last executing test programs: 47m15.885208826s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x8, 0x7f, 0x10000000, 0x0, [0x0], [0x0, 0x29, 0x2], [], [0x0, 0x0, 0xfffffffffffffffd, 0x8000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x83ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) close_range(r3, 0xffffffffffffffff, 0x0) 47m14.700081963s ago: executing program 2 (id=7): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 47m12.883090249s ago: executing program 2 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 46m57.652156348s ago: executing program 32 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 37m54.880661973s ago: executing program 1 (id=1170): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {0x7, 0xfff2}, {0xec0}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 37m54.602805777s ago: executing program 1 (id=1171): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000001440)={[{@noinit_itable}, {@usrquota}, {@jqfmt_vfsv0}, {@abort}, {@nodelalloc}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0x1, 0x558, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x189000, 0x82) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 37m54.200719753s ago: executing program 1 (id=1173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 37m50.130491052s ago: executing program 1 (id=1182): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380), 0x1, 0x560, &(0x7f0000000fc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1a4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000740)=""/72, 0x48) 37m48.976562928s ago: executing program 1 (id=1184): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0, 0x0, 0xfdc3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) 37m47.483292879s ago: executing program 1 (id=1186): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x3, 0x1, 0x1, 0x0, 0x8}, 0x0, 0x100000000000}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) 37m46.971034957s ago: executing program 33 (id=1186): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x3, 0x1, 0x1, 0x0, 0x8}, 0x0, 0x100000000000}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) 35m20.68640004s ago: executing program 0 (id=1519): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0, 0x0, 0xfdc3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) 35m19.590596627s ago: executing program 0 (id=1524): pipe2$9p(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x0) 35m18.265002106s ago: executing program 0 (id=1526): syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3757, 0xff41, 0x7, 0x80}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x7, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xff, 0xc0, 0x7f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0xff, 0xc, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x0, 0x8}]}, 0x1, [{0x0, 0x0}]}) 35m15.474389418s ago: executing program 0 (id=1533): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) 35m15.181541932s ago: executing program 0 (id=1535): pipe2$9p(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x0) 35m14.192725587s ago: executing program 0 (id=1539): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x20, 0x4, 0x0, 0x20, 0x80, 0xc}, {@in6=@mcast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}, [@algo_auth={0x49, 0x1, {{'sha256\x00'}, 0x8, '|'}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) 35m13.666369514s ago: executing program 34 (id=1539): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x20, 0x4, 0x0, 0x20, 0x80, 0xc}, {@in6=@mcast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}, [@algo_auth={0x49, 0x1, {{'sha256\x00'}, 0x8, '|'}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) 34m1.040073979s ago: executing program 3 (id=1691): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e40000000000000870a00000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 34m0.828016463s ago: executing program 3 (id=1692): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x14) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x6f, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x1, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}, "9cc18437269182954156db8db1d7014fa662d8c2ac0cdacd59074a6b7fad6491599eab1b79e8fb43bc17ab75a4cfd8d760c853d36fb7cd232e8103ff26"}}}}}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 33m59.758761338s ago: executing program 3 (id=1693): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) listen(0xffffffffffffffff, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000180)={0xb, 0x0, '\x00', 0x0, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000003540), &(0x7f0000003580)='./file0\x00', &(0x7f00000035c0), 0x3204489, &(0x7f0000000700)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'syzkaller\x00'}}]}}) 33m58.213166631s ago: executing program 3 (id=1696): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) 33m57.775254758s ago: executing program 3 (id=1698): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6f757365725f78617474722c666c7573685f6d657267652c6673796e635f6d6f64653d706f7369782c64697361626c655f6578745f6964656e746966792c6261636b67726f756e645f67633d73796e632c6673796e635f6d6f64653d7374726963742c6e6f626172726965722c6e6f696e6c696e655f646174612c6e6f626172726965722c71756f74612c6261636b67726f756e645f67633d6f66662c6e6f61636c2c6e6f657874656e745f63616368652c6e6f646973636172642c6163746976655f6c6f67733d342c00e62bc03000c35169ed09803fa1bee488c680f339e530b5e8ad120a2b4f078093a8e0ba2b3d1b5fe99356b80a454c1ec2f8e12392bbffe9fae2fa05e18a6b61f5eded2e484f574d2757a5fe762c770477aa3460313ee54451c6a6159eca600d6c85a8c09cef9996dc851a5f5edf1a4a22576c6dfe6b9e8dade2d3a8e6a8c7710733c1f69aabd8880291", @ANYRESOCT], 0x1, 0x5504, &(0x7f0000005f80)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x103042, 0x5d9f61795f7ff7ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1e, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x40, 0x0) write$sndseq(r0, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @addr={0x7, 0x9}}], 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xf519, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f00000004c0)={[{@rodir}, {@shortname_win95}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@rodir}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@uni_xlate}, {@rodir}, {@uni_xlateno}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@errors_continue}, {@uni_xlate}, {@fat=@check_strict}]}, 0x6, 0x2d5, &(0x7f0000000680)="$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") ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 33m57.410537984s ago: executing program 3 (id=1699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_usbip_server_init(0x2) 33m56.91739154s ago: executing program 35 (id=1699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_usbip_server_init(0x2) 45.566768832s ago: executing program 6 (id=12704): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="020000"], 0x10) 45.380509404s ago: executing program 6 (id=12707): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x2000c884) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 45.302014985s ago: executing program 6 (id=12708): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1820000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 32.485814347s ago: executing program 6 (id=12708): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1820000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 17.370196661s ago: executing program 6 (id=12708): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1820000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 3.467107469s ago: executing program 5 (id=12892): r0 = msgget$private(0x0, 0x4b2) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/70) 3.436135639s ago: executing program 7 (id=12893): futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x50044) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000400)=0x110494) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0xbb83}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001a00012000000000ffdbdf2502f8", @ANYRESOCT=r1, @ANYBLOB="eb7e45958fc468ac1b2b6de409570baa8a2ba1233c4c605170a392496d633ccc552fc8a2b71280417cc90a0af28941948ab6553f2d6e9f05a25c62dc8563b4e071807819db4e4945a609", @ANYRES64=0x0, @ANYRES16=r0, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRESDEC=r0], 0x1c}}, 0x4000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x9ecd, 0x0, 0x0, 0x72}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) 3.272725392s ago: executing program 5 (id=12895): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_team\x00', 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) syz_emit_ethernet(0x79, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @val={@val={0x88a8, 0x1}, {0x8100, 0x6, 0x0, 0x4}}, {@generic={0x22f0, "2e680df474baa337a40c2e7b27349f6fc344f3d3f8616c9fe6297ce744ded2658219c8692da78f17d7f8527dd2c5335d77e60d90ac8eff4185412bdaa1c8b9bb7f3fe97e4fd9c372ad3ae2128d8cce1e54e1b929250f3c9496e3fcc76f643d71652f36"}}}, &(0x7f0000000180)={0x1, 0x4, [0xf55, 0xa83, 0xb69, 0x691]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xc59f, 0x4) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x5c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24000040}, 0x800) 3.063481144s ago: executing program 4 (id=12897): r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1011, 0x0, 0x0) 3.054669524s ago: executing program 6 (id=12708): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1820000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 3.044401714s ago: executing program 5 (id=12898): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x18, &(0x7f0000000040)={@broadcast, @local={0xac, 0x14, 0x0}}, 0x8) 2.136979168s ago: executing program 5 (id=12899): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x64, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tipc={{0xb, 0x4, 0x1, 0x32, 0x56, 0x66, 0x0, 0x4, 0x6, 0x0, @local, @broadcast, {[@end, @timestamp={0x44, 0xc, 0x60, 0x0, 0x2, [0x8, 0x6]}, @lsrr={0x83, 0xb, 0x64, [@multicast2, @local]}]}}, @payload_named={{{{{0x2a, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x2, 0x2000, 0x0, 0x3, 0x4, 0x0, 0x2, 0x4, 0x2e7, 0x4, 0x4e24, 0x4e21}, 0x4, 0x2}, 0x3}}, [0x0, 0x0]}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r2, @ANYBLOB="140006"], 0x48}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) mkdirat$cgroup_root(0xffffff9c, 0x0, 0x1ff) syz_emit_ethernet(0x4e, &(0x7f0000001880)=ANY=[@ANYBLOB="9fbeb3fea816ffffffffffff86dd600a843500180601fe8000000000000000000000000000bbfe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='`\x00'/12], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x2, 0x5}) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0005b38290f90e9ab40000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c000780060004"], 0x34}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f0000005600)=[{{0x0, 0x0, &(0x7f0000003980)=[{0x0}, {&(0x7f0000002600)=""/111, 0x6f}], 0x2}, 0xfffffff1}], 0x1, 0x10061, 0x0) 2.136685108s ago: executing program 4 (id=12900): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0xa, [0x8000, 0x0, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x10000, 0x800, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0xc, 0x4, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x8000806d, 0x407, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x5, 0x4, 0x8, 0x83ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6ca, 0x9, 0xfffffffc, 0x100000, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x1, 0x1, 0x10001, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x9, 0xa, 0x4, 0x47, 0x8000, 0x1, 0xfe000000, 0x7e78, 0x2, 0x4, 0xd, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x4, 0x5, 0x0, 0x1ec, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x1, 0xb, 0x20005, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0x800003, 0x200, 0x9, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9f, 0x6, 0x0, 0x5, 0x6, 0xac8, 0xc3, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x2, 0xa, 0x0, 0x405, 0x1c, 0x120000, 0x2, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x10000, 0x5, 0x7fff, 0xffff, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0xb, 0x6, 0x229, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xe, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.136238758s ago: executing program 7 (id=12901): r0 = socket(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x28, 0x2}, 0x10) 1.968784161s ago: executing program 7 (id=12902): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) openat$sw_sync_info(0xffffff9c, &(0x7f00000005c0), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.941547301s ago: executing program 4 (id=12903): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 1.847895793s ago: executing program 7 (id=12904): r0 = socket(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x4) connect$inet(r0, &(0x7f0000000400)={0x10, 0x2}, 0x10) sendmsg$unix(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)='F', 0x1}], 0x1, 0x0, 0x0, 0x180}, 0x20104) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/75, 0x4b}, 0x40040) 1.648645656s ago: executing program 7 (id=12905): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x61e6, &(0x7f0000002b00)="$eJzs3c9vHGf9B/DP7C//yLep1UPVb4SQm5YfpTSJkxICBdoe4MClB5QrSuS6VUQKKAkorSziykLiwIm/AITEESGOiAN/QA9cuXHiRCQbCdQTg8Z+nni82e06tb2z9rxekjPzmWd2/YzfO/sjM7NPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADx3e98b6WIiBs/TQuWIv4vuhGdiIWqXo6IheWlvH4vIp6LneZ4NiL6cxHV7Xf+eTri1Yj46GzE1vb6arX48gH78e0//O233z/z1l9/37/4nz/e6742br3793/57z89ONw2AwAAQNuUZVkW6WP+ufT5vtN0pwCAqciv/2WSl5/6+lf/eOvPs9QftVqtVqunUNeVoz2oFxGxUb9N9Z7B4XgAOGE24uOmu0CD5N9qvYg403QngJlWNN0BjsXW9vpqkfIt6q8Hy7vt+VyQfflvFI+u7xg3nWT4HJNpPb42oxvPjOnPwpT6MEty/p3h/G/stg/Sesed/7SMy3+we+lT6+T8u8P5Dzk9+XdG5t9WOf/eE+XflT8AAAAAAMyw/P//Sw0f/507/KYcyCcd/12eUh8AAAAAAAAA4Kgddvy/R4z/BwAAADOr+qxe+fXZvWXjvoutWn69iHhqaH2gZdLFMotN9wMAAAAAAAAAAAAA2qS3ew7v9SKiHxFPLS6WZVn91A3XT+qwtz/p2r790GZNP8kDAMCuj87ma/n7uwuKiPmIuJ6+66+/uLhYlvMLi+ViuTCX388O5ubLhdrn2jytls0NDvCGuDcoqzubr92ubtLn5Untw/dX/a5B2T1Ax45I+mPGmOYGAweA9AIVseUV6ZQpy6fHvfmAfez/p9BSLDX9uGL2Nf0wBQAAAI5fWZZlkb7O+1w65t9pulMAwFTk1//h4wKHqjtj2iOO5v7VarVarVZ/qrquHO1BvYiIjfptqvcMhuMHgBNmIz5uugs0SP6t1ouI55ruBDDTiqY7wLHY2l5fLVK+Rf31II3vns8F2Zf/RrFzu3z7UdNJhs8xmdbjazO68cyY/jw7pT7Mkpx/Zzj/G7vtg7Tecec/LePyH+xcMtc+Of/ucP5DTk/+nZH5t1XOv/dE+XflDwAAAAAAMyz///+S4795kwEAAAAAAADgxNnaXl/N173m4/+fGbGe6z9Pp5x/8aT5L6R5+Z9oOf/OUP5fHFqvW5t/+Obe/v+v7fXV39375//n6UHzn8szRXpkFekRUaTfVPTS9DBb97jNfndQ/aZ+0en20jk/Zf+duBW3Yy0u7Vu3k/4ee+0r+9qrnvb3tV/e1957rP3KvvZ++t6BciG3X4jV+FHcjrd32qu2uQnbPz+hvZzQnvPvev5vpZx/r/ZT5b+Y2ouhaeXhh53H9vv6dNTveePWZ39x6fg3Z6LN6D7atrpq+8430J+dv8mZQfzk7tqdC/dv3rt3ZyXSZN/Sy5EmRyzn39/5mdt7/n9htz0/79f314cfDp44/1mxGb2x+b9Qm6+296Up960JOf9B+sn5v53aR+//Jzn/8fv/yw30BwAAAAAAAAAAAAAAAD5JWZY7l4i+ERFX0/U/TV2bCQBMV379L5O8XK1Wq9Vq9emr68rRXq8XEfGX+m2q9ww/G3VnAMAs+29E/L3pTtAY+bdY/r6/avpi050Bpuru+x/84Obt22t37jbdEwAAAAAAAADg08rjfy7Xxn9+MSKWhtbbN/7rm7F82PE/e3nm0QCjRzzQ9xibnUG3Uxtu/PnYGZ/7wrjxv8/H4+N/5zFxu/XtGKM/oX0woX1uQvv8yKV7aY280KMm5/98bbzzKv9zQ8Ovt2H81+Ex79sg53++9niu8v/C0Hr1/MvfzFz+GwddcTM6+/K/eO+9H1+8+/4Hr9x67+a7a++u/fDKysqlK1evXrt27eI7t26vXdr993h6PQNy/nnsa+eBtkvOP2cu/3bJ+X8u1fJvl5z/51Mt/3bJ+ef3e/Jvl5x//uwj/3bJ+b+Uavm3S87/S6mWf7tsba/PVfm/nGr5t0ve/7+cavm3S87/lVTLv11y/hdSLf92yflfTPUB8vf18KdIzj8f4bL/t0vOfyXV8m+XnP/lVMu/XXL+V1It/3bJ+b+aavm3S87/K6mWf7vk/K+mWv7tkvP/aqrl3y45/2upln+75Py/lmr5t0vO/+upln+75PxfS7X82yXn/41Uy79dcv7fTLX82yXn/61Uy79dcv6vp1r+7bL3/f9mzMzCzM+P9g67MSPbddJmmn5mAgAAAAAAAAAAAACGTeN04qa3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd28xct31HcDP7M1rhxADITipgbVjjHGW7PoSX2hdTLg2QLklFHrBdr1rs+AbXrsEimTTQImEUVEFavrQFhBqI1UVVsUDrSjNQ9XLU2kf6EtFVQmpURWigIrUVjRbzZz//++Z2dmZXXu8nj3/z0eyf7szZ+acOXNmdr9rf/cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECzLW+c/VytKIr6n8ZfG4viBfWP109sbFz2ulu9hQAAAMCN+r/G38/dkS44vIwbNS3zd6/4x28uLCwsFB8Y/vLolxYW0hUTRTG6riga10VX//2DteZlgseK8dpQ0+dDPVY/3OP6kR7Xj/a4fqzH9et6XD/e4/pFO2CR9eXPYxp3tq3x4cZylxZ3FqON67Z1uNVjtXVDQ/FnOQ21xm0WRk8Uc8WpYraYblm+XLbWWP7bW+rrelsR1zXUtK7N9SPkR586HrehFvbxtpZ1XbvP6IdvKCZ+/KNPHf/jC8/c3Wn23A0t91du546t9e38TLik3NZasS7tk7idQ03bubnDczLcsp21xu3qH7dv53PL3M7ha5u5qtqf8/FiqPHxdxv7aaT5x3ppP20Ol/33vUVRXL622e3LLFpXMVRsaLlk6NrzM14ekfX7qB9KLy5GVnScblnGcVqfM9taj9P210R8/reE240ssQ3NT9MPPz226Hlf6XEa1R/1Uq+V9mOw36+VQTkG43Hx3caDfrzjMbgtPP5PbV/6GOx47HQ4BtPjbjoGt/Y6BofGhhvbnJ6EWuM2147BXS3LDzfWVGvMp7d3PwanLpw+NzX/iU++du70sZOzJ2fP7Nm1a3rPvn0HDhyYOjF3ana6/Ps69/bg21AMpdfA1rDv4mvg1W3LNh+qC1/t3+twvMvrcGPbsv1+HY60P7ja6rwgFx/T5Wvj4fpOH78yVCzxGms8Pztv/HWYHnfT63Ck6XXY8WtKh9fhyDJeh/Vlzu1c3vcsI01/Om3DzfpasLHpGGz/fqT9GOz39yODcgyOh+PiX3cu/bVgc9jexydX+v3I8KJjMD3c8N5TvyR9vz9+oDE6HZf31K+4bay4OD97/v5Hj124cH5XEcaqeEnTsdJ+vG5oekzFouN1aMXH6+G5Vzx+T4fLN4Z9Nf7a+l/jSz5X9WX23t/9uWp8deu8P1su3V2E0WervT87fTWv78+UJbvsz/oyn5m68e/FUy5tev8dXeL9N+b+58v1pbt6bHh0pHz9Dqe9M9ryftz6VI003rtqjXU/N7W89+PR8Ge134/v7PJ+vKlt2X6/H4+2P7j4flzr9dOOG9P+fI6H4+TUdPf34/oym3av9Jgc6fp+fG+YtbD/XxOSQspFTcfOUsdtWtfIyGh4XCNxDa3H6Z6W5UdDNquv68nd13ec7ri3vK/h9OiuWa3jdKJt2X4fp+n9aqnjtNbrp2/Xp/35HA/HxZ17uh+n9WWe2nvj753r44dN751jvY7B0eGx+jaPpoOwfL9fWB+PwfuL48XZ4lQx07h2rHE81RrrmnxgecfgWPiz2u+Vm7ocgzvalu33MZi+ji117NVGFj/4Pmh/PsfDcfHEA92Pwfoyb9rf3+9dd4RL0jJN37u2/3xtqZ953dO2m27mz7zq2/k3+7v/bLa+zKkDK82Z3ffTfeGS2zrsp/bX71KvqZlidfbTprCdzxxYej/Vt6e+zJcOLvN4OlwUxaWPPdj4eW/495U/v/i9b7b8u0unf9O59LEHn739xN+uZPsBWPueL8eG8mtd079MLeff/wEAAIA1Ieb+oTAT+R8AAAAqI+b++L/CE/kfAAAAKiPm/pEwk0zy/6Y3PTP3/KUiNfMXgnh92g0PlcvFjut0+Hxi4Zr65Q9+ffYnf3lpeeseKoripw/9ZsflNz0Ut6s0Ebbz6ptbL198w0vLWv/RR64t19xf/0q4//h4lnsYdKrgThdF8e07vtBYz8QHrzTmUw8dbcz3Xn78sfoyzx0sP4+3f/ol5fJ/EMq/h08ca7n902E//CDM6bd33h/xdt+48prN+99/bX3xdrWtL2w87Cc+VN5v/D05X3ysXD7u56W2/68+/+Q36ss/+qrO239pqPP2Pxnu9+th/s/Ly+Wbn4P65/F2nw3bH9cXb3f/177Tcfuvfq5c/txbyuWOhhnXvyN8vu0tz8w1769Ha8daHlfx1nK5uP7p7/1O4/p4f/H+27d//MiVlv3Rfnw89c/l/Uy1LR8vj+uJ/qJt/fX7aT4+4/qf/O2jLfu51/qvvvfpl9fvt33997UtN9x2+/bf2PSHn/1Cx/XF7Tn8Z+daHs/h94TXcVj/Ex8Kx2O4/n+vfqFlvdHR97S+/8Tlv7LxUsvjid7243L9V19/sjH/Y+Inv3/bC25/4eVX1vddUXz3feX99Vr/yT8627L9X71rZ+P5iNfHjn77+pcS13/+45Nnzs5fnJtp2quN353zjnJ71o2v31Df3jvCe2v750fOXvjw7PmJ6Ynpopio7q/Qu25fC/PZclxe6e13PhKez3t+79sbtv/T5+Pl//JwefmVt5dft14dlvtiuHxj+fwt1G5w/U9suavx+q49VX7e0mPvg83b/vPAshYMj7/9+4J4vJ976Ycb+6F+XePrRnxd3+D2f3+mvJ9vhf26EH4z89a7rq2vefn4uxGuvK98vd/w/gtvc/F5/ZPwfL/zB+X9x+2Kj/f74fuY72xqfb+Lx8e3Lg2133/jt3hcDu8nxeXy+rhU3N9Xnrur4+bF30NSXL678fnvpvu5e0UPcynzn5ifOjV35uKjUxdm5y9MzX/ik0dOn7145sKRxu/yPPKRXre/9v60ofH+NDO7b28xvb4oirPF9Cq8Yd2c7a9/tLztP/fI8Zn909tnZk8cu3jiwiPnZs+fPD4/f3x2Zn77sRMnZj/e6/ZzM4d27T64Z//uyZNzM4cOHDy45+Dk3Jmz9c0oN6qHfdMfnTxz/kjjJvOH9h7c9cADe6cnT5+dmT20f3p68mKv2ze+Nk3Wb/0bk+dnTx27MHd6dnJ+7pOzh3Yd3Ldvd8/fBnj63In5ianzF89MXZyfPT9VPpaJC42L61/7et2eapr/t/L72Xa18hfxFe+6b1/6/ax1X//0kndVLtL2C0SfCb+L5h9edO7Acj6PuX80zCST/A8AAAA5iLl/LMxE/gcAAIDKiLl/XZiJ/A8AAACVEXP/eJhJJvlf/1//f3n9//J6/f+8+v/nPlb2Std6/z/25/X/83CL+/83vH79f/3/6vX/l9+fX+vbr/+v/89ig9b/j7l/fVFkmf8BAAAgBzH3bwgzkf8BAACgMmLuvy3MRP4HAACAyoi5/wVhJpnk/xz6/+/usNgK+/+7exWuqt//XzPn/19f6P/r/zf3/+OTo/+fjRX379//cMun+v+B/r/+v/6//r/+PzdsdMlrblX/P+b+28NMMsn/AAAAkIOY+18YZiL/AwAAQGXE3H9HmIn8DwAAAJURc//GMJNM8n8O/f9OnP+/sv1/5//X/+/v+f+bNkb/f21w/v/uOvf/x25bdJH+/wr7/+P6/2ux/z/a3+0f7P5/z83X/+emGLTz/8fc/6Iwk0zyPwAAAOQg5v4Xh5nI/wAAAFAZMfe/JMxE/gcAAIDKiLn/zjCTTPK//r/+v/6//r/+f+f19z7/f/mR/v9g0f/vzvn/e3D+/7z6/33e/sHu//f7/P+jb26/vf4/nQxa/z/m/peGmWSS/wEAACAHMfffFWYi/wMAAEBlxNz/sjAT+R8AAAAqI+b+TWEmmeR//X/9f/1//X/9/87r793/L+n/Dxb9/+70/3vQ/9f/1/9fXv+/wze/+v90Mmj9/5j77w4zyST/AwAAQA5i7r8nzET+BwAAgMqIuf9nwkzkfwAAAKiMmPs3h5lkkv/1//X/9f/z6v/fN6b/r/9fbfr/3en/96D/r/+v/7/M8/8vtpL+/7ped0ZlDFr/P+b+l4eZZJL/AQAAIAcx978izET+BwAAgMqIuf+VYSbyPwAAAFRGzP0TYSaZ5H/9/2r1///0r594ZaH/r//fY/0V7f/Hw0D/P3P6/93p//eg/6//r/+/Kv1/8jFo/f+Y+7eEmWSS/wEAACAHMfdvDTOR/wEAAKAyYu6/N8xE/gcAAIDKiLl/W5hJJvlf/79a/f9I/1//v9v6K9r/T/T/86b/30HTi1T/vwf9f/3/7Pv/8btf/X/6Y9D6/zH3vyrMJJP8DwAAADmIuX97mIn8DwAAAJURc/+rw0zkfwAAAKiMmPt3hJlkkv/1//X/9f/1//X/O69f/39t0v/vbqX9/zH9f/1//f/M+v/O/09/DVr/P+b+14SZZJL/AQAAIAcx9+8MM5H/AQAAoDLi/98s/9+r/A8AAABVFHP/ZJhJJvlf/1//P6f+f03/X/9f/7/y9P+7c/7/HvT/9f/1//X/6atB6//H3P/aMJNM8j8AAADkIOb++8NM5H8AAACojJj7p8JM5H8AAACojJj7p8NMMsn/+v/6/zn1/53/X/9f/7/69P+70//vQf9f/79q/f+i0P/nlhq0/n/M/bvCTDLJ/wAAAJCDmPt3h5nI/wAAAFAZMffvCTOR/wEAAKAyYu7fG2aSSf7X/9f/1//X/9f/77x+/f+1qVv//svLuL3+f6D/r/+v/1+N/r/z/3OLDVr/P+b+B8JMMsn/AAAAkIOY+/eFmcj/AAAAUBkx9+8PMwn5v9P/6wYAAADWlpj7D4SZZPLv//r/Fen//9bft6xb/1//v9v6+9P/X6//H6b+/2Cp6Pn/218W121t9v+fT49f/1//f5C3X/9f/5/FBq3/H3P/wTCTTPI/AAAA5CDm/teFmcj/AAAAUBkx9/9smIn8DwAAAJURc//PhZlkkv/1/yvS/2+j/6//3239zv+v/19lFe3/983a7P8vcf7/If1//f/B2n79/+X0/9f1uhsq5ub3/+NHy+v/x9x/KMwkk/wPAAAAOYi5/+fDTOR/AAAAqIyY+18fZiL/AwAAQGXE3H84zCST/K//r/+v/6//f3P6/68v2g1i/79+8Oj/V4v+f3eV6v87/7/+/4Btv/6/8/+z2KCd/z/m/jeEmWSS/wEAACAHMfc/GGYi/wMAAEBlxNz/xjAT+R8AAAAqI+b+N4WZZJL/9f/1//X/9f+d/7/z+vX/1yb9/+70/3vQ/9f/1//X/6evbl3/f13H62Puf3OYSSb5HwAAAHIQc/9bwkzkfwAAAKiMmPvfGmYi/wMAAEBlxNz/tjCTTPK//r/+v/6//r/+f+f16/+vTfr/3en/96D/r/+v/6//T18N2vn/Y+7/hTCTTPI/AAAA5CDm/ofCTOR/AAAAqIyY+98eZiL/AwAAQGXE3P+OMJNM8r/+v/6//r/+v/5/5/Xr/69N+v/d6f/3oP+v/6//r/9PXw1a/z/m/neGmWSS/wEAACAHMff/YpiJ/A8AAACVEXP/u8JM5H8AAACojJj73x1mkkn+1//X/x+s/v/Cpebb6f/r/xf96v/Xb6T/nwX9/+70/3vo0P9fp/+v/6//r//PdRu0/n/M/e8JM8kk/wMAAEAOYu5/b5iJ/A8AAACVEXP/+8JM5H8AAACojJj7Hw4zyST/6/9n2f9PD3nw+v/O/6//7/z/+v83Rv+/O/3/Hpz/X/9/Tfb/R8P86GT82qT/z6AYtP5/zP2PhJlkkv8BAAAgBzH3vz/MRP4HAACAyoi5/5fCTOR/AAAAqIyY+z8QZpJJ/tf/z7L/P8Dn/69a/3+k5fjIqf8/3vR8puNS/1//fxXo/3en/9+D/r/+/yD3/8PRvH6J2zv/P4No0Pr/Mfd/MMwkk/wPAAAAOYi5/5fDTOR/AAAAqIyY+38lzET+BwAAgMqIuf9Xw0wyyf/6//r/+v/O/+/8/53Xr/+/Nun/d6f/34P+fz79/5H+b/+tO/9/Sf+fQTRo/f+Y+38tzGTJ4Pfsfy3jYQIAAAADJOb+D4WZZPLv/wAAAJCDmPuPhJnI/wAAAFAZMfcfDTPJJP/r/7f3/+MZVfX/9f/1//X/9f/Xov71/192e1Ho/+v/6/9Xtv9/E7Zf/1//n8UGrf8fc/+xMJNM8j8AAADkIOb+Xw8zkf8BAACgMmLuPx5mIv8DAABAZcTcPxNmkkn+X+3+f1Ovd3Qw+//O/3+9/f+f6v/r/wf6/53p/68O5//vTv+/B/1//X/9f/1/+mrQ+v8x98+GmWSS/wEAAKDC0o+DY+4/EWYi/wMAAEBlxNx/MsxE/gcAAIDKiLn/w2EmmeR/5//X/3f+/1vR/x9pWV7/v6T/r//fD/r/3en/96D/r/+v/6//T18NWv8/5v65MJNM8j8AAADkIOb+j4SZyP8AAABQGTH3fzTMRP4HAACAyoi5/1SYSSb5X/9f/z/3/n+tKC47/7/+f6f16/+vTfr/3en/96D/r/+v/6//T18NWv8/5v7TYSaZ5H8AAAD+n737aLLrqvo4fLGVegQfgTEjhmZkD/gATJlRxZhscrBNzmCiyWDA5JyzyTnnbHKOJhhDVVNur7Wk1r19jqQ+6nvO3s8zWa9UFn2FG7v+r+pXmx7k7r9v3GL/AwAAQDNy998vbrH/AQAAoBm5++8ft3Sy//X/+v/e+//VVt7/3//Xt9//3/53SP+v/z8Ka/39sc1/3UFR+IH9/10vu/Je+n/9v/5/kP5f/6//52xz6/9z9z8gbulk/wMAAEAPcvc/MG6x/wEAAKAZufsfFLfY/wAAANCM3P1Xxi2d7H/9v/5f/6//39f/3+j9f/3/snn/f9gy+v/Ldnd39f+b6P/n/fn1//p/1s2t/8/d/+C4pZP9DwAAAD3I3f+QuMX+BwAAgGbk7n9o3GL/AwAAQDNy9z8sbulk/+v/9f/6/6X0/ycW/P5/fD/o//X/R0D/P2wZ/b/3//X/y/z8+n/9P+vOv/8/8B/bk/T/ufsfHrd0sv8BAACgB7n7HxG32P8AAADQjNz9j4xb7H8AAABoRu7+R8Utnex//b/+X/+/lP7/iN7/1//r/xfu+tXpfybo/9fp/0eM9P+rlf5/yDn385t/e8v5/AfQ/+v/WXf+/f+B/1GT9P+5+x8dt1yxWp240N8kAAAAMCu5+x8Tt3Ty5/8AAADQg9z9V8Ut9j8AAAA0I3f/1XFLJ/tf/6//1//r//X/m7++/n+ZvP8/7PD9/13udJ9799v/e/9/mPf/p+7/b/vOaLL/l1l3ZG79f+7+a+KWTvY/AAAA9CB3/2PjFvsfAAAAmpG7/3Fxi/0PAAAAzcjd//i4pZP9r/9vrf+/dN+vO6P/36td9P9L7//vrv/X/+v/R+j/h3n/f8TeP+Z26of6f/2/9/+9/8/hzK3/z93/hLilk/0PAAAAPcjd/8S4xf4HAACAZuTuf1LcYv8DAABAM3L3Pzlu6WT/6/9b6//3/zrv/7fW/3v/f6X/1/+P0P8P0/+PaOX9/wv8rtl2P39Y2/78+n/9P+vm1v/n7n9K3NLJ/gcAAIAe5O5/atxi/wMAAEAzcvc/LW6x/wEAAKAZufufHrd0sv/1//r/ZfT/+RX0//r/i9//J/3/Mun/h+n/R7TS/1+gbffzS//8+n/9P+vm1v/n7n9G3NLJ/gcAAIAe5O5/Ztxi/wMAAEAzcvc/K26x/wEAAKAZufufHbd0sv/1//r/ZfT/3v/X/3v/X/9/bvT/w/T/I/T/+n/9v/6fSc2t/8/df23c0sn+BwAAgB7k7n9O3GL/AwAAQDNy9z83brH/AQAAoBm5+58Xt3Sy//X/+n/9v/5f/7/56+v/l0n/P0z/P0L/r//X/+v/mdSM+v8zftWp1fPjlk72PwAAAPQgd/8L4hb7HwAAAJqRu/+FcYv9DwAAAM3I3X9d3NLJ/tf/z6b/38v52ur/d1arlf5/1Wn/v3PG38/6vtT/6/+PgP5/mP5/hP5f/6//1/8zqRn1/3s/zt3/orilk/0PAAAAPcjd/+K4xf4HAACAZuTuf0ncYv8DAABAM3L3vzRu6WT/6/9n0//vaav/9/7/2d8fPfX/3v9fp/8/Gvr/Yfr/Efp//b/+X//PpObW/+fuf1ncdOL4Bf8WAQAAgJnJ3f/yuKWTP/8HAACAHuTuf0XcYv8DAADAQl279jO5+18Zt3Sy//X/0/b/J874Of2//v/s7w/9v/5f/3/x6f+H6f9H6P/1//p//T+Tmlv/n7v/VXFLJ/sfAAAAepC7//q4xf4HAACAZuTuf3XcYv8DAABAM3L3vyZu6WT/6/+9/6//1//r/zd/ff3/Mun/h+n/R+j/D+znz+VpbP3/ofv/k6f/T/0/bTiP/n93d/eqi97/5+5/bdzSyf4HAACAHuTuvyFusf8BAACgGbn7Xxe32P8AAADQjNz9r49bOtn/+v9O+//8Vl9W/3/1aqX/1//r//X/w/T/w/T/I/T/3v/3/r/+n0nN7f3/3P1viFs62f8AAADQg9z9b4xb7H8AAABoRu7+N8Ut9j8AAAA0I3f/m+OWTva//r/T/t/7//p//f9R9/+3rvT/R2IR/f/OwV9/7v3/Nfp//f+A7vr/e9xt3w/1//p/1s2t/8/d/5a4pZP9DwAAAD3I3f/WuMX+BwAAgGbk7n9b3GL/AwAAQDNy9789bjrWyf7X/+v/9f/6f/3/5q9/xO//n1itVvr/CSyi/x8w9/5/mvf/z/5f+Wn6f/3/kj+//l//z7q59f+5+98Rt3Sy/wEAAKAHufvfGbfY/wAAANCM3P3vilvsfwAAAGhG7v53xy2d7H/9v/5f/6//b77/v2YR/b/3/yei/x82j/7/YPp//f+SP7/+X//PudtW/5+7/z1xSyf7HwAAAHqQu/+9cYv9DwAAAM3I3f++uMX+BwAAgGbk7n9/3NLJ/tf/6//Pp//Pz6n/b6v/Pzm7/v/Uvv+8Tt7/1/9PRP8/TP8/Qv+v/9f/X6v/Z0pze/8/d/8H4pZO9j8AAAD0IHf/B+PW/+vW/gcAAIBm5O7/UNxi/wMAAEAzcvd/OG7pZP/r//X/3v/X/zf//r/+vyv6/2H6/xH6f/2//t/7/0xqbv1/7v6PxC2d7H8AAADoQe7+j8Yt9j8AAAA0I3f/x+IW+x8AAACakbv/xrilk/2v/9f/6//1//r/2/8e6v/boP8fdjT9/47+X/9f/fwd4n8F+n/9/9ivp01z6/9z9388bulk/wMAAEBrjm/4udz9n4hb7H8AAABoRu7+T8Yt9j8AAAAs0rENP5e7/1NxyyL3/6YKfZj+X/+v/9f/6/83f339/zJtpf/Pbwr9v/f/Qz/9/533/Whp7/+f/e+vS1f6f/0/U5tb/5+7/9NxyyL3PwAAALBJ7v7PxC32PwAAADQjd/9n4xb7HwAAAJqRu/9zcUsn+1//r//X/+v/9f+bv77+f5m8/z9M/z9C/7/V9/OX/vn1//p/1s2t/8/d//m4pZP9DwAAAD3I3f+FuMX+BwAAgGbk7v9i3GL/AwAAQDP2dn/GZR3uf/2//l//r//X/2/++vr/ZdL/D9P/j9D/6//1//p/JjW3/v9Le7/q1OrLcUsn+x8AAAB6kLv/K3GL/Q8AAADNyN3/1bjF/gcAAIBm5O7/WtzSyf7X/+v/l9H/7+7uXqX/1//v//2c7v9vWnD/f53+f2L6/2H6/xH6f/3/7Pv/s/8teZr+nzmaW/+fu//rcUsn+x8AAAB6kLv/G3GL/Q8AAADNyN3/zbjF/gcAAIBm5O7/VtzSyf7X/8+g/z+l//f+v/5/5f1//f9E9P/D9P8jWuz/T537b3/b/fxhbfvze/9f/8+6ufX/ufu/Hbd0sv8BAACgB7n7vxO32P8AAADQjNz9341b7H8AAABoRu7+78Utnex//f/R9f+3/XfXy/v/O6vNn1//r//X/+v/Lzb9/zD9/4gW+//zsO1+fumfX/+v/2fd3Pr/3P3fj1v2D7/j5/e7BAAAAOYkd/8P4pZO/vwfAAAAepC7/4dxi/0PAAAAzcjd/6O4pZP9r/+fwfv/Dfb/3v/f/P2h/591/3+J/r8N+v9h+v8R+n/9v/5/ov4/v5v1/72bW/+fu//HcUsn+x8AAAB6kLv/J3HLFTvb+kgAAADAxHL3/zRu8ef/AAAA0Izc/TfFLWfs/01tdyv0//p//b/+X/+/+evr/5dJ/z/sXPv/k6vD9f9J/6//1//32v97/5/bHXH/f/VY/5+7/2dxiz//BwAAgMU5fsDP5+7/edxi/wMAAEAzcvf/Im6x/wEAAKAZuft/GbfcfMm2PtKR0v/r//X/I/3/LfENrv/X/+v/F0H/P8z7/yP0/1P085fr/9vo/1cr/T+Hd8T9/+iPc/f/Km7x5/8AAADQjNz9v45b7H8AAABoRu7+38Qt9j8AAAA0I3f/b+OWTva//l//f8j+fy/NbLr/9/6//j/o/5dB/z9s+/3/DYNfVv/fRP/v/f9G+n/v/zOFufX/uft/F7d0sv8BAACgB7n7fx+32P8AAADQjNz9f4hb7H8AAABoRu7+P8Ytnez/rfX/8V+1/n/x/X/77/8P9v+7K/2//l//Py/6/2Hb7/+H6f/1/0v+/Pp//T/r5tb/5+7/U9zSyf4HAACAHuTu/3PcYv8DAABAM3L3/yVusf8BAACgGbn7/xq3dLL/vf+v/9f/e/9f/7/56+v/l0n/P0z/v1n9jdL/6//1//p/JjW3/j93/9/ilk72PwAAAPQgd//f4xb7HwAAAJqRu//muMX+BwAAgGbk7v9H3NLE/j82+lfo/xfZ/1cerf/X/+v/9f/sp/8fts3+/553HP+y3v/fev+fH0H/r//X/zOJufX/ufv/Gbc0sf8BAACA2+Tu/1fcYv8DAABAM3L3/ztusf8BAACgGbn7b4lbOtn/I/3/yfoL9f+DvP+///Pr/zd/f+j/9f/6/4tP/z/M+/8j9P/e/9f/6/+Z1Nz6/9z9/4lbOtn/AAAA0IPc/bfGLfY/AAAANCN3/3/jFvsfAAAAmpG7/39xSyf73/v/S+r/L9f/6//1//p//f8I/f8w/f8I/b/+X/+v/2dSc+v/c/f/PwAA///2nlJP") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7"], 0x0}, 0x94) fdatasync(r0) 1.569256107s ago: executing program 4 (id=12906): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x180001c, &(0x7f0000000040)={[{}, {@uid}, {@umask={'umask', 0x3d, 0x800}}, {@barrier}, {@type={'type', 0x3d, "f268d651"}}, {@nls={'nls', 0x3d, 'macgreek'}}, {@umask={'umask', 0x3d, 0x101}}]}, 0x1, 0x6c1, &(0x7f0000000940)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1a29143, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file1\x00', 0x0, 0x1a39143, 0x0) 1.250119381s ago: executing program 5 (id=12907): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_team\x00', 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) syz_emit_ethernet(0x79, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @val={@val={0x88a8, 0x1}, {0x8100, 0x6, 0x0, 0x4}}, {@generic={0x22f0, "2e680df474baa337a40c2e7b27349f6fc344f3d3f8616c9fe6297ce744ded2658219c8692da78f17d7f8527dd2c5335d77e60d90ac8eff4185412bdaa1c8b9bb7f3fe97e4fd9c372ad3ae2128d8cce1e54e1b929250f3c9496e3fcc76f643d71652f36"}}}, &(0x7f0000000180)={0x1, 0x4, [0xf55, 0xa83, 0xb69, 0x691]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xc59f, 0x4) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x5c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24000040}, 0x800) 1.156802323s ago: executing program 4 (id=12908): r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) read$FUSE(r0, &(0x7f0000012400)={0x2020}, 0x2020) 885.942977ms ago: executing program 4 (id=12909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9108519fea7f1de2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0xeb35, 0x80, 0x40, 0x3ffffffe}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x0, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002042, 0x1, {0x1}}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) 628.508961ms ago: executing program 5 (id=12910): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket$inet(0x2b, 0x801, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 0s ago: executing program 7 (id=12911): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0xa, [0x8000, 0x0, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x10000, 0x800, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0xc, 0x4, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x8000806d, 0x407, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x5, 0x4, 0x8, 0x83ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6ca, 0x9, 0xfffffffc, 0x100000, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x1, 0x1, 0x10001, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x9, 0xa, 0x4, 0x47, 0x8000, 0x1, 0xfe000000, 0x7e78, 0x2, 0x4, 0xd, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x4, 0x5, 0x0, 0x1ec, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x1, 0xb, 0x20005, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0x800003, 0x200, 0x9, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9f, 0x6, 0x0, 0x5, 0x6, 0xac8, 0xc3, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x2, 0xa, 0x0, 0x405, 0x1c, 0x120000, 0x2, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x10000, 0x5, 0x7fff, 0xffff, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0xb, 0x6, 0x229, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xe, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): to 1024 [ 2768.915685][T13371] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2768.924916][T13371] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2768.933226][T13371] usb 6-1: Product: syz [ 2768.937399][T13371] usb 6-1: Manufacturer: syz [ 2768.946535][T13371] cdc_wdm 6-1:1.0: skipping garbage [ 2768.952008][T13371] cdc_wdm 6-1:1.0: skipping garbage [ 2768.963050][T13371] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 2768.969015][T13371] cdc_wdm 6-1:1.0: Unknown control protocol [ 2769.183584][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 4 bytes [ 2769.355136][T13371] usb 6-1: USB disconnect, device number 57 [ 2770.002361][T15365] syzkaller0: entered promiscuous mode [ 2770.016548][T15365] syzkaller0: entered allmulticast mode [ 2770.546208][T15377] syzkaller0: entered promiscuous mode [ 2770.552034][T15377] syzkaller0: entered allmulticast mode [ 2770.591449][ T5842] usb 5-1: USB disconnect, device number 34 [ 2770.944301][T15393] syzkaller0: entered promiscuous mode [ 2770.950885][T15393] syzkaller0: entered allmulticast mode [ 2771.147892][T13371] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2771.347975][T13371] usb 6-1: Using ep0 maxpacket: 16 [ 2771.365326][T13371] usb 6-1: config 0 has an invalid interface number: 180 but max is 0 [ 2771.385651][T13371] usb 6-1: config 0 has no interface number 0 [ 2771.395774][T13371] usb 6-1: config 0 interface 180 has no altsetting 0 [ 2771.412782][T13371] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e8.1f [ 2771.422567][T13371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2771.439550][T13371] usb 6-1: Product: syz [ 2771.454907][T13371] usb 6-1: Manufacturer: syz [ 2771.459958][T13371] usb 6-1: SerialNumber: syz [ 2771.492042][T13371] usb 6-1: config 0 descriptor?? [ 2771.566928][T15409] syzkaller0: entered promiscuous mode [ 2771.577967][T15409] syzkaller0: entered allmulticast mode [ 2771.675375][T15411] syzkaller0: entered promiscuous mode [ 2771.683094][T15411] syzkaller0: entered allmulticast mode [ 2771.810893][T13371] viperboard 6-1:0.180: version 0.00 found at bus 006 address 058 [ 2771.852662][T13371] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 2771.870655][T13371] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 2771.897179][T13371] usb 6-1: USB disconnect, device number 58 [ 2772.197790][ T5842] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2772.389362][ T5842] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2772.400003][ T5842] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2772.412957][ T5842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2772.422309][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2772.434975][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2772.459323][ T5842] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2772.479203][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2772.494978][ T5842] usb 5-1: Product: syz [ 2772.503299][ T5842] usb 5-1: Manufacturer: syz [ 2772.522567][ T5842] cdc_wdm 5-1:1.0: skipping garbage [ 2772.535394][ T5842] cdc_wdm 5-1:1.0: skipping garbage [ 2772.553089][ T5842] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2772.567516][ T5842] cdc_wdm 5-1:1.0: Unknown control protocol [ 2772.766807][T15437] pim6reg1: entered promiscuous mode [ 2772.806400][T15437] pim6reg1: entered allmulticast mode [ 2772.881986][T15440] syzkaller0: entered promiscuous mode [ 2772.888200][T15440] syzkaller0: entered allmulticast mode [ 2773.167382][T15446] syzkaller0: entered promiscuous mode [ 2773.193487][T15446] syzkaller0: entered allmulticast mode [ 2774.019278][T13371] usb 5-1: USB disconnect, device number 35 [ 2774.346535][T15473] syzkaller0: entered promiscuous mode [ 2774.353273][T15473] syzkaller0: entered allmulticast mode [ 2774.731034][T15481] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12283'. [ 2774.806577][T15481] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12283'. [ 2774.824574][T15480] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12283'. [ 2774.848064][T15484] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12283'. [ 2774.964144][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.970648][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.057772][T13658] usb 6-1: new low-speed USB device number 59 using dummy_hcd [ 2775.278317][T13658] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2775.286366][T13658] usb 6-1: config 0 has no interface number 0 [ 2775.317383][T13658] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2775.342275][T13658] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2775.358824][T13658] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2775.381326][T13658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2775.414850][T13658] usb 6-1: config 0 descriptor?? [ 2775.423743][T15483] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2775.440528][T13658] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2775.651692][ C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 2775.665985][T13658] usb 6-1: USB disconnect, device number 59 [ 2775.894324][T15515] syzkaller0: entered promiscuous mode [ 2775.901724][T15515] syzkaller0: entered allmulticast mode [ 2775.987992][ T5842] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2776.028826][ T746] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 2776.183114][ T5842] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2776.197378][ T5842] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2776.217739][ T5842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2776.236762][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2776.249645][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2776.263736][ T746] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2776.275201][ T746] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2776.286030][ T746] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2776.297419][ T746] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2776.321995][ T5842] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2776.338027][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2776.348097][ T746] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2776.367710][ T5842] usb 5-1: Product: syz [ 2776.374969][ T5842] usb 5-1: Manufacturer: syz [ 2776.392675][ T746] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2776.403376][ T5842] cdc_wdm 5-1:1.0: skipping garbage [ 2776.409723][ T5842] cdc_wdm 5-1:1.0: skipping garbage [ 2776.415096][ T746] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2776.424837][ T746] usb 7-1: Product: syz [ 2776.429811][ T5842] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2776.436217][ T746] usb 7-1: Manufacturer: syz [ 2776.441318][ T5842] cdc_wdm 5-1:1.0: Unknown control protocol [ 2776.455291][ T746] cdc_wdm 7-1:1.0: skipping garbage [ 2776.477845][ T746] cdc_wdm 7-1:1.0: skipping garbage [ 2776.502473][ T746] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 2776.508668][ T746] cdc_wdm 7-1:1.0: Unknown control protocol [ 2778.547411][ T4754] usb 5-1: USB disconnect, device number 36 [ 2778.863787][ T1618] usb 7-1: USB disconnect, device number 53 [ 2779.212163][T15555] syzkaller0: entered promiscuous mode [ 2779.221855][T15555] syzkaller0: entered allmulticast mode [ 2780.094034][T15590] syzkaller0: entered promiscuous mode [ 2780.104664][T15590] syzkaller0: entered allmulticast mode [ 2780.443523][T15604] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12322'. [ 2780.470930][T15604] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12322'. [ 2780.506791][T15601] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12322'. [ 2780.573369][T15605] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12322'. [ 2780.668008][T15609] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.12324' sets config #1 [ 2780.988698][T15618] syzkaller0: entered promiscuous mode [ 2781.001862][T15618] syzkaller0: entered allmulticast mode [ 2781.693116][T15633] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12333'. [ 2781.732583][T15633] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12333'. [ 2781.742297][T15632] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12333'. [ 2781.753014][T15633] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12333'. [ 2781.965637][T15545] delete_channel: no stack [ 2782.303036][T15647] syzkaller0: entered promiscuous mode [ 2782.324193][T15647] syzkaller0: entered allmulticast mode [ 2782.459889][T15650] tipc: Enabled bearer , priority 0 [ 2782.513262][T15650] tipc: Resetting bearer [ 2782.540687][T15654] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12342'. [ 2782.644920][T15649] tipc: Disabling bearer [ 2782.684695][T15654] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12342'. [ 2783.299142][T15676] syzkaller0: entered promiscuous mode [ 2783.317942][T15676] syzkaller0: entered allmulticast mode [ 2783.392880][T15680] tipc: Enabled bearer , priority 0 [ 2783.480568][T15680] tipc: Resetting bearer [ 2783.511888][T15679] tipc: Disabling bearer [ 2783.820836][T15690] tipc: Enabled bearer , priority 0 [ 2783.851043][T15690] tipc: Resetting bearer [ 2783.970163][T15689] tipc: Disabling bearer [ 2784.833576][T15711] team_slave_0: entered promiscuous mode [ 2784.839375][T15711] team_slave_1: entered promiscuous mode [ 2784.846833][T15711] macvtap1: entered promiscuous mode [ 2784.852829][T15711] team0: entered promiscuous mode [ 2784.880817][T15711] macvtap1: entered allmulticast mode [ 2784.886332][T15711] team0: entered allmulticast mode [ 2784.892467][T15711] team_slave_0: entered allmulticast mode [ 2784.902248][T15711] team_slave_1: entered allmulticast mode [ 2784.913963][T15711] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2784.941854][T15713] team0: left allmulticast mode [ 2784.952023][T15713] team_slave_0: left allmulticast mode [ 2784.967878][T15713] team_slave_1: left allmulticast mode [ 2784.988097][T15713] team0: left promiscuous mode [ 2784.997760][ T1618] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 2785.008546][T15713] team_slave_0: left promiscuous mode [ 2785.014079][T15713] team_slave_1: left promiscuous mode [ 2785.068545][T15714] syzkaller0: entered promiscuous mode [ 2785.074314][T15714] syzkaller0: entered allmulticast mode [ 2785.179476][ T1618] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2785.193231][ T1618] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2785.216558][ T1618] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2785.246346][ T1618] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2785.306676][ T1618] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2785.335574][ T1618] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2785.347844][ T1618] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2785.356017][ T1618] usb 7-1: Product: syz [ 2785.361281][ T1618] usb 7-1: Manufacturer: syz [ 2785.380060][ T1618] cdc_wdm 7-1:1.0: skipping garbage [ 2785.387070][ T1618] cdc_wdm 7-1:1.0: skipping garbage [ 2785.393645][ T1618] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2785.402202][ T1618] cdc_wdm 7-1:1.0: Unknown control protocol [ 2785.696711][T15729] __nla_validate_parse: 7 callbacks suppressed [ 2785.696724][T15729] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12370'. [ 2785.776611][T15729] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12370'. [ 2785.789672][T15726] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12370'. [ 2785.799611][T15734] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12370'. [ 2786.517821][T13371] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2786.679708][T15748] syzkaller0: entered promiscuous mode [ 2786.699075][T15748] syzkaller0: entered allmulticast mode [ 2786.710470][T13371] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2786.719664][T13371] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2786.730330][T13371] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2786.739522][T13371] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2786.750600][T13371] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2786.763844][T13371] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2786.773290][T13371] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2786.781500][T13371] usb 5-1: Product: syz [ 2786.788124][T13371] usb 5-1: Manufacturer: syz [ 2786.831177][T13371] cdc_wdm 5-1:1.0: skipping garbage [ 2786.836801][T13371] cdc_wdm 5-1:1.0: skipping garbage [ 2786.849836][T13371] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 2786.857930][T13371] cdc_wdm 5-1:1.0: Unknown control protocol [ 2787.011252][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12379'. [ 2787.039706][T13371] usb 7-1: USB disconnect, device number 54 [ 2787.043564][T15752] erspan0: entered promiscuous mode [ 2787.076504][T15752] macvtap1: entered promiscuous mode [ 2787.086411][T15752] macvtap1: entered allmulticast mode [ 2787.095657][T15752] erspan0: entered allmulticast mode [ 2787.108993][T15753] erspan0: left allmulticast mode [ 2787.146959][T15753] erspan0: left promiscuous mode [ 2787.764456][T15772] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.12384' sets config #1 [ 2788.061540][T11944] usb 5-1: USB disconnect, device number 37 [ 2788.210096][ T1618] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 2788.407740][ T1618] usb 7-1: Using ep0 maxpacket: 32 [ 2788.414684][ T1618] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 2788.423581][ T1618] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2788.434944][ T1618] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2788.449815][ T1618] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2788.464446][ T1618] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2788.474440][ T1618] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2788.483855][ T1618] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2788.492748][ T1618] usb 7-1: Product: syz [ 2788.496922][ T1618] usb 7-1: Manufacturer: syz [ 2788.501589][ T1618] usb 7-1: SerialNumber: syz [ 2788.521488][ T1618] usb 7-1: config 0 descriptor?? [ 2788.539595][ T1618] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2788.570892][ T1618] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2788.812706][ T1618] usb 7-1: USB disconnect, device number 55 [ 2788.843475][ T1618] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 2788.950534][T15784] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2788.978695][T15786] syzkaller0: entered promiscuous mode [ 2788.985661][T15786] syzkaller0: entered allmulticast mode [ 2789.180942][T15796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12391'. [ 2789.204813][T15796] erspan0: entered promiscuous mode [ 2789.210593][T15796] macvtap2: entered promiscuous mode [ 2789.215989][T15796] macvtap2: entered allmulticast mode [ 2789.221571][T15796] erspan0: entered allmulticast mode [ 2789.234758][T15796] erspan0: left allmulticast mode [ 2789.240322][T15796] erspan0: left promiscuous mode [ 2789.410752][T15803] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.12394' sets config #1 [ 2790.652162][T15814] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2790.929960][T15821] syzkaller0: entered promiscuous mode [ 2790.935679][T15821] syzkaller0: entered allmulticast mode [ 2791.748915][T15834] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.12404' sets config #1 [ 2791.824191][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12401'. [ 2792.675542][T15849] syzkaller0: entered promiscuous mode [ 2792.682700][T15849] syzkaller0: entered allmulticast mode [ 2793.044891][T15864] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12416'. [ 2793.068529][T15864] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12416'. [ 2793.081309][T15861] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12416'. [ 2793.118530][T15864] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12416'. [ 2793.137818][T13658] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 2793.339495][T13658] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2793.371095][T13658] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2793.417871][T13658] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2793.445883][T13658] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2793.485142][T13658] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2793.526284][T13658] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2793.540477][T13658] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2793.593555][T13658] usb 7-1: Product: syz [ 2793.605005][T13658] usb 7-1: Manufacturer: syz [ 2793.634390][T13658] cdc_wdm 7-1:1.0: skipping garbage [ 2793.654194][T13658] cdc_wdm 7-1:1.0: skipping garbage [ 2793.682857][T13658] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2793.691291][T15881] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.12420' sets config #1 [ 2793.697735][T13658] cdc_wdm 7-1:1.0: Unknown control protocol [ 2794.713507][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 4 bytes [ 2795.234708][T15893] syzkaller0: entered promiscuous mode [ 2795.240795][T15893] syzkaller0: entered allmulticast mode [ 2795.938860][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2795.939226][T13658] usb 7-1: USB disconnect, device number 56 [ 2795.945486][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2795.957503][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2796.095507][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12424'. [ 2796.460603][T15911] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.12430' sets config #1 [ 2796.668060][T13658] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 2796.869847][T13658] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2796.878695][T13658] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2796.892518][T13658] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2796.901941][T13658] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2796.913615][T13658] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2796.930905][T13658] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2796.943139][T13658] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2796.951323][T13658] usb 7-1: Product: syz [ 2796.955523][T13658] usb 7-1: Manufacturer: syz [ 2796.970892][T13658] cdc_wdm 7-1:1.0: skipping garbage [ 2796.976606][T13658] cdc_wdm 7-1:1.0: skipping garbage [ 2796.985959][T13658] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2796.992004][T13658] cdc_wdm 7-1:1.0: Unknown control protocol [ 2797.244790][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 4 bytes [ 2799.553408][ T4754] usb 7-1: USB disconnect, device number 57 [ 2799.835422][T15952] tipc: Started in network mode [ 2799.847977][T15952] tipc: Node identity 2e2cade5afe1, cluster identity 4711 [ 2799.866417][T15952] tipc: Enabled bearer , priority 0 [ 2799.886274][T15952] syzkaller0: entered promiscuous mode [ 2799.893500][T15952] syzkaller0: entered allmulticast mode [ 2799.901218][T15953] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.12439' sets config #1 [ 2799.935531][T15952] tipc: Resetting bearer [ 2799.964016][T15951] tipc: Resetting bearer [ 2799.999923][T15951] tipc: Disabling bearer [ 2801.700945][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12445'. [ 2801.890882][ T1618] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 2802.089932][ T1618] usb 7-1: Using ep0 maxpacket: 32 [ 2802.111863][ T1618] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 2802.120324][ T1618] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2802.193539][ T1618] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2802.289661][ T1618] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2802.345771][ T1618] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2802.384195][ T1618] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2802.418090][ T1618] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2802.458368][ T1618] usb 7-1: Product: syz [ 2802.496021][ T1618] usb 7-1: Manufacturer: syz [ 2802.525352][ T1618] usb 7-1: SerialNumber: syz [ 2802.550393][ T1618] usb 7-1: config 0 descriptor?? [ 2802.578162][ T1618] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2802.614308][ T1618] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2802.795385][ T1618] usb 7-1: USB disconnect, device number 58 [ 2802.814992][ T1618] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 2802.917771][ T5842] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2803.133903][ T5842] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2803.165253][ T5842] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2803.209474][ T5842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2803.228938][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2803.252219][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2803.294284][ T5842] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2803.312073][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2803.320467][ T5842] usb 5-1: Product: syz [ 2803.325052][ T5842] usb 5-1: Manufacturer: syz [ 2803.335840][ T5842] cdc_wdm 5-1:1.0: skipping garbage [ 2803.343597][ T5842] cdc_wdm 5-1:1.0: skipping garbage [ 2803.353738][ T5842] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2803.372314][ T5842] cdc_wdm 5-1:1.0: Unknown control protocol [ 2803.400181][T16009] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.12454' sets config #1 [ 2803.790159][T16019] syzkaller0: entered promiscuous mode [ 2803.796095][T16019] syzkaller0: entered allmulticast mode [ 2803.986402][T16021] loop8: detected capacity change from 0 to 8 [ 2804.004851][T16021] Dev loop8: unable to read RDB block 8 [ 2804.016485][T16021] loop8: unable to read partition table [ 2804.024318][T16021] loop8: partition table beyond EOD, truncated [ 2804.035122][T16021] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 2804.668788][T11944] usb 5-1: USB disconnect, device number 38 [ 2804.968661][ T5842] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 2805.180999][ T5842] usb 6-1: not running at top speed; connect to a high speed hub [ 2805.210858][ T5842] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2805.242832][ T5842] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2805.261304][ T5842] usb 6-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 2805.270532][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2805.281065][ T5842] usb 6-1: Product: 戽숎銷碫轥㪩䰞쌰᮵⼴U෰躯ႃ窲鄭咡졖᭻䉬맹෎煘㆕迚녉䨒℈黈쥁പ눞徕籘ԩ蘭Գɗ檚둏줚֒嘖Փꢭ毲깁瘹ĩ猅씔킜㲍銘㋠錶뭨옑ᣬ靡ﴁ㑏閝⫅溴 [ 2805.327062][ T5842] usb 6-1: Manufacturer: 横崨劋ᦐꗔ䩮雱❷È톂됍쀕꠴ߎꐕ놿삖厺✅㙁膥瀳㄂뫞拆㙦ҙ陪倷霔祀뜠⨋졞ꃡꟐ茆㹍赟邁瀪ꏖ谅챞쯀ᲇ悘旇ᎎ㝒ᄦ䷕䚎ퟛ喌時娕ꄜ拄煓护踎ᝩʯ셇−ゥ䪨㦬䣗ೊ袐⨔壅홋蛊⬣ [ 2805.407766][ T5842] usb 6-1: SerialNumber: ъ [ 2805.809359][T16032] netlink: 'syz.5.12463': attribute type 4 has an invalid length. [ 2805.819783][T16032] netlink: 17 bytes leftover after parsing attributes in process `syz.5.12463'. [ 2805.840166][T16032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2805.886619][T16032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2805.939060][ T5842] usbhid 6-1:1.0: can't add hid device: -71 [ 2805.945064][ T5842] usbhid: probe of 6-1:1.0 failed with error -71 [ 2805.963413][ T5842] usb 6-1: USB disconnect, device number 60 [ 2806.038763][T16032] delete_channel: no stack [ 2806.187837][ T746] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2806.417710][ T746] usb 5-1: Using ep0 maxpacket: 32 [ 2806.426452][ T746] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 2806.435305][ T746] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2806.455489][ T746] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2806.483156][ T746] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2806.517069][ T746] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2806.532577][ T746] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2806.542108][ T746] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2806.555855][ T746] usb 5-1: Product: syz [ 2806.572110][ T746] usb 5-1: Manufacturer: syz [ 2806.612745][ T746] usb 5-1: SerialNumber: syz [ 2806.638927][ T746] usb 5-1: config 0 descriptor?? [ 2806.649561][ T746] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2806.673976][ T746] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2806.893053][ T746] usb 5-1: USB disconnect, device number 39 [ 2806.905747][ T746] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 2807.946438][T16068] syzkaller0: entered promiscuous mode [ 2807.967629][T16068] syzkaller0: entered allmulticast mode [ 2808.479035][ T5842] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2808.577785][ T4754] usb 7-1: new low-speed USB device number 59 using dummy_hcd [ 2808.668735][ T5842] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2808.683502][ T5842] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2808.698349][ T5842] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2808.708054][ T5842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2808.721663][ T5842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2808.722280][T16086] veth1_macvtap: left promiscuous mode [ 2808.734742][ T5842] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2808.739195][ T4754] usb 7-1: device descriptor read/64, error -71 [ 2808.747813][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2808.764007][T16086] macsec0: entered promiscuous mode [ 2808.784227][ T5842] usb 6-1: Product: syz [ 2808.794340][ T5842] usb 6-1: Manufacturer: syz [ 2808.812437][ T5842] cdc_wdm 6-1:1.0: skipping garbage [ 2808.823418][ T5842] cdc_wdm 6-1:1.0: skipping garbage [ 2808.834137][ T5842] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2808.840422][ T5842] cdc_wdm 6-1:1.0: Unknown control protocol [ 2809.027980][ T4754] usb 7-1: new low-speed USB device number 60 using dummy_hcd [ 2809.198303][ T4754] usb 7-1: device descriptor read/64, error -71 [ 2809.317976][ T4754] usb usb7-port1: attempt power cycle [ 2809.737857][ T4754] usb 7-1: new low-speed USB device number 61 using dummy_hcd [ 2809.887435][ T4754] usb 7-1: device descriptor read/8, error -71 [ 2810.129217][T11030] usb 6-1: USB disconnect, device number 61 [ 2810.197936][ T4754] usb 7-1: new low-speed USB device number 62 using dummy_hcd [ 2810.249993][ T4754] usb 7-1: device descriptor read/8, error -71 [ 2810.378395][ T4754] usb usb7-port1: unable to enumerate USB device [ 2810.428642][T16102] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12484'. [ 2810.455251][T16102] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12484'. [ 2810.492088][T16101] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12484'. [ 2810.506406][T16103] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12484'. [ 2810.598649][T16105] syzkaller0: entered promiscuous mode [ 2810.604182][T16105] syzkaller0: entered allmulticast mode [ 2810.958304][T16115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12489'. [ 2811.005439][T16115] team_slave_0: entered promiscuous mode [ 2811.011170][T16115] team_slave_1: entered promiscuous mode [ 2811.054726][T16115] macvtap3: entered promiscuous mode [ 2811.072878][T16115] team0: entered promiscuous mode [ 2811.091904][T16115] macvtap3: entered allmulticast mode [ 2811.097316][T16115] team0: entered allmulticast mode [ 2811.126959][T16115] team_slave_0: entered allmulticast mode [ 2811.155479][T16115] team_slave_1: entered allmulticast mode [ 2811.191059][T16115] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 2811.507814][T11030] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2811.637965][ T5842] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2811.697879][T11030] usb 6-1: Using ep0 maxpacket: 32 [ 2811.720336][T11030] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 2811.737943][T11030] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2811.753611][T11030] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2811.789215][T11030] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2811.803651][T11030] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2811.814821][T11030] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2811.825963][T11030] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2811.841169][T11030] usb 6-1: Product: syz [ 2811.845398][T11030] usb 6-1: Manufacturer: syz [ 2811.850719][T11030] usb 6-1: SerialNumber: syz [ 2811.859102][T11030] usb 6-1: config 0 descriptor?? [ 2811.870454][ T5842] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2811.877138][T11030] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2811.879684][ T5842] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2811.902108][ T5842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2811.905744][T11030] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2811.922522][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2811.946713][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2811.964458][ T5842] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2811.992168][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2812.017456][ T5842] usb 5-1: Product: syz [ 2812.023057][ T5842] usb 5-1: Manufacturer: syz [ 2812.054509][ T5842] cdc_wdm 5-1:1.0: skipping garbage [ 2812.064091][ T5842] cdc_wdm 5-1:1.0: skipping garbage [ 2812.076736][ T5842] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 2812.097310][ T5842] cdc_wdm 5-1:1.0: Unknown control protocol [ 2812.109099][T16136] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12494'. [ 2812.119697][T16136] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12494'. [ 2812.119794][T11030] usb 6-1: USB disconnect, device number 62 [ 2812.129122][T16135] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12494'. [ 2812.155573][T16136] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12494'. [ 2812.161127][T11030] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 2812.240474][T16098] delete_channel: no stack [ 2812.304979][T16138] syzkaller0: entered promiscuous mode [ 2812.310908][T16138] syzkaller0: entered allmulticast mode [ 2812.385104][T13371] usb 5-1: USB disconnect, device number 40 [ 2812.697991][ T5842] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 2812.929486][ T5842] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2812.954551][ T5842] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2812.994031][ T5842] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2813.034365][ T5842] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2813.081107][ T5842] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2813.116069][ T5842] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2813.146643][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2813.163436][ T5842] usb 7-1: Product: syz [ 2813.173530][ T5842] usb 7-1: Manufacturer: syz [ 2813.216017][ T5842] cdc_wdm 7-1:1.0: skipping garbage [ 2813.242167][ T5842] cdc_wdm 7-1:1.0: skipping garbage [ 2813.272204][ T5842] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2813.290717][ T5842] cdc_wdm 7-1:1.0: Unknown control protocol [ 2813.769852][ T5842] usb 7-1: USB disconnect, device number 63 [ 2814.249621][ T4754] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2814.439995][ T4754] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2814.456683][ T4754] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2814.474635][ T4754] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2814.485404][ T4754] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2814.504961][ T4754] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2814.532865][ T4754] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2814.554181][ T5842] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 2814.583560][ T4754] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2814.606240][ T4754] usb 6-1: Product: syz [ 2814.616528][ T4754] usb 6-1: Manufacturer: syz [ 2814.639852][ T4754] cdc_wdm 6-1:1.0: skipping garbage [ 2814.645098][ T4754] cdc_wdm 6-1:1.0: skipping garbage [ 2814.681699][ T4754] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2814.700787][ T4754] cdc_wdm 6-1:1.0: Unknown control protocol [ 2814.774803][ T5842] usb 5-1: not running at top speed; connect to a high speed hub [ 2814.794354][ T5842] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2814.847849][ T5842] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2814.882578][ T5842] usb 5-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 2814.911916][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2814.920405][ T5842] usb 5-1: Product: 戽숎銷碫轥㪩䰞쌰᮵⼴U෰躯ႃ窲鄭咡졖᭻䉬맹෎煘㆕迚녉䨒℈黈쥁പ눞徕籘ԩ蘭Գɗ檚둏줚֒嘖Փꢭ毲깁瘹ĩ猅씔킜㲍銘㋠錶뭨옑ᣬ靡ﴁ㑏閝⫅溴 [ 2814.950001][ T5842] usb 5-1: Manufacturer: 横崨劋ᦐꗔ䩮雱❷È톂됍쀕꠴ߎꐕ놿삖厺✅㙁膥瀳㄂뫞拆㙦ҙ陪倷霔祀뜠⨋졞ꃡꟐ茆㹍赟邁瀪ꏖ谅챞쯀ᲇ悘旇ᎎ㝒ᄦ䷕䚎ퟛ喌時娕ꄜ拄煓护踎ᝩʯ셇−ゥ䪨㦬䣗ೊ袐⨔壅홋蛊⬣ [ 2815.322337][ T5842] usb 5-1: SerialNumber: ъ [ 2815.639689][T16164] netlink: 'syz.4.12503': attribute type 4 has an invalid length. [ 2815.648001][T16164] netlink: 17 bytes leftover after parsing attributes in process `syz.4.12503'. [ 2815.765604][T16183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2815.774881][T16183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2815.876989][ T5842] usbhid 5-1:1.0: can't add hid device: -71 [ 2815.913772][ T5842] usbhid: probe of 5-1:1.0 failed with error -71 [ 2815.972595][ T5842] usb 5-1: USB disconnect, device number 41 [ 2816.164641][T16183] delete_channel: no stack [ 2816.314045][T16186] syzkaller0: entered promiscuous mode [ 2816.319957][T16186] syzkaller0: entered allmulticast mode [ 2816.518973][T13371] usb 6-1: USB disconnect, device number 63 [ 2816.947875][ T4754] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 2817.134456][ T4754] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2817.144129][ T4754] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2817.157905][ T4754] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2817.167132][ T4754] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2817.178325][ T4754] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2817.228991][ T4754] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2817.323926][ T4754] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2817.367832][ T4754] usb 7-1: Product: syz [ 2817.380123][ T4754] usb 7-1: Manufacturer: syz [ 2817.391467][ T4754] cdc_wdm 7-1:1.0: skipping garbage [ 2817.400367][ T4754] cdc_wdm 7-1:1.0: skipping garbage [ 2817.418225][ T4754] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2817.445817][ T4754] cdc_wdm 7-1:1.0: Unknown control protocol [ 2817.555498][T16208] pim6reg1: entered promiscuous mode [ 2817.562444][T16208] pim6reg1: entered allmulticast mode [ 2817.728981][ T746] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 2817.784683][ T4754] usb 7-1: USB disconnect, device number 64 [ 2817.907796][ T746] usb 6-1: device descriptor read/64, error -71 [ 2818.119937][T16223] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12516'. [ 2818.135229][T16223] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12516'. [ 2818.158447][T16221] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12516'. [ 2818.194499][T16223] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12516'. [ 2818.217946][ T746] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 2818.387747][ T746] usb 6-1: device descriptor read/64, error -71 [ 2818.519533][ T746] usb usb6-port1: attempt power cycle [ 2818.967749][ T746] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 2819.024278][ T746] usb 6-1: device descriptor read/8, error -71 [ 2819.169094][T16237] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.12520' sets config #1 [ 2819.307834][ T746] usb 6-1: new low-speed USB device number 67 using dummy_hcd [ 2819.364928][ T746] usb 6-1: device descriptor read/8, error -71 [ 2819.518252][ T746] usb usb6-port1: unable to enumerate USB device [ 2820.171544][T16257] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12528'. [ 2820.198303][T16257] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12528'. [ 2820.209175][T16255] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12528'. [ 2820.229397][T16257] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12528'. [ 2820.944380][ T1618] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2821.179452][ T1618] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2821.192987][ T1618] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2821.217810][ T1618] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2821.237045][ T1618] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2821.274554][ T1618] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2821.309028][ T1618] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2821.328213][ T1618] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2821.360075][ T1618] usb 6-1: Product: syz [ 2821.364277][ T1618] usb 6-1: Manufacturer: syz [ 2821.394520][ T1618] cdc_wdm 6-1:1.0: skipping garbage [ 2821.408591][ T1618] cdc_wdm 6-1:1.0: skipping garbage [ 2821.427343][ T1618] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2821.440664][ T1618] cdc_wdm 6-1:1.0: Unknown control protocol [ 2821.777919][ T1618] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 2821.829186][ T4754] usb 6-1: USB disconnect, device number 68 [ 2821.983700][ T1618] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2821.995847][ T1618] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2822.008348][ T1618] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2822.022815][ T1618] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2822.065005][ T1618] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2822.101659][ T1618] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2822.139584][ T1618] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2822.174455][ T1618] usb 7-1: Product: syz [ 2822.193980][ T1618] usb 7-1: Manufacturer: syz [ 2822.230249][ T1618] cdc_wdm 7-1:1.0: skipping garbage [ 2822.261350][ T1618] cdc_wdm 7-1:1.0: skipping garbage [ 2822.300222][ T1618] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2822.485417][ T1618] cdc_wdm 7-1:1.0: Unknown control protocol [ 2822.502980][T16240] delete_channel: no stack [ 2823.799189][T11030] usb 7-1: USB disconnect, device number 65 [ 2824.268156][ T1618] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 2824.527381][ T1618] usb 5-1: not running at top speed; connect to a high speed hub [ 2824.546522][ T1618] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2824.587369][ T1618] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2824.638671][ T1618] usb 5-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 2824.663457][ T1618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2824.728110][ T4754] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 2824.746684][ T1618] usb 5-1: Product: 戽숎銷碫轥㪩䰞쌰᮵⼴U෰躯ႃ窲鄭咡졖᭻䉬맹෎煘㆕迚녉䨒℈黈쥁പ눞徕籘ԩ蘭Գɗ檚둏줚֒嘖Փꢭ毲깁瘹ĩ猅씔킜㲍銘㋠錶뭨옑ᣬ靡ﴁ㑏閝⫅溴 [ 2824.833520][ T1618] usb 5-1: Manufacturer: 横崨劋ᦐꗔ䩮雱❷È톂됍쀕꠴ߎꐕ놿삖厺✅㙁膥瀳㄂뫞拆㙦ҙ陪倷霔祀뜠⨋졞ꃡꟐ茆㹍赟邁瀪ꏖ谅챞쯀ᲇ悘旇ᎎ㝒ᄦ䷕䚎ퟛ喌時娕ꄜ拄煓护踎ᝩʯ셇−ゥ䪨㦬䣗ೊ袐⨔壅홋蛊⬣ [ 2824.861669][ T1618] usb 5-1: SerialNumber: ъ [ 2824.929467][ T4754] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2824.963168][ T4754] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2824.988937][ T4754] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2825.019598][ T4754] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2825.053422][ T4754] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2825.085137][ T4754] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2825.095807][ T4754] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2825.112554][ T4754] usb 7-1: Product: syz [ 2825.120725][ T4754] usb 7-1: Manufacturer: syz [ 2825.138923][T16326] netlink: 'syz.4.12549': attribute type 4 has an invalid length. [ 2825.147147][T16326] netlink: 17 bytes leftover after parsing attributes in process `syz.4.12549'. [ 2825.170946][T16326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2825.184875][ T4754] cdc_wdm 7-1:1.0: skipping garbage [ 2825.191126][ T4754] cdc_wdm 7-1:1.0: skipping garbage [ 2825.205198][T16326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2825.230568][ T4754] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2825.240333][ T4754] cdc_wdm 7-1:1.0: Unknown control protocol [ 2825.273584][ T1618] usbhid 5-1:1.0: can't add hid device: -71 [ 2825.276837][T16326] delete_channel: no stack [ 2825.300083][ T1618] usbhid: probe of 5-1:1.0 failed with error -71 [ 2825.336333][ T1618] usb 5-1: USB disconnect, device number 42 [ 2825.691192][ T1618] usb 7-1: USB disconnect, device number 66 [ 2830.438338][T16386] tipc: Enabled bearer , priority 0 [ 2830.468311][T16386] syzkaller0: entered promiscuous mode [ 2830.473827][T16386] syzkaller0: entered allmulticast mode [ 2830.571588][T16386] tipc: Resetting bearer [ 2830.613710][T16385] tipc: Resetting bearer [ 2830.690596][T16385] tipc: Disabling bearer [ 2830.897865][T13371] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2830.968054][ T1618] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2831.080392][T13371] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2831.095331][T13371] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2831.106078][T13371] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2831.115581][T13371] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2831.127211][T13371] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2831.140474][T13371] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2831.153013][T13371] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2831.162258][T13371] usb 5-1: Product: syz [ 2831.166442][T13371] usb 5-1: Manufacturer: syz [ 2831.175311][T13371] cdc_wdm 5-1:1.0: skipping garbage [ 2831.185805][T13371] cdc_wdm 5-1:1.0: skipping garbage [ 2831.191380][ T1618] usb 6-1: Using ep0 maxpacket: 32 [ 2831.193257][T13371] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2831.203565][T13371] cdc_wdm 5-1:1.0: Unknown control protocol [ 2831.211529][ T1618] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 2831.239103][ T1618] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2831.255775][ T1618] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2831.267014][ T746] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 2831.291156][ T1618] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2831.324997][ T1618] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2831.351195][ T1618] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2831.370722][ T1618] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2831.404946][ T1618] usb 6-1: Product: syz [ 2831.425164][ T1618] usb 6-1: Manufacturer: syz [ 2831.466666][ T1618] usb 6-1: SerialNumber: syz [ 2831.604880][ T1618] usb 6-1: config 0 descriptor?? [ 2831.627190][ T1618] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2831.637524][ T746] usb 7-1: not running at top speed; connect to a high speed hub [ 2831.754795][ T746] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2831.778835][ T1618] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 2831.788097][ T746] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2831.824067][ T746] usb 7-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 2831.833255][ T746] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2831.847165][ T746] usb 7-1: Product: 戽숎銷碫轥㪩䰞쌰᮵⼴U෰躯ႃ窲鄭咡졖᭻䉬맹෎煘㆕迚녉䨒℈黈쥁പ눞徕籘ԩ蘭Գɗ檚둏줚֒嘖Փꢭ毲깁瘹ĩ猅씔킜㲍銘㋠錶뭨옑ᣬ靡ﴁ㑏閝⫅溴 [ 2831.848853][T11030] usb 6-1: USB disconnect, device number 69 [ 2831.877853][ T746] usb 7-1: Manufacturer: 横崨劋ᦐꗔ䩮雱❷È톂됍쀕꠴ߎꐕ놿삖厺✅㙁膥瀳㄂뫞拆㙦ҙ陪倷霔祀뜠⨋졞ꃡꟐ茆㹍赟邁瀪ꏖ谅챞쯀ᲇ悘旇ᎎ㝒ᄦ䷕䚎ퟛ喌時娕ꄜ拄煓护踎ᝩʯ셇−ゥ䪨㦬䣗ೊ袐⨔壅홋蛊⬣ [ 2831.931025][T11030] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 2832.003906][ T746] usb 7-1: SerialNumber: ъ [ 2832.281145][T16408] netlink: 'syz.6.12575': attribute type 4 has an invalid length. [ 2832.289527][T16408] netlink: 17 bytes leftover after parsing attributes in process `syz.6.12575'. [ 2832.334415][T16408] delete_channel: no stack [ 2832.426114][ T746] usbhid 7-1:1.0: can't add hid device: -71 [ 2832.471015][ T746] usbhid: probe of 7-1:1.0 failed with error -71 [ 2832.544066][T11030] usb 5-1: USB disconnect, device number 43 [ 2832.568488][ T746] usb 7-1: USB disconnect, device number 67 [ 2833.187588][T16422] syzkaller0: entered promiscuous mode [ 2833.195488][T16422] syzkaller0: entered allmulticast mode [ 2834.165131][T16436] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.12582' sets config #1 [ 2836.414232][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.432512][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.822061][T16426] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12579'. [ 2836.841983][T16426] bond_slave_0: entered promiscuous mode [ 2836.848216][T16426] bond_slave_1: entered promiscuous mode [ 2836.854104][T16426] macvtap2: entered promiscuous mode [ 2836.863275][T16426] bond0: entered promiscuous mode [ 2836.869759][T16426] macvtap2: entered allmulticast mode [ 2836.875162][T16426] bond0: entered allmulticast mode [ 2836.893815][T16426] bond_slave_0: entered allmulticast mode [ 2836.903774][T16426] bond_slave_1: entered allmulticast mode [ 2836.919177][T16426] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 2836.942263][T16427] bond0: left allmulticast mode [ 2836.952408][T16427] bond_slave_0: left allmulticast mode [ 2836.961978][T16427] bond_slave_1: left allmulticast mode [ 2837.018959][T16427] bond0: left promiscuous mode [ 2837.024400][T16427] bond_slave_0: left promiscuous mode [ 2837.029975][T16427] bond_slave_1: left promiscuous mode [ 2837.455313][T16444] tipc: Enabled bearer , priority 0 [ 2837.488960][T16444] syzkaller0: entered promiscuous mode [ 2837.498731][T16448] fuse: Bad value for 'fd' [ 2837.509321][T16448] fuse: Bad value for 'fd' [ 2837.528143][T16444] syzkaller0: entered allmulticast mode [ 2837.622939][T16450] syzkaller0: entered promiscuous mode [ 2837.629384][T16450] syzkaller0: entered allmulticast mode [ 2837.640365][T16444] tipc: Resetting bearer [ 2837.662173][T16443] tipc: Resetting bearer [ 2837.716792][T16443] tipc: Disabling bearer [ 2837.907771][ T1618] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 2838.110877][ T1618] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2838.119909][ T1618] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2838.130699][ T1618] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2838.139958][T22757] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2838.156618][ T1618] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2838.174305][ T1618] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2838.190935][ T1618] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2838.200410][ T1618] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2838.212375][ T1618] usb 7-1: Product: syz [ 2838.216636][ T1618] usb 7-1: Manufacturer: syz [ 2838.234718][ T1618] cdc_wdm 7-1:1.0: skipping garbage [ 2838.240847][ T1618] cdc_wdm 7-1:1.0: skipping garbage [ 2838.249639][ T1618] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2838.255628][ T1618] cdc_wdm 7-1:1.0: Unknown control protocol [ 2838.349479][T22757] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2838.363369][T22757] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2838.374896][T22757] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2838.389917][T22757] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2838.405527][T22757] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2838.423002][T22757] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2838.423834][T13371] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2838.437715][T22757] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2838.484349][T22757] usb 6-1: Product: syz [ 2838.489373][T22757] usb 6-1: Manufacturer: syz [ 2838.637287][T22757] cdc_wdm 6-1:1.0: skipping garbage [ 2838.647751][T13371] usb 5-1: Using ep0 maxpacket: 32 [ 2838.656626][T13371] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 2838.671288][T13371] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2838.683140][T22757] cdc_wdm 6-1:1.0: skipping garbage [ 2838.688729][T13371] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2838.700155][T13371] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2838.713793][T13371] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2838.714121][T22757] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 2838.724844][T13371] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2838.740285][T13371] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2838.756533][ T1618] usb 7-1: USB disconnect, device number 68 [ 2838.762851][T13371] usb 5-1: Product: syz [ 2838.767050][T13371] usb 5-1: Manufacturer: syz [ 2838.771914][T13371] usb 5-1: SerialNumber: syz [ 2838.779039][T13371] usb 5-1: config 0 descriptor?? [ 2838.801634][T13371] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2838.840086][T13371] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2838.902393][T22757] cdc_wdm 6-1:1.0: Unknown control protocol [ 2839.085721][T13371] usb 5-1: USB disconnect, device number 44 [ 2839.142426][T13371] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 2840.301386][T13371] usb 6-1: USB disconnect, device number 70 [ 2840.544860][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12594'. [ 2840.565445][T16494] bond_slave_0: entered promiscuous mode [ 2840.571199][T16494] bond_slave_1: entered promiscuous mode [ 2840.583456][T16494] macvtap3: entered promiscuous mode [ 2840.589280][T16494] bond0: entered promiscuous mode [ 2840.594760][T16494] macvtap3: entered allmulticast mode [ 2840.601398][T16494] bond0: entered allmulticast mode [ 2840.607217][T16494] bond_slave_0: entered allmulticast mode [ 2840.613040][T16494] bond_slave_1: entered allmulticast mode [ 2840.620191][T16494] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 2840.632751][T16495] bond0: left allmulticast mode [ 2840.637830][T16495] bond_slave_0: left allmulticast mode [ 2840.643403][T16495] bond_slave_1: left allmulticast mode [ 2840.649121][T16495] bond0: left promiscuous mode [ 2840.654432][T16495] bond_slave_0: left promiscuous mode [ 2840.659946][T16495] bond_slave_1: left promiscuous mode [ 2840.818389][T16498] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.12595' sets config #1 [ 2840.883315][T16500] fuse: Bad value for 'fd' [ 2840.894946][T16500] fuse: Bad value for 'fd' [ 2841.014203][T16469] delete_channel: no stack [ 2841.230683][T16510] tipc: Enabled bearer , priority 0 [ 2841.238729][T16510] syzkaller0: entered promiscuous mode [ 2841.244224][T16510] syzkaller0: entered allmulticast mode [ 2841.306595][T16510] tipc: Resetting bearer [ 2841.326449][T16509] tipc: Resetting bearer [ 2841.411534][T16509] tipc: Disabling bearer [ 2841.469617][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12604'. [ 2841.505202][T16518] bond_slave_0: entered promiscuous mode [ 2841.510987][T16518] bond_slave_1: entered promiscuous mode [ 2841.532836][T16518] macvtap4: entered promiscuous mode [ 2841.545075][T16518] bond0: entered promiscuous mode [ 2841.552149][T16518] macvtap4: entered allmulticast mode [ 2841.558969][T16518] bond0: entered allmulticast mode [ 2841.564111][T16518] bond_slave_0: entered allmulticast mode [ 2841.573447][T16518] bond_slave_1: entered allmulticast mode [ 2841.580479][T16518] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 2841.606790][T16519] bond0: left allmulticast mode [ 2841.611848][T13371] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2841.611991][T16519] bond_slave_0: left allmulticast mode [ 2841.625307][T16519] bond_slave_1: left allmulticast mode [ 2841.631387][T16519] bond0: left promiscuous mode [ 2841.636785][T16519] bond_slave_0: left promiscuous mode [ 2841.642278][T16519] bond_slave_1: left promiscuous mode [ 2841.734175][T16523] fuse: Bad value for 'fd' [ 2841.747219][T16523] fuse: Bad value for 'fd' [ 2841.806890][T13371] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2841.816378][T13371] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2841.827378][T13371] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2841.837610][T13371] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2841.849037][T13371] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2841.862283][T13371] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2841.872063][T13371] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2841.880482][T13371] usb 6-1: Product: syz [ 2841.884662][T13371] usb 6-1: Manufacturer: syz [ 2841.896164][T13371] cdc_wdm 6-1:1.0: skipping garbage [ 2841.907743][T13371] cdc_wdm 6-1:1.0: skipping garbage [ 2841.920526][T13371] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2841.926470][T13371] cdc_wdm 6-1:1.0: Unknown control protocol [ 2842.187996][T11030] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 2842.197084][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 4 bytes [ 2842.287773][T13371] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2842.462709][T11030] usb 7-1: not running at top speed; connect to a high speed hub [ 2842.471232][T13371] usb 5-1: Using ep0 maxpacket: 32 [ 2842.480198][T11030] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2842.540657][T13371] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 2842.563484][T11030] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2842.570741][T13371] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2842.583881][T13371] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2842.584203][T22757] usb 6-1: USB disconnect, device number 71 [ 2842.595022][T13371] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2842.595053][T13371] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2842.598197][T13371] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2842.632765][T13371] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2842.660377][T11030] usb 7-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 2842.677297][T13371] usb 5-1: Product: syz [ 2842.682021][T13371] usb 5-1: Manufacturer: syz [ 2842.686682][T11030] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2842.699920][T13371] usb 5-1: SerialNumber: syz [ 2842.706205][T11030] usb 7-1: Product: 戽숎銷碫轥㪩䰞쌰᮵⼴U෰躯ႃ窲鄭咡졖᭻䉬맹෎煘㆕迚녉䨒℈黈쥁പ눞徕籘ԩ蘭Գɗ檚둏줚֒嘖Փꢭ毲깁瘹ĩ猅씔킜㲍銘㋠錶뭨옑ᣬ靡ﴁ㑏閝⫅溴 [ 2842.731629][T13371] usb 5-1: config 0 descriptor?? [ 2842.746876][T11030] usb 7-1: Manufacturer: 横崨劋ᦐꗔ䩮雱❷È톂됍쀕꠴ߎꐕ놿삖厺✅㙁膥瀳㄂뫞拆㙦ҙ陪倷霔祀뜠⨋졞ꃡꟐ茆㹍赟邁瀪ꏖ谅챞쯀ᲇ悘旇ᎎ㝒ᄦ䷕䚎ퟛ喌時娕ꄜ拄煓护踎ᝩʯ셇−ゥ䪨㦬䣗ೊ袐⨔壅홋蛊⬣ [ 2842.793843][T11030] usb 7-1: SerialNumber: ъ [ 2842.802673][T13371] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2842.837399][T13371] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 2843.014125][ T5842] usb 5-1: USB disconnect, device number 45 [ 2843.052209][ T5842] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 2843.252658][T16542] delete_channel: no stack [ 2843.258097][T11030] usbhid 7-1:1.0: can't add hid device: -71 [ 2843.269044][T11030] usbhid: probe of 7-1:1.0 failed with error -71 [ 2843.296329][T11030] usb 7-1: USB disconnect, device number 69 [ 2845.200956][T16560] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.12614' sets config #1 [ 2846.687768][T13371] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 2846.887739][T13371] usb 7-1: Using ep0 maxpacket: 32 [ 2846.897617][T13371] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 2846.905934][T13371] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2846.948047][T13371] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2846.969462][T13371] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2846.998316][T13371] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2847.021503][T13371] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2847.037755][T13371] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2847.067834][T16598] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.12630' sets config #1 [ 2847.077178][T13371] usb 7-1: Product: syz [ 2847.087735][T13371] usb 7-1: Manufacturer: syz [ 2847.092359][T13371] usb 7-1: SerialNumber: syz [ 2847.110704][T13371] usb 7-1: config 0 descriptor?? [ 2847.141361][T13371] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2847.160902][T13371] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2848.531906][T16617] pim6reg1: entered promiscuous mode [ 2848.540193][T16617] pim6reg1: entered allmulticast mode [ 2848.860129][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12639'. [ 2848.890082][T16623] bond_slave_0: entered promiscuous mode [ 2848.895823][T16623] bond_slave_1: entered promiscuous mode [ 2848.922215][T16623] macvtap2: entered promiscuous mode [ 2848.927518][T16623] bond0: entered promiscuous mode [ 2848.940404][T16623] macvtap2: entered allmulticast mode [ 2848.945951][T16623] bond0: entered allmulticast mode [ 2848.951305][T16623] bond_slave_0: entered allmulticast mode [ 2848.974832][T16623] bond_slave_1: entered allmulticast mode [ 2848.993061][T16623] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 2849.020637][T16624] bond0: left allmulticast mode [ 2849.035759][T16624] bond_slave_0: left allmulticast mode [ 2849.054712][T16624] bond_slave_1: left allmulticast mode [ 2849.065313][T16624] bond0: left promiscuous mode [ 2849.072045][T16624] bond_slave_0: left promiscuous mode [ 2849.077595][T16624] bond_slave_1: left promiscuous mode [ 2849.253686][ T4754] usb 7-1: USB disconnect, device number 70 [ 2849.282600][ T4754] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 2849.314160][T16632] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.12641' sets config #1 [ 2849.518126][ T5842] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 2849.720838][ T5842] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2849.735351][ T5842] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2849.753276][ T5842] usb 6-1: config 0 has no interface number 0 [ 2849.759889][ T5842] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2849.769003][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2849.782325][ T5842] usb 6-1: config 0 descriptor?? [ 2849.790236][ T5842] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 2850.015637][ T5842] usb 6-1: USB disconnect, device number 72 [ 2851.067806][T11944] usb 7-1: new low-speed USB device number 71 using dummy_hcd [ 2851.259383][T11944] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2851.267473][T11944] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2851.278207][T11944] usb 7-1: config 0 has no interface number 0 [ 2851.284783][T11944] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2851.293914][T11944] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2851.305160][T11944] usb 7-1: config 0 descriptor?? [ 2851.317365][T11944] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 2851.524230][T11944] usb 7-1: USB disconnect, device number 71 [ 2851.819213][T16662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12652'. [ 2851.852813][T16662] bond_slave_0: entered promiscuous mode [ 2851.858595][T16662] bond_slave_1: entered promiscuous mode [ 2851.875703][T16662] macvtap3: entered promiscuous mode [ 2851.885398][T16662] bond0: entered promiscuous mode [ 2851.892044][T16662] macvtap3: entered allmulticast mode [ 2851.908017][T16662] bond0: entered allmulticast mode [ 2851.913665][T16662] bond_slave_0: entered allmulticast mode [ 2851.920965][T16662] bond_slave_1: entered allmulticast mode [ 2851.932339][T16662] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 2851.947504][T16666] bond0: left allmulticast mode [ 2851.954017][T16666] bond_slave_0: left allmulticast mode [ 2851.964201][T16666] bond_slave_1: left allmulticast mode [ 2851.980822][T16666] bond0: left promiscuous mode [ 2851.986019][T16666] bond_slave_0: left promiscuous mode [ 2851.991493][T16666] bond_slave_1: left promiscuous mode [ 2852.043840][T16667] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.12654' sets config #1 [ 2852.598045][ T4754] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 2852.715775][T16686] pim6reg1: entered promiscuous mode [ 2852.724595][T16686] pim6reg1: entered allmulticast mode [ 2852.792545][ T4754] usb 6-1: not running at top speed; connect to a high speed hub [ 2852.819580][ T4754] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2852.842237][ T4754] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2852.872824][ T4754] usb 6-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 2852.885417][ T4754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2852.896992][ T4754] usb 6-1: Product: 戽숎銷碫轥㪩䰞쌰᮵⼴U෰躯ႃ窲鄭咡졖᭻䉬맹෎煘㆕迚녉䨒℈黈쥁പ눞徕籘ԩ蘭Գɗ檚둏줚֒嘖Փꢭ毲깁瘹ĩ猅씔킜㲍銘㋠錶뭨옑ᣬ靡ﴁ㑏閝⫅溴 [ 2852.944844][ T4754] usb 6-1: Manufacturer: 横崨劋ᦐꗔ䩮雱❷È톂됍쀕꠴ߎꐕ놿삖厺✅㙁膥瀳㄂뫞拆㙦ҙ陪倷霔祀뜠⨋졞ꃡꟐ茆㹍赟邁瀪ꏖ谅챞쯀ᲇ悘旇ᎎ㝒ᄦ䷕䚎ퟛ喌時娕ꄜ拄煓护踎ᝩʯ셇−ゥ䪨㦬䣗ೊ袐⨔壅홋蛊⬣ [ 2853.023907][ T4754] usb 6-1: SerialNumber: ъ [ 2853.349896][ T4754] usbhid 6-1:1.0: can't add hid device: -71 [ 2853.374097][T16678] delete_channel: no stack [ 2853.380616][ T4754] usbhid: probe of 6-1:1.0 failed with error -71 [ 2853.410182][ T4754] usb 6-1: USB disconnect, device number 73 [ 2854.347815][ T4754] usb 7-1: new low-speed USB device number 72 using dummy_hcd [ 2854.575878][ T4754] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2854.590028][ T4754] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2854.602112][ T4754] usb 7-1: config 0 has no interface number 0 [ 2854.609509][ T4754] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2854.625798][ T4754] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2854.635081][ T4754] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2854.650760][ T4754] usb 7-1: config 0 descriptor?? [ 2854.662251][ T4754] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 2854.868935][ T1618] usb 7-1: USB disconnect, device number 72 [ 2855.214663][T16717] tipc: Enabled bearer , priority 0 [ 2855.224993][T16717] syzkaller0: entered promiscuous mode [ 2855.230973][T16717] syzkaller0: entered allmulticast mode [ 2855.269238][T16716] tipc: Resetting bearer [ 2855.312524][T16716] tipc: Disabling bearer [ 2855.417578][T16722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12674'. [ 2855.436533][T16722] bond_slave_0: entered promiscuous mode [ 2855.442314][T16722] bond_slave_1: entered promiscuous mode [ 2855.454427][T16722] macvtap4: entered promiscuous mode [ 2855.459825][T16722] bond0: entered promiscuous mode [ 2855.465164][T16722] macvtap4: entered allmulticast mode [ 2855.475872][T16722] bond0: entered allmulticast mode [ 2855.481062][T16722] bond_slave_0: entered allmulticast mode [ 2855.486790][T16722] bond_slave_1: entered allmulticast mode [ 2855.498917][T16722] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 2855.509739][T16723] bond0: left allmulticast mode [ 2855.516864][T16723] bond_slave_0: left allmulticast mode [ 2855.526971][T16723] bond_slave_1: left allmulticast mode [ 2855.532800][T16723] bond0: left promiscuous mode [ 2855.544704][T16723] bond_slave_0: left promiscuous mode [ 2855.550237][T16723] bond_slave_1: left promiscuous mode [ 2856.011814][T16739] syzkaller0: entered promiscuous mode [ 2856.017450][T16739] syzkaller0: entered allmulticast mode [ 2856.286648][T16750] tipc: Enabled bearer , priority 0 [ 2856.327435][T16750] syzkaller0: entered promiscuous mode [ 2856.347056][T16750] syzkaller0: entered allmulticast mode [ 2856.478005][T16748] tipc: Resetting bearer [ 2856.576597][T16748] tipc: Disabling bearer [ 2856.657903][ T1618] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 2856.847844][ T746] usb 6-1: new low-speed USB device number 74 using dummy_hcd [ 2856.899915][ T1618] usb 7-1: not running at top speed; connect to a high speed hub [ 2856.935961][ T1618] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2856.978010][ T1618] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2856.988797][T11030] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2857.019572][ T1618] usb 7-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 2857.029772][ T1618] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2857.038921][ T1618] usb 7-1: Product: 戽숎銷碫轥㪩䰞쌰᮵⼴U෰躯ႃ窲鄭咡졖᭻䉬맹෎煘㆕迚녉䨒℈黈쥁പ눞徕籘ԩ蘭Գɗ檚둏줚֒嘖Փꢭ毲깁瘹ĩ猅씔킜㲍銘㋠錶뭨옑ᣬ靡ﴁ㑏閝⫅溴 [ 2857.074433][ T1618] usb 7-1: Manufacturer: 横崨劋ᦐꗔ䩮雱❷È톂됍쀕꠴ߎꐕ놿삖厺✅㙁膥瀳㄂뫞拆㙦ҙ陪倷霔祀뜠⨋졞ꃡꟐ茆㹍赟邁瀪ꏖ谅챞쯀ᲇ悘旇ᎎ㝒ᄦ䷕䚎ퟛ喌時娕ꄜ拄煓护踎ᝩʯ셇−ゥ䪨㦬䣗ೊ袐⨔壅홋蛊⬣ [ 2857.139473][ T746] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2857.157804][ T746] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2857.176731][ T1618] usb 7-1: SerialNumber: ъ [ 2857.182446][ T746] usb 6-1: config 0 has no interface number 0 [ 2857.203488][ T746] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2857.217583][T11030] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2857.226316][ T746] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2857.226384][ T746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2857.245958][ T746] usb 6-1: config 0 descriptor?? [ 2857.272096][T11030] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2857.283478][T11030] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2857.293892][T11030] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2857.306134][T11030] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2857.327077][ T746] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 2857.346263][T11030] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2857.376872][T11030] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2857.393590][T11030] usb 5-1: Product: syz [ 2857.400996][T11030] usb 5-1: Manufacturer: syz [ 2857.421260][T11030] cdc_wdm 5-1:1.0: skipping garbage [ 2857.426845][T11030] cdc_wdm 5-1:1.0: skipping garbage [ 2857.443397][T11030] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2857.453897][T11030] cdc_wdm 5-1:1.0: Unknown control protocol [ 2857.518197][ T1618] usbhid 7-1:1.0: can't add hid device: -71 [ 2857.524965][ T1618] usbhid: probe of 7-1:1.0 failed with error -71 [ 2857.525990][T16756] delete_channel: no stack [ 2857.540672][ T1618] usb 7-1: USB disconnect, device number 73 [ 2857.573914][T11030] usb 6-1: USB disconnect, device number 74 [ 2857.709915][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 4 bytes [ 2858.638728][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2858.641513][ T1618] usb 5-1: USB disconnect, device number 46 [ 2858.645394][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2858.657392][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2858.666685][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 2859.304830][T16765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12687'. [ 2859.387050][T16765] bond_slave_0: entered promiscuous mode [ 2859.392860][T16765] bond_slave_1: entered promiscuous mode [ 2859.422474][T16765] macvtap5: entered promiscuous mode [ 2859.432372][T16765] bond0: entered promiscuous mode [ 2859.443015][T16765] macvtap5: entered allmulticast mode [ 2859.457763][T16765] bond0: entered allmulticast mode [ 2859.463149][T16765] bond_slave_0: entered allmulticast mode [ 2859.473718][T16765] bond_slave_1: entered allmulticast mode [ 2859.485257][T16765] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 2859.504626][T16771] bond0: left allmulticast mode [ 2859.511218][T16771] bond_slave_0: left allmulticast mode [ 2859.516749][T16771] bond_slave_1: left allmulticast mode [ 2859.522344][T16771] bond0: left promiscuous mode [ 2859.527451][T16771] bond_slave_0: left promiscuous mode [ 2859.533051][T16771] bond_slave_1: left promiscuous mode [ 2859.591799][T16773] syzkaller0: entered promiscuous mode [ 2859.598821][T16773] syzkaller0: entered allmulticast mode [ 2859.847514][T16788] tipc: Enabled bearer , priority 0 [ 2859.865742][T16788] syzkaller0: entered promiscuous mode [ 2859.871402][T16788] syzkaller0: entered allmulticast mode [ 2859.900296][T16787] tipc: Resetting bearer [ 2859.945107][T16787] tipc: Disabling bearer [ 2860.417855][ T1618] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 2860.458545][T16812] syzkaller0: entered promiscuous mode [ 2860.464121][T16812] syzkaller0: entered allmulticast mode [ 2860.555521][T16814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12701'. [ 2860.574763][T16814] bond_slave_0: entered promiscuous mode [ 2860.580527][T16814] bond_slave_1: entered promiscuous mode [ 2860.586611][T16814] macvtap5: entered promiscuous mode [ 2860.592451][T16814] bond0: entered promiscuous mode [ 2860.598555][T16814] macvtap5: entered allmulticast mode [ 2860.608998][T16814] bond0: entered allmulticast mode [ 2860.613937][ T1618] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2860.618690][T16814] bond_slave_0: entered allmulticast mode [ 2860.627777][ T1618] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2860.642404][ T1618] usb 5-1: config 0 has no interface number 0 [ 2860.648574][ T1618] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2860.651279][T16814] bond_slave_1: entered allmulticast mode [ 2860.661573][ T1618] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2860.661601][ T1618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2860.664010][ T1618] usb 5-1: config 0 descriptor?? [ 2860.683372][T16814] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 2860.705649][T16815] bond0: left allmulticast mode [ 2860.713475][T16815] bond_slave_0: left allmulticast mode [ 2860.720251][T16815] bond_slave_1: left allmulticast mode [ 2860.726144][T16815] bond0: left promiscuous mode [ 2860.732574][ T1618] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 2860.738086][T16815] bond_slave_0: left promiscuous mode [ 2860.744666][T16815] bond_slave_1: left promiscuous mode [ 2860.949480][ T1618] usb 5-1: USB disconnect, device number 47 [ 2861.305960][T13097] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2861.435116][T13097] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2861.506374][T13097] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2861.603025][T13097] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2861.816218][T16833] syzkaller0: entered promiscuous mode [ 2861.836350][T14657] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2861.850195][T16833] syzkaller0: entered allmulticast mode [ 2861.855989][T14657] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2861.876339][T14657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2861.907736][T14657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2861.917524][T14657] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2861.930014][T14657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2862.042738][T13097] tipc: Left network mode [ 2862.285165][T16839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12712'. [ 2862.310335][T16839] bond_slave_0: entered promiscuous mode [ 2862.316060][T16839] bond_slave_1: entered promiscuous mode [ 2862.338121][T16839] macvtap6: entered promiscuous mode [ 2862.359173][T16839] bond0: entered promiscuous mode [ 2862.364905][T16839] macvtap6: entered allmulticast mode [ 2862.377193][T16839] bond0: entered allmulticast mode [ 2862.393428][T16839] bond_slave_0: entered allmulticast mode [ 2862.403577][T16839] bond_slave_1: entered allmulticast mode [ 2862.420136][T16839] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 2862.458235][T16840] bond0: left allmulticast mode [ 2862.463179][T16840] bond_slave_0: left allmulticast mode [ 2862.469555][T16840] bond_slave_1: left allmulticast mode [ 2862.475129][T16840] bond0: left promiscuous mode [ 2862.483214][T16840] bond_slave_0: left promiscuous mode [ 2862.488877][T16840] bond_slave_1: left promiscuous mode [ 2862.651424][T16849] binder: BINDER_SET_CONTEXT_MGR already set [ 2862.657458][T16849] binder: 16843:16849 ioctl 4018620d 200000000040 returned -16 [ 2863.203808][T16834] chnl_net:caif_netlink_parms(): no params data found [ 2863.576596][T16834] bridge0: port 1(bridge_slave_0) entered blocking state [ 2863.584914][T16834] bridge0: port 1(bridge_slave_0) entered disabled state [ 2863.592894][T16834] bridge_slave_0: entered allmulticast mode [ 2863.601875][T16834] bridge_slave_0: entered promiscuous mode [ 2863.619001][T16834] bridge0: port 2(bridge_slave_1) entered blocking state [ 2863.626152][T16834] bridge0: port 2(bridge_slave_1) entered disabled state [ 2863.634199][T16834] bridge_slave_1: entered allmulticast mode [ 2863.641614][T16834] bridge_slave_1: entered promiscuous mode [ 2863.668969][T16884] syzkaller0: entered promiscuous mode [ 2863.674479][T16884] syzkaller0: entered allmulticast mode [ 2863.864095][T16834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2863.931749][T13097] hsr_slave_0: left promiscuous mode [ 2863.947979][T13097] hsr_slave_1: left promiscuous mode [ 2863.967167][T13097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2863.979313][T13097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2864.009393][T30353] Bluetooth: hci0: command tx timeout [ 2864.024018][T13097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2864.045326][T13097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2864.109456][T13097] bridge_slave_1: left allmulticast mode [ 2864.116106][T13097] bridge_slave_1: left promiscuous mode [ 2864.141811][T13097] bridge0: port 2(bridge_slave_1) entered disabled state [ 2864.186742][T13097] bridge_slave_0: left allmulticast mode [ 2864.200022][T13097] bridge_slave_0: left promiscuous mode [ 2864.216048][T13097] bridge0: port 1(bridge_slave_0) entered disabled state [ 2864.324127][T13097] veth1_macvtap: left promiscuous mode [ 2864.330484][T13097] veth0_macvtap: left promiscuous mode [ 2865.273306][T13097] team0 (unregistering): Port device team_slave_1 removed [ 2865.358905][T13097] team0 (unregistering): Port device team_slave_0 removed [ 2865.436263][T13097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2865.502900][T13097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2866.082731][T30353] Bluetooth: hci0: command tx timeout [ 2866.329120][T13097] bond0 (unregistering): Released all slaves [ 2866.427327][T16834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2866.436571][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12723'. [ 2866.465842][T16899] bond_slave_0: entered promiscuous mode [ 2866.471623][T16899] bond_slave_1: entered promiscuous mode [ 2866.481052][T16899] macvtap7: entered promiscuous mode [ 2866.486393][T16899] bond0: entered promiscuous mode [ 2866.497320][T16899] macvtap7: entered allmulticast mode [ 2866.502778][T16899] bond0: entered allmulticast mode [ 2866.508179][T16899] bond_slave_0: entered allmulticast mode [ 2866.513934][T16899] bond_slave_1: entered allmulticast mode [ 2866.520998][T16899] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 2866.535195][T16904] bond0: left allmulticast mode [ 2866.540572][T16904] bond_slave_0: left allmulticast mode [ 2866.546049][T16904] bond_slave_1: left allmulticast mode [ 2866.551582][T16904] bond0: left promiscuous mode [ 2866.556663][T16904] bond_slave_0: left promiscuous mode [ 2866.562165][T16904] bond_slave_1: left promiscuous mode [ 2866.781956][T16834] team0: Port device team_slave_0 added [ 2866.918527][T16834] team0: Port device team_slave_1 added [ 2867.007974][T16919] syzkaller0: entered promiscuous mode [ 2867.013653][T16919] syzkaller0: entered allmulticast mode [ 2867.113266][T16834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2867.120462][T16834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2867.157506][T16834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2867.219134][T16834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2867.238075][ T5842] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2867.253026][T16834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2867.318549][T16834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2867.420161][ T5842] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2867.433049][ T5842] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2867.455682][ T5842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2867.480954][T16834] hsr_slave_0: entered promiscuous mode [ 2867.489063][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2867.512678][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2867.525010][T16834] hsr_slave_1: entered promiscuous mode [ 2867.532587][T16834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2867.541901][ T5842] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2867.551563][T16834] Cannot create hsr debugfs directory [ 2867.557031][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2867.572156][ T5842] usb 5-1: Product: syz [ 2867.580843][ T5842] usb 5-1: Manufacturer: syz [ 2867.610997][ T5842] cdc_wdm 5-1:1.0: skipping garbage [ 2867.616253][ T5842] cdc_wdm 5-1:1.0: skipping garbage [ 2867.641141][ T5842] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2867.662378][ T5842] cdc_wdm 5-1:1.0: Unknown control protocol [ 2868.025207][T11944] usb 5-1: USB disconnect, device number 48 [ 2868.158051][T30353] Bluetooth: hci0: command tx timeout [ 2868.493524][T16834] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2868.513516][T16834] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2868.536738][T16834] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2868.580835][T16834] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2868.598009][ T5842] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2868.727940][T16973] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12737'. [ 2868.780630][T16973] bond_slave_0: entered promiscuous mode [ 2868.786359][T16973] bond_slave_1: entered promiscuous mode [ 2868.808049][T16973] macvtap1: entered promiscuous mode [ 2868.812804][ T5842] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2868.813369][T16973] bond0: entered promiscuous mode [ 2868.833957][ T5842] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2868.840556][T16973] macvtap1: entered allmulticast mode [ 2868.861052][T16973] bond0: entered allmulticast mode [ 2868.865011][ T5842] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2868.866283][T16973] bond_slave_0: entered allmulticast mode [ 2868.881772][ T5842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2868.881804][ T5842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2868.884011][ T5842] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2868.906416][T16973] bond_slave_1: entered allmulticast mode [ 2868.934186][T16973] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2868.957067][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2868.976467][ T5842] usb 6-1: Product: syz [ 2868.980846][T16974] bond0: left allmulticast mode [ 2868.985727][T16974] bond_slave_0: left allmulticast mode [ 2868.986594][ T5842] usb 6-1: Manufacturer: syz [ 2869.015249][ T5842] cdc_wdm 6-1:1.0: skipping garbage [ 2869.021765][T16974] bond_slave_1: left allmulticast mode [ 2869.025390][ T5842] cdc_wdm 6-1:1.0: skipping garbage [ 2869.027257][T16974] bond0: left promiscuous mode [ 2869.047373][ T5842] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2869.053744][ T5842] cdc_wdm 6-1:1.0: Unknown control protocol [ 2869.073345][T16974] bond_slave_0: left promiscuous mode [ 2869.081275][T16974] bond_slave_1: left promiscuous mode [ 2869.147237][T16982] syzkaller0: entered promiscuous mode [ 2869.153099][T16982] syzkaller0: entered allmulticast mode [ 2869.313828][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 4 bytes [ 2869.476728][T16834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2869.614227][T16834] 8021q: adding VLAN 0 to HW filter on device team0 [ 2869.678974][T31024] bridge0: port 1(bridge_slave_0) entered blocking state [ 2869.686088][T31024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2869.736439][T11030] usb 6-1: USB disconnect, device number 75 [ 2869.740844][T31024] bridge0: port 2(bridge_slave_1) entered blocking state [ 2869.749599][T31024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2870.238643][T30353] Bluetooth: hci0: command tx timeout [ 2870.541462][T16834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2871.088163][ T5842] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2871.280389][ T5842] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2871.289263][T16834] veth0_vlan: entered promiscuous mode [ 2871.306780][ T5842] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2871.310318][T16834] veth1_vlan: entered promiscuous mode [ 2871.322917][ T5842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2871.347260][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2871.370625][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2871.395752][ T5842] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2871.409214][T16834] veth0_macvtap: entered promiscuous mode [ 2871.415571][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2871.430200][ T5842] usb 5-1: Product: syz [ 2871.434409][ T5842] usb 5-1: Manufacturer: syz [ 2871.441925][T16834] veth1_macvtap: entered promiscuous mode [ 2871.458769][ T5842] cdc_wdm 5-1:1.0: skipping garbage [ 2871.467886][ T5842] cdc_wdm 5-1:1.0: skipping garbage [ 2871.482029][ T5842] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2871.493179][T16834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2871.503791][ T5842] cdc_wdm 5-1:1.0: Unknown control protocol [ 2871.505962][T16834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2871.534627][T16834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2871.558585][T16834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2871.577452][T16834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2871.600271][T16834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2871.620893][T16834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2871.642696][T16834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2871.677025][T16834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2871.694970][T16834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2871.705388][T16834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2871.716655][T16834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2871.727454][T16834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2871.748055][T16834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2871.788932][T16834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2871.828779][T16834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2871.861925][T16834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2871.876745][ T1618] usb 5-1: USB disconnect, device number 49 [ 2871.881224][T16834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2871.907984][T16834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2871.932957][T16834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2871.953815][T16834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2871.974349][T16834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2871.995523][T16834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2872.025454][T16834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2872.048362][T16834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2872.067257][T16834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2872.088341][T16834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2872.111273][T16834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2872.134200][T16834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2872.156406][T16834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2872.218967][T16834] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2872.241400][T16834] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2872.257876][T16834] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2872.266758][T16834] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2872.291532][T17073] syzkaller0: entered promiscuous mode [ 2872.311773][T17073] syzkaller0: entered allmulticast mode [ 2872.520474][T17085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12751'. [ 2872.547318][T17085] bond_slave_0: entered promiscuous mode [ 2872.553162][T17085] bond_slave_1: entered promiscuous mode [ 2872.578381][T17085] macvtap6: entered promiscuous mode [ 2872.586769][T17085] bond0: entered promiscuous mode [ 2872.603858][T17085] macvtap6: entered allmulticast mode [ 2872.619883][T17085] bond0: entered allmulticast mode [ 2872.625047][T17085] bond_slave_0: entered allmulticast mode [ 2872.639899][T17085] bond_slave_1: entered allmulticast mode [ 2872.646972][T17085] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 2872.700158][T17086] bond0: left allmulticast mode [ 2872.705077][T17086] bond_slave_0: left allmulticast mode [ 2872.712851][T17086] bond_slave_1: left allmulticast mode [ 2872.721833][T17086] bond0: left promiscuous mode [ 2872.726933][T17086] bond_slave_0: left promiscuous mode [ 2872.732433][T17086] bond_slave_1: left promiscuous mode [ 2872.802695][T16540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2872.848027][T16540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2872.899666][T17093] delete_channel: no stack [ 2872.923246][ T9007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2872.951675][ T9007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2874.051610][ T1081] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2874.226048][ T746] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2874.390793][T17111] pim6reg1: entered promiscuous mode [ 2874.396157][T17111] pim6reg1: entered allmulticast mode [ 2874.404226][T17112] syzkaller0: entered promiscuous mode [ 2874.410118][T17112] syzkaller0: entered allmulticast mode [ 2874.420015][ T746] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2874.445199][ T746] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2874.468172][ T746] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2874.487534][ T746] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2874.514452][ T746] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2874.533364][ T746] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2874.548639][ T746] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2874.566977][ T746] usb 6-1: Product: syz [ 2874.577109][ T746] usb 6-1: Manufacturer: syz [ 2874.592644][ T746] cdc_wdm 6-1:1.0: skipping garbage [ 2874.607704][ T746] cdc_wdm 6-1:1.0: skipping garbage [ 2874.615462][ T746] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2874.652239][ T746] cdc_wdm 6-1:1.0: Unknown control protocol [ 2874.705590][ T1081] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2874.899637][T14657] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2874.909954][ T1081] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2874.928616][T14657] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2874.940941][T14657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2874.956023][T14657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2874.977374][T14657] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2874.985603][T14657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2875.079788][ T1081] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2875.929216][T17143] delete_channel: no stack [ 2876.447245][T17119] chnl_net:caif_netlink_parms(): no params data found [ 2876.902144][T11030] usb 6-1: USB disconnect, device number 76 [ 2877.037899][T14657] Bluetooth: hci0: command tx timeout [ 2877.121212][T17119] bridge0: port 1(bridge_slave_0) entered blocking state [ 2877.150342][T17119] bridge0: port 1(bridge_slave_0) entered disabled state [ 2877.157601][T17119] bridge_slave_0: entered allmulticast mode [ 2877.174064][T17119] bridge_slave_0: entered promiscuous mode [ 2877.255935][T17119] bridge0: port 2(bridge_slave_1) entered blocking state [ 2877.273444][T17119] bridge0: port 2(bridge_slave_1) entered disabled state [ 2877.295178][T17119] bridge_slave_1: entered allmulticast mode [ 2877.313148][T17119] bridge_slave_1: entered promiscuous mode [ 2877.723471][T17167] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.12776' sets config #1 [ 2877.754334][T17119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2877.810397][T17119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2877.985661][T17119] team0: Port device team_slave_0 added [ 2878.003278][T17180] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12770'. [ 2878.037346][T17180] bond_slave_0: entered promiscuous mode [ 2878.043147][T17180] bond_slave_1: entered promiscuous mode [ 2878.054995][T17180] macvtap2: entered promiscuous mode [ 2878.060496][T17180] bond0: entered promiscuous mode [ 2878.066055][T17180] macvtap2: entered allmulticast mode [ 2878.073520][T17180] bond0: entered allmulticast mode [ 2878.081573][T17180] bond_slave_0: entered allmulticast mode [ 2878.087426][T17180] bond_slave_1: entered allmulticast mode [ 2878.104352][T17180] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 2878.124582][T17119] team0: Port device team_slave_1 added [ 2878.169657][T17183] bond0: left allmulticast mode [ 2878.176648][T17183] bond_slave_0: left allmulticast mode [ 2878.184801][T17183] bond_slave_1: left allmulticast mode [ 2878.197982][T17183] bond0: left promiscuous mode [ 2878.203427][T17183] bond_slave_0: left promiscuous mode [ 2878.208972][T17183] bond_slave_1: left promiscuous mode [ 2878.241502][ T1081] hsr_slave_0: left promiscuous mode [ 2878.254564][ T1081] hsr_slave_1: left promiscuous mode [ 2878.276951][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2878.293137][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2878.305953][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2878.315141][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2878.334894][ T1081] bridge_slave_1: left allmulticast mode [ 2878.349926][ T1081] bridge_slave_1: left promiscuous mode [ 2878.357581][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 2878.367432][ T1081] bridge_slave_0: left allmulticast mode [ 2878.373786][ T1081] bridge_slave_0: left promiscuous mode [ 2878.379670][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 2878.417440][ T1081] veth1_macvtap: left promiscuous mode [ 2878.429797][ T1081] veth0_macvtap: left promiscuous mode [ 2878.435390][ T1081] veth1_vlan: left promiscuous mode [ 2878.445671][ T1081] veth0_vlan: left promiscuous mode [ 2879.127247][T14657] Bluetooth: hci0: command tx timeout [ 2879.456075][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 2879.532209][ T1081] team0 (unregistering): Port device team_slave_0 removed [ 2879.609664][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2879.676653][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2880.486214][ T1081] bond0 (unregistering): Released all slaves [ 2880.711172][T17119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2880.728217][T17119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2880.787937][T17119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2880.827244][T17119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2880.857426][T17119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2880.888766][T17119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2881.085975][T17210] delete_channel: no stack [ 2881.110609][T17211] binder: BINDER_SET_CONTEXT_MGR already set [ 2881.128294][T17211] binder: 17206:17211 ioctl 4018620d 200000000040 returned -16 [ 2881.130235][T17119] hsr_slave_0: entered promiscuous mode [ 2881.165654][T17119] hsr_slave_1: entered promiscuous mode [ 2881.191971][T17119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2881.199824][T14657] Bluetooth: hci0: command tx timeout [ 2881.208031][T17119] Cannot create hsr debugfs directory [ 2882.199819][T17228] fuse: Bad value for 'fd' [ 2882.522434][T17225] pim6reg1: entered promiscuous mode [ 2882.552905][T17225] pim6reg1: entered allmulticast mode [ 2883.278337][T14657] Bluetooth: hci0: command tx timeout [ 2883.538097][T17119] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2883.588966][T17119] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2883.613194][T17119] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2883.708601][T17119] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2884.010679][T17271] fuse: Bad value for 'fd' [ 2884.023919][T17119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2884.115016][T17119] 8021q: adding VLAN 0 to HW filter on device team0 [ 2884.165747][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 2884.172993][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2884.220175][T31024] bridge0: port 2(bridge_slave_1) entered blocking state [ 2884.227422][T31024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2884.658468][T17290] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.12791' sets config #1 [ 2884.725673][T17119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2885.362648][T17119] veth0_vlan: entered promiscuous mode [ 2885.399914][T17119] veth1_vlan: entered promiscuous mode [ 2885.492320][T17119] veth0_macvtap: entered promiscuous mode [ 2885.524824][T17119] veth1_macvtap: entered promiscuous mode [ 2885.577419][T17119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2885.601880][T17119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2885.612145][T17119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2885.625198][T17119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2885.645639][T17119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2885.679489][T17119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2885.722687][T17119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2885.770500][T17119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2885.816746][T17119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2885.861067][T17119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2885.877975][T17119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2885.888622][T17119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2885.899947][T17119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2885.910586][T17119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2885.930448][T17119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2885.958843][T17119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2885.977925][T17119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2885.988168][T17119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2886.000092][T17119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2886.013497][T17119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2886.050502][T17119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2886.105160][T17119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2886.151141][T17119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2886.181799][T17119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2886.198299][T17119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2886.261376][T17119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2886.302952][T17119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2886.333919][T17119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2886.408043][T17119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2886.419980][T17119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2886.433507][T17119] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2886.443483][T17119] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2886.452757][T17119] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2886.461744][T17119] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2886.656960][T17335] fuse: Bad value for 'fd' [ 2886.719214][T16540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2886.758352][T16540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2886.869438][T31024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2886.877297][T31024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2887.282402][T17361] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.12802' sets config #1 [ 2887.329328][T17353] syzkaller0: entered promiscuous mode [ 2887.334846][T17353] syzkaller0: entered allmulticast mode [ 2887.704448][T17372] delete_channel: no stack [ 2889.296468][T16540] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2889.771402][T16540] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2889.885554][T16540] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2889.945625][T17405] syzkaller0: entered promiscuous mode [ 2889.952321][T17405] syzkaller0: entered allmulticast mode [ 2889.968590][T30353] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2889.997846][T30353] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2890.009240][T16540] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2890.029663][T30353] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2890.043043][T30353] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2890.052942][T30353] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2890.060769][T30353] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2890.404335][T17415] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.12815' sets config #1 [ 2890.580190][T17406] chnl_net:caif_netlink_parms(): no params data found [ 2890.931719][T17428] delete_channel: no stack [ 2891.266406][T17406] bridge0: port 1(bridge_slave_0) entered blocking state [ 2891.310091][T17406] bridge0: port 1(bridge_slave_0) entered disabled state [ 2891.346048][T17406] bridge_slave_0: entered allmulticast mode [ 2891.392412][T17406] bridge_slave_0: entered promiscuous mode [ 2891.642548][T17406] bridge0: port 2(bridge_slave_1) entered blocking state [ 2891.664718][T17406] bridge0: port 2(bridge_slave_1) entered disabled state [ 2891.728085][T17406] bridge_slave_1: entered allmulticast mode [ 2891.735439][T17406] bridge_slave_1: entered promiscuous mode [ 2892.066744][T17406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2892.137223][T17406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2892.158745][T14657] Bluetooth: hci0: command tx timeout [ 2892.217534][T17459] syzkaller0: entered promiscuous mode [ 2892.247967][T17459] syzkaller0: entered allmulticast mode [ 2892.341311][T17462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12825'. [ 2892.355039][T17462] bond_slave_0: entered promiscuous mode [ 2892.360803][T17462] bond_slave_1: entered promiscuous mode [ 2892.369670][T17462] macvtap7: entered promiscuous mode [ 2892.375000][T17462] bond0: entered promiscuous mode [ 2892.382311][T17462] macvtap7: entered allmulticast mode [ 2892.387786][T17462] bond0: entered allmulticast mode [ 2892.393118][T17462] bond_slave_0: entered allmulticast mode [ 2892.399374][T17462] bond_slave_1: entered allmulticast mode [ 2892.406068][T17462] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 2892.445867][T17464] bond0: left allmulticast mode [ 2892.451003][T17464] bond_slave_0: left allmulticast mode [ 2892.456608][T17464] bond_slave_1: left allmulticast mode [ 2892.462287][T17464] bond0: left promiscuous mode [ 2892.467431][T17464] bond_slave_0: left promiscuous mode [ 2892.472907][T17464] bond_slave_1: left promiscuous mode [ 2892.551660][T17406] team0: Port device team_slave_0 added [ 2892.632364][T17406] team0: Port device team_slave_1 added [ 2892.726197][T17472] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.12828' sets config #1 [ 2892.817298][T17406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2892.825157][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2892.860466][T17406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2892.924317][T17406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2892.956524][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2893.008058][T17406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2893.220022][T16540] hsr_slave_0: left promiscuous mode [ 2893.245123][T16540] hsr_slave_1: left promiscuous mode [ 2893.265435][T16540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2893.284325][T16540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2893.320756][T16540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2893.336451][T16540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2893.362299][T16540] bridge_slave_1: left allmulticast mode [ 2893.387838][T16540] bridge_slave_1: left promiscuous mode [ 2893.418016][T16540] bridge0: port 2(bridge_slave_1) entered disabled state [ 2893.436741][T16540] bridge_slave_0: left allmulticast mode [ 2893.442774][T16540] bridge_slave_0: left promiscuous mode [ 2893.457322][T16540] bridge0: port 1(bridge_slave_0) entered disabled state [ 2893.527387][T16540] veth1_macvtap: left promiscuous mode [ 2893.537937][T16540] veth0_macvtap: left promiscuous mode [ 2893.547917][T16540] veth1_vlan: left promiscuous mode [ 2893.553296][T16540] veth0_vlan: left promiscuous mode [ 2894.215999][T17501] delete_channel: no stack [ 2894.239800][T14657] Bluetooth: hci0: command tx timeout [ 2894.840370][T16540] team0 (unregistering): Port device team_slave_1 removed [ 2894.952433][T16540] team0 (unregistering): Port device team_slave_0 removed [ 2895.044123][T16540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2895.167436][T16540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2896.328915][T14657] Bluetooth: hci0: command tx timeout [ 2896.475330][T16540] bond0 (unregistering): Released all slaves [ 2896.595736][T17406] hsr_slave_0: entered promiscuous mode [ 2896.607272][T17406] hsr_slave_1: entered promiscuous mode [ 2896.614909][T17406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2896.636545][T17406] Cannot create hsr debugfs directory [ 2896.854988][T17525] fuse: Unknown parameter 'grou00000000000000000000' [ 2897.397838][T10970] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2897.505522][T17546] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.12847' sets config #1 [ 2897.602791][T10970] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2897.637366][T10970] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2897.686058][T10970] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2897.703819][T10970] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2897.716571][T10970] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2897.735950][T10970] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2897.745612][T10970] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2897.754172][T10970] usb 6-1: Product: syz [ 2897.762015][T10970] usb 6-1: Manufacturer: syz [ 2897.794193][T10970] cdc_wdm 6-1:1.0: skipping garbage [ 2897.820828][T10970] cdc_wdm 6-1:1.0: skipping garbage [ 2897.836445][T10970] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2897.850286][T17557] syzkaller0: entered promiscuous mode [ 2897.850308][T17557] syzkaller0: entered allmulticast mode [ 2897.867336][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.873977][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.888221][T10970] cdc_wdm 6-1:1.0: Unknown control protocol [ 2898.156531][T17564] fuse: Unknown parameter 'grou00000000000000000000' [ 2898.398418][T14657] Bluetooth: hci0: command tx timeout [ 2898.549814][T17406] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2898.614286][T17406] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2898.662198][T17406] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2898.711659][T17406] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2899.336750][T10970] usb 6-1: USB disconnect, device number 77 [ 2899.355380][T17406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2899.423794][T17406] 8021q: adding VLAN 0 to HW filter on device team0 [ 2899.473394][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 2899.480613][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2899.542679][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 2899.550004][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2899.675535][T17606] syzkaller0: entered promiscuous mode [ 2899.686317][T17606] syzkaller0: entered allmulticast mode [ 2899.711607][T17406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2899.813638][T17610] fuse: Unknown parameter 'grou00000000000000000000' [ 2900.129514][T17625] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.12861' sets config #1 [ 2900.247574][T17406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2900.742098][T17652] fuse: Unknown parameter 'group_i00000000000000000000' [ 2900.990334][T17658] syzkaller0: entered promiscuous mode [ 2901.006096][T17658] syzkaller0: entered allmulticast mode [ 2901.025123][T17406] veth0_vlan: entered promiscuous mode [ 2901.122651][T17406] veth1_vlan: entered promiscuous mode [ 2901.139176][T17667] binder_alloc: 17660: binder_alloc_buf, no vma [ 2901.267880][T17406] veth0_macvtap: entered promiscuous mode [ 2901.291635][T17406] veth1_macvtap: entered promiscuous mode [ 2901.358495][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2901.387101][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2901.412621][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2901.432827][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2901.466638][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2901.488280][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2901.534522][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2901.552713][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2901.583299][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2901.623620][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2901.648229][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2901.664779][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2901.676913][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2901.689727][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2901.703280][T17406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2901.730728][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2901.744924][T17689] fuse: Unknown parameter 'group_i00000000000000000000' [ 2901.754146][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2901.776740][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2901.789127][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2901.815156][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2901.826013][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2901.846354][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2901.861521][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2901.884142][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2901.895498][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2901.908030][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2901.920234][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2901.933810][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2901.944632][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2901.964717][T17406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2902.022530][T17696] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.12881' sets config #1 [ 2902.029970][T17406] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2902.048734][T17406] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2902.057474][T17406] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2902.077096][T17406] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2902.278603][T16540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2902.286462][T16540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2902.380396][T17707] syzkaller0: entered promiscuous mode [ 2902.385915][T17707] syzkaller0: entered allmulticast mode [ 2902.396670][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2902.430260][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2902.979370][T17731] fuse: Unknown parameter 'group_i00000000000000000000' [ 2903.269614][T17748] syzkaller0: entered promiscuous mode [ 2903.287603][T17748] syzkaller0: entered allmulticast mode [ 2903.294696][T17747] binder_alloc: 17738: binder_alloc_buf, no vma [ 2903.672312][ T6150] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2903.993917][ T6150] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2904.280252][ T6150] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2904.437029][T17773] fuse: Unknown parameter 'group_id00000000000000000000' [ 2904.439718][ T6150] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2904.555354][T17769] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.12899' sets config #1 [ 2904.981553][T30353] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2904.997019][T17787] loop4: detected capacity change from 0 to 1024 [ 2905.038895][T30353] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2905.049883][T30353] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2905.062413][T30353] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2905.072674][T30353] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2905.086377][T30353] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2905.289376][T16916] hfsplus: b-tree write err: -5, ino 4 [ 2905.438730][T17790] syzkaller0: entered promiscuous mode [ 2905.449193][T17790] syzkaller0: entered allmulticast mode [ 2906.113936][T17782] loop7: detected capacity change from 0 to 32768 [ 2906.311847][T17782] ERROR: (device loop7): dbAlloc: the hint is outside the map [ 2906.311847][T17782] [ 2906.344239][T17782] ERROR: (device loop7): remounting filesystem as read-only [ 2906.361514][T17782] syz.7.12905: attempt to access beyond end of device [ 2906.361514][T17782] loop7: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 2906.383205][T17782] ERROR: (device loop7): dbAlloc: the hint is outside the map [ 2906.383205][T17782] [ 2906.434939][T13110] ------------[ cut here ]------------ [ 2906.441397][T13110] kernel BUG at fs/jfs/inode.c:169! [ 2906.494448][T13110] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 2906.500599][T13110] CPU: 0 PID: 13110 Comm: syz-executor Not tainted 6.6.98-syzkaller #0 [ 2906.508850][T13110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2906.518926][T13110] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 2906.524498][T13110] Code: e3 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 17 fe ff ff 4c 89 f7 e8 b9 ef e3 fe e9 0a fe ff ff e8 ef 40 8b fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 2906.544141][T13110] RSP: 0018:ffffc9000459fac0 EFLAGS: 00010293 [ 2906.550204][T13110] RAX: ffffffff82fa6581 RBX: ffff88807a5ebbb0 RCX: ffff88805d2e0000 [ 2906.558174][T13110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807a5ebbb0 [ 2906.566135][T13110] RBP: 0000000000000001 R08: ffffffff90da665f R09: 1ffffffff21b4ccb [ 2906.574107][T13110] R10: dffffc0000000000 R11: fffffbfff21b4ccc R12: dffffc0000000000 [ 2906.582075][T13110] R13: dffffc0000000000 R14: ffff88807a5eb838 R15: ffff88807a5ebd80 [ 2906.590040][T13110] FS: 0000555569596500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2906.598963][T13110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2906.605530][T13110] CR2: 00007ffe67863340 CR3: 0000000053ae8000 CR4: 00000000003506f0 [ 2906.613494][T13110] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 2906.621451][T13110] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2906.629408][T13110] Call Trace: [ 2906.632671][T13110] [ 2906.635587][T13110] ? evict+0x480/0x870 [ 2906.639648][T13110] ? jfs_write_inode+0x220/0x220 [ 2906.644576][T13110] evict+0x486/0x870 [ 2906.648461][T13110] ? proc_nr_inodes+0x230/0x230 [ 2906.653298][T13110] ? do_raw_spin_unlock+0x121/0x230 [ 2906.658483][T13110] ? do_raw_spin_unlock+0x121/0x230 [ 2906.663667][T13110] evict_inodes+0x5fe/0x690 [ 2906.668160][T13110] ? clear_inode+0x150/0x150 [ 2906.672739][T13110] generic_shutdown_super+0x97/0x2b0 [ 2906.678010][T13110] kill_block_super+0x44/0x90 [ 2906.682676][T13110] deactivate_locked_super+0x97/0x100 [ 2906.688032][T13110] cleanup_mnt+0x429/0x4c0 [ 2906.692442][T13110] task_work_run+0x1ce/0x250 [ 2906.697022][T13110] ? task_work_cancel+0x240/0x240 [ 2906.702037][T13110] ? exit_to_user_mode_loop+0x3b/0x110 [ 2906.707486][T13110] exit_to_user_mode_loop+0xe6/0x110 [ 2906.712764][T13110] exit_to_user_mode_prepare+0xb1/0x140 [ 2906.718313][T13110] syscall_exit_to_user_mode+0x1a/0x50 [ 2906.723866][T13110] do_syscall_64+0x61/0xb0 [ 2906.728269][T13110] ? clear_bhb_loop+0x40/0x90 [ 2906.732929][T13110] ? clear_bhb_loop+0x40/0x90 [ 2906.737588][T13110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2906.743463][T13110] RIP: 0033:0x7f97f1b8fc57 [ 2906.747963][T13110] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 2906.767553][T13110] RSP: 002b:00007ffe0514e858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2906.775951][T13110] RAX: 0000000000000000 RBX: 00007f97f1c10925 RCX: 00007f97f1b8fc57 [ 2906.783912][T13110] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0514e910 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2906.791867][T13110] RBP: 00007ffe0514e910 R08: 0000000000000000 R09: 0000000000000000 [ 2906.799836][T13110] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0514f9a0 [ 2906.807825][T13110] R13: 00007f97f1c10925 R14: 00000000002c5911 R15: 00007ffe0514f9e0 [ 2906.815794][T13110] [ 2906.818815][T13110] Modules linked in: [ 2906.947405][T13110] ---[ end trace 0000000000000000 ]--- [ 2906.956721][T13110] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 2906.965541][T13110] Code: e3 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 17 fe ff ff 4c 89 f7 e8 b9 ef e3 fe e9 0a fe ff ff e8 ef 40 8b fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 2907.049841][T13110] RSP: 0018:ffffc9000459fac0 EFLAGS: 00010293 [ 2907.055956][T13110] RAX: ffffffff82fa6581 RBX: ffff88807a5ebbb0 RCX: ffff88805d2e0000 [ 2907.107852][T13110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807a5ebbb0 [ 2907.115872][T13110] RBP: 0000000000000001 R08: ffffffff90da665f R09: 1ffffffff21b4ccb [ 2907.167739][T13110] R10: dffffc0000000000 R11: fffffbfff21b4ccc R12: dffffc0000000000 [ 2907.175761][T13110] R13: dffffc0000000000 R14: ffff88807a5eb838 R15: ffff88807a5ebd80 [ 2907.198435][T30353] Bluetooth: hci0: command tx timeout [ 2907.204001][T13110] FS: 0000555569596500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2907.222975][T13110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2907.242821][T13110] CR2: 0000562dace33660 CR3: 0000000053ae8000 CR4: 00000000003506e0 [ 2907.258362][T13110] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2907.266368][T13110] DR3: 00000000000032e7 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2907.292624][T13110] Kernel panic - not syncing: Fatal exception [ 2907.298949][T13110] Kernel Offset: disabled [ 2907.303258][T13110] Rebooting in 86400 seconds..