADNyN3/vbilk/2v/z+8/v+O/3a9PP//5LD+/ev/9f/6f8//v9z0/+P0/xNa7P/3Ydv9/NLfv/5f/8+qufX/ufu/H7fsHn5H9/dZAgAAAHOSu/8HcUsn3/8HAACAHuTu/2HcYv8DAABAM3L3/yhu6WT/6/9n8Pz/Bvt/z/9f//Wh/591/3+l/r8N+v9x+v8J+n/9v/5/Q/1/fjXr/3s3t/4/d/+P45ZO9j8AAAD0IHf/T+IW+x8AAACakbv/p3GL/Q8AAADNyN1/c9xy3v5f13a3Qv+v/9f/6//1/+tfX/+/TPr/cRfb/x8fDtb/J/2//l//32v/7/n/7Jhb/5+7/2dxi+//AwAAwOIcvcDP5+7/edxi/wMAAEAzcvf/Im6x/wEAAKAZuft/GbfccuW23tKh0v/r//X/+n/9//rX1/8vk/5/3Cyf/3/9jfWP+v8m+v+r9P9t9P/DoP/n4ObW/+fu/1Xc4vv/AAAA0Izc/b+OW+x/AAAAaEbu/t/ELfY/AAAANCN3/2/jlk72v/5f/3/A/v9smqn/36H/36H/X0//fzj0/+Nm2f+fR//fRP/v+f+N9P+e/88mzK3/z93/u7ilk/0PAAAAPcjd//u4xf4HAACAZuTu/0PcYv8DAABAM3L3/zFu6WT/b63/j//U+v/F9/+e/6//1//r/2dF/z9O/z9B/6//1//r/9moufX/ufv/FLd0sv8BAACgB7n7/xy32P8AAADQjNz9f4lb7H8AAABoRu7+v8Ytnex/z//X/+v/9f/6//Wvr/9fJv3/OP3/evUbpf/X/+v/9f9s1Nz6/9z9f4tbOtn/AAAA0IPc/X+PW+x/AAAAaEbu/lviFvsfAAAAmpG7/x9xSyf7X/+v/9f/6//1/+tfX/+/TPr/cdvs/+/1/9Mv6/n/W+//8y3o//X/+n82Ym79f+7+W+OWTvY/AAAA9CB3/21xi/0PAAAAzcjd/8+4xf4HAACAZuTu/1fc0sn+n+j/j9e/qP8fpf/f/f71/+u/PvT/+n/9/+Wn/x+3nOf/x8fr/3fx/P95v3/9v/6fVXPr/3P3/ztu6WT/AwAAQA9y998et9j/AAAA0Izc/f+JW+x/AAAAaEbu/v/GLZ3sf8//X1L/f5X+X/+v/9f/6/8n6P/HLaf/9/z/dfT/837/+n/9P6vm1v/n7v9fAAAA//86dD+z") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 5m20.243807495s ago: executing program 2 (id=1989): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8000}, 0x20) 5m19.192845422s ago: executing program 2 (id=1993): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6f) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0xd40, 0x82) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000001c0)={@local, @broadcast}, 0x0) r3 = openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat(r3, &(0x7f00000000c0)='./file0\x00', 0x200, 0x4bde) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x44005}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x8040) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)}}], 0x3, 0x1005) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0xfffffffffffffed6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) 5m2.728761463s ago: executing program 37 (id=1993): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6f) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0xd40, 0x82) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000001c0)={@local, @broadcast}, 0x0) r3 = openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat(r3, &(0x7f00000000c0)='./file0\x00', 0x200, 0x4bde) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x44005}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x8040) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)}}], 0x3, 0x1005) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0xfffffffffffffed6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) 4m46.235077146s ago: executing program 6 (id=2051): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f00000000c0)=0x7f, 0x4) 4m45.395771663s ago: executing program 6 (id=2053): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffd, 0x4}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 4m37.788873961s ago: executing program 6 (id=2063): syz_open_dev$sndctrl(&(0x7f00000000c0), 0x2, 0x400) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0xde5f, 0x10100, 0x2, 0x33a}, &(0x7f0000002bc0)=0x0, &(0x7f0000002900)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4m36.00547705s ago: executing program 6 (id=2066): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000006180)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x101, {0x5, 0x2, 0x0, 0xfffffffffffffffd, 0x4, 0x3a1b, {0x40, 0x3, 0xa, 0x10000, 0x1001, 0x7, 0x800, 0x81, 0x120, 0x2000, 0x0, r3, 0x0, 0x440, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x800002, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) 4m30.957807853s ago: executing program 6 (id=2071): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdnZZ6W5LYcuQ8vkks/vePJb3nSbffW86bzoBPLHGs5c0Ym9EfJ5EjBX704gYzksjEcutf3dn5cp0tiWxuvrOv0kkEXF75cp0+/9Kivdd2Us1/2T89UvEM5W1/S4sXT7XaDZnLxX1icXzH04sLF0+OH++cXb27OyFQ69OHp567cixV44M7FiXjqaf/fnmG99dO/P1Hz8ee+HTJE7E7qKt+zgGZTzGOz+TbtWIeG/QnZWkUhxPr+MEAODxk3bN4fbGWFTyUstY1OdLDQ4AAAAYiE8iYhUAAADY5hLn/wAAALDNtdcB3F65Mt3eyl2RADwqt05GRK2V/+37+1st1VjO30diKCJG7yRddwa17veuDaD/8Yj44auj+7Ittug+fKC35asR8Vyv8T/J87+W/xWPtfmfRsTkAPofv6cu/+HReZj8PzGA/uU/AAAAAAAADM71k60L+Wuv/6Wd9T/R4/pfpce1uwex8fW/9OYAugF6uHUy4vWuZ/vc6cr/Qq1S1J7K1wMMJXPzzdnJiHg6Ig7E0I6sPrVOH9/+dPzvfm3d6/+yLeu/vRawiONmdcf/PzPTWGw8zDEDLbeuRjxf7ZX/SWf8T/qs/337Pvv47fTPc/3aNs5/YKusfhOxv+f4f/eJbsn6z+ebyOcDE+1ZwVqnX/z1+379y38oTzb+j66f/7Wk+3mdC5vvY3L04Nl+bQ86/x9OTuVPFR0u9n3cWFy8NBUxnLy1dv+hzccM21E7H9r5kuX/gZd6n/+vN//Pkuz94lsijYhG8Z7VP7inzx1nfv+iXzzGfyhPlv8zmxr/N1/48t2VU/36v7/x/0g+ph8o9vj9H6zvfhO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgcZJGxO5I0nqnnKb1esSuiHg2RtPmxYXFl+cufnRhJmuLqMVQOjffnJ2MiLFWPcnqU3n5bv3QPfXDEbEnIq6N7czr9emLzZmyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICOXRGxO5K0HhFpXk7Ter3V9s9Y2dEBAAAAA1MrOwAAAABgyzn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAh7dl3/UYSEcvHd+ZbZrhoGyo1MmCrpWUHAJSmUnYAQGmqZQcAlMY5PpBs0D7St8UMAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBJsn/v9RtJRCwf35lvmeGibajUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftI3xYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnycLS5XONZnP2koKCgkKnUPY3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvZfwEAAP//vlL7zw==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) 4m28.188960967s ago: executing program 6 (id=2074): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000100)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @remote, 0x1}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa002000000008080c4700003000000b0000069078ac141400ac1e000107070700eeff08000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e0000002"], 0x13c}}, 0x20040880) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) sendto$inet6(r6, &(0x7f0000000000)="ee", 0x1, 0x200400d0, &(0x7f0000000040)={0xa, 0x4e28, 0x8000028, @loopback, 0x1}, 0x1c) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4m12.229905588s ago: executing program 38 (id=2074): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000100)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @remote, 0x1}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa002000000008080c4700003000000b0000069078ac141400ac1e000107070700eeff08000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e0000002"], 0x13c}}, 0x20040880) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) sendto$inet6(r6, &(0x7f0000000000)="ee", 0x1, 0x200400d0, &(0x7f0000000040)={0xa, 0x4e28, 0x8000028, @loopback, 0x1}, 0x1c) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2m19.999297217s ago: executing program 9 (id=2304): syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x1c1540) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x8, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0xc1105511, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202", @ANYRESDEC], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r3, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e1c}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 2m15.866115603s ago: executing program 9 (id=2311): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000040)) 2m14.198002011s ago: executing program 9 (id=2315): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x48}}]}, 0x78}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m13.601955677s ago: executing program 9 (id=2319): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r3, 0x80) accept$netrom(r3, &(0x7f0000000400)={{}, [@netrom, @netrom, @remote, @bcast, @remote, @bcast, @netrom, @bcast]}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m9.459426744s ago: executing program 9 (id=2321): syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x1c1540) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x8, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0xc1105511, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202", @ANYRESDEC], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r3, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e1c}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 2m2.821445727s ago: executing program 9 (id=2330): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1m50.10857301s ago: executing program 5 (id=2344): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m49.091758991s ago: executing program 5 (id=2347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m46.320825643s ago: executing program 39 (id=2330): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1m43.367732197s ago: executing program 5 (id=2354): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @local}, 0x14) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0xf5) 1m42.475255068s ago: executing program 5 (id=2357): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m41.332321917s ago: executing program 5 (id=2360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x24, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {}, {0xffff, 0xa}}}, 0x24}}, 0x20040054) 1m32.761953476s ago: executing program 5 (id=2374): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000001c80), 0x44, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d6559eb", 0x10, 0xfffffffffffffffd) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000240)={0x40, 0x0, '\x00', {0x0, @bt={0x6, 0x5, 0x1, 0x0, 0x2, 0x10000, 0xa, 0x8, 0x100007, 0x4, 0x2, 0x1, 0x6ac, 0x43cb, 0x4, 0x6, {0x85a6, 0x1}, 0xb2, 0x81}}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x4, 0x7d}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x300, 0x0, 0x0, 0x54}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0xb6, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 1m17.136828487s ago: executing program 40 (id=2374): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000001c80), 0x44, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d6559eb", 0x10, 0xfffffffffffffffd) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000240)={0x40, 0x0, '\x00', {0x0, @bt={0x6, 0x5, 0x1, 0x0, 0x2, 0x10000, 0xa, 0x8, 0x100007, 0x4, 0x2, 0x1, 0x6ac, 0x43cb, 0x4, 0x6, {0x85a6, 0x1}, 0xb2, 0x81}}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x4, 0x7d}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x300, 0x0, 0x0, 0x54}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0xb6, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 21.052371751s ago: executing program 7 (id=2448): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000140)={[{@journal_async_commit}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@test_dummy_encryption}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000c80)="$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") open(0x0, 0x166a42, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r6, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r7}], 0x1, 0x0, 0x0, 0x0) fcntl$setown(r7, 0x8, r5) tkill(r5, 0x13) 20.028904131s ago: executing program 1 (id=2450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) 19.619547657s ago: executing program 3 (id=2388): read$alg(0xffffffffffffffff, &(0x7f0000001840)=""/4096, 0x1000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 17.039623349s ago: executing program 1 (id=2451): r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f0000000000)='\x00', 0x1, 0xaf}]) 16.881035429s ago: executing program 7 (id=2452): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x220, 0xeb, 0x63, 0x50, 0x8, 0xc45, 0x6282, 0xcb15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x1, 0xe0, 0x5, [{{0x9, 0x4, 0xc7, 0x1, 0x0, 0x1f, 0xdf, 0x54, 0x3}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) 15.635881853s ago: executing program 1 (id=2453): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r1 = fanotify_init(0x200, 0x8000) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x48000077, r2, 0x0) ftruncate(r0, 0xabe6) 13.279667068s ago: executing program 7 (id=2454): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000580)={0x40}, 0x0, 0x0}) 13.062161918s ago: executing program 0 (id=2455): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x6, {0x4, 0x5, 0x3}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000800)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xf00) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_stats}) mlockall(0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) clock_gettime(0x0, &(0x7f0000000f00)) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) 12.709853597s ago: executing program 1 (id=2456): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) 9.383904381s ago: executing program 0 (id=2457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {}, {0xffff, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x20040054) 9.19888405s ago: executing program 3 (id=2458): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x5b01, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x82, 0x1, 'r'}, &(0x7f00000008c0)={0x20, 0x83, 0x1, "d8"}, &(0x7f0000000900)={0x20, 0x84, 0x1, 'O'}, &(0x7f0000000940)={0x20, 0x85, 0x3, "7e3898"}}) 8.421781084s ago: executing program 7 (id=2459): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/131, 0x0, 0x80a0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000008c0)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a7594000000010902"], 0x0) 7.604023801s ago: executing program 3 (id=2460): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808094, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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") r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600), 0x0, 0x28008008) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_PIT(r5, 0xc048ae65, &(0x7f00000000c0)) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r6, 0x29, 0x2d, &(0x7f0000000240)={0x5, {{0xa, 0x4e20, 0x7, @empty, 0x9}}}, 0x88) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') 6.835302292s ago: executing program 1 (id=2461): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000140)={[{@journal_async_commit}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@test_dummy_encryption}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000c80)="$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") open(0x0, 0x166a42, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r6, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r7}], 0x1, 0x0, 0x0, 0x0) fcntl$setown(r7, 0x8, r5) tkill(r5, 0x13) 5.505631039s ago: executing program 7 (id=2462): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100bc"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) 4.766546189s ago: executing program 7 (id=2463): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0xffffffffffffffff) 3.841950634s ago: executing program 3 (id=2464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$get_persistent(0x16, 0x0, 0xffffffffffffffff) setreuid(0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)) 3.404577086s ago: executing program 0 (id=2465): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) fsopen(&(0x7f0000000300)='anon_inodefs\x00', 0x1) 2.47305517s ago: executing program 0 (id=2466): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x2, 0xa00, 0x0, 0x0, 0x0, 0x58, 0x0, 0x1, 0x0, &(0x7f00000001c0)='\x00', 0x0}, 0x50) 2.257158839s ago: executing program 4 (id=2348): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0xd, 0x3, &(0x7f0000000100)={0x1a, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 2.041980954s ago: executing program 1 (id=2467): read$alg(0xffffffffffffffff, &(0x7f0000001840)=""/4096, 0x1000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.882168623s ago: executing program 0 (id=2468): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x4, 0x8}, {0x2, 0x7, 0x2, 0x4}}}}, 0x15) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)=@chain) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x43) 0s ago: executing program 0 (id=2469): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) kernel console output (not intermixed with test programs): generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1123.708109][ T9802] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1123.716113][ T9802] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1123.723833][ T9802] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1123.731518][ T9802] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1123.743197][ T9802] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1123.750991][ T9802] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1124.045407][ T9802] hid-generic 0000:0000:0004.000B: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1124.136386][T12668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1867'. [ 1124.152640][T12668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1867'. [ 1124.216242][T12668] bond0: entered promiscuous mode [ 1124.222558][T12668] bond_slave_0: entered promiscuous mode [ 1124.227665][T12666] loop6: detected capacity change from 0 to 4096 [ 1124.229259][T12668] bond_slave_1: entered promiscuous mode [ 1124.271021][T12668] bond0: left promiscuous mode [ 1124.276335][T12668] bond_slave_0: left promiscuous mode [ 1124.283003][T12668] bond_slave_1: left promiscuous mode [ 1124.403874][T12666] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.833525][T11413] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.229231][T12674] fido_id[12674]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1128.440716][T10325] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1128.502177][T12709] loop2: detected capacity change from 0 to 64 [ 1128.746232][T12709] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1128.838634][T10325] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1128.848763][T10325] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.864566][T10325] usb 7-1: Product: syz [ 1128.868911][T10325] usb 7-1: Manufacturer: syz [ 1128.884398][T10325] usb 7-1: SerialNumber: syz [ 1129.031324][T10325] usb 7-1: config 0 descriptor?? [ 1129.301530][T10325] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1129.320030][T12714] netlink: 'syz.5.1880': attribute type 1 has an invalid length. [ 1129.593813][T12718] loop7: detected capacity change from 0 to 1024 [ 1129.615437][T12718] EXT4-fs: Ignoring removed orlov option [ 1129.621854][T12718] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1129.941618][T10325] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1130.884734][T12719] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1131.079463][T12719] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1131.110130][T12718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1131.500371][ T9802] usb 7-1: USB disconnect, device number 7 [ 1132.563572][T12721] bond1: (slave gretap1): making interface the new active one [ 1132.580492][T12721] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1134.468332][T11491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.499004][T12748] bond0: entered promiscuous mode [ 1136.504229][T12748] bond_slave_0: entered promiscuous mode [ 1136.511163][T12748] bond_slave_1: entered promiscuous mode [ 1136.522946][T12748] batadv0: entered promiscuous mode [ 1136.542728][T12748] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1137.295793][T12748] bond0: left promiscuous mode [ 1137.300762][T12748] bond_slave_0: left promiscuous mode [ 1137.307486][T12748] bond_slave_1: left promiscuous mode [ 1138.991912][T12748] batadv0: left promiscuous mode [ 1141.642166][T10325] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1141.678043][T12777] loop6: detected capacity change from 0 to 64 [ 1141.790489][T12777] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1141.870979][T10325] usb 6-1: Using ep0 maxpacket: 32 [ 1141.914040][T10325] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1141.922812][T10325] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1141.931597][T10325] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1142.067041][T10325] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1142.077200][T10325] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1142.087372][T10325] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1142.098845][T10325] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1142.109224][T10325] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1142.123160][T10325] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1142.132805][T10325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.374909][T10325] usb 6-1: config 0 descriptor?? [ 1142.417163][T12771] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1142.734315][T10325] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1142.916228][ C0] usblp0: nonzero read bulk status received: -71 [ 1142.952635][ T5839] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1143.153424][T12771] usblp0: error -71 reading from printer [ 1143.215448][ C1] usblp0: nonzero read bulk status received: -71 [ 1143.235549][ T5839] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1143.245021][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.253309][ T5839] usb 7-1: Product: syz [ 1143.257624][ T5839] usb 7-1: Manufacturer: syz [ 1143.262458][ T5839] usb 7-1: SerialNumber: syz [ 1143.376342][ T5839] usb 7-1: config 0 descriptor?? [ 1143.401184][T12784] loop7: detected capacity change from 0 to 1024 [ 1143.486124][T12784] EXT4-fs: Ignoring removed orlov option [ 1143.495856][T12784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1143.658983][ T5839] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1143.866706][T12784] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.766047][ T5839] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1145.775606][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1145.782447][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1146.356818][ T5839] usb 7-1: USB disconnect, device number 8 [ 1146.384165][T11491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.633105][T12798] netlink: 'syz.2.1895': attribute type 1 has an invalid length. [ 1146.702682][T10994] usb 6-1: USB disconnect, device number 11 [ 1146.726667][T10994] usblp0: removed [ 1148.997755][T12810] evm: overlay not supported [ 1149.160360][T12803] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1149.192751][T12803] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1149.263751][T12815] netlink: 'syz.5.1899': attribute type 3 has an invalid length. [ 1149.756971][T12798] bond1: (slave gretap1): making interface the new active one [ 1149.874064][T12798] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1150.835101][T12839] loop5: detected capacity change from 0 to 64 [ 1151.126963][T12839] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1152.353931][ T5839] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1152.591180][T12853] loop7: detected capacity change from 0 to 1024 [ 1152.703708][ T5839] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1152.713491][ T5839] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.721899][ T5839] usb 10-1: Product: syz [ 1152.726285][ T5839] usb 10-1: Manufacturer: syz [ 1152.731152][ T5839] usb 10-1: SerialNumber: syz [ 1152.944369][T12853] EXT4-fs: Ignoring removed orlov option [ 1152.950886][T12853] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1152.973032][ T5839] usb 10-1: config 0 descriptor?? [ 1153.234351][ T5839] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1153.387330][ T9802] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1153.509505][T12853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1153.753280][ T9802] usb 3-1: Using ep0 maxpacket: 32 [ 1153.799247][ T9802] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1153.808056][ T9802] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1153.816999][ T9802] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1153.867262][ T5839] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1153.955833][ T9802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1153.966203][ T9802] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1153.976084][ T9802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1153.987446][ T9802] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1153.997619][ T9802] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1154.011076][ T9802] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1154.020306][ T9802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.538782][ T9802] usb 3-1: config 0 descriptor?? [ 1156.330978][T12858] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1156.547622][T11491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.849928][ T5839] usb 10-1: USB disconnect, device number 3 [ 1156.905711][ T9802] usb 3-1: can't set config #0, error -71 [ 1157.000583][ T9802] usb 3-1: USB disconnect, device number 45 [ 1158.175424][T12886] netlink: 'syz.5.1915': attribute type 1 has an invalid length. [ 1158.772032][T12890] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1158.890916][T12890] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1159.384237][ T9802] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1159.614175][ T9802] usb 3-1: Using ep0 maxpacket: 16 [ 1159.643183][ T9802] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.653938][ T9802] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1159.711566][ T9802] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1159.721404][ T9802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.730063][ T9802] usb 3-1: Product: syz [ 1159.734460][ T9802] usb 3-1: Manufacturer: syz [ 1159.739138][ T9802] usb 3-1: SerialNumber: syz [ 1160.064087][ T9802] usb 3-1: 0:2 : does not exist [ 1160.177060][ T9802] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1160.424490][ T9802] usb 3-1: USB disconnect, device number 46 [ 1160.605572][T12914] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1920'. [ 1161.095695][T12914] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1161.109860][ T9891] udevd[9891]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1161.204525][T12918] loop7: detected capacity change from 0 to 1024 [ 1161.310367][T12918] EXT4-fs: Ignoring removed orlov option [ 1161.316744][T12918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1161.389217][T12917] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1161.598337][T12919] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 1161.699595][T12919] bond3 (unregistering): Released all slaves [ 1161.726833][ T8210] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1161.737195][T12918] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1161.938244][ T8210] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1161.948498][ T8210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.957117][ T8210] usb 7-1: Product: syz [ 1161.961428][ T8210] usb 7-1: Manufacturer: syz [ 1161.966268][ T8210] usb 7-1: SerialNumber: syz [ 1162.824068][ T8210] usb 7-1: config 0 descriptor?? [ 1163.846919][ T8210] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1164.822321][T12949] netlink: 'syz.9.1930': attribute type 1 has an invalid length. [ 1164.875506][ T8210] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1165.113409][T11491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.575921][T12951] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1165.656487][T12951] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1165.803527][ T5839] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1166.061238][ T5839] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1166.070836][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.079024][ T5839] usb 6-1: Product: syz [ 1166.084199][ T5839] usb 6-1: Manufacturer: syz [ 1166.088956][ T5839] usb 6-1: SerialNumber: syz [ 1166.165475][T12949] bond1: (slave gretap1): making interface the new active one [ 1166.293676][T12949] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1166.368264][ T8210] usb 7-1: USB disconnect, device number 9 [ 1166.698139][ T5839] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1166.710548][ T5839] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1168.281620][ T5839] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 1168.293978][ T5839] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1168.830390][ T5839] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1168.969409][ T5839] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1169.983487][ T5839] usb 6-1: USB disconnect, device number 12 [ 1170.297262][T13002] loop5: detected capacity change from 0 to 1024 [ 1170.642975][T13002] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1170.705313][T13002] syz.5.1945: attempt to access beyond end of device [ 1170.705313][T13002] loop5: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 1170.726711][T13002] buffer_io_error: 10 callbacks suppressed [ 1170.726785][T13002] Buffer I/O error on dev loop5, logical block 458752, async page read [ 1170.740990][ T5839] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1170.902128][T13002] syz.5.1945: attempt to access beyond end of device [ 1170.902128][T13002] loop5: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 1170.922522][T13002] Buffer I/O error on dev loop5, logical block 458752, async page read [ 1171.011565][ T5839] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1171.024030][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.033368][ T5839] usb 3-1: Product: syz [ 1171.037701][ T5839] usb 3-1: Manufacturer: syz [ 1171.042597][ T5839] usb 3-1: SerialNumber: syz [ 1171.182380][ T5839] usb 3-1: config 0 descriptor?? [ 1171.513240][ T5839] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1172.533892][ T5839] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1172.677764][T13014] loop9: detected capacity change from 0 to 4096 [ 1172.819386][T13014] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1173.409743][T11941] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.907236][ T5839] usb 3-1: USB disconnect, device number 47 [ 1174.512495][ T8210] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1174.755224][ T8210] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1174.764804][ T8210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.775886][ T8210] usb 3-1: Product: syz [ 1174.780459][ T8210] usb 3-1: Manufacturer: syz [ 1174.785225][ T8210] usb 3-1: SerialNumber: syz [ 1175.461525][ T8210] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1175.473836][ T8210] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1175.753878][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1960'. [ 1175.767989][T13043] loop7: detected capacity change from 0 to 256 [ 1176.278092][T13043] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1177.010627][ T8210] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 1177.023337][ T8210] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1177.080260][ T8210] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1177.167270][ T8210] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1177.325143][ T8210] usb 3-1: USB disconnect, device number 48 [ 1178.016968][T13055] loop6: detected capacity change from 0 to 4096 [ 1178.323216][T13055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.825260][T11413] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.391157][T13062] tipc: Started in network mode [ 1179.397022][T13062] tipc: Node identity 4e6dc51a0677, cluster identity 4711 [ 1179.405169][T13062] tipc: Enabled bearer , priority 0 [ 1179.496312][T13065] syzkaller0: entered promiscuous mode [ 1179.502108][T13065] syzkaller0: entered allmulticast mode [ 1179.694269][T13062] tipc: Resetting bearer [ 1179.735413][T13061] tipc: Resetting bearer [ 1179.793499][T13061] tipc: Disabling bearer [ 1181.820747][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1971'. [ 1182.574343][T13087] syzkaller0: entered promiscuous mode [ 1182.580147][T13087] syzkaller0: entered allmulticast mode [ 1183.604832][T13095] tipc: Enabled bearer , priority 0 [ 1183.698389][T13093] syzkaller0: entered promiscuous mode [ 1183.704324][T13093] syzkaller0: entered allmulticast mode [ 1183.862094][T13093] tipc: Resetting bearer [ 1183.912401][T13092] tipc: Resetting bearer [ 1184.001382][T13092] tipc: Disabling bearer [ 1184.816528][T13105] loop5: detected capacity change from 0 to 512 [ 1184.991214][T13103] loop9: detected capacity change from 0 to 4096 [ 1185.029307][T13105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1185.717688][T10437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.491574][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1986'. [ 1187.235321][T13117] bond0: entered promiscuous mode [ 1187.240903][T13117] bond_slave_0: entered promiscuous mode [ 1187.247612][T13117] bond_slave_1: entered promiscuous mode [ 1187.261989][T13117] batadv0: entered promiscuous mode [ 1187.272156][T13117] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1187.287952][T13117] bond0: left promiscuous mode [ 1187.300744][T13117] bond_slave_0: left promiscuous mode [ 1187.309528][T13117] bond_slave_1: left promiscuous mode [ 1187.320698][T13117] batadv0: left promiscuous mode [ 1188.379720][T13130] tipc: Started in network mode [ 1188.384828][T13130] tipc: Node identity c2242a712e28, cluster identity 4711 [ 1188.397052][T13130] tipc: Enabled bearer , priority 0 [ 1188.460438][T13136] syzkaller0: entered promiscuous mode [ 1188.466085][T13136] syzkaller0: entered allmulticast mode [ 1188.592509][T13130] tipc: Resetting bearer [ 1188.641429][T13129] tipc: Resetting bearer [ 1188.704773][T13129] tipc: Disabling bearer [ 1188.821126][T13139] loop9: detected capacity change from 0 to 512 [ 1189.030669][T13139] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1189.529227][ T8210] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1189.711759][T11941] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.769370][ T8210] usb 6-1: Using ep0 maxpacket: 32 [ 1189.798860][ T8210] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1189.807626][ T8210] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1189.818335][ T8210] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1189.845000][ T8210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1189.861129][ T8210] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1189.873172][ T8210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1189.884557][ T8210] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1189.894760][ T8210] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1189.907963][ T8210] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1189.917199][ T8210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.006402][ T8210] usb 6-1: config 0 descriptor?? [ 1190.109953][T13143] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1190.297586][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1998'. [ 1190.415755][ T8210] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1190.621699][ C1] usblp0: nonzero read bulk status received: -71 [ 1190.883503][T13143] usblp0: error -71 reading from printer [ 1190.889783][ C0] usblp0: nonzero read bulk status received: -71 [ 1191.117520][ T30] audit: type=1326 audit(1769455713.714:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz.9.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6be99aeb9 code=0x7ffc0000 [ 1193.889651][ T5839] usb 6-1: USB disconnect, device number 13 [ 1193.941655][ T5839] usblp0: removed [ 1194.278931][T13168] syz_tun: entered allmulticast mode [ 1194.472901][T13171] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2004'. [ 1194.639563][T13166] syz_tun: left allmulticast mode [ 1195.539264][T13183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2009'. [ 1195.656258][ T8210] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1195.876039][ T8210] usb 10-1: Using ep0 maxpacket: 8 [ 1195.937648][ T8210] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1195.959395][ T8210] usb 10-1: config 236 has an invalid interface number: 24 but max is 3 [ 1195.968127][ T8210] usb 10-1: config 236 has an invalid interface number: 136 but max is 3 [ 1195.977127][ T8210] usb 10-1: config 236 has an invalid interface number: 97 but max is 3 [ 1195.985715][ T8210] usb 10-1: config 236 has an invalid descriptor of length 7, skipping remainder of the config [ 1196.000109][ T8210] usb 10-1: config 236 has 5 interfaces, different from the descriptor's value: 4 [ 1196.010912][ T8210] usb 10-1: config 236 has no interface number 1 [ 1196.017504][ T8210] usb 10-1: config 236 has no interface number 3 [ 1196.023918][ T8210] usb 10-1: config 236 has no interface number 4 [ 1196.224751][ T8210] usb 10-1: config 236 interface 97 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1196.260906][ T8210] usb 10-1: config 236 interface 2 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1196.274522][ T8210] usb 10-1: config 236 interface 0 has no altsetting 0 [ 1196.282085][ T8210] usb 10-1: config 236 interface 24 has no altsetting 0 [ 1196.289351][ T8210] usb 10-1: config 236 interface 136 has no altsetting 0 [ 1196.296707][ T8210] usb 10-1: config 236 interface 97 has no altsetting 0 [ 1196.309733][ T8210] usb 10-1: config 236 interface 2 has no altsetting 0 [ 1199.956383][ T8210] usb 10-1: string descriptor 0 read error: -71 [ 1200.008132][ T8210] usb 10-1: New USB device found, idVendor=1199, idProduct=901b, bcdDevice= 5.fb [ 1200.018068][ T8210] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.155372][ T8210] usb 10-1: can't set config #236, error -71 [ 1200.215449][ T8210] usb 10-1: USB disconnect, device number 4 [ 1200.397074][ T5839] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1200.583604][ T5839] usb 7-1: Using ep0 maxpacket: 32 [ 1200.665642][ T5839] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1200.674294][ T5839] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1200.683314][ T5839] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1200.748233][ T5839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1200.758257][ T5839] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1200.768242][ T5839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1200.779767][ T5839] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1200.790216][ T5839] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1200.806630][ T5839] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1200.817086][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.100764][T13210] syz_tun: entered allmulticast mode [ 1201.201312][ T5839] usb 7-1: config 0 descriptor?? [ 1201.227632][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2019'. [ 1201.274850][T13200] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1201.610649][ T5839] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1203.943264][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 1204.555465][ T8210] usb 7-1: USB disconnect, device number 10 [ 1204.637015][ T8210] usblp0: removed [ 1204.944250][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2022'. [ 1207.003625][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.010393][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1207.825274][T13243] loop6: detected capacity change from 0 to 1024 [ 1208.238207][T10438] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1208.301052][T13249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1208.334194][T13249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1208.365792][T13249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1208.385303][T13249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1209.324521][T13257] syz_tun: entered allmulticast mode [ 1209.386944][T13256] loop5: detected capacity change from 0 to 2048 [ 1209.495130][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2031'. [ 1209.683720][T13256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1209.727505][T13253] syz_tun: left allmulticast mode [ 1209.948985][ T30] audit: type=1800 audit(1769455732.553:45): pid=13256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2032" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 1210.401366][T10437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.431898][T13249] Bluetooth: hci4: command tx timeout [ 1210.668545][ T8210] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1210.742483][ T54] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1210.753358][ T54] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.861664][ T8210] usb 8-1: Using ep0 maxpacket: 32 [ 1210.919065][ T8210] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1210.927745][ T8210] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1210.942618][ T8210] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1210.966227][T13278] loop9: detected capacity change from 0 to 512 [ 1211.017095][T13278] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1211.024234][T13278] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1211.026262][ T54] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1211.048581][ T54] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.060180][ T8210] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1211.060312][ T8210] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1211.060449][ T8210] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1211.060594][ T8210] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1211.060821][ T8210] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1211.115457][ T8210] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1211.124772][ T8210] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.270221][T13278] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2037: bad orphan inode 131083 [ 1211.354609][T13278] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1211.369096][T13247] chnl_net:caif_netlink_parms(): no params data found [ 1211.489042][ T8210] usb 8-1: config 0 descriptor?? [ 1211.538956][T13270] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1211.791192][ T54] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1211.802093][ T54] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.510857][T13249] Bluetooth: hci4: command tx timeout [ 1213.925527][T13278] fscrypt (loop9): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 1213.942163][ T8210] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1214.053884][ T54] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.064553][ T54] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.264676][T13293] loop5: detected capacity change from 0 to 1024 [ 1214.460043][T11941] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.567655][T13249] Bluetooth: hci4: command tx timeout [ 1214.802073][T11043] netdevsim netdevsim2 eth17: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.104373][T11049] netdevsim netdevsim2 eth18: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.267882][T11049] netdevsim netdevsim2 eth19: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.276934][ T54] bridge_slave_1: left allmulticast mode [ 1215.282691][ T54] bridge_slave_1: left promiscuous mode [ 1215.291469][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.934997][ T54] bridge_slave_0: left allmulticast mode [ 1215.941123][ T54] bridge_slave_0: left promiscuous mode [ 1215.947790][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.959996][ T5839] usb 8-1: USB disconnect, device number 2 [ 1216.936253][T13249] Bluetooth: hci4: command tx timeout [ 1217.525661][ T5839] usblp0: removed [ 1218.167304][T13317] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2044'. [ 1218.595028][ T54] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1219.003868][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1219.047173][T13324] loop7: detected capacity change from 0 to 4096 [ 1219.099641][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1219.233155][ T54] bond0 (unregistering): Released all slaves [ 1219.286475][T13324] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1219.344990][ T54] bond1 (unregistering): Released all slaves [ 1219.494150][T11050] netdevsim netdevsim2 eth20: set [0, 0] type 1 family 0 port 8472 - 0 [ 1219.672625][T13311] syz_tun: entered allmulticast mode [ 1219.796034][T13311] syz_tun: left allmulticast mode [ 1219.981362][ T54] tipc: Left network mode [ 1220.715451][T11491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.925959][ T54] hsr_slave_0: left promiscuous mode [ 1221.956104][ T54] hsr_slave_1: left promiscuous mode [ 1221.984329][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1221.995809][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1222.048006][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1222.055859][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1222.088671][ T54] veth1_macvtap: left promiscuous mode [ 1222.146445][ T54] veth0_macvtap: left promiscuous mode [ 1222.152321][ T54] veth1_vlan: left promiscuous mode [ 1222.202859][ T54] veth0_vlan: left promiscuous mode [ 1225.636666][ T54] team0 (unregistering): Port device team_slave_1 removed [ 1225.720019][T13360] loop7: detected capacity change from 0 to 4096 [ 1225.779194][ T54] team0 (unregistering): Port device team_slave_0 removed [ 1225.824719][T13360] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1225.913564][T13362] loop9: detected capacity change from 0 to 4096 [ 1225.924149][T13362] EXT4-fs: Ignoring removed bh option [ 1225.941080][T13362] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1225.985685][T13362] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1226.368009][T11491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.864533][T13376] fscrypt (loop9): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 1229.201165][T13367] syz_tun: entered allmulticast mode [ 1229.268209][T13367] syz_tun: left allmulticast mode [ 1229.364624][T13247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.372368][T13247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.544277][T13247] bridge_slave_0: entered allmulticast mode [ 1229.691538][T13247] bridge_slave_0: entered promiscuous mode [ 1229.845878][T13247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.854348][T13247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.086631][T13247] bridge_slave_1: entered allmulticast mode [ 1230.172250][T13247] bridge_slave_1: entered promiscuous mode [ 1231.653009][T13247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.951389][T13247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.173336][T13408] loop5: detected capacity change from 0 to 512 [ 1233.185866][T13408] EXT4-fs: inline encryption not supported [ 1233.193309][T13408] EXT4-fs: Ignoring removed i_version option [ 1235.627161][T13408] EXT4-fs: error -4 creating inode table initialization thread [ 1235.635557][T13408] EXT4-fs (loop5): mount failed [ 1235.947577][T11941] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.235786][T13247] team0: Port device team_slave_0 added [ 1236.294728][T13247] team0: Port device team_slave_1 added [ 1236.877906][T13415] netlink: 'syz.5.2070': attribute type 29 has an invalid length. [ 1237.984847][T13247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.991965][T13247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1238.018334][T13247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.041036][T13421] loop6: detected capacity change from 0 to 4096 [ 1238.306571][T13421] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1238.997142][T13415] netlink: 'syz.5.2070': attribute type 29 has an invalid length. [ 1239.040105][T13417] netlink: 'syz.5.2070': attribute type 2 has an invalid length. [ 1239.048212][T13417] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2070'. [ 1239.098222][T13247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.105513][T13247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.132602][T13247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.173586][T11413] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.258239][T13441] syz_tun: entered allmulticast mode [ 1240.351228][T13247] hsr_slave_0: entered promiscuous mode [ 1240.530092][T13247] hsr_slave_1: entered promiscuous mode [ 1240.561887][T13247] debugfs: 'hsr0' already exists in 'hsr' [ 1240.568250][T13247] Cannot create hsr debugfs directory [ 1240.774609][ T5839] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1240.819292][T13436] syz_tun: left allmulticast mode [ 1240.957905][ T5839] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1240.969950][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1240.981357][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1240.991449][ T5839] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1241.004914][ T5839] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1241.014198][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.108052][ T5839] usb 6-1: config 0 descriptor?? [ 1241.536026][T13452] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1241.546729][T13452] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1241.668065][T13452] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1241.674989][T13452] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1241.706377][ T5839] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1241.904494][T13452] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1241.910606][T13452] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1242.017459][T13452] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1242.023812][T13452] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1242.111740][T13452] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1242.118445][T13452] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1242.366730][T13247] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1242.646568][T13247] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1242.848424][T13247] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.116411][T13247] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.432406][ T5839] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 1244.006368][T13247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1244.134407][T13247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1244.240411][T13247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1244.434703][T13247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1245.045537][T10241] usb 6-1: USB disconnect, device number 14 [ 1247.139782][T13482] loop7: detected capacity change from 0 to 32768 [ 1248.223812][T13494] syz_tun: entered allmulticast mode [ 1248.609862][T13493] syz_tun: left allmulticast mode [ 1248.877328][T13247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.174605][T13247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.466219][T11049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.473832][T11049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.652464][T11049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.660073][T11049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.216227][T13506] loop5: detected capacity change from 0 to 4096 [ 1250.374595][T13506] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1250.501078][T13506] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1250.706477][T13517] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1251.881883][T10325] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1251.908634][T10994] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1252.128994][T10325] usb 8-1: Using ep0 maxpacket: 8 [ 1252.201919][T10994] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1252.211908][T10994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.220399][T10994] usb 6-1: Product: syz [ 1252.224712][T10994] usb 6-1: Manufacturer: syz [ 1252.229612][T10994] usb 6-1: SerialNumber: syz [ 1252.256016][T10325] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1252.266224][T10325] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1252.276233][T10325] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1252.289708][T10325] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1252.303796][T10325] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1252.313091][T10325] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.916568][T10325] usb 8-1: GET_CAPABILITIES returned 0 [ 1252.922723][T10325] usbtmc 8-1:16.0: can't read capabilities [ 1252.970757][T10994] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1252.982979][T10994] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1253.168334][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1253.177702][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1253.243508][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1253.252851][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1253.342776][T13247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.362468][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1253.371759][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1253.488516][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1253.497880][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1253.619499][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1253.628874][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1253.714071][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1253.723420][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1253.753474][T13247] veth0_vlan: entered promiscuous mode [ 1253.823530][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1253.832916][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1253.843248][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1253.852569][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1253.881489][T10241] usb 8-1: USB disconnect, device number 3 [ 1253.993254][T13247] veth1_vlan: entered promiscuous mode [ 1254.292651][T13537] loop9: detected capacity change from 0 to 256 [ 1254.390029][T13537] exfat: Deprecated parameter 'utf8' [ 1254.395932][T13537] exfat: Deprecated parameter 'namecase' [ 1254.451587][T13537] exfat: Deprecated parameter 'namecase' [ 1254.457813][T13537] exfat: Deprecated parameter 'utf8' [ 1254.534583][T13247] veth0_macvtap: entered promiscuous mode [ 1254.662922][T13537] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1254.748215][T13537] exFAT-fs (loop9): failed to test first cluster bit of root dir(5) [ 1254.784829][T13247] veth1_macvtap: entered promiscuous mode [ 1255.144090][T10994] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 1255.161612][T10994] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1255.174082][T10994] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1255.273023][T13247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.363515][T10994] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1255.411291][T13247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.476147][T10994] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1255.567044][T10994] usb 6-1: USB disconnect, device number 15 [ 1255.592584][T13544] syz_tun: entered allmulticast mode [ 1255.717451][T11049] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.789803][T11049] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.860303][T11049] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.026462][T11049] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.078247][T13542] syz_tun: left allmulticast mode [ 1256.981044][ T5077] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1257.003993][ T5077] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1257.013784][ T5077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1257.066427][ T5077] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1257.103238][ T5077] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1257.149393][T13249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1257.188357][T13249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1257.226265][T13249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1257.316802][T13249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1257.365718][T13249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1258.286056][T13569] loop5: detected capacity change from 0 to 4096 [ 1258.438130][T13569] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1258.537709][T13569] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1258.710320][T13579] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1258.748706][T13577] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2106'. [ 1259.425700][ T5077] Bluetooth: hci1: command tx timeout [ 1259.740808][T13555] chnl_net:caif_netlink_parms(): no params data found [ 1260.929870][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.098010][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.272731][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.503359][ T5077] Bluetooth: hci1: command tx timeout [ 1261.512597][T13602] loop9: detected capacity change from 0 to 1024 [ 1261.641061][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.652552][T11836] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1263.582072][ T5077] Bluetooth: hci1: command tx timeout [ 1263.915376][T11836] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1264.224868][ T12] bridge_slave_1: left allmulticast mode [ 1264.230947][ T12] bridge_slave_1: left promiscuous mode [ 1264.240527][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.430687][ T12] bridge_slave_0: left allmulticast mode [ 1264.436768][ T12] bridge_slave_0: left promiscuous mode [ 1264.443456][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.675946][ T5077] Bluetooth: hci1: command tx timeout [ 1265.981831][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.054029][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.129471][ T12] bond0 (unregistering): Released all slaves [ 1266.239685][T11836] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.347802][T13636] loop9: detected capacity change from 0 to 512 [ 1266.360421][T13636] vfat: Unknown parameter 'subj_type' [ 1266.772913][T13622] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2115'. [ 1266.791823][T13555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.799263][T13555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.908535][T13555] bridge_slave_0: entered allmulticast mode [ 1266.982195][T13555] bridge_slave_0: entered promiscuous mode [ 1267.063341][T13555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.071212][T13555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.178795][T13555] bridge_slave_1: entered allmulticast mode [ 1267.289383][T13555] bridge_slave_1: entered promiscuous mode [ 1267.336074][T11836] netdevsim netdevsim6 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1267.345579][ T12] tipc: Left network mode [ 1268.399038][T13555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.414551][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1268.421534][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1268.636163][T13249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1268.652268][T13249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1268.666994][T13249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1268.692211][T13249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1268.707291][T13249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1268.805408][T13555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.919254][ T12] hsr_slave_0: left promiscuous mode [ 1268.970064][ T12] hsr_slave_1: left promiscuous mode [ 1269.006723][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.014454][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.091542][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.104499][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.246411][ T12] veth1_macvtap: left promiscuous mode [ 1269.302587][ T12] veth0_macvtap: left promiscuous mode [ 1269.308484][ T12] veth1_vlan: left promiscuous mode [ 1269.351252][ T12] veth0_vlan: left promiscuous mode [ 1270.862782][ T5077] Bluetooth: hci0: command tx timeout [ 1271.407579][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1271.475557][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1272.438270][T13555] team0: Port device team_slave_0 added [ 1272.503519][T13555] team0: Port device team_slave_1 added [ 1272.807802][T13555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.814920][T13555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.841547][T13555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.911469][T13677] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2125'. [ 1272.937421][ T5077] Bluetooth: hci0: command tx timeout [ 1272.968869][T13555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.975972][T13555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.003266][T13555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.311897][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.414968][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.691650][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.022770][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.164294][T13555] hsr_slave_0: entered promiscuous mode [ 1274.211198][T13555] hsr_slave_1: entered promiscuous mode [ 1275.016939][ T5077] Bluetooth: hci0: command tx timeout [ 1275.047459][ T9302] netdevsim netdevsim0 eth21: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.456038][T13309] netdevsim netdevsim0 eth22: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.734281][T13309] netdevsim netdevsim0 eth23: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.223380][T13715] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2134'. [ 1276.323552][T12259] netdevsim netdevsim0 eth24: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.391901][T13555] netdevsim netdevsim1 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1276.453559][ T12] bridge_slave_1: left allmulticast mode [ 1276.461125][ T12] bridge_slave_1: left promiscuous mode [ 1276.468111][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.575149][ T12] bridge_slave_0: left allmulticast mode [ 1276.586857][ T12] bridge_slave_0: left promiscuous mode [ 1276.593307][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.096722][ T5077] Bluetooth: hci0: command tx timeout [ 1277.407668][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1277.469739][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1277.503564][ T12] bond0 (unregistering): Released all slaves [ 1277.620211][T13555] netdevsim netdevsim1 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1277.836330][T13732] tipc: Enabled bearer , priority 0 [ 1277.930142][T13555] netdevsim netdevsim1 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1278.053641][ T12] hsr_slave_0: left promiscuous mode [ 1278.111003][ T12] hsr_slave_1: left promiscuous mode [ 1278.140521][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.148210][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.190237][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1278.198020][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.241034][T13739] loop7: detected capacity change from 0 to 256 [ 1278.271417][T13739] exfat: Deprecated parameter 'utf8' [ 1278.300206][ T12] veth1_macvtap: left promiscuous mode [ 1278.305314][T13739] exfat: Deprecated parameter 'namecase' [ 1278.313747][T13739] exfat: Deprecated parameter 'namecase' [ 1278.314614][ T12] veth0_macvtap: left promiscuous mode [ 1278.319848][T13739] exfat: Deprecated parameter 'utf8' [ 1278.357736][ T12] veth1_vlan: left promiscuous mode [ 1278.363262][ T12] veth0_vlan: left promiscuous mode [ 1278.440585][T13739] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1278.497200][T13739] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 1280.414118][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1280.485051][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1280.877250][T13645] chnl_net:caif_netlink_parms(): no params data found [ 1281.124613][T13761] netlink: 'syz.9.2143': attribute type 1 has an invalid length. [ 1281.223551][T13730] tipc: Resetting bearer [ 1281.298131][T13555] netdevsim netdevsim1 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1281.368310][T13725] tipc: Resetting bearer [ 1281.523514][T13725] tipc: Disabling bearer [ 1281.540146][ T5839] tipc: Node number set to 2815085454 [ 1281.766660][T13762] bond2: (slave bridge1): making interface the new active one [ 1281.827278][T13762] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1281.911599][T13766] macvlan2: entered promiscuous mode [ 1281.918758][T13766] macvlan2: entered allmulticast mode [ 1281.934390][T13766] bond2: entered promiscuous mode [ 1281.939683][T13766] bridge1: entered promiscuous mode [ 1281.954389][T13766] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1281.981212][T13766] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1281.999177][T13766] bond2: left promiscuous mode [ 1282.004645][T13766] bridge1: left promiscuous mode [ 1282.614574][T13555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1282.759184][T13555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1283.302435][T13555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1283.493610][T13555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1284.358303][T13780] loop9: detected capacity change from 0 to 4096 [ 1284.637879][T13780] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1284.909893][T13780] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1285.002837][T13780] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1285.555290][T11941] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.603765][T13645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.611461][T13645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.664571][T13645] bridge_slave_0: entered allmulticast mode [ 1285.727569][T13645] bridge_slave_0: entered promiscuous mode [ 1285.787859][T13645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.795752][T13645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.895639][T13645] bridge_slave_1: entered allmulticast mode [ 1285.931848][T13645] bridge_slave_1: entered promiscuous mode [ 1286.543815][T13645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1286.732477][T13645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.795958][T13555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.262500][T13645] team0: Port device team_slave_0 added [ 1287.433924][T13645] team0: Port device team_slave_1 added [ 1287.474602][T13555] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.947717][T13793] loop7: detected capacity change from 0 to 256 [ 1287.968347][T13645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.976965][T13645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.006727][T13645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.034233][T13793] exfat: Deprecated parameter 'utf8' [ 1288.090543][T13793] exfat: Deprecated parameter 'namecase' [ 1288.122525][T13793] exfat: Deprecated parameter 'namecase' [ 1288.128499][T13793] exfat: Deprecated parameter 'utf8' [ 1288.307135][T13793] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1288.393962][T13645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.401226][T13645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.431097][T13645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.474352][T13793] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 1288.765064][T11049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.772627][T11049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1289.917456][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.924991][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.277943][T13645] hsr_slave_0: entered promiscuous mode [ 1290.311892][T13645] hsr_slave_1: entered promiscuous mode [ 1290.344851][T13645] debugfs: 'hsr0' already exists in 'hsr' [ 1290.351057][T13645] Cannot create hsr debugfs directory [ 1292.330209][T13645] netdevsim netdevsim0 eth24 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.479054][T13821] loop5: detected capacity change from 0 to 4096 [ 1292.505263][T13645] netdevsim netdevsim0 eth23 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.638721][T13645] netdevsim netdevsim0 eth22 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.702946][T13821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1292.765626][T13645] netdevsim netdevsim0 eth21 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.846679][T13821] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1292.881607][T13821] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1293.237477][T10437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1293.603243][T13555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.730991][T13645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1293.850306][T13645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1293.959357][T13645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1294.074187][T13645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1294.579075][T13555] veth0_vlan: entered promiscuous mode [ 1294.781680][T13555] veth1_vlan: entered promiscuous mode [ 1295.433558][T13555] veth0_macvtap: entered promiscuous mode [ 1295.500809][T13555] veth1_macvtap: entered promiscuous mode [ 1295.910115][T13555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1296.028341][T13555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1296.181906][T13645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1296.223844][T10877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.311050][T10877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.335590][T12031] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1296.355522][T10877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.408894][T12259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.526171][T12031] usb 6-1: Using ep0 maxpacket: 8 [ 1296.543388][T13645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1296.591057][T12031] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1296.608367][T12031] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1296.618595][T12031] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1296.628882][T12031] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1296.639099][T12031] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1296.652444][T12031] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1296.661786][T12031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.810712][T12259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.818231][T12259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.974519][T12259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.982051][T12259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1297.175453][T12031] usb 6-1: GET_CAPABILITIES returned f8 [ 1297.181403][T12031] usbtmc 6-1:16.0: can't read capabilities [ 1297.452185][T13857] usbtmc 6-1:16.0: INDICATOR_PULSE returned 68 [ 1297.661751][T12031] usb 6-1: USB disconnect, device number 16 [ 1298.300469][T13873] loop7: detected capacity change from 0 to 4096 [ 1298.390997][T13880] loop9: detected capacity change from 0 to 256 [ 1298.442329][T13880] exfat: Deprecated parameter 'utf8' [ 1298.518727][T13880] exfat: Deprecated parameter 'namecase' [ 1298.549970][T13880] exfat: Deprecated parameter 'namecase' [ 1298.558696][T13880] exfat: Deprecated parameter 'utf8' [ 1298.597972][T13873] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1298.785035][T13880] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1298.826326][T13873] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1298.842390][T13880] exFAT-fs (loop9): failed to test first cluster bit of root dir(5) [ 1298.904660][T13873] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1299.400306][T11491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.838566][T13645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.732724][T13645] veth0_vlan: entered promiscuous mode [ 1300.861795][T13645] veth1_vlan: entered promiscuous mode [ 1301.233801][T13645] veth0_macvtap: entered promiscuous mode [ 1301.374266][T13645] veth1_macvtap: entered promiscuous mode [ 1301.600123][T13645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1301.714048][T13645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1301.876400][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.938726][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.988768][T12259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.022247][T12259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.665255][T13920] loop9: detected capacity change from 0 to 2048 [ 1302.855576][T13920] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1303.095285][ T30] audit: type=1800 audit(1769455825.720:46): pid=13920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2172" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 1303.786829][T11941] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1304.127988][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1304.136188][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1304.479368][ T9302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1304.490866][ T9302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.255602][ T30] audit: type=1326 audit(1769455827.901:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.9.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6be99aeb9 code=0x7ffc0000 [ 1305.278381][ T30] audit: type=1326 audit(1769455827.901:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.9.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6be99aeb9 code=0x7ffc0000 [ 1305.304558][ T30] audit: type=1326 audit(1769455827.901:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.9.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc6be99aeb9 code=0x7ffc0000 [ 1305.328179][ T30] audit: type=1326 audit(1769455827.901:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.9.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6be99aeb9 code=0x7ffc0000 [ 1305.351137][ T30] audit: type=1326 audit(1769455827.901:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.9.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6be99aeb9 code=0x7ffc0000 [ 1305.373994][ T30] audit: type=1326 audit(1769455827.911:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.9.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc6be99aeb9 code=0x7ffc0000 [ 1306.084729][T13947] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1307.811560][T13962] loop9: detected capacity change from 0 to 256 [ 1307.922030][T13962] exfat: Deprecated parameter 'utf8' [ 1307.968165][T13962] exfat: Deprecated parameter 'namecase' [ 1307.989912][T13962] exfat: Deprecated parameter 'namecase' [ 1307.995785][T13962] exfat: Deprecated parameter 'utf8' [ 1308.165246][T13962] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1308.259603][T13962] exFAT-fs (loop9): failed to test first cluster bit of root dir(5) [ 1308.340150][T13959] loop1: detected capacity change from 0 to 4096 [ 1308.547345][T13959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1308.723085][T13974] overlayfs: missing 'lowerdir' [ 1309.196322][T13555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.265124][T14010] loop5: detected capacity change from 0 to 256 [ 1312.313770][T14010] exfat: Deprecated parameter 'utf8' [ 1312.388630][T14010] exfat: Deprecated parameter 'namecase' [ 1312.422762][T14010] exfat: Deprecated parameter 'namecase' [ 1312.428939][T14010] exfat: Deprecated parameter 'utf8' [ 1312.492045][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.500259][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.607999][T14010] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1312.712348][T14010] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 1312.914011][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.922313][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.174889][T14026] loop1: detected capacity change from 0 to 4096 [ 1315.422608][T14026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1316.613955][T13555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1317.303022][T14053] loop1: detected capacity change from 0 to 256 [ 1317.388304][T14053] exfat: Deprecated parameter 'utf8' [ 1317.393963][T14053] exfat: Deprecated parameter 'namecase' [ 1317.456021][T14053] exfat: Deprecated parameter 'namecase' [ 1317.461899][T14053] exfat: Deprecated parameter 'utf8' [ 1317.544336][T14050] loop5: detected capacity change from 0 to 4096 [ 1317.707355][T14053] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1317.715233][T14058] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1317.755413][T14053] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 1317.793980][T14050] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1317.862772][T14050] Remounting filesystem read-only [ 1317.898138][T14060] loop7: detected capacity change from 0 to 136 [ 1321.024686][T14083] No such timeout policy "syz1" [ 1321.599116][T14078] loop9: detected capacity change from 0 to 4096 [ 1322.099376][T14087] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1325.415674][T14099] loop0: detected capacity change from 0 to 16 [ 1325.507317][T14099] erofs (device loop0): mounted with root inode @ nid 36. [ 1325.554423][T14102] loop7: detected capacity change from 0 to 256 [ 1325.598871][T14102] exfat: Deprecated parameter 'utf8' [ 1325.651457][T14102] exfat: Deprecated parameter 'namecase' [ 1325.657741][T14102] exfat: Deprecated parameter 'namecase' [ 1325.667213][T14102] exfat: Deprecated parameter 'utf8' [ 1326.001522][T14102] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1326.060983][T14102] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 1326.921871][T14113] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2218'. [ 1326.977057][T14113] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2218'. [ 1328.599717][T12031] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1328.907816][T12031] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1328.917266][T12031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.925744][T12031] usb 2-1: Product: syz [ 1328.930148][T12031] usb 2-1: Manufacturer: syz [ 1328.934888][T12031] usb 2-1: SerialNumber: syz [ 1329.362968][ T30] audit: type=1326 audit(1769455852.023:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14144 comm="syz.7.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18579aeb9 code=0x7ffc0000 [ 1329.489283][T12031] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1329.501661][T12031] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1329.509660][ T30] audit: type=1326 audit(1769455852.073:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14144 comm="syz.7.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18579aeb9 code=0x7ffc0000 [ 1329.535286][ T30] audit: type=1326 audit(1769455852.093:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14144 comm="syz.7.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb18575b78e code=0x7ffc0000 [ 1329.562469][ T30] audit: type=1326 audit(1769455852.093:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14144 comm="syz.7.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18579aeb9 code=0x7ffc0000 [ 1329.586052][ T30] audit: type=1326 audit(1769455852.113:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14144 comm="syz.7.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fb18579aeb9 code=0x7ffc0000 [ 1329.608502][ T30] audit: type=1326 audit(1769455852.113:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14144 comm="syz.7.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18579aeb9 code=0x7ffc0000 [ 1329.632167][ T30] audit: type=1326 audit(1769455852.113:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14144 comm="syz.7.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18579aeb9 code=0x7ffc0000 [ 1329.829671][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1329.836438][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1330.740264][T14154] loop5: detected capacity change from 0 to 2048 [ 1330.972861][T14154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1331.010240][T14152] loop7: detected capacity change from 0 to 4096 [ 1331.141719][ T30] audit: type=1800 audit(1769455853.814:60): pid=14154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2230" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 1331.351220][T12031] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1331.363430][T12031] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1331.482301][T12031] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1331.989773][T12031] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1333.167754][T12031] usb 2-1: USB disconnect, device number 33 [ 1334.956967][T12259] ntfs3(loop7): ino=5, mi_enum_attr [ 1335.028213][T10437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1338.124701][T14190] loop0: detected capacity change from 0 to 16 [ 1338.168752][T14190] erofs (device loop0): mounted with root inode @ nid 36. [ 1338.198073][T14190] erofs (device loop0): readahead error at folio 6 @ nid 36 [ 1338.206143][T14190] erofs (device loop0): readahead error at folio 4 @ nid 36 [ 1338.214769][T14190] erofs (device loop0): bogus lookback distance 1 @ lcn 0 of nid 36 [ 1338.222928][T14190] erofs (device loop0): readahead error at folio 0 @ nid 36 [ 1338.231036][T14190] syz.0.2240: attempt to access beyond end of device [ 1338.231036][T14190] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1338.268933][T14190] syz.0.2240: attempt to access beyond end of device [ 1338.268933][T14190] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1338.283830][T14190] syz.0.2240: attempt to access beyond end of device [ 1338.283830][T14190] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 1338.298285][T14190] syz.0.2240: attempt to access beyond end of device [ 1338.298285][T14190] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1338.313498][T14190] erofs (device loop0): bogus lookback distance 1 @ lcn 0 of nid 36 [ 1338.322312][T14190] syz.0.2240: attempt to access beyond end of device [ 1338.322312][T14190] loop0: rw=0, sector=296, nr_sectors = 8 limit=16 [ 1338.336113][T14190] erofs (device loop0): read error -5 @ 0 of nid 36 [ 1338.342933][T14190] erofs (device loop0): failed to readdir of logical block 0 of nid 36 [ 1340.208770][ T8210] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1340.430334][T14202] loop5: detected capacity change from 0 to 2048 [ 1340.474311][ T8210] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1340.484059][ T8210] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1340.493462][ T8210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.603560][ T8210] usb 2-1: config 0 descriptor?? [ 1340.616898][T14201] loop0: detected capacity change from 0 to 4096 [ 1340.675746][T14202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1340.881341][ T30] audit: type=1800 audit(1769455863.548:61): pid=14202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2243" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 1341.702341][T10437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.614186][T12031] usb 2-1: USB disconnect, device number 34 [ 1348.477527][T14260] loop1: detected capacity change from 0 to 2048 [ 1349.381121][T14260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1349.640901][ T30] audit: type=1800 audit(1769455872.293:62): pid=14260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2258" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1349.791528][T14276] loop7: detected capacity change from 0 to 256 [ 1349.885404][T14276] exfat: Deprecated parameter 'utf8' [ 1349.951446][T14276] exfat: Deprecated parameter 'namecase' [ 1349.999347][T14276] exfat: Deprecated parameter 'namecase' [ 1350.005212][T14276] exfat: Deprecated parameter 'utf8' [ 1350.187925][T14276] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1350.237002][T14276] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 1350.268912][T13555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.287166][T14285] loop1: detected capacity change from 0 to 4096 [ 1351.295848][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2268'. [ 1356.184144][T14319] loop5: detected capacity change from 0 to 2048 [ 1356.223509][T14325] loop0: detected capacity change from 0 to 256 [ 1356.268086][T14325] exfat: Deprecated parameter 'utf8' [ 1356.306675][T14325] exfat: Deprecated parameter 'namecase' [ 1356.344734][T14325] exfat: Deprecated parameter 'namecase' [ 1356.352053][T14325] exfat: Deprecated parameter 'utf8' [ 1356.563298][ T59] ntfs3(loop1): ino=5, mi_enum_attr [ 1356.733754][T14319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1356.776051][T14325] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1356.816875][T14325] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 1357.394529][T10437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.017216][T14343] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2283'. [ 1362.844717][T14377] loop0: detected capacity change from 0 to 1024 [ 1362.870670][T14380] loop1: detected capacity change from 0 to 2048 [ 1362.883967][T14369] loop7: detected capacity change from 0 to 4096 [ 1363.043499][T14380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1363.063861][T14377] hfsplus: bad catalog file entry [ 1363.069124][T14377] hfsplus: failed to load root directory [ 1363.158372][T14369] ntfs3(loop7): Failed to read $UpCase (-4). [ 1363.291280][T14387] loop5: detected capacity change from 0 to 256 [ 1363.341967][T14387] exfat: Deprecated parameter 'utf8' [ 1363.357907][T14387] exfat: Deprecated parameter 'namecase' [ 1363.403553][T14387] exfat: Deprecated parameter 'namecase' [ 1363.409629][T14387] exfat: Deprecated parameter 'utf8' [ 1363.627336][T14387] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1363.691341][T13555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.708813][T14387] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 1364.851825][T12031] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1365.052979][T12031] usb 8-1: Using ep0 maxpacket: 32 [ 1365.168409][T12031] usb 8-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1365.181562][T12031] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.189683][T12031] usb 8-1: Product: syz [ 1365.195465][T12031] usb 8-1: Manufacturer: syz [ 1365.200216][T12031] usb 8-1: SerialNumber: syz [ 1365.975896][T12031] usb 8-1: config 0 descriptor?? [ 1366.683670][T12031] peak_usb 8-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1366.694119][T12031] peak_usb 8-1:0.0 can0: sending command failure: -22 [ 1366.701506][T12031] peak_usb 8-1:0.0 can0: sending command failure: -22 [ 1366.948999][T12031] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -22 [ 1367.076549][T12031] usb 8-1: USB disconnect, device number 4 [ 1367.865164][T14425] loop1: detected capacity change from 0 to 2048 [ 1367.950353][T14376] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1367.981535][T14425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1368.180733][T14376] usb 10-1: Using ep0 maxpacket: 32 [ 1369.702355][T14376] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1369.711238][T14376] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1369.720287][T14376] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1370.320340][T13555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.718346][T14376] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1370.728501][T14376] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1370.738608][T14376] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1370.750168][T14376] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1370.760634][T14376] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1370.774169][T14376] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1370.783655][T14376] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.942118][T14376] usb 10-1: config 0 descriptor?? [ 1371.283677][T14376] usb 10-1: can't set config #0, error -71 [ 1371.336981][T14376] usb 10-1: USB disconnect, device number 5 [ 1371.733966][T14445] loop1: detected capacity change from 0 to 256 [ 1371.821670][T14445] exfat: Deprecated parameter 'utf8' [ 1371.939510][T14445] exfat: Deprecated parameter 'namecase' [ 1371.946910][T14445] exfat: Deprecated parameter 'namecase' [ 1371.955911][T14445] exfat: Deprecated parameter 'utf8' [ 1372.639143][T14445] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1372.758446][T14445] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 1374.733866][T14473] loop0: detected capacity change from 0 to 512 [ 1376.782168][T14473] EXT4-fs: Ignoring removed mblk_io_submit option [ 1376.789828][T14473] EXT4-fs: Ignoring removed bh option [ 1378.067646][T14473] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1378.080227][T14473] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1378.314997][T14473] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 1378.530956][T14483] loop1: detected capacity change from 0 to 16 [ 1378.715423][T14483] erofs (device loop1): mounted with root inode @ nid 36. [ 1381.783660][T14376] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1381.999992][T14376] usb 10-1: Using ep0 maxpacket: 32 [ 1382.088973][T14376] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1382.097778][T14376] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1382.106811][T14376] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1382.237533][T14376] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1382.248363][T14376] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1382.258476][T14376] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1382.275174][T14376] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1382.287220][T14376] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1382.300732][T14376] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1382.310195][T14376] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.221973][ T5077] Bluetooth: hci1: command 0x0406 tx timeout [ 1383.563393][T14376] usb 10-1: config 0 descriptor?? [ 1383.873446][T14507] loop7: detected capacity change from 0 to 256 [ 1383.947665][T14507] exfat: Deprecated parameter 'utf8' [ 1384.062686][T14507] exfat: Deprecated parameter 'namecase' [ 1384.068970][T14507] exfat: Deprecated parameter 'namecase' [ 1384.075165][T14507] exfat: Deprecated parameter 'utf8' [ 1384.241572][T14376] usb 10-1: can't set config #0, error -71 [ 1384.292410][T14376] usb 10-1: USB disconnect, device number 6 [ 1384.406923][T14507] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1384.516553][T14507] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 1391.078952][T14536] loop1: detected capacity change from 0 to 16 [ 1391.134849][T14536] erofs (device loop1): mounted with root inode @ nid 36. [ 1391.255610][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.262488][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1391.718386][T14528] syzkaller0: delete flow: hash 3197218894 index 1 [ 1396.755045][T14565] loop0: detected capacity change from 0 to 256 [ 1396.786322][T13703] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1396.883672][T14565] exfat: Deprecated parameter 'utf8' [ 1396.966077][T14565] exfat: Deprecated parameter 'namecase' [ 1397.010461][T14565] exfat: Deprecated parameter 'namecase' [ 1397.018132][T14565] exfat: Deprecated parameter 'utf8' [ 1397.061887][T13703] usb 2-1: Using ep0 maxpacket: 32 [ 1397.156770][T13703] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1397.165406][T13703] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1397.174229][T13703] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1397.299580][T13703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1397.309595][T13703] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1397.323314][T13703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1397.336311][T13703] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1397.346808][T13703] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1397.360156][T13703] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1397.369546][T13703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.437373][T14565] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1397.474993][T14565] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 1397.632976][T13703] usb 2-1: config 0 descriptor?? [ 1397.643136][T14559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1397.981640][T13703] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1397.998696][T14571] loop7: detected capacity change from 0 to 256 [ 1398.152595][ C1] usblp0: nonzero read bulk status received: -71 [ 1398.410923][T14559] usblp0: error -71 reading from printer [ 1398.454793][ C1] usblp0: nonzero read bulk status received: -71 [ 1399.233118][T14582] overlayfs: workdir and upperdir must be separate subtrees [ 1401.130750][T13703] usb 2-1: USB disconnect, device number 35 [ 1401.224484][T13703] usblp0: removed [ 1404.520261][T14602] loop7: detected capacity change from 0 to 2048 [ 1404.713123][T14609] overlayfs: failed to resolve './bus': -2 [ 1404.863351][ T5077] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1404.912869][T14602] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1404.952318][ T5077] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1404.971911][ T5077] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1405.000391][ T5077] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1405.019452][ T5077] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1405.039349][T14618] loop0: detected capacity change from 0 to 256 [ 1405.144545][T14618] exfat: Deprecated parameter 'utf8' [ 1405.150108][T14618] exfat: Deprecated parameter 'namecase' [ 1405.241399][T14618] exfat: Deprecated parameter 'namecase' [ 1405.247177][T14618] exfat: Deprecated parameter 'utf8' [ 1405.362548][ T30] audit: type=1800 audit(1769455928.061:63): pid=14602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2353" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 1405.494100][T14618] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1405.581025][T14618] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 1405.825470][T11491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1407.133463][T13249] Bluetooth: hci4: command tx timeout [ 1409.700923][T13249] Bluetooth: hci4: command tx timeout [ 1411.015262][T14657] overlayfs: failed to resolve './bus': -2 [ 1411.148415][T14612] chnl_net:caif_netlink_parms(): no params data found [ 1411.345846][T14659] loop1: detected capacity change from 0 to 2048 [ 1411.509823][T14659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1411.751180][ T5077] Bluetooth: hci4: command tx timeout [ 1411.828172][ T30] audit: type=1800 audit(1769455934.484:64): pid=14659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2368" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1412.219874][T13555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1412.628767][T14673] loop0: detected capacity change from 0 to 256 [ 1412.700168][T14673] exfat: Deprecated parameter 'utf8' [ 1412.705822][T14673] exfat: Deprecated parameter 'namecase' [ 1412.816674][T14673] exfat: Deprecated parameter 'namecase' [ 1412.823006][T14673] exfat: Deprecated parameter 'utf8' [ 1413.857387][ T5077] Bluetooth: hci4: command tx timeout [ 1418.756162][T14673] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1418.848119][T14673] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 1420.510284][T14612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.517988][T14612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.529495][T14612] bridge_slave_0: entered allmulticast mode [ 1421.183090][T14612] bridge_slave_0: entered promiscuous mode [ 1421.275462][T14612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.283103][T14612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.399485][T14612] bridge_slave_1: entered allmulticast mode [ 1421.436673][T14612] bridge_slave_1: entered promiscuous mode [ 1421.813735][T14700] loop1: detected capacity change from 0 to 512 [ 1421.846069][T14700] EXT4-fs: Ignoring removed mblk_io_submit option [ 1421.853139][T14700] EXT4-fs: Ignoring removed bh option [ 1421.977152][T14700] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1421.989127][T14700] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1422.071554][T14705] overlayfs: failed to resolve './bus': -2 [ 1422.101981][T14700] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 1422.501862][T14517] syz_tun (unregistering): left allmulticast mode [ 1422.891121][T14612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1423.010464][ T59] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.187565][T14612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.285665][ T59] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.711025][ T59] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.870678][T14612] team0: Port device team_slave_0 added [ 1424.006071][ T59] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.150730][T14612] team0: Port device team_slave_1 added [ 1425.446379][T14612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.453611][T14612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.482654][T14612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.582002][ T12] netdevsim netdevsim9 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1427.673224][T14612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1427.680421][T14612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1427.706784][T14612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.036063][ T12] netdevsim netdevsim9 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1428.175120][ T13] netdevsim netdevsim9 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1428.188582][ T59] bridge_slave_1: left allmulticast mode [ 1428.194646][ T59] bridge_slave_1: left promiscuous mode [ 1428.201606][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.357924][ T59] bridge_slave_0: left allmulticast mode [ 1428.358755][T14736] loop1: detected capacity change from 0 to 4096 [ 1428.364261][ T59] bridge_slave_0: left promiscuous mode [ 1428.376805][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.425179][T14738] loop7: detected capacity change from 0 to 512 [ 1428.469757][T14738] EXT4-fs: Ignoring removed nobh option [ 1428.831076][T14738] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1428.906805][T14738] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1429.582041][T14745] ptrace attach of "./syz-executor exec"[11491] was attempted by ""[14745] [ 1430.408724][ T59] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1430.849411][ T59] bond2 (unregistering): (slave bridge1): Releasing active interface [ 1431.062872][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1431.167594][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1431.290026][ T59] bond0 (unregistering): Released all slaves [ 1431.430767][ T59] bond1 (unregistering): Released all slaves [ 1431.930320][ T59] bond2 (unregistering): Released all slaves [ 1433.209163][T13249] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1433.351501][T13249] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1433.361437][T13249] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1433.390096][T13249] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1433.597571][T13249] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1433.735324][ T13] netdevsim netdevsim9 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1433.938147][ T59] tipc: Left network mode [ 1434.116302][T14612] hsr_slave_0: entered promiscuous mode [ 1434.148366][T14612] hsr_slave_1: entered promiscuous mode [ 1434.194431][T14612] debugfs: 'hsr0' already exists in 'hsr' [ 1434.200526][T14612] Cannot create hsr debugfs directory [ 1434.627923][T11491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1436.075737][T13249] Bluetooth: hci5: command tx timeout [ 1436.520366][ T59] hsr_slave_0: left promiscuous mode [ 1436.542840][T14784] loop7: detected capacity change from 0 to 256 [ 1436.572237][T14784] exfat: Deprecated parameter 'utf8' [ 1436.590732][ T59] hsr_slave_1: left promiscuous mode [ 1436.621386][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1436.629831][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1436.739693][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1436.747419][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1436.854289][ T59] veth1_macvtap: left promiscuous mode [ 1436.890877][ T59] veth0_macvtap: left promiscuous mode [ 1436.919775][ T59] veth1_vlan: left promiscuous mode [ 1436.960292][ T59] veth0_vlan: left promiscuous mode [ 1437.014622][T14784] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1438.165284][T13249] Bluetooth: hci5: command tx timeout [ 1440.214782][T13249] Bluetooth: hci5: command tx timeout [ 1440.275548][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1440.355207][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1442.013476][T13703] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1442.358384][T13249] Bluetooth: hci5: command tx timeout [ 1442.503390][T13703] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 1442.511916][T13703] usb 2-1: config 0 has no interface number 0 [ 1442.598862][T13703] usb 2-1: config 0 interface 101 has no altsetting 0 [ 1442.606828][T13703] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1442.616581][T13703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.749223][T13703] usb 2-1: config 0 descriptor?? [ 1442.900414][T13703] cp210x 2-1:0.101: cp210x converter detected [ 1443.122535][T13703] cp210x 2-1:0.101: failed to get vendor val 0x370b size 1: -121 [ 1443.130715][T13703] cp210x 2-1:0.101: querying part number failed [ 1443.237203][T13703] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1443.509512][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.848367][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.186082][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.259127][T14808] loop7: detected capacity change from 0 to 512 [ 1444.344023][T14808] EXT4-fs: Ignoring removed nobh option [ 1444.432413][T14808] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1444.455815][T14808] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1444.474263][T14612] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.622052][T14808] ptrace attach of "./syz-executor exec"[11491] was attempted by ""[14808] [ 1444.696193][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.790044][T13703] usb 2-1: USB disconnect, device number 36 [ 1444.894276][T13703] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1444.928425][T14612] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.003625][T13703] cp210x 2-1:0.101: device disconnected [ 1445.328316][T14612] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.744070][T11491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.997495][T14612] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.203661][T13309] netdevsim netdevsim5 eth21: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.248045][T14760] chnl_net:caif_netlink_parms(): no params data found [ 1446.451118][T13309] netdevsim netdevsim5 eth22: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.503930][ T3456] netdevsim netdevsim5 eth23: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.210243][ T36] netdevsim netdevsim5 eth24: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.266656][ T59] bridge_slave_1: left allmulticast mode [ 1447.272759][ T59] bridge_slave_1: left promiscuous mode [ 1447.279313][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.373187][ T59] bridge_slave_0: left allmulticast mode [ 1447.379048][ T59] bridge_slave_0: left promiscuous mode [ 1447.388712][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.418584][ T59] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1448.628036][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1448.647534][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1448.681569][ T59] bond0 (unregistering): Released all slaves [ 1448.718783][ T59] bond1 (unregistering): Released all slaves [ 1448.763631][ T59] bond2 (unregistering): Released all slaves [ 1450.354920][T14612] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1450.441482][ T59] tipc: Left network mode [ 1450.442958][T14612] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1450.522186][T14612] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1450.768614][T14612] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1451.335411][ T59] hsr_slave_0: left promiscuous mode [ 1451.363171][ T59] hsr_slave_1: left promiscuous mode [ 1451.381428][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1451.389755][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1451.429223][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1451.436776][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1451.490589][ T59] veth1_macvtap: left promiscuous mode [ 1451.496362][ T59] veth0_macvtap: left promiscuous mode [ 1451.518217][ T59] veth0_vlan: left promiscuous mode [ 1452.634985][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1452.641846][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1452.750635][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1452.829017][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1453.292413][T14760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.304681][T14760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.319589][T14760] bridge_slave_0: entered allmulticast mode [ 1453.345860][T14760] bridge_slave_0: entered promiscuous mode [ 1453.390977][T14760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.398644][T14760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.434841][T14760] bridge_slave_1: entered allmulticast mode [ 1453.462143][T14760] bridge_slave_1: entered promiscuous mode [ 1453.769054][T14760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.833733][T14760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1454.280896][T14760] team0: Port device team_slave_0 added [ 1454.436789][T14760] team0: Port device team_slave_1 added [ 1454.863411][T14760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1454.870657][T14760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1454.897096][T14760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1455.084027][T14760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1455.091497][T14760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1455.117889][T14760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1455.692573][T14612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1455.848874][T14760] hsr_slave_0: entered promiscuous mode [ 1455.885324][T14760] hsr_slave_1: entered promiscuous mode [ 1455.909649][T14760] debugfs: 'hsr0' already exists in 'hsr' [ 1455.915909][T14760] Cannot create hsr debugfs directory [ 1456.206437][T14612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.379306][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.386956][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1456.718311][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.725866][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1458.808627][T14760] netdevsim netdevsim3 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1459.191006][T14760] netdevsim netdevsim3 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1459.546582][T14760] netdevsim netdevsim3 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1459.868382][T14760] netdevsim netdevsim3 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1460.344492][T11332] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1460.584909][T11332] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 1460.593563][T11332] usb 2-1: config 0 has no interface number 0 [ 1460.608559][T11332] usb 2-1: config 0 interface 101 has no altsetting 0 [ 1460.615702][T11332] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1460.625239][T11332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.746200][T11332] usb 2-1: config 0 descriptor?? [ 1460.825108][T11332] cp210x 2-1:0.101: cp210x converter detected [ 1460.935976][T14947] ip6gre1: entered promiscuous mode [ 1460.941627][T14947] ip6gre1: entered allmulticast mode [ 1460.970513][T11332] cp210x 2-1:0.101: failed to get vendor val 0x370b size 1: -121 [ 1460.983222][T11332] cp210x 2-1:0.101: querying part number failed [ 1461.010885][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1461.019424][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1461.034121][T12031] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1461.041500][T11332] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1461.198375][T14760] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1461.267734][T14760] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1461.379049][T14760] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1461.464278][T14760] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1461.554076][T12031] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1461.964878][ T5839] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1462.581790][ T5077] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1462.604092][ T5077] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1462.617281][ T5077] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1462.631946][ T5077] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1462.648972][ T5077] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1462.749710][T14760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.925205][T14760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.212870][T11049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.220407][T11049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.372705][T11332] usb 2-1: USB disconnect, device number 37 [ 1463.493805][T11332] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1463.565333][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.572880][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1463.574162][T11332] cp210x 2-1:0.101: device disconnected [ 1463.756752][T10325] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1464.418760][T14760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1464.429686][T14760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1464.678624][T10325] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1464.688532][T10325] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.691840][ T5077] Bluetooth: hci2: command tx timeout [ 1464.696970][T10325] usb 8-1: Product: syz [ 1464.706523][T10325] usb 8-1: Manufacturer: syz [ 1464.711465][T10325] usb 8-1: SerialNumber: syz [ 1464.921601][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1465.361244][T10325] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1465.373839][T10325] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1466.293630][T14962] chnl_net:caif_netlink_parms(): no params data found [ 1466.778690][ T5077] Bluetooth: hci2: command tx timeout [ 1466.798109][T15006] loop0: detected capacity change from 0 to 2048 [ 1466.954724][T15006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1467.180585][ T30] audit: type=1800 audit(1769455989.912:65): pid=15006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2433" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 1467.212831][T10325] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1467.229707][T10325] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1467.288257][T10325] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1467.393165][T10325] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1467.741647][T13645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1467.849146][T14760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.998926][ T5901] netdevsim netdevsim4 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.189647][T13309] netdevsim netdevsim4 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.401497][ T13] netdevsim netdevsim4 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.542093][T12031] usb 8-1: USB disconnect, device number 5 [ 1468.689299][T11049] netdevsim netdevsim4 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.698627][ T59] bridge_slave_1: left allmulticast mode [ 1468.704623][ T59] bridge_slave_1: left promiscuous mode [ 1468.711249][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.841821][ T59] bridge_slave_0: left allmulticast mode [ 1468.847241][ T5077] Bluetooth: hci2: command tx timeout [ 1468.847622][ T59] bridge_slave_0: left promiscuous mode [ 1468.864788][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.720146][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.754191][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.793084][ T59] bond0 (unregistering): Released all slaves [ 1470.019111][T14962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.027096][T14962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.036634][T14962] bridge_slave_0: entered allmulticast mode [ 1470.064250][T14962] bridge_slave_0: entered promiscuous mode [ 1470.153231][ T59] hsr_slave_0: left promiscuous mode [ 1470.168289][ T59] hsr_slave_1: left promiscuous mode [ 1470.193616][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1470.224144][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1470.930207][ T5077] Bluetooth: hci2: command tx timeout [ 1471.241966][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1471.344296][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1472.054643][T14962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.062790][T14962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.145577][T14962] bridge_slave_1: entered allmulticast mode [ 1472.204871][T14962] bridge_slave_1: entered promiscuous mode [ 1472.940043][T14962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.077615][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1473.143850][T14760] veth0_vlan: entered promiscuous mode [ 1473.294572][T14962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.548854][T14962] team0: Port device team_slave_0 added [ 1473.583101][T14760] veth1_vlan: entered promiscuous mode [ 1473.686494][T14962] team0: Port device team_slave_1 added [ 1473.894018][T14962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.901466][T14962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.927895][T14962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.981324][T14962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.988631][T14962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.014873][T14962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.234224][T14962] hsr_slave_0: entered promiscuous mode [ 1474.245078][T14962] hsr_slave_1: entered promiscuous mode [ 1474.255210][T14962] debugfs: 'hsr0' already exists in 'hsr' [ 1474.261273][T14962] Cannot create hsr debugfs directory [ 1474.561295][T14760] veth0_macvtap: entered promiscuous mode [ 1474.889360][T14760] veth1_macvtap: entered promiscuous mode [ 1474.971379][ T5839] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1475.131431][T14962] netdevsim netdevsim4 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1475.188694][T14760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1475.251213][T14962] netdevsim netdevsim4 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1475.271725][ T5839] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1475.339766][ T5839] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1475.348484][T14760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1475.349244][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.364434][ T5839] usb 8-1: Product: syz [ 1475.369622][ T5839] usb 8-1: Manufacturer: syz [ 1475.374378][ T5839] usb 8-1: SerialNumber: syz [ 1475.392852][T14962] netdevsim netdevsim4 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1475.504433][T14962] netdevsim netdevsim4 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1475.616222][ T3456] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.716013][ T3456] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.751572][ T3456] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.803440][ T3456] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.239970][T14962] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1476.321177][T14962] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1476.385980][T14962] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1476.443622][T14962] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1479.097125][T14962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1479.304272][T14962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.458248][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.465762][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.669244][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.676849][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1481.133097][ T5839] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1481.144295][ T5839] usb 8-1: 2:1 : invalid channels 0 [ 1485.031893][T14962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1485.977587][ T5839] usb 8-1: USB disconnect, device number 6 [ 1486.582945][T15097] loop7: detected capacity change from 0 to 512 [ 1486.643072][T15097] EXT4-fs: Ignoring removed mblk_io_submit option [ 1486.649687][T15097] EXT4-fs: Ignoring removed bh option [ 1486.753221][T15097] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1486.760281][T15097] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1486.856425][T15097] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 1486.890438][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1486.898421][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.217467][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.225575][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.732293][T14962] veth0_vlan: entered promiscuous mode [ 1489.024117][T14962] veth1_vlan: entered promiscuous mode [ 1489.070261][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1489.627165][T14962] veth0_macvtap: entered promiscuous mode [ 1489.747516][T14962] veth1_macvtap: entered promiscuous mode [ 1490.393613][T14962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1490.432477][T14962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1490.724348][T13309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.775305][T13309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.896601][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.062583][T11049] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.489126][ T5839] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 1491.907928][ T5839] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1492.070425][ T5839] usb 8-1: config 7 has an invalid interface number: 199 but max is 0 [ 1492.078994][ T5839] usb 8-1: config 7 has no interface number 0 [ 1492.177645][ T5839] usb 8-1: config 7 interface 199 has no altsetting 0 [ 1492.238508][ T5839] usb 8-1: string descriptor 0 read error: -22 [ 1492.288232][ T5839] usb 8-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=cb.15 [ 1492.301313][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.423138][ T5839] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282 [ 1492.852749][ T5839] gspca_sn9c20x: Write register 1001 failed -71 [ 1492.859888][ T5839] gspca_sn9c20x: Device initialization failed [ 1492.866386][ T5839] gspca_sn9c20x 8-1:7.199: probe with driver gspca_sn9c20x failed with error -71 [ 1493.196641][ T5839] usb 8-1: USB disconnect, device number 7 [ 1496.276150][ T5839] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1496.461627][ T5839] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.525735][ T5839] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1496.535095][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.584322][ T5839] usb 8-1: config 0 descriptor?? [ 1496.927358][T15108] Set syz1 is full, maxelem 65536 reached [ 1496.939491][ T5839] pwc: Askey VC010 type 2 USB webcam detected. [ 1497.271778][ T5839] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1497.316768][ T5839] pwc: recv_control_msg error -32 req 02 val 2700 [ 1497.427676][ T5839] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1497.498826][ T5839] pwc: recv_control_msg error -32 req 04 val 1000 [ 1497.571139][ T5839] pwc: recv_control_msg error -32 req 04 val 1300 [ 1497.650277][ T5839] pwc: recv_control_msg error -32 req 04 val 1400 [ 1497.704059][ T5839] pwc: recv_control_msg error -32 req 02 val 2000 [ 1497.985501][ T5839] pwc: recv_control_msg error -71 req 04 val 1500 [ 1498.036129][ T5839] pwc: recv_control_msg error -71 req 02 val 2500 [ 1498.057673][ T5839] pwc: recv_control_msg error -71 req 02 val 2400 [ 1498.104789][ T5839] pwc: recv_control_msg error -71 req 02 val 2600 [ 1498.138809][ T5839] pwc: recv_control_msg error -71 req 02 val 2900 [ 1498.193302][ T5839] pwc: recv_control_msg error -71 req 02 val 2800 [ 1498.239691][ T5839] pwc: recv_control_msg error -71 req 04 val 1100 [ 1498.277130][ T5839] pwc: recv_control_msg error -71 req 04 val 1200 [ 1498.326360][ T5839] pwc: Registered as video103. [ 1498.424213][ T5839] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input19 [ 1498.557939][ T5839] usb 8-1: USB disconnect, device number 8 [ 1500.035307][T14376] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1500.260824][T14376] usb 8-1: config 0 has no interfaces? [ 1500.266936][T14376] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1500.280424][T14376] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.520008][T14376] usb 8-1: config 0 descriptor?? [ 1500.780479][T14376] usb 8-1: USB disconnect, device number 9 [ 1501.851818][T15170] loop1: detected capacity change from 0 to 512 [ 1501.958513][T15170] EXT4-fs: Ignoring removed mblk_io_submit option [ 1501.965584][T15170] EXT4-fs: Ignoring removed bh option [ 1502.039476][T15170] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1502.050492][T15170] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1502.152896][T15170] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 1503.710843][T11836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.719543][T11836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.544728][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.552948][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.541077][ T5839] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1506.435159][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 1506.583898][ T5839] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1506.593440][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.628431][ T5839] usb 5-1: config 0 descriptor?? [ 1507.159136][ T5839] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1507.282327][T15203] ===================================================== [ 1507.289559][T15203] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 1507.297042][T15203] _copy_to_user+0xcc/0x120 [ 1507.301879][T15203] i2cdev_ioctl_smbus+0x586/0x660 [ 1507.307076][T15203] i2cdev_ioctl+0xa14/0xf40 [ 1507.312212][T15203] __se_sys_ioctl+0x23c/0x400 [ 1507.317026][T15203] __x64_sys_ioctl+0x97/0xe0 [ 1507.321854][T15203] x64_sys_call+0x18a7/0x3e70 [ 1507.326694][T15203] do_syscall_64+0xc9/0xf80 [ 1507.332205][T15203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.343271][T15203] [ 1507.345652][T15203] Uninit was stored to memory at: [ 1507.355693][T15203] __i2c_smbus_xfer+0x25f6/0x3000 [ 1507.361022][T15203] i2c_smbus_xfer+0x2d8/0x480 [ 1507.365828][T15203] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1507.371148][T15203] i2cdev_ioctl+0xa14/0xf40 [ 1507.375806][T15203] __se_sys_ioctl+0x23c/0x400 [ 1507.380864][T15203] __x64_sys_ioctl+0x97/0xe0 [ 1507.385591][T15203] x64_sys_call+0x18a7/0x3e70 [ 1507.389286][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1507.390567][T15203] do_syscall_64+0xc9/0xf80 [ 1507.405652][T15203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.412042][T15203] [ 1507.414423][T15203] Local variable msgbuf1.i created at: [ 1507.420257][T15203] __i2c_smbus_xfer+0x876/0x3000 [ 1507.425330][T15203] i2c_smbus_xfer+0x2d8/0x480 [ 1507.430285][T15203] [ 1507.432666][T15203] Bytes 0-1 of 2 are uninitialized [ 1507.437852][T15203] Memory access of size 2 starts at ffff888074203d06 [ 1507.448198][T15203] Data copied to user address 0000200000000100 [ 1507.455986][T15203] [ 1507.458410][T15203] CPU: 0 UID: 0 PID: 15203 Comm: syz.4.2348 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 1507.470245][T15203] Tainted: [L]=SOFTLOCKUP [ 1507.474734][T15203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1507.485096][T15203] ===================================================== [ 1507.492209][T15203] Disabling lock debugging due to kernel taint [ 1507.498442][T15203] Kernel panic - not syncing: kmsan.panic set ... [ 1507.504965][T15203] CPU: 0 UID: 0 PID: 15203 Comm: syz.4.2348 Tainted: G B L syzkaller #0 PREEMPT(voluntary) [ 1507.516508][T15203] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1507.522120][T15203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1507.532265][T15203] Call Trace: [ 1507.535608][T15203] [ 1507.538602][T15203] __dump_stack+0x26/0x30 [ 1507.543080][T15203] dump_stack_lvl+0x50/0x1c0 [ 1507.547824][T15203] ? dump_stack+0x12/0x25 [ 1507.552307][T15203] dump_stack+0x1e/0x25 [ 1507.556601][T15203] vpanic+0x435/0xd40 [ 1507.560741][T15203] panic+0x15d/0x160 [ 1507.564824][T15203] kmsan_report+0x31a/0x320 [ 1507.569499][T15203] ? kmsan_internal_check_memory+0x1e8/0x240 [ 1507.575644][T15203] ? kmsan_copy_to_user+0xef/0x190 [ 1507.580922][T15203] ? _copy_to_user+0xcc/0x120 [ 1507.585733][T15203] ? i2cdev_ioctl_smbus+0x586/0x660 [ 1507.591092][T15203] ? i2cdev_ioctl+0xa14/0xf40 [ 1507.595914][T15203] ? __se_sys_ioctl+0x23c/0x400 [ 1507.600898][T15203] ? __x64_sys_ioctl+0x97/0xe0 [ 1507.605791][T15203] ? x64_sys_call+0x18a7/0x3e70 [ 1507.610795][T15203] ? do_syscall_64+0xc9/0xf80 [ 1507.615611][T15203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.621820][T15203] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 1507.627267][T15203] ? __i2c_transfer+0x118f/0x3160 [ 1507.632454][T15203] ? kmsan_get_metadata+0xf1/0x160 [ 1507.637740][T15203] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1507.644238][T15203] ? kmsan_get_metadata+0xf1/0x160 [ 1507.649539][T15203] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1507.655543][T15203] ? __i2c_smbus_xfer+0x1fb8/0x3000 [ 1507.660875][T15203] ? kmsan_get_metadata+0xf1/0x160 [ 1507.666171][T15203] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1507.672171][T15203] kmsan_internal_check_memory+0x1e8/0x240 [ 1507.678169][T15203] kmsan_copy_to_user+0xef/0x190 [ 1507.683296][T15203] _copy_to_user+0xcc/0x120 [ 1507.687943][T15203] i2cdev_ioctl_smbus+0x586/0x660 [ 1507.693158][T15203] i2cdev_ioctl+0xa14/0xf40 [ 1507.697822][T15203] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1507.703811][T15203] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1507.708990][T15203] __se_sys_ioctl+0x23c/0x400 [ 1507.713816][T15203] __x64_sys_ioctl+0x97/0xe0 [ 1507.718551][T15203] x64_sys_call+0x18a7/0x3e70 [ 1507.723398][T15203] do_syscall_64+0xc9/0xf80 [ 1507.728051][T15203] ? clear_bhb_loop+0x40/0x90 [ 1507.732862][T15203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.738895][T15203] RIP: 0033:0x7fb3c0d9aeb9 [ 1507.743424][T15203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1507.763181][T15203] RSP: 002b:00007fb3c1ce5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1507.771731][T15203] RAX: ffffffffffffffda RBX: 00007fb3c1015fa0 RCX: 00007fb3c0d9aeb9 [ 1507.779806][T15203] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000004 [ 1507.787872][T15203] RBP: 00007fb3c0e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1507.795935][T15203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1507.803991][T15203] R13: 00007fb3c1016038 R14: 00007fb3c1015fa0 R15: 00007fffacbe5418 [ 1507.812100][T15203] [ 1507.815559][T15203] Kernel Offset: disabled [ 1507.819927][T15203] Rebooting in 86400 seconds..