last executing test programs: 25m13.075509933s ago: executing program 1 (id=529): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{}, 0xbf}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x4000000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000200)) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x5, &(0x7f0000000140)={0x3, 0x4, 0xfffffff7}) 25m12.550703663s ago: executing program 1 (id=531): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x2, 0x4e, 0xb}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x20000060) 25m12.347316813s ago: executing program 1 (id=532): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000100)={0x0, 0xe}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 25m8.315899334s ago: executing program 1 (id=548): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pread64(r0, &(0x7f0000000080)=""/75, 0x8e, 0x0) 25m7.959918144s ago: executing program 1 (id=551): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) listen(0xffffffffffffffff, 0x10003) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 25m3.784617932s ago: executing program 1 (id=570): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x800000000) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) accept4(r0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe43, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x8900) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x4) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 24m47.888931125s ago: executing program 32 (id=570): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x800000000) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) accept4(r0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe43, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x8900) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x4) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 24m26.163884464s ago: executing program 2 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000a06b9500000011f7000000002b8ad7243ca17f9d191a522d04e76f04e0af039853983d5ad38db637e610f1f9f0de1213ab207f0e710622ff1338756272f9d78d84a8c6c00745aad46f08e3e97aed24db424e93168a8b55fc8da375e933ae52b1cb5f0050d5b0226129f0ad5a66724a36c71f5ae916ec0546e1ef34f1132bb4c9c877be2fdeccd553abcf53cdc03f730344e69fb1c51b19392d516b12ec8030", 0xa3, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000380)='./file0\x00', 0x89) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001080)='./file0\x00', 0x0, 0x1001, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000001c00), 0x10, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, 0x0) 24m24.816523463s ago: executing program 2 (id=670): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r1 = openat$cgroup_pressure(r0, &(0x7f0000000280)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000240)={'some', 0x20, 0xd, 0x20, 0xffffa}, 0x2f) 24m24.376078577s ago: executing program 2 (id=672): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0010}]}) msgget(0x3, 0x282) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)=',8', 0x2) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x711, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1}, {@in=@remote}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x871}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) fremovexattr(r3, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) open_tree(r6, &(0x7f0000000200)='./file0\x00', 0x88000) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1c00000033000b12d25a80648cffff40030500000000000300099450", 0x1c}], 0x1}, 0x0) syz_mount_image$affs(&(0x7f0000000000), &(0x7f0000009e40)='./file0\x00', 0x480, &(0x7f0000000680)=ANY=[@ANYBLOB='mufs,mode=00000000000000000000003,verbose,mufs,setgid=', @ANYRESHEX, @ANYBLOB="2c726f6f743d30303030303030301785aad830303030303030372c62733d30783030303030303030303030303b3230302c636f6e746578743d726f6f742c657569643c46c554f4567190ac05ea71fa059e2b49a084ac3222c409878d0b9c32ed2ed7f15347b38193c7d3e568e42d55ac98123a5ee833df74574ef02a416fc7a2d02e0677398a1984ae98f6d27d660d69492131671de827398ee797576d4c0b4dd0fdaaacdd3fc45131b1743f97cd3d054f6f80cee6f96fb6a38098cd03fead6a17f6ea24dfb31bf7dbacf9558a440c6e09f0c4acef511742a9", @ANYRESDEC, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB=',fsname=affs\x00,smackfsfloor=,hash,fowner=', @ANYRESDEC, @ANYBLOB=',\x00'], 0x1, 0x9e04, &(0x7f0000009e80)="$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") syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x98c2, &(0x7f0000000700)="$eJzs3QeYXHXBeP9NQugIAiqCBQEFUelSLTRBpChVUJDelCagAlIFRUABxYJYAJGqFJEmSJHee++9997zf0ISjfEQ8fd/3xflnPM8ye7cuXP3zvcz997dvbMzKy+2/MIDA+MPjGjagTF7ZJ7TN9nywWUGHX3y6o/OuOSk84+cPPIGU428ONWgkR8HDwwMDB65nJHTJrr/uOMHD4zz2vS/N9EEEw6aZGBgjpEXFxz5cZ4RH6Z4YNR8w8ZozBUd9LeLg3Yf8e+1Jh3+JYZ/Mte+zy80MDAw2Wi3H36T2f7pjkpbeaHFF/u71d/chlsNHfn56P/GHfFvirsGBqa4fYAfH6PPO+hNuEvDv+ZkN1yzzSxvwtf+r2vlhcZdYgz/4dvikJHT5hm+jY+5DRob83F+4uFHPT7amE02MDB8F/cP28p/RSsvtNhSA6+/nx+4cN4XHxv22n5zoscHBiZ6YmBgoicHBiZ6amBgoqcHBiZ65s12qf9/LbTwnAsP395HXR7JPuqxPNmox8Xzoz0unl3gg8cPDAyMN2KeiV4dcbyYeNpRx4Sqqqr6z26hhedcBI7/4495/B/9+8IHr9n7qY7/VVVV/70tsdDCcw4/jo9x/J941O+B6fg//S5DFx/xu/8F5xlxq1ff3DtRVVVV/1aLLYHH/8nG9vP/ercM2a3jf1VV1X9vyy392vF/4jGO/1OO7fg/dJpJ7hw536jvG14ZbZGv/d5g5PSXRps+ZLTpL442fehoyxl9/nFHm/78aNPHHxiY6P6R01/+++SJHh9+m39ezkTP/v35OFONM9r050abPu5o058fuU7Dp4832vRXRpt//L9Pn3j4f9OO/LovjGWoq6qq/mNabs7FFhkY7Xn2IyePemI/Pi/03GErPPtmrW9VVVVVVVVV/fu9+sjJp/39b77fNzDa367+7W9YR/5eYNAxZ1x++Zu2ov8ZDfrn34fs+Gav0//fhjuPf8S0AwObrPhmr0q9Cf3X/K16/a+Uv7v83eXvbqT/0Dd7PerN6f99+1/lf3Q96s2p/b+7/N3l7y5/d/m7y99d/u7yF/c65///9vf/u16w8mdGzjrfmUcOXvLvt5xqYMORnz0yz+mbbPgmrPub0Fv1/P/AhoMGBkb6TjbccpmFllthpoGBgSUHH3nm3AN/u27e4dctMPmQ1/6Yc2Bgptf+HzrV6yx55LssvPbmDlP+bRnHvLb8JYYdOGTQGCsxWm8/4eCDN1j5ubnG/Djj69+Pv72/xHNTHDztqL9lGTzGTOO/zo1HLX/UfRnTeeS6zzR83WfdcuPNZt1i620+tuHGa66/7vrrbjLnHPPMMe88s80335yzrrfhRuvONuL/1xmzEW9dMeSNjNnEY47ZIwuNPmZj3rfXG7N/flePf1jEa0s8dJ7pzh81ZuP8m2M2ZOxjNu2GI7/QVANDB9Z4bWgGDQxMNc7Qga2GX5h9vIGBqYaOnHeq4fN+YvLBAwN7//2ODhr5YqMj5hm04/B5/sPet2S+kSOy3aj5xnyd9TFX9F+9b8lNCx823RjvW/K/1f/T8f+fvOYd9LeBGvUGCCPnGeG10OJv6vtM/NP6TjvOawe511vfsbwuzmvR42uceefd/n/qdXFofScey/qO5XX8Xnd9F1rzU8eMWNT/2PqOsa9basSVb2RfNzD2fd0Quv26l7x3zH3dkq+/iv+wHY8ao/HGmOn19nXXL3vSjsOXPzD2fd1SG448k/r3fd3ggYGphoza1w3f8Y07dGDv4RfmGH5hvKEDhw2/MOdrFyYYOGP4hVnW3nSjdQa99jIDI5c72/DlLjj5oNfcd5x55n2G7TNs2Dgj1+XZif5xXUc+PqYd/Xi+0OQjBnPUbUctd/iso5Y72zYjrht35HKf+zeWO+q2tL7PrzriuvFGLvf5MZY7dCzLHXXbf9oeZhr0D09Uhf3Nm/q+RrT9jj+W9R3L63Dj4234tP233OuS/4HX4R70eus7ztjX9/XeN+R113fn/ebf43/qdcPpcXb9jCMeK+OPfJy98m88fkfddsz92IhnRYzY7Y//RvZj0/7TfmynIYPHGOzRer3v2daB+Ud8PtXflnbLLpd/eNTYj/nsjX/1Pdto92UQ7McmG+PnuUE7HDAwiMZ87/0GrfXqvxjzoQP/+LPFqDEfdduxjfl4b2TM3zP2MX+j3yfPNP2I64eOsf6jj/nBA3OfMmrMxx1juf9qzMcb+7Hjn8d8YGAojfnjd48Yt7HtT19vzEfddtSYD/86C0w+zsDwH/JnGDnm476RMZ/qf+ZxPiHMP+Lzdf82aYH77zht1JiPOcb/aszH/TfHfPvb//Y4n+G166YbPDDuuANbrbnllpvPPuL/URfnGPE/74tOOm/EOI/tWPp6RqNuO7btYpw3YjTZGzIa9K+Mph7n9Yz+vmmds9+Sp/6/7ovG+XeNzuB90VbHjhi3sX1f9HpjPuq2dByccrTbj/lz6FhePwvv0/BpG02zyoGjFjnyZm/m62eN+nn3v/L1s0b9TnLDMXfy9Ubr9//u8neXv7v83eUv7nXO/0876vz/3Xsuv9rIHzqH3r/SpHe82ev7JveWPv8/0vcfzv/fMelK9w//0WrkdWM9Pztinv/I87PzjPgwxQOj5hvz/OCYK/qvzs8+d9Nn5/w/Oj/7/9SobfUN/Fzc/t9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7nXO/8826nkA0y992pIjT4QOXXTbFfd5s9f3Te4tff5/pO8/nP/fZ8VtFx088Lfrxnr+f8Q8jvP/uw9Z5KD/5PP/o7bVsZ//x7+qLVcd/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Ouc/19w1PMArpr1wENGPR/gkPtnWeHNXt83ubfq+f/e/99b+393+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uJHn/wfGeJvEL/S4wOD8/393r+O/bP6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4fzF/zOK/cv6YxX+V/DGL/5fyxyz+X84fs/ivmj9m8V8tf8zi/5X8MYv/6vljFv813qj/xf/6/cXfSln812z7xyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP5fzR+z+H8tf8ziv1H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfy/nj9m8d88f8ziv0X+mMV/y/wxi/838scs/t/MH7P4fyt/zOK/Vf6YxX/r/DGL/zb5Yxb/b+ePWfy3zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/7+SPWfx3zh+z+O+SP2bx/27+mMX/e/ljFv9d88cs/t/PH7P475Y/ZvHfPX/M4r9H/pjF/wf5Yxb/H+aPWfz3zB+z+O+VP2bx3zt/zOL/o/wxi/+P88cs/vvkj1n8f5I/ZvH/af6Yxf9n+WMW/5/nj1n8980fs/j/In/M4r9f/pjF/5f5Yxb/X+WPWfx/nT9m8f9N/pjFf//8MYv/AfljFv8D88cs/r/NH7P4H5Q/ZvH/Xf6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvH/ff6Yxf8P+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bx/2P+mMX/2Pwxi/+f8scs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/z/ljFv+T88cs/qfkj1n8/5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv+/5o9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkjxn8xx8YGLgwf8zgP7yL8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5j9mo4VH4P5U/Ztn+n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOI/LH9M4j9oIH/M4j8of8ziPzh/zOI/JH/M4j9O/pjFf2j+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6Yxf9t+WMW/0nzxyz+k+WPWfzfnj9m8Z88f8ziP0X+mMV/yvwxi/878scs/u/MH7P4vyt/zOI/Vf6Yxf/d+WMW/6nzxyz+0+SPWfzfkz9m8X9v/pjF/335Yxb/9+ePWfynzR+z+H8gf8ziP13+mMV/+vwxi/8M+WMW/w/mj1n8P5Q/ZvGfMX/M4j9T/pjF/8P5Yxb/mfPHLP4fyR+z+H80f8zi/7H8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP5fYf/BYrrP4f1zsP7Ys/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/8n8scs/p/MH7P4fyp/zOL/6fwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bx/0z+mMV/sfwxi//i+WMW/8/mj1n8l8gfs/h/Ln/M4r9k/pjFf6n8MYv/0vljFv9l8scs/p/PH7P4fyF/zOK/bP6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4fzF/zOK/cv6YxX+V/DGL/5fyxyz+X84fs/ivmj9m8V8tf8zi/5X8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfy/mj9m8f9a/thb0/+Q1z4d3X+j/LG3pv+IRvffOH/M4r9J/pjFf9P8MYv/ZvljFv+v549Z/DfPH7P4b5E/ZvHfMn/M4v+N/DGL/zfzxyz+38ofs/hvlT9m8d86f8ziv03+mMX/2/ljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMX/O/ljFv+d88cs/rvkj1n8v5s/ZvH/nsl/yzc+q8V/V5P/v5HF//v5Yxb/3fLHLP67549Z/PfIH7P4/yB/zOL/w/wxi/+e+WMW/73yxyz+e+ePWfx/lD9m8f9x/pjFf5/8MYv/T/LHLP4/zR+z+P8sf8zi//P8MYv/vvljFv9f5I9Z/PfLH7P4/3JM/2Ej+z9evf+0LP6/avvHLP6/zh+z+P8mf8ziv3/+mMX/gPwxi/+B+WMW/9/mj1n8D8ofs/j/Ln/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/j/Pn/M4v+H/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4/zF/zOJ/bP6Yxf9P+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOL/5/wxi//J+WMW/1Pyxyz+f8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/9f88cs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6YxX9Y/pjE/7VPbf7D3sA8Fv9BQv83ksV/cP6YxX9I/pjFf5z8MYv/0Pwxi/+4+WMW//Hyxyz+4+ePWfwnyB97S/uP97epgyfMH3tL+/996uCJ8scs/hPnj1n8J8kfs/i/LX/M4j9p/pjFf7L8MYv/2/PHLP6T549Z/KfIH7P4T5k/ZvF/R/6Yxf+d+WMW/3flj1n8p8ofs/i/O3/M4j91/pjFf5r8MYv/e/LHLP7vzR+z+L8vf8zi//78MYv/tPljFv8P5I9Z/KfLH7P4T58/ZvGfIX/M4v/B/DGL/4fyxyz+M+aPWfxnGov/1P8X6/UfmsX/w23/mMV/5vwxi/9H8scs/h/NH7P4fyx/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvH/eP6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvH/RP6Yxf+T+WMW/0/lj1n8P50/ZvFfMH/M4r9Q/pjFf+H8MYv/IvljFv9F88cs/p/JH7P4L5Y/ZvFfPH/M4v/Z/DGL/xL5Yxb/z+WPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf/z+WMW/y/kj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/y/mj1n8V84fs/ivkj9m8f9S/pjF/8v5Yxb/VfPHLP6r5Y9Z/L+SP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/V/PHLP5fyx+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/r+ePWfw3zx+z+G+RP2bx3zJ/zOL/jfwxi/8388cs/t/KH7P4b5U/ZvHfOn/M4r9N/pjF/9v5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4r9T/pjF/zv5Yxb/nfPHLP675I9Z/L+bP2bx/17+mMV/1/wxi//388cs/rvlj1n8d88fs/jvkT9m8f9B/pjF/4f5Yxb/PfPHLP575Y9Z/PfOH7P4/yh/zOL/4/wxi/8++WMW/5/kj1n8f5o/ZvH/Wf6Yxf/n+WMW/33zxyz+v8gfs/jvlz9m8f9l/pjF/1f5Yxb/X+ePWfx/kz9m8d8/f8zif0D+mMX/wPwxi/9v88cs/gflj1n8f5c/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8f58/ZvH/Q/6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/P+YP2bxPzZ/zOL/p/wxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bx/3P+mMX/5Pwxi/8p+WMW/7/kj1n8T80fs/iflj9m8T89f8zif0b+mMX/r/ljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y85/McffHX+mMN/YPA1+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/sPyxyT+Qwbyxyz+g/LHLP6D88cs/kPyxyz+4+SPWfyH5o9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n835Y/ZvGfNH/M4j9Z/pjF/+35Yxb/yfPHLP5T5I9Z/KfMH7P4vyN/zOL/zvwxi/+78scs/lPlj1n8350/ZvGfOn/M4j9N/pjF/z35Yxb/9+aPWfzflz9m8X9//pjFf9r8MYv/B/LHLP7T5Y9Z/KfPH7P4z5A/ZvH/YP6Yxf9D+WMW/xnzxyz+M+WPWfw/nD9m8Z85f8zi/5H8MYv/R/PHLP4fyx+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/D+eP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/D+RP2bx/2T+mMX/U/ljFv9P549Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/Z/LHLP6L5Y9Z/BfPH7P4fzZ/zOK/RP6Yxf9z+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bx/3z+mMX/C/ljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMX/i/ljFv+V88cs/qvkj1n8v5Q/ZvH/cv6YxX/V/DGL/2r5Yxb/r+SPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4v/V/DGL/9fyxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOK/Wf6Yxf/r+WMW/83zxyz+W+SPWfy3zB+z+H8jf8zi/838MYv/t/LHLP5b5Y9Z/LfOH7P4b5M/ZvH/dv6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P475Q/ZvH/Tv6YxX/n/DGL/y75Yxb/7+aPWfy/lz9m8d81f8zi//38MYv/bvljFv/d88cs/nvkj1n8f5A/ZvH/Yf6YxX/P/DGL/175Yxb/vfPHLP4/yh+z+P84f8ziv0/+mMX/J/ljFv+f5o9Z/H+WP2bx/3n+mMV/3/wxi/8v8scs/vvlj1n8f5k/ZvH/Vf6Yxf/X+WMW/9/kj1n8988fs/gfkD9m8T8wf8zi/9v8MYv/QfljFv/f5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv/f549Z/P+QP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/P+aPWfyPzR+z+P8pf8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfz/nD9m8T85f8zif0r+mMX/L/ljFv9T88cs/qflj1n8T88fs/ifkT9m8f9r/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PH3rL+4/zD1CHX5I+9Zf3H2P6vzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/91/7Kh4fF/zYr8L/I4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGF/05v3ur8p6fwHxgY8lTbP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/sPwxif9rrwab/z9n8R+UP2bxH5w/ZvEfkj9m8R8nf8ziPzR/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T2z0H+9fz2Lxn8To/way+L8tf8ziP2n+mMV/svwxi//b/5W/9MFh8Z/cSzzWLP5T5I9Z/KfMH7P4vyN/zOL/zvwxi/+78scs/lPlj1n8350/ZvGfWuY/zhucz+I/jcz/jWbxf0/+mMX/vfljFv/35Y9Z/N+fP2bxnzZ/zOL/gfwxi/90+WMW/+nzxyz+M+SPWfw/mD9m8f9Q/pjFf8b8MYv/TPljFv8P549Z/GfOH7P4fyR/zOL/0fwxi//H8scs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/4/nP9be6v5z549Ztv958scs/vPmj1n858sfs/jPnz9m8V8gf8zi/4n8MYv/J/PHLP6fyh+z+H86f8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfw/kz9m8V8sf8ziv3j+mMX/s/ljFv8l8scs/p/LH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/5/PHLP5fyB+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP5fzB+z+K+cP2bxXyV/zOL/pfwxi/+X88cs/qvmj1n8V8sfs/h/JX/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/6/mj1n8v5Y/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/l/PH7P4b54/ZvHfIn/M4r9l/pjF/xv5Yxb/b+aPWfy/lT9m8d8qf8ziv3X+mMV/m/wxi/+388cs/tvmj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMV/p/z/3kvDhg0b+anF/zv5Yxb/nfPHLP675I9Z/L+bP2bx/17+mMV/1/wxi//388cs/rvlj1n8d88fs/jvkT9m8f9B/pjF/4f5Yxb/PfPHLP575Y9Z/PfOH7P4/yh/zOL/4/wxi/8++WMW/5/kj1n8f5o/ZvH/Wf6Yxf/n+WMW/33zxyz+v8gfs/jvlz9m8f9l/pjF/1f5Yxb/X+ePWfx/kz9m8d8/f8zif0D+mMX/wPwxi/9v88cs/gflj1n8f5c/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8f58/ZvH/Q/6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/P+YP2bxPzZ/zOL/p/wxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bx/3P+mMX/5Pwxi/8p+WMW/7/kj1n8T80fs/iflj9m8T89f8zif0b+mMX/r/ljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOI/LH9M4j90IH/M4j8of8ziPzh/zOI/JH/M4j9O/pjFf2j+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnfF3/F4cNG/Z/s2r/iVn8J2r7xyz+E+ePWfwnyR+z+L8tf8ziP2n+mMV/svwxi//b88cs/pPnj1n8p8gfs/hPmT9m8X9H/pjF/535Yxb/d+WPWfynyh+z+L87f+yt6z/l6FOHTp0/9tb1/8ftf5r8MYv/e/LHLP7vzR+z+L8vf8zi//78MYv/tPljFv8P5I9Z/KfLH7P4T58/ZvGfIX/M4v/B/DGL/4fyxyz+M+aPWfxnyh+z+H84f8ziP3P+mMX/I/ljFv+P5o9Z/D+WP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fzx/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fyJ/zOL/yfwxi/+n8scs/p/OH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv/P5I9Z/BfLH7P4L54/ZvH/bP6YxX+J/DGL/+fyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOL/+fwxi/8X8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMV/pfwxi/8X88cs/ivnj1n8V8kfs/h/KX/M4v/l/DGL/6r5Yxb/1fLHLP5fyR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjF/6v5Yxb/r+WPWfw3yh+z+G+cP/bW9h931NShm+SPvbX9/9bQTfPHLP6b5Y9Z/L+eP2bx3zx/zOK/Rf6YxX/L/DGL/zfyxyz+38wfs/h/K3/M4r9V/pjFf+v8MYv/NvljFv9v549Z/LfNH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv/v5I9Z/HfOH7P475I/ZvH/bv6Yxf97+WMW/13zxyz+388fs/jvlj9m8d89f8ziv0f+mMX/B/ljFv8f5o9Z/PfMH7P475U/ZvHfO3/M4v+j/DGL/4/zxyz+++SPWfx/kj9m8f9p/pjF/2f5Yxb/n+ePWfz3zR+z+P8if8ziv1/+mMX/l/ljFv9f5Y9Z/H+dP2bx/03+mMV///wxi/8B+WMW/wPzxyz+v80fs/gflD9m8f9d/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8f99/pjF/w/5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvH/Y/6Yxf/Y/DGL/5/yxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/P+WMW/5Pzxyz+p+SPWfz/kj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/7/mj1n8z8wfs/iflT9m8T87f8zif47af8jrXmPxP1ft//pZ/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvE/kP/jfmtfhfL/L/d7L435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+w/LHJP7jDuSPWfwH5Y9Z/Afnj1n8h+SPWfzHyR+z+A/NH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/i/LX/M4j9p/pjFf7L8MYv/2/PHLP6T549Z/KfIH7P4T5k/ZvF/R/6Yxf+d+WMW/3flj1n8p8ofs/i/O3/M4j91/pjFf5r8MYv/e/LHLP7vzR+z+L8vf8zi//78MYv/tPljFv8P5I9Z/KfLH7P4T58/ZvGfIX/M4v/B/DGL/4fyxyz+M+aPWfxnyh+z+H84f8ziP3P+mMX/I/ljFv+P5o9Z/D+WP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fzx/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fyJ/zOL/yfwxi/+n8scs/p/OH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv/P5I9Z/BfLH7P4L54/ZvH/bP6YxX+J/DGL/+fyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOL/+fwxi/8X8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMV/pfwxi/8X88cs/ivnj1n8V8kfs/h/KX/M4v/l/DGL/6r5Yxb/1fLHLP5fyR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjF/6v5Yxb/r+WPWfw3yh+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/9fzxyz+m+ePWfy3yB+z+G+ZP2bx/0b+mMX/m/ljFv9v5Y9Z/LfKH7P4b50/ZvHfJn/M4v/t/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvHfKX/M4v+d/DGL/875Yxb/XfLHLP7fzR+z+H8vf+wt6T9onNc+Hd1/1/yxt6T/yE9H9/9+/pjFf7f8MYv/7vljFv898scs/j/IH7P4/zB/zOK/Z/6YxX+v/DGL/975Yxb/H+WPWfx/nD9m8d8nf8zi/5P8MYv/T/PHLP4/yx+z+P88f8ziv2/+mMX/F/ljFv/98scs/r/MH7P4/yp/zOL/6/yxQY98ZMDg/5v8Mcv2v3/+mMX/gPwxi/+B+WMW/9/mj1n8D8ofs/j/Ln/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/j/Pn/M4v+H/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4/zF/zOJ/bP6Yxf9P+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOL/5/wxi//J+WMW/1Pyxyz+f8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/9f88cs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6YxX9Y/pjEf7yB/DGL/6D8MYv/4Pwxi/+Q/DGL/zj5Yxb/ofljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/7flj1n8J80fs/hPlj9m8X97/pjFf/L8MYv/FPljFv8p88cs/u/IH7P4vzN/zOL/rvwxi/9U+WMW/3fnj1n8p84fs/hPkz9m8X9P/pjF/735Yxb/9+WPWfzfnz9m8Z82f8zi/4H8MYv/dPljFv/p88cs/jPkj1n8P5g/ZvH/UP6YxX/G/DGL/0z5Yxb/D+ePWfxnzh+z+H8kf8zi/9H8MYv/x/LHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+P549Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv9P5I9Z/D+ZP2bx/1T+mMX/0/ljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8zi/5n8MYv/YvljFv/F88cs/p/NH7P4L5E/ZvH/XP6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/D+fP2bx/0L+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bx/2L+mMV/5fwxi/8q+WMW/y/lj1n8v5w/ZvFfNX/M4r9a/pjF/yv5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/h/NX/M4v+1/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvH/ev6YxX/z/DGL/xb5Yxb/LfPHLP7fyB+z+H8zf8zi/638MYv/VvljFv+t88cs/tvkj1n8v50/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8v5M/ZvHfOX/M4r9L/pjF/7v5Yxb/7+WPWfx3zR+z+H8/f8ziv1v+mMV/9/wxi/8e+WMW/x/kj1n8f5g/ZvHfM3/M4r9X/pjFf+/8MYv/j/LHLP4/zh+z+O+TP2bx/0n+mMX/p/ljFv+f5Y9Z/H+eP2bx3zd/zOL/i/wxi/9+Rv9BO/7rWST+vzT6v4Es/r/KH7P4/zp/zOL/m/wxi//++WMW/wPyxyz+B+aPWfx/mz9m8T8of8zi/7v8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zi//v8MYv/H/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4v/H/DGL/7H5Yxb/P+WPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/5/zxyz+J+ePWfxPyR+z+P8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+f80fs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/YfljEv/xB/LHLP6D8scs/oPzxyz+Q/LHLP7j5I9Z/Ifmj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfzflj9m8Z80f8ziP1n+mMX/7fljFv/J88cs/lPkj1n8p8wfewv6j0v+78gfewv64/b/zvwxi/+78scs/lON1X/YkP/9FfvPzOL/7rZ/zOI/df6YxX+a/DGL/3vyxyz+780fs/i/L3/M4v/+/DGL/7T5Yxb/D+SPWfynyx+z+E+fP2bxnyF/zOL/wfwxi/+H8scs/jPmj1n8Z8ofs/h/OH/M4j9z/pjF/yP5Yxb/j+aPWfw/lj9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+H88f8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8if8zi/8n8MYv/p/LHLP6fzh+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/z+SPWfwXyx+z+C+eP2bx/2z+mMV/ifwxi//n8scs/kvmj1n8l8ofs/gvnT9m8V8mf8zi//n8MYv/F/LHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjFf6X8MYv/F/PHLP4r549Z/FfJH7P4fyl/zOL/5fwxi/+q+WMW/9Xyxyz+X8kfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3VM/v/GHbX4r2vy/zey+K+X/8gG/8Mli//6+WMW/w3yxyz+G+aPWfy/mj9m8f9a/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8N8sfs/h/PX/M4r95/pjFf4v8MYv/lvljFv9v5I9Z/L+ZP2bx/1b+mMV/q/wxi//W+WMW/23yxyz+384fs/hvmz9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+38kfs/jvnD9m8d8lf8zi/938MYv/9/LHLP675o9Z/L+fP2bx3y1/zOK/e/6YxX+P/DGL/w/yxyz+P8wfs/jvmT9m8d8rf8ziv3f+mMX/R/ljFv8f549Z/PfJH7P4/yR/zOL/0/wxi//P8scs/j/PH7P475s/ZvH/Rf6YxX+//DGL/y/zxyz+v8ofs/j/On/M4v+b/DGL//75Yxb/A/LHLP4H5o9Z/H+bP2bxPyh/zOL/u/wxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOL/+/wxi/8f8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zi/8f8MYv/sfljFv8/5Y9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/n/PHLP4n549Z/E/JH7P4/yV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5/zR+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv9h+WMS/wkG8scs/oPyxyz+g/PHLP5D8scs/uPkj1n8h+aPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/N+WP2bxnzR/zOI/Wf6Yxf/t+WMW/8nzxyz+U+SPWfynzB+z+L8jf8zi/878MYv/u/LHLP5T5Y9Z/N+dP2bxnzp/zOI/Tf6Yxf89+WMW//fmj1n835c/ZvF/f/6YxX/a/DGL/wfyxyz+0+WPWfynzx+z+M+QP2bx/2D+mMX/Q/ljFv8Z88cs/jPlj1n8P5w/ZvGfOX/M4v+R/DGL/0fzxyz+H8sfs/jPkj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfw/nj9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfw/kT9m8f9k/pjF/1P5Yxb/T+ePWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2fyxyz+i+WPWfwXzx+z+H82f8ziv0T+mMX/c/ljFv8l88cs/kvlj1n8l84fs/gvkz9m8f98/pjF/wv5Yxb/Ze3+4/Nki/9ydv/XyeK/fP6YxX+F/DGL/4r5Yxb/lfLHLP5fzB+z+K+cP2bxXyV/zOL/pfwxi/+X88cs/qvmj1n8V8sfs/h/JX/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g9f3H/x/sl7/oVn8N2z7xyz+X80fs/h/LX/M4r9R/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8v54/ZvHfPH/M4r9F/pjFf8v8MYv/N/LHLP7fzB+z+H8rf8ziv1X+mMV/6/wxi/82+WMW/2/nj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/+/kj1n8d84fs/jvkj9m8f9u/pjF/3v5Yxb/XfPHLP7fzx+z+O+WP2bx3z1/zOK/R/6Yxf8H+WMW/x/mj1n898wfs/jvlT9m8d87f8zi/6P8MYv/j/PHLP775I9Z/H+SP2bx/2n+mMX/Z/ljFv+f549Z/PfNH7P4/yJ/zOK/X/6Yxf+X+WMW/1/lj1n8f50/ZvH/Tf6YxX///DGL/wH5Yxb/A/PHLP6/zR+z+B+UP2bx/13+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bx/33+mMX/D/ljFv8j88cs/kflj1n8j84fs/gfkz9m8f9j/pjF/9j8MYv/n/LHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/8/5Yxb/k/PHLP6n5I9Z/P+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/v+aPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/sPwxif+EA/ljFv9B+WMW/8H5Yxb/IfljFv9x8scs/kPzxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP5vyx+z+E+aP2bxnyx/zOL/9vwxi//k+WMW/ynyxyz+U+aPWfzfkT9m8X9n/pjF/135Yxb/qfLHLP7vzh+z+E+dP2bxnyZ/zOL/nvwxi/9788cs/u/LH7P4vz9/zOI/bf6Yxf8D+WMW/+nyxyz+0+ePWfxnyB+z+H8wf8zi/6H8MYv/jPljFv+Z8scs/h/OH7P4z5w/ZvH/SP6Yxf+j+WMW/4/lj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+H88fs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+n8gfs/h/Mn/M4v+p/DGL/6fzxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/qN1/PJ5s8f+M3f91svgvlj9m8V88f8zi/9n8MYv/EvljFv/P5Y9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF//P5Yxb/L+SPWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/L+aPWfxXzh+z+K+SP2bx/1L+mMX/y/ljFv9V88cs/qvlj1n8v5I/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/yxkf7jvdX9v5o/Ztn+v5Y/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/l/PH7P4b54/ZvHfIn/M4r9l/pjF/xv5Yxb/b+aPWfy/lT9m8d8qf8ziv3X+mMV/m/wxi/+388cs/tvmj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/938scs/jvnj1n8d8kfs/h/N3/M4v+9/DGL/675Yxb/7+ePWfx3yx+z+O+eP2bx3yN/zOL/g/wxi/8P88cs/nvmj1n898ofs/jvnT9m8f9R/pjF/8f5Yxb/ffLHLP4/yR+z+P80f8zi/7P8MYv/z/PHLP775o9Z/H+RP2bx3y9/zOL/y/wxi/+v8scs/r/OH7P4/yZ/zOK/f/6Yxf+A/DGL/4H5Yxb/3+aPWfwPyh+z+P8uf8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+P8+f8zi/4f8MYv/kfljFv+j8scs/kfnj1n8j8kfs/j/MX/M4n9s/pjF/0/5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4v/n/DGL/8n5Yxb/U/LHLP5/yR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/1/zxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4XzwwMPTNWqX/5Cz+l7T9Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP7D8sck/hMN5I9Z/Aflj1n8B+ePWfyH5I9Z/MfJH7P4D80fs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+L8tf8ziP2n+mMV/svwxi//b88cs/pPnj1n8p8gfs/hPmT9m8X9H/pjF/535Yxb/d+WPWfynyh+z+L87f8ziP3X+mMV/mvwxi/978scs/u/NH7P4vy9/zOL//vwxi/+0+WMW/w/kj1n8p8sfs/hPnz9m8Z8hf8zi/8H8MYv/h/LHLP4z5o9Z/GfKH7P4fzh/zOI/c/6Yxf8j+WMW/4/mj1n8P5Y/ZvGfJX/M4j9r/pjFf7b8MYv/7PljFv858scs/nPmj1n858ofs/h/PH/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/In/M4v/J/DGL/6fyxyz+n84fs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8/kj1n8F8sfs/gvnj9m8f9s/pjFf4n8MYv/5/LHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4v/5/DGL/xfyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/xfzxyz+K+ePWfxXyR+z+H8pf8zi/+X8MYv/qvljFv/V8scs/l/JH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMX/q/ljFv+v5Y9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjFf7P8MYv/1/PHLP6b549Z/LfIH7P4b5k/ZvH/Rv6Yxf+b+WMW/2/lj1n8t8ofs/hvnT9m8d8mf8zi/+38MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/538MYv/zvljFv9d8scs/t/NH7P4fy9/zOK/a/6Yxf/7+WMW/93yxyz+u+ePWfz3yB+z+P8gf8zi/8P8MYv/nvljFv+98scs/nvnj1n8f5Q/ZvH/cf6YxX+f/DGL/0/yxyz+P80fs/j/LH/M4v/z/DGL/775Yxb/X+SPWfz3yx+z+P8yf8zi/6v8MYv/r/PHLP6/yR+z+O+fP2bxPyB/zOJ/YP6Yxf+3+WMW/4Pyxyz+v8sfs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+v88fs/j/IX/M4n9k/pjF/6j8MYv/0fljFv9j8scs/n/MH7P4H5s/ZvH/U/6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4/zl/zOJ/cv6Yxf+U/DGL/1/yxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOL/1/wxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvEflj8m8Z94IH/M4j8of8ziPzh/zOI/JH/M4j9O/pjFf2j+mMV/3Pwxi/94+WMW//Hzxyz+E2j9x36vLf4Tav3HnsV/ovwxi//E+WMW/0nyxyz+b8sfs/hPmj9m8Z8sf8zi//b8MYv/5PljFv8p8scs/lPmj1n835E/ZvF/Z/6Yxf9d+WMW/6nyxyz+784fs/hPnT9m8Z8mf8zi/578MYv/e/PHLP7vyx+z+L8/f8ziP23+mMX/A/ljFv/p8scs/tPnj1n8Z8gfs/h/MH/M4v+h/DGL/4z5Yxb/mfLHLP4fzh+z+M+cP2bx/0j+mMX/o/ljFv+P5Y9Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/h/PH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/p/IH7P4fzJ/zOL/qfwxi/+n88cs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMX/M/ljFv/F8scs/ovnj1n8P5s/ZvFfIn/M4v+5/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fz5/zOL/hfwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOL/xfwxi//K+WMW/1Xyxyz+X8ofs/h/OX/M4r9q/pjFf7X8MYv/V/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/hvmD9m8f9q/pjF/2v5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4v/1/DGL/+b5Yxb/LfLHLP5b5o9Z/L+RP2bx/2b+mMX/W/ljFv+t8scs/lvnj1n8t8kfs/h/O3/M4r9t/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/h/J3/M4r9z/pjFf5f8MYv/d/PHLP7fyx+z+O+aP2bx/37+mMV/t/wxi//u+WMW/z3yxyz+P8gfs/j/MH/M4r9n/pjFf6/8MYv/3vljFv8f5Y9Z/H+cP2bx3yd/zOL/k/wxi/9P88cs/j/LH7P4/zx/zOK/b/6Yxf8X+WMW//3yxyz+v8wfs/j/Kn/M4v/r/DGL/2/yxyz+++ePWfwPyB+z+B+YP2bx/23+mMX/oPwxi//v8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi//v88cs/n/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/H/PHLP7H5o9Z/P+UP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP5/zh+z+J+cP2bxPyV/zOL/l/wxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+P81f8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/Iflj0n8JxnIH7P4D8ofs/gPzh+z+A/JH7P4j5M/ZvEfmj9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bxf1v+mMV/0vwxi/9k+WMW/7fnj1n8J88fs/hPkT9m8Z8yf0zhP2yHSd6RP6bwHxiY5J35Yxb/d+WPWfynyh+z+L87f8ziP3X+mMV/mvwxi/978scs/u/NH7P4vy9/zOL//vwxi/+0+WMW/w/kj1n8p8sfs/hPnz9m8Z8hf8zi/8H8MYv/h/LHLP4z5o9Z/GfKH7P4fzh/zOI/c/6Yxf8j+WMW/4/mj1n8P5Y/ZvGfJX/M4j9r/pjFf7b8MYv/7PljFv858scs/nPmj1n858ofs/h/PH/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/In/M4v/J/DGL/6fyxyz+n84fs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8/kj1n8F8sfs/gvnj9m8f9s/pjFf4n8MYv/5/LHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4v/5/DGL/xfyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/xfzxyz+K+ePWfxXyR+z+H8pf8zi/+X8MYv/qvljFv/V8scs/l/JH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMX/q/ljFv+v5Y9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjFf7P8MYv/1/PHLP6b549Z/LfIH7P4b5k/ZvH/Rv6Yxf+b+WMW/2/lj1n8t8ofs/hvnT9m8d8mf8zi/+38MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/538MYv/zvljFv9d8scs/t/NH7P4fy9/zOK/a/6Yxf/7+WMW/93yxyz+u+ePWfz3yB+z+P8gf8zi/8P8MYv/nvljFv+98scs/nvnj1n8f5Q/ZvH/cf6YxX+f/DGL/0/yxyz+P80fs/j/LH/M4v/z/DGL/775Yxb/X+SPWfz3yx+z+P8yf8zi/6v8MYv/r/PHLP6/yR+z+O+fP2bxPyB/zOJ/4L/2n+B/db3+Q7P4/7btH7P4H5Q/ZvH/Xf6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvH/ff6Yxf8P+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bx/2P+mMX/2Pwxi/+f8scs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/z/ljFv+T88cs/qfkj1n8/5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv+/5o9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/+w/DGJ/9sG8scs/oPyxyz+g/PHLP5D8scs/uPkj1n8h+aPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/N+WP2bxnzR/zOI/Wf6Yxf/t+WMW/8nzxyz+U+SPWfynzB+z+L8jf8zi/878MYv/u/LHLP5T5Y9Z/N+dP2bxnzp/zOI/Tf6Yxf89+WMW//fmj1n835c/ZvF/f/6YxX/a/DGL/wfyxyz+0+WPWfynzx+z+M+QP2bx/2D+mMX/Q/ljFv8Z88cs/jPlj1n8P5w/ZvGfOX/M4v+R/DGL/0fzxyz+H8sfs/jPkj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfw/nj9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfw/kT9m8f9k/pjF/1P5Yxb/T+ePWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2fyxyz+i+WPWfwXzx+z+H82f8ziv0T+mMX/c/ljFv8l88cs/kvlj1n8l84fs/gvkz9m8f98/pjF/wv5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjF/4v5Yxb/lfPHLP6r5I9Z/L+UP2bx/3L+mMV/1fwxi/9q+WMW/6/kj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOL/1fwxi//X8scs/hvlj1n8N84fs/hvkj9m8d80f8ziv1n+mMX/6/ljFv/N88cs/lvkj1n8t8wfs/h/I3/M4v/N/DGL/7fyxyz+W+WPWfy3zh+z+G+TP2bx/3b+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx/07+mMV/5/wxi/8u+WMW/+/mj1n8v5c/ZvHfNX/M4v/9/DGL/275Yxb/3fPHLP575I9Z/H+QP2bx/2H+mMV/z/wxi/9e+WMW/73zxyz+P8ofs/j/OH/M4r9P/pjF/yf5Yxb/n+aPWfx/lj9m8f95/pjFf9/8MYv/L/LHLP775Y9Z/H+ZP2bx/1X+mMX/1/ljFv/f5I9Z/PfPH7P4H5A/ZvE/MH/M4v/b/DGL/0H5Yxb/3+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/3+ePWfz/kD9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/z/mj1n8j80fs/j/KX/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8/5w/ZvE/OX/M4n9K/pjF/y/5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvH/a/6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvNfkPGhjY8Y3OKvG/zuT/b2Txvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/gPyx+T+E86kP//xz499IBiaFEYfdfGs23bqm3btm3btm3btm3bxm3/wB7cDpo03WuNz+AkX3bU0n+A/lFL/4H6Ry39B+kftfQfrH/U0n+I/lFL/6H6Ry39h+kftfQfrn/U0n+E/lFL/5H6Ry39R+kftfQfrX/U0n+M/lFL/7H6Ry39x+kftfQfr3/U0v+L+kct/b+kf9TS/8v6Ry39v6J/1NL/q/pHLf2/pn/U0v/r+kct/b+hf9TS/5v6Ry39v6V/1NL/2/pHLf2/o3/U0v+7+kct/b+nf9TS//v6Ry39f6B/1NL/h/pHLf1/pH/U0v/H+kct/X+if9TS/6f6Ry39f6Z/1NL/5/pHLf1/oX/U0v+X+kct/X+lf9TS/9f6Ry39f6N/1NL/t/pHLf1/p3/U0v/3+kct/f+gf9TS/4/6Ry39/6R/1NL/z/pHLf3/on/U0v+v+kct/f+mf9TS/+/6Ry39/6F/1NL/n/pHLf3/pX/U0v/f+kct/f+jf9TS/7/6Ry39/6d/1NL///pHLf0n0T9q6T+p/lFL/8n0j1r6T65/1NJ/Cv2jlv5T6h+19J9K/6il/9T6Ry39p9E/auk/7SfpP+FT+OszqqX/dPYftfSfXv+opf8M+kct/WfUP2rpP5P+UUv/mfWPWvrPon/U0n9W/aOW/rPpH7X0n13/qKX/HPpHLf3n1D9q6T+X/lFL/7n1j1r6z6N/1NJ/Xv2jlv7z6R+19J9f/6il/wL6Ry39F9Q/aum/kP5RS/+F9Y9a+i+if9TSf1H9o5b+i+kftfRfXP+opf8S+kct/ZfUP2rpv5T+UUv/pfWPWvovo3/U0n9Z/aOW/svpH7X0X17/qKX/CvpHLf1X1D9q6b+S/lFL/5X1j1r6r6J/1NJ/Vf2jlv6r6R+19F9d/6il/xr6Ry3919Q/aum/lv5RS/+19Y9a+q+jf9TSf139o5b+6+kftfRfX/+opf8G+kct/TfUP2rpv5H+UUv/jfWPWvpvon/U0n9T/aOW/pvpH7X031z/qKX/FvpHLf231D9q6b+V/lFL/631j1r6b6N/1NJ/W/2jlv7b6R+19N9e/6il/w76Ry39d9Q/aum/k/5RS/+d9Y9a+u+if9TSf1f9o5b+u+kftfTfXf+opf8e+kct/ffUP2rpv5f+UUv/vbv6D5/Yw5b++3T1n2gt/ffVP2rpv5/+UUv//fWPWvofoH/U0v9A/aOW/gfpH7X0P1j/qKX/IfpHLf0P1T9q6X+Y/lFL/8P1j1r6H6F/1NL/SP2jlv5H6R+19D9a/6il/zH6Ry39j9U/aul/nP5RS//j9Y9a+p+gf9TS/0T9o5b+J+kftfQ/Wf+opf8p+kct/U/VP2rpf5r+UUv/0/WPWvqfoX/U0v9M/aOW/mfpH7X0P1v/qKX/OfpHLf3P1T9q6X+e/lFL//P1j1r6X6B/1NL/Qv2jlv4X6R+19L9Y/6il/yX6Ry39L9U/aul/mf5RS//L9Y9a+l+hf9TS/0r9o5b+V+kftfS/Wv+opf81+kct/a/VP2rpf53+UUv/6/WPWvrfoH/U0v9G/aOW/jfpH7X0v1n/qKX/LfpHLf1v1T9q6X+b/lFL/9v1j1r636F/1NL/Tv2jlv536R+19L9b/6il/z36Ry3979U/aul/n/5RS//79Y9a+j+gf9TS/0H9o5b+D+kftfR/WP+opf8j+kct/R/VP2rp/5j+UUv/x/WPWvo/oX/U0v9J/aOW/k/pH7X0f1r/qKX/M/pHLf2f1T9q6f+c/lFL/+f1j1r6v6B/1NL/Rf2jlv4v6R+19H9Z/6il/yv6Ry39X9U/aun/mv5RS//X9Y9a+r+hf9TS/039o5b+b+kftfR/W/+opf87+kct/d/VP2rp/57+UUv/9/WPWvp/oH/U0v9D/aOW/hP0j1r6f6R/VNJ//Bf0j1r6D9A/auk/UP+opf8g/aOW/oP1j1r6D9E/auk/VP+opf8w/aOW/sP1j1r6j9A/auk/Uv+opf8o/aOW/qP1j1r6j9E/auk/Vv+opf84/aPPXX8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Jh9+4/xui7gOP65nwgWoJC+pfgRlIcaHD+M40fJrNU4WcdI13QthcGJGqjBrfhhdGza+oNNXKxZ00lrN7PFGtM5kigtXcyN6SattGxSzhgOp22h/VjXvtz3e9x9PW5839f7zR88Hn/cfT+f4/U5YHvy+dy4AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIadOWrV9dvX5950YvvPDCi/4X5/pfJiC109Gf698JAAAAAAAAAAAAAABwJjl+nOhc/xkBAAAAAOB8095x7YmGukGnGgYeTD7ceer91e/eeFtPz5MXVd6XP7x8iEvWDzzo7e3t3XHgzWXlw1FFUZQ+2/jy8QXV49L1u/ev/EPfUShOtP3qzq7jHXU/e+qWt1qWj1vcdOpsU7Hq1tvXd86pL4rQ0FRsLh3MrSuK0NxU7CodzCsdjGoqflw6mH/qYHTxdOlg9pq71q8tnXjfp4bzTntHd9EwqNhi0L8GA/vv3v/Ie5X3w1yycrXGotz/pZ9/ZlfVxyrO0H/l+qGuuv+a/4DAGdXW/+PdlffDXPJ99/+Jf91+3VAfO3P/leuHev1DOkM8/w9qtPq5v+r5f9oQl+zfH5re9mip/20PP/9Q+VTj2Tz/n75+aKjuv37Q83/pOb6x8vw/qihC0wj/OuC80t6x48Rw9//h+2+cVLWpG9j/weU/eK7U/9SOiY3lU0019t84zP2/bvvTg3+vQG3aO37YW3X/r6H/omWIS/b3P61nwrul/q8Z/+/XB3yslv6bqvtv7dpwd+umLVtn3b5h9brOdZ13zp/XNm9h25xFi+a3nnok6Hs7wr8VOD+M7P5fjKna1BVFZ//+l0ePLSn1v+nIsc3lUxfU2H/zsPf/19z/YUjT64vm5mLz6q6ujXP73lYO5/W97ftlQ/Rfw9f/M2aWf1nl6+7SF+T9+wMLip5S/ztfuWFL+VRzjf2PGq7/b53+vECEEd7/11ZtBvV/xYv3vlrqf9/bb15fPlXr1/8XDNv/Hvd/GIn2jqpv+Pk/K/V/8uTByG+2CaP9/x+kk6P/V+p/+mTcOozRP6STo/8H7hk11PcJnIVwof4hnRz9b3pozQtx6/AB/UM6Ofpf+JdDN8Wtwwf1D+nk6H/iJS//LW4dxuof0snR/y23bfxa3DqM0z+kk6P/Y/c+e0/cOozXP6STo/8f/euu43HrcJH+IZ0c/d8/dvsNcetwsf4hnRz9P3v3734dtw4T9A/p5Oj/8l37ZsWtw0T9Qzo5+t/w1qQDcevwIf1DOjn6v3bShZE/pxsu0T+kk6P/MWv3fDduHS7VP6STo/+uvbP/HLcOQf+Qztn2Pzry+qX+l75037K4dbhM/5BOjvv/hJbdJ+PWYZL+IZ0c/d9409JVcevwYf1DOjn6f+rnX74/bh0+on9IJ0f/7/z27cvi1mGy/iGdHP2/Ov/oo3HrMEX/kE6O/r/3hevmxq3DVP1DOjn6f/z4zl/ErcM0/UM6Ofp/b3fLlXHr8FH9Qzo5+j+yasHuuHWYrn9IJ0f/j0x5uD5uHWboH9LJ0f83//vPE3Hr8DH9Qzo5+l/Q/cVtcevwcf1DOjn6n9T12efi1uFy/UM6OfpfOebY9XHr0KJ/SCdH/62/uXVK3DrM1D+kk6P/tQcPfyduHa7QP6STo/9l7X9aELcOV+of0snRf0PbN/bErcNV+od0cvR/9PcTVsStwyf0D+nk6P8nj+1/OW4dZukf0snR/7e/8ti6uHWYrX9IJ0f/h2fUvxO3Dq36h3Ry9L/1hSf+E7cOc/QP6eTof+6+qXfErcNc/UM6Ofqf/LmxR+LWYZ7+IZ0c/X9pSc9n4tZhvv4hnRz9P/HHZ/bGrcPV+od0cvTf23PHkrh1+KT+IZ0c/b+0ctt9ceuwQP+QTo7+H2x9cULcOrTpH9LJ0f8bb9x8c9w6LNQ/pJOj/70P/uNQ3Dos0j+kk6P/Hetf/3rcOizWP6STo//nL17xWtw6LNE/pJOj/5l/v2pc3Dp8Sv+QTo7+1+zs/n7cOnxa/5BOjv5XbH6gJW4drtE/pJOj/8bmxfvi1mGp/gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw5kAAAAAIT5W+fRfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ8CAAD//+sacTw=") 24m20.297385802s ago: executing program 2 (id=691): socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x7d5, &(0x7f0000000280)={0x0, 0x0, 0x100, 0x2, 0x20d}, 0x0, 0x0) pipe(&(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 24m19.264038753s ago: executing program 2 (id=693): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) ioctl$KVM_RUN(r3, 0xae80, 0x0) 24m18.735805302s ago: executing program 2 (id=695): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.current\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000100)=r1, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0xfffffffffffffeca, 0x0, 0x0, 0x0, 0xcfe, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 24m2.914764752s ago: executing program 33 (id=695): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.current\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000100)=r1, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0xfffffffffffffeca, 0x0, 0x0, 0x0, 0xcfe, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m9.841540319s ago: executing program 3 (id=4372): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r1, r0, 0x0, 0x7ffff000) 1m7.653181551s ago: executing program 3 (id=4379): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000000400)}, 0x7}], 0x1, 0x2030, 0x0) 1m7.073887743s ago: executing program 3 (id=4382): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}) 1m6.826785949s ago: executing program 3 (id=4384): setresgid(0xee00, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x2a8000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prlimit64(r0, 0x6, 0x0, 0x0) 1m5.01442087s ago: executing program 3 (id=4391): open(0x0, 0x60142, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./bus\x00', 0x0, 0x1001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='exfat\x00', 0x0, 0x0) 1m3.845813854s ago: executing program 3 (id=4393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000700000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) 48.390008803s ago: executing program 34 (id=4393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000700000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) 13.416841882s ago: executing program 0 (id=4548): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, 0x0, 0x40) sendmsg$inet(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x810) 13.370922595s ago: executing program 5 (id=4549): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200002, &(0x7f00000000c0), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/190, 0xbe}], 0x1, 0x6, 0xfffffff5, 0xb) 13.110826766s ago: executing program 0 (id=4551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000002000000080000000b"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 12.662731429s ago: executing program 0 (id=4553): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r3 = fsopen(&(0x7f0000000380)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001500add427323b470c45b4560a067fffffff81004e220300090080020efffeffe809024000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020024cd9bfba959e699408a2f134118a3", 0x58}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfd', @ANYRESOCT=r6]) syz_usb_connect(0x0, 0x107, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b2111d40c71b10905336000000010902f50001000000000904", @ANYRESOCT=r4], 0x0) 12.640418461s ago: executing program 4 (id=4554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000380)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000250000e0018000007800000000000000000000000000119078a20c000100000000091ddbdf59dead9abe1a32138e95a0d80a994d968a261658affbc3d10c2bc114c50d4198854bc97c68c20743b5551d2044577abb5530c323a420dd49"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 11.619859053s ago: executing program 5 (id=4555): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1010801, &(0x7f0000004640)=ANY=[], 0x2, 0x1f1, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x14) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 9.543343691s ago: executing program 4 (id=4557): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) r2 = msgget$private(0x0, 0x419) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000300)=""/185) 8.152756781s ago: executing program 0 (id=4559): syz_open_dev$vim2m(0x0, 0x7ff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)='-:\\,-)&$$]\',\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdaff}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 8.051703625s ago: executing program 4 (id=4560): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) setgroups(0x24, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x2b, 0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) fcntl$setpipe(r3, 0x407, 0xff27) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={0x0, 0xffffff4c, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) write$tun(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r6], [0x2b8]}) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 6.998942092s ago: executing program 5 (id=4564): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@main=@item_012={0x1, 0x0, 0xa, '4'}, @main=@item_4={0x3, 0x0, 0x0, "2fc2c438"}, @local=@item_012={0x0, 0x2, 0x1}]}}, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xc76, 0x0, 0x0, 0x80000001, 0x0, 0x32, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3e5, 0xfffffc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x9, 0x200, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = msgget(0x2, 0x213) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10300, 0x8}, 0x1c) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) msgctl$IPC_RMID(r3, 0x0) pread64(r0, &(0x7f00000006c0)=""/161, 0xa1, 0x40000000000025) 6.878553754s ago: executing program 6 (id=4565): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 6.707761432s ago: executing program 7 (id=4566): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x202, @void, @value}, 0x94) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000680)=""/74, 0xeeee8000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 6.350787722s ago: executing program 6 (id=4567): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x2000002, &(0x7f0000000600)=ANY=[], 0x8, 0x372, &(0x7f00000006c0)="$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") mount$nfs(&(0x7f0000000100)='<..', 0x0, 0x0, 0x4, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) open(0x0, 0x84902, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80342, 0x0) 6.031871839s ago: executing program 4 (id=4568): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x3, &(0x7f00000000c0)=ANY=[], 0x21, 0x1b2, &(0x7f0000000a40)="$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") socket$inet6(0xa, 0x2, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 5.646034379s ago: executing program 7 (id=4569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0) 5.540428379s ago: executing program 4 (id=4570): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) r2 = msgget$private(0x0, 0x419) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000300)=""/185) 5.49760203s ago: executing program 6 (id=4571): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) 4.439616758s ago: executing program 7 (id=4572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffd8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000040), 0x7f, 0x20000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 4.327829728s ago: executing program 4 (id=4573): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8380, 0x0, 0x0, 0x801}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3516, 0xdbaa, 0x0, 0x0, 0x0) 4.14318347s ago: executing program 7 (id=4574): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0x601, &(0x7f0000001280)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f00000000c0)='2', 0x1, 0xfecc) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 3.89420238s ago: executing program 6 (id=4575): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) recvmmsg(r0, &(0x7f0000003840)=[{{&(0x7f0000000540)=@alg, 0x80, 0x0, 0x0, &(0x7f0000000840)=""/213, 0xd5}, 0x6}, {{&(0x7f0000000a80)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000000c40)=""/189, 0xbd}, 0x7}, {{0x0, 0x0, &(0x7f0000000f00)}, 0x5}, {{&(0x7f0000001040)=@pptp, 0x80, &(0x7f0000001140)=[{0x0}], 0x1}, 0xb}, {{&(0x7f00000011c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, 0x0, 0x0, &(0x7f0000002800)=""/65, 0x41}, 0x9}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f00)=""/110, 0x6e}, 0x401}], 0x6, 0x2100, &(0x7f0000003ac0)) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) 3.100993081s ago: executing program 0 (id=4576): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.607716406s ago: executing program 7 (id=4577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x0, 0x400, 0x0, 0x4}, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0/../file0\x00') open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x103, 0x51964420, 0x0, 0x7ff, 0x1000000, 0x0, 0x0, 0x0, 0x100, 0x7}}, 0x50) 2.607072425s ago: executing program 0 (id=4578): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) setgroups(0x24, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x2b, 0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) fcntl$setpipe(r3, 0x407, 0xff27) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={0x0, 0xffffff4c, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r5}) write$tun(r0, &(0x7f0000000880)={@val={0x0, 0x6006}, @val={0x1, 0x1, 0x5, 0x0, 0xc, 0x7}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x15, 0x24, 0x67, 0x0, 0x2d, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @local}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x8}}}}}, 0x32) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 2.301393714s ago: executing program 5 (id=4579): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu '], 0x5) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='-cpu'], 0x5) r3 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x9) 1.659870964s ago: executing program 6 (id=4580): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x8000000010, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2, 0x4ea1, @private=0xa010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)='=', 0x1}], 0x1}, 0x20000001) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000080)={0x73}, 0x8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 1.437846354s ago: executing program 7 (id=4581): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 1.32731344s ago: executing program 5 (id=4582): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0) 139.931106ms ago: executing program 5 (id=4583): prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xd801, 0x1103}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f46}]}, 0x40}}, 0x0) 0s ago: executing program 6 (id=4584): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[], 0xfd, 0xc34, &(0x7f0000001080)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ftruncate(r1, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) kernel console output (not intermixed with test programs): fd [ 1320.227638][T17203] 9pnet_fd: Insufficient options for proto=fd [ 1324.458142][T17238] netlink: 'syz.3.3451': attribute type 2 has an invalid length. [ 1325.662051][T17247] syz.6.3454: attempt to access beyond end of device [ 1325.662051][T17247] nbd6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1325.687232][T17247] gfs2: error -5 reading superblock [ 1326.968324][T17260] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1327.914685][T17265] Bluetooth: MGMT ver 1.23 [ 1330.001403][T13225] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1330.071687][T15658] Bluetooth: hci0: command 0x0406 tx timeout [ 1333.094322][T17301] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1335.844582][T13225] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1335.874768][T13225] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1335.885110][T13225] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1335.893482][T13225] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1335.901359][T13225] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1335.912030][T13225] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1336.650538][ T5844] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1336.791865][ T5844] usb 1-1: device descriptor read/64, error -71 [ 1337.997021][T15658] Bluetooth: hci5: command tx timeout [ 1338.529108][ T5844] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1338.705213][ T5844] usb 1-1: device descriptor read/64, error -71 [ 1338.844590][T17322] chnl_net:caif_netlink_parms(): no params data found [ 1338.852142][ T5844] usb usb1-port1: attempt power cycle [ 1339.230580][ T5844] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1339.630923][ T5844] usb 1-1: device not accepting address 64, error -71 [ 1339.746940][T17322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.951231][T17322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.963193][T17322] bridge_slave_0: entered allmulticast mode [ 1339.971892][T17322] bridge_slave_0: entered promiscuous mode [ 1339.982979][T17322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.991004][T17322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.080628][T15658] Bluetooth: hci5: command tx timeout [ 1340.738780][T17322] bridge_slave_1: entered allmulticast mode [ 1340.757480][T17322] bridge_slave_1: entered promiscuous mode [ 1341.098937][T17322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.138226][T17322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.717659][T17322] team0: Port device team_slave_0 added [ 1341.755016][T17322] team0: Port device team_slave_1 added [ 1342.160697][T15658] Bluetooth: hci5: command tx timeout [ 1343.114348][T17322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1343.629884][T17322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1343.697747][T17322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1343.854856][T17322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1343.883790][T17322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1344.021512][T17322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1344.120426][ T5844] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1344.240613][T15658] Bluetooth: hci5: command tx timeout [ 1344.273000][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.318935][ T5844] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1344.358885][ T5844] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1344.375637][T17322] hsr_slave_0: entered promiscuous mode [ 1344.386261][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.393158][T17322] hsr_slave_1: entered promiscuous mode [ 1344.433995][T17322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1344.464798][T17322] Cannot create hsr debugfs directory [ 1344.467164][ T5844] usb 5-1: config 0 descriptor?? [ 1344.728021][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3497'. [ 1347.400997][ T5930] usb 5-1: USB disconnect, device number 51 [ 1347.779390][T17322] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.050631][ T5844] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1348.350494][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 1348.386641][ T5844] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1348.467148][ T5844] usb 1-1: config 0 has no interface number 0 [ 1348.526634][ T5844] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1348.546772][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.594469][ T5844] usb 1-1: Product: syz [ 1348.598716][ T5844] usb 1-1: Manufacturer: syz [ 1348.607934][ T5844] usb 1-1: SerialNumber: syz [ 1348.647063][ T5844] usb 1-1: config 0 descriptor?? [ 1348.664180][ T5844] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1348.738568][T17322] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.827416][T17322] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.027030][ T5844] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 1349.038152][ T5844] quatech2 1-1:0.51: probe with driver quatech2 failed with error -8 [ 1349.130130][T17322] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.194478][ T5930] usb 1-1: USB disconnect, device number 66 [ 1349.604961][T17322] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1349.893957][T17322] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1349.966036][T17322] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1350.013596][T17322] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1350.035294][T17429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3509'. [ 1350.569493][T17322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.667556][T17322] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.701289][T13462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.708505][T13462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.243136][T13462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.250476][T13462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1354.447042][T17322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1354.790575][ T5930] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1354.825604][T17322] veth0_vlan: entered promiscuous mode [ 1354.838528][T17322] veth1_vlan: entered promiscuous mode [ 1354.892909][T17322] veth0_macvtap: entered promiscuous mode [ 1354.904930][T17322] veth1_macvtap: entered promiscuous mode [ 1354.949861][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.969242][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.993544][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.005552][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.016058][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.159064][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.176043][ T5930] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1355.191154][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.200376][ T5930] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1355.250863][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.263058][ T5930] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1355.263092][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.263114][ T5930] usb 5-1: Product: syz [ 1355.263132][ T5930] usb 5-1: Manufacturer: syz [ 1355.263149][ T5930] usb 5-1: SerialNumber: syz [ 1355.266619][ T5930] usb 5-1: config 0 descriptor?? [ 1355.320460][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.349365][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.402723][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.430638][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.452788][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.594085][ T5930] usb 5-1: selecting invalid altsetting 0 [ 1355.604761][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.450122][T17322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1357.091113][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3519'. [ 1357.109595][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.116863][ T5930] usb 5-1: USB disconnect, device number 52 [ 1357.131076][T17451] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 1357.133917][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.262666][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.364136][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.395925][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.443599][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.462832][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.474847][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.552006][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.570801][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.607748][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.662087][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.673931][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.712605][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.573944][T17322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1358.574825][T16155] udevd[16155]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1358.658132][T17322] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.953343][T17322] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.010530][T17322] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.025984][T17322] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.527345][T13462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.577660][T16058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.581802][T13462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.828894][T16058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.504168][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3529'. [ 1365.406032][T17519] geneve2: entered promiscuous mode [ 1365.411406][T17519] geneve2: entered allmulticast mode [ 1367.198757][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.207805][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.850721][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3540'. [ 1375.296025][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3551'. [ 1377.876522][T17606] geneve2: entered promiscuous mode [ 1377.881947][T17606] geneve2: entered allmulticast mode [ 1379.792361][T17622] netlink: 'syz.0.3562': attribute type 2 has an invalid length. [ 1383.259975][T17645] geneve2: entered promiscuous mode [ 1383.265515][T17645] geneve2: entered allmulticast mode [ 1384.900560][ T5844] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1385.100568][ T5844] usb 5-1: Using ep0 maxpacket: 8 [ 1385.149201][ T5844] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1385.164641][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.190477][ T5844] usb 5-1: Product: syz [ 1385.194698][ T5844] usb 5-1: Manufacturer: syz [ 1385.199317][ T5844] usb 5-1: SerialNumber: syz [ 1385.245175][ T5844] usb 5-1: config 0 descriptor?? [ 1385.463593][ T5844] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1386.446406][ T5844] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1386.839267][T17690] syz.0.3583: attempt to access beyond end of device [ 1386.839267][T17690] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1386.853127][T17690] gfs2: error -5 reading superblock [ 1388.083685][T15856] usb 5-1: USB disconnect, device number 53 [ 1389.542236][T17715] syz.0.3589: attempt to access beyond end of device [ 1389.542236][T17715] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1389.556052][T17715] exFAT-fs (nbd0): unable to read boot sector [ 1389.563605][T17715] exFAT-fs (nbd0): failed to read boot sector [ 1389.570949][T17715] exFAT-fs (nbd0): failed to recognize exfat type [ 1393.274778][T15106] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1393.633471][T15106] usb 7-1: Using ep0 maxpacket: 8 [ 1393.977800][T15106] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1394.027922][T15106] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.077869][T15106] usb 7-1: Product: syz [ 1394.108037][T15106] usb 7-1: Manufacturer: syz [ 1394.140167][T15106] usb 7-1: SerialNumber: syz [ 1394.191636][T15106] usb 7-1: config 0 descriptor?? [ 1394.743160][T15106] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1395.376425][T17759] overlayfs: failed to resolve './file0': -2 [ 1395.891489][T15106] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1397.267307][T15856] usb 7-1: USB disconnect, device number 37 [ 1397.553787][ T8] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1397.742907][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 1397.770589][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.795836][ T8] usb 4-1: config 0 descriptor?? [ 1397.843093][ T8] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1397.923590][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 1397.954983][ T8] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1398.001331][ T8] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1398.025719][ T8] usb 4-1: media controller created [ 1398.053211][ T8] dvb-usb: bulk message failed: -22 (5/0) [ 1398.071591][ T8] dvb-usb: MAC address reading failed. [ 1398.089411][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1398.118264][T17786] netlink: 'syz.6.3611': attribute type 12 has an invalid length. [ 1398.169451][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 1398.180960][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 1398.194795][ T8] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1398.311480][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input73 [ 1398.370568][T10711] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1398.379655][ T8] dvb-usb: schedule remote query interval to 100 msecs. [ 1398.443645][ T8] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1398.530257][ T8] usb 4-1: USB disconnect, device number 55 [ 1398.555122][T10711] usb 5-1: Using ep0 maxpacket: 16 [ 1398.602767][T10711] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1398.653714][T10711] usb 5-1: config 0 has no interface number 0 [ 1398.698346][T10711] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1398.730226][T10711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.758048][T10711] usb 5-1: Product: syz [ 1398.809762][T10711] usb 5-1: Manufacturer: syz [ 1398.816532][ T8] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1398.825459][T10711] usb 5-1: SerialNumber: syz [ 1398.899153][T10711] usb 5-1: config 0 descriptor?? [ 1398.947629][T10711] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1400.170924][T10711] gspca_spca1528: reg_w err -71 [ 1400.214271][T10711] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 1400.297178][T10711] usb 5-1: USB disconnect, device number 54 [ 1400.816940][T17804] overlayfs: failed to resolve './file0': -2 [ 1401.256988][T17811] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3619'. [ 1402.929586][T17828] netlink: 'syz.6.3624': attribute type 12 has an invalid length. [ 1407.729910][T17858] overlayfs: failed to resolve './file0': -2 [ 1412.840640][T15658] Bluetooth: hci5: unexpected cc 0x203e length: 2 > 1 [ 1412.961931][T15856] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1413.158129][T15856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.168810][T15856] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1413.202396][T15856] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1413.281017][T15856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.391964][T15856] usb 4-1: config 0 descriptor?? [ 1413.402854][T15856] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1413.825857][T17918] netlink: 'syz.5.3652': attribute type 12 has an invalid length. [ 1415.415374][T17926] syz.6.3654: attempt to access beyond end of device [ 1415.415374][T17926] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1415.520484][T17926] exFAT-fs (nbd6): unable to read boot sector [ 1415.530996][T17926] exFAT-fs (nbd6): failed to read boot sector [ 1415.578534][T17926] exFAT-fs (nbd6): failed to recognize exfat type [ 1415.733460][ T8] usb 4-1: USB disconnect, device number 56 [ 1417.640515][T15106] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 1417.867212][T15106] usb 6-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.921155][T15106] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 1417.960498][T15106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.989435][T15106] usb 6-1: Product: syz [ 1418.009295][T15106] usb 6-1: Manufacturer: syz [ 1418.024811][T15106] usb 6-1: SerialNumber: syz [ 1418.970998][T17934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.979815][T17934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1419.461140][T15106] ath6kl: Failed to submit usb control message: -110 [ 1419.799905][T17968] x_tables: duplicate underflow at hook 1 [ 1420.438986][T15106] ath6kl: unable to send the bmi data to the device: -110 [ 1420.446890][T15106] ath6kl: Unable to send get target info: -110 [ 1420.467453][T15106] ath6kl: Failed to init ath6kl core: -110 [ 1420.474248][T15106] ath6kl_usb 6-1:201.0: probe with driver ath6kl_usb failed with error -110 [ 1421.016481][ T5843] usb 6-1: USB disconnect, device number 55 [ 1421.229898][T15658] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 1421.237368][T15658] Bluetooth: hci0: unexpected event for opcode 0x203e [ 1421.929328][T17987] netlink: 'syz.0.3664': attribute type 12 has an invalid length. [ 1423.299441][T17998] syz.3.3666: attempt to access beyond end of device [ 1423.299441][T17998] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1423.313667][T17998] FAT-fs (loop7): unable to read boot sector [ 1428.559137][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.566013][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.431907][T18091] netlink: 'syz.4.3686': attribute type 2 has an invalid length. [ 1436.595911][T18124] netlink: 'syz.4.3694': attribute type 4 has an invalid length. [ 1436.690442][T18124] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3694'. [ 1436.880532][T18124] : renamed from bond0 (while UP) [ 1439.750138][T18151] kAFS: No cell specified [ 1448.300996][T15106] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1448.491802][T15106] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.705327][T15106] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.950665][T15106] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1449.053101][T15106] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1449.132216][T15106] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.192084][T15106] usb 7-1: config 0 descriptor?? [ 1449.390435][T15856] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1450.067422][T15856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1450.261348][T15856] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1450.434745][T15856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.622486][T15106] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 1450.642040][T15856] usb 1-1: config 0 descriptor?? [ 1450.650469][T18242] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1450.696470][T15106] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1450.770135][T15106] usb 7-1: USB disconnect, device number 38 [ 1451.330929][T15856] elan 0003:04F3:0755.0011: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1451.562929][T15856] usb 1-1: USB disconnect, device number 67 [ 1458.311573][T18320] netlink: 'syz.4.3746': attribute type 2 has an invalid length. [ 1458.536032][T15658] Bluetooth: hci3: unexpected event for opcode 0x041b [ 1460.474448][T18344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3754'. [ 1461.161445][T18353] syz.4.3756: attempt to access beyond end of device [ 1461.161445][T18353] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1461.174795][T18353] exFAT-fs (nbd4): unable to read boot sector [ 1461.181074][T18353] exFAT-fs (nbd4): failed to read boot sector [ 1461.187224][T18353] exFAT-fs (nbd4): failed to recognize exfat type [ 1461.218664][T12529] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1461.232817][T12529] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1461.243380][T12529] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1461.259885][T12529] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1461.333826][T12529] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1461.345506][T12529] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1461.365832][T12529] Bluetooth: hci5: command 0x0406 tx timeout [ 1462.566398][T15658] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1462.577402][T15658] Bluetooth: hci3: Injecting HCI hardware error event [ 1462.592549][T15658] Bluetooth: hci3: hardware error 0x00 [ 1463.199480][T18347] chnl_net:caif_netlink_parms(): no params data found [ 1463.396521][T18371] netlink: 'syz.5.3762': attribute type 2 has an invalid length. [ 1463.511067][T12529] Bluetooth: hci2: command tx timeout [ 1464.865050][T15658] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1465.693999][T12529] Bluetooth: hci2: command tx timeout [ 1466.807964][T18411] syz.0.3769: attempt to access beyond end of device [ 1466.807964][T18411] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1466.821786][T18411] exFAT-fs (nbd0): unable to read boot sector [ 1466.828015][T18411] exFAT-fs (nbd0): failed to read boot sector [ 1466.834684][T18411] exFAT-fs (nbd0): failed to recognize exfat type [ 1467.044891][T12529] Bluetooth: hci0: command 0x0406 tx timeout [ 1467.050393][T15658] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1467.750415][T12529] Bluetooth: hci2: command tx timeout [ 1467.957129][T18347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.985475][T18347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.021329][T18347] bridge_slave_0: entered allmulticast mode [ 1468.035036][T18347] bridge_slave_0: entered promiscuous mode [ 1468.076075][T18347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.090867][T18347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.114400][T18347] bridge_slave_1: entered allmulticast mode [ 1468.131688][T18347] bridge_slave_1: entered promiscuous mode [ 1468.390798][T18347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1468.507636][T18347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1468.955551][T18347] team0: Port device team_slave_0 added [ 1469.305737][T18347] team0: Port device team_slave_1 added [ 1469.474963][T18347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1469.500946][T18347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1469.705439][T18347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1469.876795][T12529] Bluetooth: hci2: command tx timeout [ 1471.281503][T12529] Bluetooth: hci0: command 0x0406 tx timeout [ 1471.288325][T15658] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1471.688786][T18347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1471.704352][T18347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1471.803107][T18461] syz.5.3783: attempt to access beyond end of device [ 1471.803107][T18461] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1471.816395][T18461] exFAT-fs (nbd5): unable to read boot sector [ 1471.822615][T18461] exFAT-fs (nbd5): failed to read boot sector [ 1471.828756][T18461] exFAT-fs (nbd5): failed to recognize exfat type [ 1472.284302][T18347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.182732][T18347] hsr_slave_0: entered promiscuous mode [ 1474.209712][T18347] hsr_slave_1: entered promiscuous mode [ 1474.241950][T18347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1474.249745][T18347] Cannot create hsr debugfs directory [ 1475.159966][T18347] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.362280][T18482] netlink: 'syz.5.3791': attribute type 2 has an invalid length. [ 1475.380084][T18482] Tq€: entered promiscuous mode [ 1475.724562][T18347] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.146006][T18347] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.231352][T18499] syz.3.3795: attempt to access beyond end of device [ 1477.231352][T18499] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1477.244707][T18499] exFAT-fs (nbd3): unable to read boot sector [ 1477.250903][T18499] exFAT-fs (nbd3): failed to read boot sector [ 1477.257045][T18499] exFAT-fs (nbd3): failed to recognize exfat type [ 1478.375217][T18347] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.884186][T18347] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1479.941487][T18347] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1480.409380][T18519] lo speed is unknown, defaulting to 1000 [ 1480.416195][T18519] lo speed is unknown, defaulting to 1000 [ 1480.435121][T18519] lo speed is unknown, defaulting to 1000 [ 1480.488943][T18519] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1480.623013][T18519] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1481.097371][T18519] lo speed is unknown, defaulting to 1000 [ 1481.105882][T18519] lo speed is unknown, defaulting to 1000 [ 1481.113855][T18519] lo speed is unknown, defaulting to 1000 [ 1481.121692][T18519] lo speed is unknown, defaulting to 1000 [ 1481.129438][T18519] lo speed is unknown, defaulting to 1000 [ 1481.137611][T18519] lo speed is unknown, defaulting to 1000 [ 1481.144800][T18519] lo speed is unknown, defaulting to 1000 [ 1481.151983][T18519] lo speed is unknown, defaulting to 1000 [ 1481.159055][T18519] lo speed is unknown, defaulting to 1000 [ 1481.166148][T18519] lo speed is unknown, defaulting to 1000 [ 1481.289815][T18347] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1481.346911][T18347] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1481.694771][T18347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1481.844259][T18347] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.876904][T11279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.884128][T11279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.967188][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.974404][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1482.259620][T15658] block nbd5: Receive control failed (result -32) [ 1482.269106][T12529] block nbd5: Receive control failed (result -32) [ 1482.280050][T18526] block nbd5: shutting down sockets [ 1482.376649][T18347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1484.405287][T18540] netlink: 'syz.5.3806': attribute type 12 has an invalid length. [ 1486.067061][T18347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1488.100449][ T5844] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 1488.265153][ T5844] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1488.277248][ T5844] usb 1-1: config 0 has no interface number 0 [ 1488.289939][ T5844] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1488.370517][ T5844] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1488.409340][T18347] veth0_vlan: entered promiscuous mode [ 1488.437432][ T5844] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1488.474937][T18347] veth1_vlan: entered promiscuous mode [ 1488.490643][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.525269][ T5844] usb 1-1: config 0 descriptor?? [ 1488.571386][T18573] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1488.586820][ T5844] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1488.714402][T18347] veth0_macvtap: entered promiscuous mode [ 1488.806853][ T5844] usb 1-1: USB disconnect, device number 68 [ 1488.808386][T18347] veth1_macvtap: entered promiscuous mode [ 1488.982440][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.015092][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.201420][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.212072][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.222467][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.239917][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.253813][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1490.085993][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.100335][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.130435][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.168474][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1490.203216][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.220573][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1490.241457][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.251378][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1490.270411][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.480698][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1490.500322][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.540167][T18347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1491.498401][T18598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3820'. [ 1491.534515][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.552524][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.563230][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.580049][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.591043][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.643907][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.687868][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.709369][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.720202][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1492.618333][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.632116][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1492.654030][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.810475][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1492.843761][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.877041][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1492.919630][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.398420][T18347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1493.485856][T18347] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.556150][T18347] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.586304][T18347] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.903985][T18347] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.512644][T18617] Cannot find add_set index 0 as target [ 1494.714029][T18619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3825'. [ 1495.058046][ T9819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.103110][ T9819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.314393][T13556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.359432][T13556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.113017][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1497.428765][ T29] audit: type=1326 audit(1738949264.681:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18635 comm="syz.0.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ced8cde9 code=0x7ffc0000 [ 1497.816818][ T29] audit: type=1326 audit(1738949264.681:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18635 comm="syz.0.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ced8cde9 code=0x7ffc0000 [ 1497.890567][ T29] audit: type=1326 audit(1738949264.681:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18635 comm="syz.0.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f77ced8cde9 code=0x7ffc0000 [ 1497.917527][ T29] audit: type=1326 audit(1738949264.681:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18635 comm="syz.0.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ced8cde9 code=0x7ffc0000 [ 1498.895093][ T29] audit: type=1326 audit(1738949264.681:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18635 comm="syz.0.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ced8cde9 code=0x7ffc0000 [ 1498.918067][ T29] audit: type=1326 audit(1738949264.681:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18635 comm="syz.0.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77ced8cde9 code=0x7ffc0000 [ 1499.642598][ T29] audit: type=1326 audit(1738949264.681:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18635 comm="syz.0.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ced8cde9 code=0x7ffc0000 [ 1499.799213][ T29] audit: type=1326 audit(1738949264.681:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18635 comm="syz.0.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ced8cde9 code=0x7ffc0000 [ 1499.937038][ T29] audit: type=1326 audit(1738949264.681:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18635 comm="syz.0.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f77ced8cde9 code=0x7ffc0000 [ 1500.065786][ T29] audit: type=1326 audit(1738949264.681:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18635 comm="syz.0.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ced8cde9 code=0x7ffc0000 [ 1500.321957][T18664] syz.3.3833: attempt to access beyond end of device [ 1500.321957][T18664] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1500.335314][T18664] exFAT-fs (nbd3): unable to read boot sector [ 1500.341569][T18664] exFAT-fs (nbd3): failed to read boot sector [ 1500.347773][T18664] exFAT-fs (nbd3): failed to recognize exfat type [ 1503.176680][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3838'. [ 1503.549269][T18684] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 1503.549269][T18684] program syz.3.3839 not setting count and/or reply_len properly [ 1504.451806][T18687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3840'. [ 1504.530733][T18687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3840'. [ 1507.668102][T18712] netlink: 'syz.0.3847': attribute type 12 has an invalid length. [ 1509.495172][T18724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3849'. [ 1510.690437][ T8] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1511.237199][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.264749][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.304496][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1511.337079][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.378855][ T8] usb 1-1: config 0 descriptor?? [ 1511.818066][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 1511.846355][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1511.865109][ T8] usb 1-1: USB disconnect, device number 69 [ 1514.525703][T18768] netlink: 'syz.0.3859': attribute type 12 has an invalid length. [ 1518.910585][T18802] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1518.935200][T18802] batman_adv: batadv0: Adding interface: gretap1 [ 1518.941670][T18802] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1518.967166][T18802] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1519.730684][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1519.730700][ T29] audit: type=1326 audit(1738949287.321:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18804 comm="syz.3.3870" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ca858cde9 code=0x0 [ 1520.752481][T18818] netlink: 'syz.0.3872': attribute type 12 has an invalid length. [ 1521.745153][T18811] syz.4.3871 (18811): drop_caches: 2 [ 1523.268712][T18837] syz_tun: entered allmulticast mode [ 1525.041659][T18845] syz.3.3880: attempt to access beyond end of device [ 1525.041659][T18845] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1525.105945][T18845] gfs2: error -5 reading superblock [ 1525.319291][T18857] openvswitch: netlink: Flow key attr not present in new flow. [ 1527.220350][ T29] audit: type=1326 audit(1738949294.271:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca858cde9 code=0x7ffc0000 [ 1527.758707][ T29] audit: type=1326 audit(1738949294.271:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca858cde9 code=0x7ffc0000 [ 1527.785604][ T29] audit: type=1326 audit(1738949294.271:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ca858cde9 code=0x7ffc0000 [ 1527.851129][ T29] audit: type=1326 audit(1738949294.291:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca858cde9 code=0x7ffc0000 [ 1528.440473][ T29] audit: type=1326 audit(1738949294.291:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca858cde9 code=0x7ffc0000 [ 1528.503294][ T29] audit: type=1326 audit(1738949294.331:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ca858cde9 code=0x7ffc0000 [ 1528.700170][ T29] audit: type=1326 audit(1738949294.381:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca858cde9 code=0x7ffc0000 [ 1528.795733][T18886] syz.4.3892: attempt to access beyond end of device [ 1528.795733][T18886] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1528.808636][T18886] exFAT-fs (nbd4): unable to read boot sector [ 1528.814842][T18886] exFAT-fs (nbd4): failed to read boot sector [ 1528.820961][T18886] exFAT-fs (nbd4): failed to recognize exfat type [ 1528.951939][ T29] audit: type=1326 audit(1738949294.381:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca858cde9 code=0x7ffc0000 [ 1530.600428][ T5844] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1530.742977][T18906] syz.4.3899: attempt to access beyond end of device [ 1530.742977][T18906] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1530.756213][T18906] gfs2: error -5 reading superblock [ 1532.167627][ T5844] usb 7-1: Using ep0 maxpacket: 8 [ 1532.301664][ T5844] usb 7-1: device descriptor read/all, error -71 [ 1533.788491][T18921] lo speed is unknown, defaulting to 1000 [ 1538.519172][T18960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3914'. [ 1541.670545][ T5891] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1541.881197][T18991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3924'. [ 1542.342263][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.365058][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.431351][ T5891] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1542.479802][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.541903][ T5891] usb 4-1: config 0 descriptor?? [ 1542.673788][T18994] xt_policy: too many policy elements [ 1543.370155][ T5891] usbhid 4-1:0.0: can't add hid device: -71 [ 1543.413083][ T5891] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1543.493190][ T5891] usb 4-1: USB disconnect, device number 57 [ 1544.216229][T19008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3927'. [ 1548.811839][T19032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3935'. [ 1549.297119][T19038] loop3: detected capacity change from 0 to 512 [ 1549.392882][T19038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1549.489003][T19038] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1549.779613][T19046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3941'. [ 1550.781932][T15417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1551.449825][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.456427][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1562.309440][T19128] loop6: detected capacity change from 0 to 128 [ 1562.416184][T19128] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1562.432929][T19128] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1562.798907][T19135] syz.0.3969 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1564.194433][T19148] loop5: detected capacity change from 0 to 1024 [ 1564.356891][T19148] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (18359!=20869) [ 1564.482993][T19148] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1565.526158][T19148] JBD2: no valid journal superblock found [ 1565.553706][T19148] EXT4-fs (loop5): Could not load journal inode [ 1568.596211][T16094] IPVS: starting estimator thread 0... [ 1568.983523][T19180] IPVS: using max 20 ests per chain, 48000 per kthread [ 1571.807925][T19201] netlink: 'syz.5.3987': attribute type 2 has an invalid length. [ 1571.869788][T19200] Invalid ELF header len 8 [ 1572.793988][ T5892] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1573.099700][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 1573.204938][ T5892] usb 1-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 1573.263427][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.293213][ T5892] usb 1-1: Product: syz [ 1573.298864][ T5892] usb 1-1: Manufacturer: syz [ 1573.333218][ T5892] usb 1-1: SerialNumber: syz [ 1573.360911][ T5892] usb 1-1: config 0 descriptor?? [ 1573.563005][T19211] loop5: detected capacity change from 0 to 1024 [ 1573.721391][ T5892] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 1573.968325][ T5892] usb 1-1: USB disconnect, device number 70 [ 1574.547318][T19218] loop3: detected capacity change from 0 to 2048 [ 1574.764031][T16094] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1575.047438][T19218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1575.088816][T16094] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 1575.129005][T16094] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.183479][T16094] usb 6-1: config 0 has no interface number 0 [ 1575.200310][T16094] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1575.233603][T16094] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1575.275519][T16094] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1575.460284][T16094] usb 6-1: config 0 interface 52 has no altsetting 0 [ 1576.054518][T16094] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1576.064631][T16094] usb 6-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1576.076982][T16094] usb 6-1: Product: syz [ 1576.081395][T16094] usb 6-1: Manufacturer: syz [ 1576.086502][T16094] usb 6-1: SerialNumber: syz [ 1576.094347][T16094] usb 6-1: config 0 descriptor?? [ 1577.129554][T16094] usb 6-1: Can not set alternate setting to 1, error: -71 [ 1577.141414][T16094] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1577.146166][ T5843] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1577.191376][T16094] usb 6-1: USB disconnect, device number 56 [ 1577.559432][ T5843] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1578.535743][T13462] hfsplus: b-tree write err: -5, ino 4 [ 1578.563941][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.673862][ T5843] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1578.705724][ T5843] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1578.729123][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.758965][ T5843] usb 5-1: config 0 descriptor?? [ 1579.117963][T19250] netlink: 'syz.0.4001': attribute type 2 has an invalid length. [ 1579.581856][ T5843] plantronics 0003:047F:FFFF.0012: item fetching failed at offset 14/15 [ 1579.665273][ T5843] plantronics 0003:047F:FFFF.0012: parse failed [ 1579.692806][ T5843] plantronics 0003:047F:FFFF.0012: probe with driver plantronics failed with error -22 [ 1579.905812][T19255] Invalid ELF header len 8 [ 1580.004160][ T5843] usb 5-1: USB disconnect, device number 55 [ 1583.817343][T19286] overlayfs: missing 'lowerdir' [ 1584.216873][T19289] Invalid ELF header len 8 [ 1584.235009][T12529] Bluetooth: hci2: command 0x0406 tx timeout [ 1585.535155][ T5892] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1585.683320][ T5843] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1585.767435][T19304] loop0: detected capacity change from 0 to 1024 [ 1585.777233][T19304] EXT4-fs: Ignoring removed oldalloc option [ 1585.789448][T19304] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1585.801331][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 1585.857492][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1585.910898][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 1585.976844][ T5892] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1585.982344][ T5843] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.988147][ T5892] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1586.014858][ T5892] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1586.084992][ T5892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1586.094557][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.100373][T19304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1586.103373][ T5892] usb 5-1: Product: syz [ 1586.116871][ T5843] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1586.119587][ T5892] usb 5-1: Manufacturer: syz [ 1586.159149][ T5892] usb 5-1: SerialNumber: syz [ 1586.488815][ T5843] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1586.503251][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.556280][ T5843] usb 4-1: Product: syz [ 1586.560560][ T5843] usb 4-1: Manufacturer: syz [ 1586.611893][ T5843] usb 4-1: SerialNumber: syz [ 1586.630740][ T5843] usb 4-1: config 0 descriptor?? [ 1586.713221][ T5892] usb 5-1: selecting invalid altsetting 0 [ 1586.745222][ T5892] usb 5-1: selecting invalid altsetting 0 [ 1586.756313][ T5892] cdc_ncm 5-1:1.0: bind() failure [ 1586.765940][T15654] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1586.819056][ T5892] usb 5-1: selecting invalid altsetting 0 [ 1586.833294][ T5892] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -22 [ 1586.864515][ T5892] usb 5-1: selecting invalid altsetting 0 [ 1586.894138][ T5892] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -22 [ 1586.927964][ T5892] usb 5-1: selecting invalid altsetting 0 [ 1586.933778][ T5892] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 1587.099088][T19325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4025'. [ 1587.471062][ T5930] IPVS: starting estimator thread 0... [ 1587.517489][ T5892] usb 5-1: USB disconnect, device number 56 [ 1587.645006][T19323] IPVS: using max 20 ests per chain, 48000 per kthread [ 1587.729094][T19335] Invalid ELF header len 8 [ 1588.292567][T19333] overlayfs: missing 'lowerdir' [ 1588.419894][ T5843] usb 4-1: USB disconnect, device number 58 [ 1589.297916][T19347] loop0: detected capacity change from 0 to 256 [ 1589.322233][T19347] ======================================================= [ 1589.322233][T19347] WARNING: The mand mount option has been deprecated and [ 1589.322233][T19347] and is ignored by this kernel. Remove the mand [ 1589.322233][T19347] option from the mount to silence this warning. [ 1589.322233][T19347] ======================================================= [ 1589.965259][ T5843] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1590.377430][T19364] loop4: detected capacity change from 0 to 1024 [ 1590.437468][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 1590.450138][ T5843] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 1590.477471][ T5843] usb 4-1: config 0 has no interface number 0 [ 1590.497023][ T5843] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1590.569114][ T5843] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1590.650666][ T5843] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1590.796494][ T5843] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1590.928138][ T5843] usb 4-1: Product: syz [ 1590.954429][ T5843] usb 4-1: Manufacturer: syz [ 1590.965775][ T5843] usb 4-1: SerialNumber: syz [ 1591.101928][ T5843] usb 4-1: config 0 descriptor?? [ 1591.231857][ T5843] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 1591.246547][ T5843] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 1591.260428][ T5843] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 1591.273278][ T5843] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1591.332199][ T5843] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 1591.388577][ T5843] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1592.027017][ T5843] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 1592.117736][T19380] Invalid ELF header len 8 [ 1592.186301][ T5843] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1592.469169][ T5843] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 1592.528018][ T5843] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1592.677616][ T5843] usb 4-1: USB disconnect, device number 59 [ 1592.707210][ T5843] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1592.785243][ T5843] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1592.976401][T19388] overlay: Unknown parameter '@' [ 1593.006795][ T5843] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1593.119422][ T5843] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1593.710746][ T5843] keyspan 4-1:0.107: device disconnected [ 1595.736139][ T5843] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1596.446111][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 1596.471751][ T5843] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1596.511578][ T5843] usb 4-1: config 46 has an invalid interface number: 138 but max is 0 [ 1596.531551][ T5843] usb 4-1: config 46 has no interface number 0 [ 1596.556933][ T5843] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=db.e8 [ 1596.576062][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.599163][ T5843] usb 4-1: Product: syz [ 1596.604176][ T5843] usb 4-1: Manufacturer: syz [ 1596.617365][ T5843] usb 4-1: SerialNumber: syz [ 1597.669470][T19435] overlayfs: missing 'workdir' [ 1597.857636][T19442] loop4: detected capacity change from 0 to 512 [ 1597.953707][T19442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1598.773846][T19442] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1598.936488][ T5843] snd-usb-audio 4-1:46.138: probe with driver snd-usb-audio failed with error -71 [ 1598.957892][ T5843] usb 4-1: USB disconnect, device number 60 [ 1599.364176][T19455] loop0: detected capacity change from 0 to 2048 [ 1599.375003][T15929] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1599.484201][T19455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1601.117617][T19482] overlayfs: missing 'workdir' [ 1602.262637][T19495] loop5: detected capacity change from 0 to 256 [ 1604.107930][T19518] loop4: detected capacity change from 0 to 512 [ 1604.120676][T19520] overlayfs: missing 'workdir' [ 1604.148910][T19518] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 1606.988754][T19548] loop3: detected capacity change from 0 to 2048 [ 1607.054155][T19548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1607.542705][T19548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1607.589391][ T5843] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1607.641647][T19560] loop0: detected capacity change from 0 to 512 [ 1607.747504][ T5843] usb 5-1: device descriptor read/64, error -71 [ 1607.798144][T19560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1607.822239][T19560] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1607.910013][T19560] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 1607.989085][ T5843] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1609.077808][ T5843] usb 5-1: device descriptor read/64, error -71 [ 1609.813519][ T5843] usb usb5-port1: attempt power cycle [ 1610.113606][T19584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4109'. [ 1610.257929][ T5843] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1610.622827][T19586] loop6: detected capacity change from 0 to 16 [ 1610.660808][ T5843] usb 5-1: device descriptor read/8, error -71 [ 1610.686133][T19586] erofs (device loop6): mounted with root inode @ nid 36. [ 1610.932564][T19590] loop4: detected capacity change from 0 to 1024 [ 1610.997151][T19590] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1611.043575][T19590] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1611.159548][T19595] lo speed is unknown, defaulting to 1000 [ 1611.413801][T19596] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1612.285705][T19590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1612.290737][T15654] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1612.896831][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.903322][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.331295][T19590] cgroup: name respecified [ 1613.389368][T19595] netlink: 'syz.5.4114': attribute type 2 has an invalid length. [ 1613.797396][T19605] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1614.462638][T19590] fscrypt (loop4): Error allocating 'cts(cbc(aes))' transform: -4 [ 1614.832797][T15929] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1615.768661][ T5930] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1615.894930][T19626] loop5: detected capacity change from 0 to 256 [ 1615.914055][ T5930] usb 1-1: device descriptor read/64, error -71 [ 1615.965834][T19628] loop4: detected capacity change from 0 to 512 [ 1615.973809][T19628] EXT4-fs: Ignoring removed nobh option [ 1616.038495][T19628] EXT4-fs: Ignoring removed mblk_io_submit option [ 1616.043941][T19626] exFAT-fs (loop5): start_clu is invalid cluster(0x400) [ 1616.085037][T19628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1616.198968][ T5930] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 1616.368449][ T5930] usb 1-1: device descriptor read/64, error -71 [ 1616.640887][ T5930] usb usb1-port1: attempt power cycle [ 1616.717927][T19641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4128'. [ 1616.826192][T19643] lo speed is unknown, defaulting to 1000 [ 1616.919092][T19643] netlink: 'syz.6.4129': attribute type 2 has an invalid length. [ 1617.008551][ T5930] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 1617.045388][ T5930] usb 1-1: device descriptor read/8, error -71 [ 1617.081616][T15929] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1617.298613][ T5930] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1617.347031][ T5930] usb 1-1: device descriptor read/8, error -71 [ 1617.461618][T19649] loop3: detected capacity change from 0 to 8192 [ 1617.481490][ T5930] usb usb1-port1: unable to enumerate USB device [ 1617.624586][T19656] netlink: 'syz.5.4127': attribute type 2 has an invalid length. [ 1618.194334][T19659] loop4: detected capacity change from 0 to 128 [ 1618.241250][T19659] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1618.348520][ T29] audit: type=1804 audit(1738949394.924:72): pid=19659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4135" name="/newroot/203/file0/bus" dev="loop4" ino=118 res=1 errno=0 [ 1619.044858][T13462] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1619.759357][ T29] audit: type=1326 audit(1738949396.264:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19677 comm="syz.4.4139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15fef8cde9 code=0x0 [ 1619.812295][T19683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4140'. [ 1620.268888][T15856] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1620.400616][T19690] lo speed is unknown, defaulting to 1000 [ 1620.478485][T19691] netlink: 'syz.3.4143': attribute type 2 has an invalid length. [ 1620.503413][T15856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1620.557529][T15856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1621.139048][T15856] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1621.182694][T15856] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1621.227834][T15856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.282147][T15856] usb 6-1: config 0 descriptor?? [ 1622.464637][T15856] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1622.532755][T15856] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1622.589289][T15856] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1622.662226][T15856] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1622.701042][T15856] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1622.708531][T15856] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1622.765076][T15856] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1622.797586][T15856] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1622.817220][T15856] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1622.833138][T15856] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1622.902725][T15856] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 1623.000151][T15856] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1623.831666][T15856] usb 6-1: USB disconnect, device number 57 [ 1624.293753][T19720] netlink: 'syz.3.4146': attribute type 2 has an invalid length. [ 1624.308372][ T5844] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1624.482791][T19722] geneve2: entered promiscuous mode [ 1624.489417][T19722] geneve2: entered allmulticast mode [ 1625.149766][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 1625.310835][T19725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4153'. [ 1625.315752][ T5844] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1625.904174][ T5844] usb 5-1: config 0 has no interface number 0 [ 1625.954251][ T5844] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1625.973237][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.997101][ T5844] usb 5-1: Product: syz [ 1626.005826][ T5844] usb 5-1: Manufacturer: syz [ 1626.013558][ T5844] usb 5-1: SerialNumber: syz [ 1626.022933][ T5844] usb 5-1: config 0 descriptor?? [ 1626.116090][ T5844] usb 5-1: can't set config #0, error -71 [ 1626.163274][ T5844] usb 5-1: USB disconnect, device number 61 [ 1626.180816][ T9] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1626.400179][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1626.867370][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1626.867409][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1626.867456][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1626.867481][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.891417][ T9] usb 6-1: config 0 descriptor?? [ 1626.906686][ T9] hub 6-1:0.0: USB hub found [ 1627.104982][ T9] hub 6-1:0.0: 1 port detected [ 1627.552636][ T9] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1627.559059][ T9] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1628.491568][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 1628.522273][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1628.629961][ T9] usb 6-1: USB disconnect, device number 58 [ 1628.774770][T19754] loop3: detected capacity change from 0 to 128 [ 1628.942775][T19754] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1629.174487][T19754] ext4 filesystem being mounted at /265/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1630.231869][T19728] syz.6.4154 (19728): drop_caches: 2 [ 1630.537285][T15417] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1630.567848][T19773] loop6: detected capacity change from 0 to 512 [ 1630.647934][T19773] EXT4-fs (loop6): blocks per group (34) and clusters per group (32768) inconsistent [ 1632.667682][T19799] loop6: detected capacity change from 0 to 8 [ 1632.951792][T19803] netlink: 'syz.5.4168': attribute type 2 has an invalid length. [ 1634.143112][T19805] syz.0.4179 (19805): drop_caches: 2 [ 1634.469590][T19810] loop6: detected capacity change from 0 to 512 [ 1634.685610][T19810] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4181'. [ 1635.794271][T19820] loop0: detected capacity change from 0 to 764 [ 1636.356581][T19829] loop6: detected capacity change from 0 to 512 [ 1636.419009][T19829] EXT4-fs (loop6): unable to read superblock [ 1636.872910][T19836] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1637.791280][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1638.812727][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1639.054111][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1639.070594][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.111290][ T9] usb 4-1: Product: syz [ 1639.161202][ T9] usb 4-1: Manufacturer: syz [ 1639.297830][ T9] usb 4-1: SerialNumber: syz [ 1639.506939][ T9] usb 4-1: config 0 descriptor?? [ 1639.804239][T19852] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4196'. [ 1639.868615][ T9] usb 4-1: can't set config #0, error -71 [ 1639.896980][ T9] usb 4-1: USB disconnect, device number 61 [ 1641.020063][T19866] syz.3.4202 (19866): drop_caches: 2 [ 1642.698083][ T5844] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1642.914003][ T5844] usb 4-1: Using ep0 maxpacket: 8 [ 1642.929057][ T5844] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1642.966751][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.990814][ T5844] usb 4-1: Product: syz [ 1643.021285][ T5844] usb 4-1: Manufacturer: syz [ 1643.041814][ T5844] usb 4-1: SerialNumber: syz [ 1643.070702][ T5844] usb 4-1: config 0 descriptor?? [ 1643.871813][ T5844] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1643.984491][T19898] syz.4.4215 (19898): drop_caches: 2 [ 1644.054262][ T5844] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1644.890486][T19906] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4217'. [ 1645.410839][ T5844] usb 4-1: USB disconnect, device number 62 [ 1648.727346][T19933] loop4: detected capacity change from 0 to 256 [ 1649.063008][ T5844] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1649.071842][T19933] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1649.871599][T19933] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1649.950298][ T5844] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 164, changing to 11 [ 1650.011886][ T5844] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1650.025757][T19933] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1650.281679][ T5844] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1650.425255][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.825796][ T5844] usb 7-1: Product: syz [ 1650.833360][ T5844] usb 7-1: Manufacturer: syz [ 1650.838014][ T5844] usb 7-1: SerialNumber: syz [ 1651.153971][ T5844] cdc_ncm 7-1:1.0: bind() failure [ 1651.169581][ T5844] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1651.224299][ T5844] cdc_ncm 7-1:1.1: bind() failure [ 1651.294986][ T5844] usb 7-1: USB disconnect, device number 41 [ 1654.158420][T19976] loop0: detected capacity change from 0 to 512 [ 1654.281687][T19976] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1654.374494][T19976] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4240: invalid indirect mapped block 2683928664 (level 1) [ 1654.487494][T19976] EXT4-fs (loop0): Remounting filesystem read-only [ 1654.539318][T19976] EXT4-fs (loop0): 1 truncate cleaned up [ 1654.566836][T19976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1654.734664][T19983] loop5: detected capacity change from 0 to 2048 [ 1654.814497][T19988] loop3: detected capacity change from 0 to 128 [ 1654.856658][T19988] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1654.876580][T15654] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1654.888983][T19983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1654.890004][T19988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1654.979060][ T29] audit: type=1800 audit(1738949431.540:74): pid=19983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4243" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1655.490722][T19983] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1655.542586][T19983] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 1655.596034][T19983] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1655.596034][T19983] [ 1655.609728][T19983] EXT4-fs (loop5): Total free blocks count 0 [ 1655.620969][T19988] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1655.657627][T19983] EXT4-fs (loop5): Free/Dirty block details [ 1655.715444][T19983] EXT4-fs (loop5): free_blocks=2415919504 [ 1655.803472][T19983] EXT4-fs (loop5): dirty_blocks=16 [ 1655.850862][T19983] EXT4-fs (loop5): Block reservation details [ 1655.909714][T19983] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1655.933766][ T29] audit: type=1800 audit(1738949432.510:75): pid=19984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4243" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1656.109187][T13463] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1656.214314][T19997] loop3: detected capacity change from 0 to 128 [ 1656.903553][ T5844] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1657.974534][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1657.984629][ T5844] usb 4-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 1658.008876][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.295841][ T5844] usb 4-1: config 0 descriptor?? [ 1658.316163][T20014] loop4: detected capacity change from 0 to 8 [ 1658.375622][T20014] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1658.455389][T20014] SQUASHFS error: Failed to read block 0x91: -5 [ 1658.462104][T20014] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1658.593600][T20014] SQUASHFS error: Unable to read inode 0x11f [ 1658.603816][ T5891] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1658.822801][ T5844] wacom 0003:056A:00DA.0014: Unknown device_type for 'HID 056a:00da'. Assuming pen. [ 1658.834069][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 1658.860944][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1658.871598][ T5844] wacom 0003:056A:00DA.0014: hidraw0: USB HID v0.03 Device [HID 056a:00da] on usb-dummy_hcd.3-1/input0 [ 1658.926246][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1659.002852][ T5891] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1659.018949][ T5891] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1659.031520][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.062134][ T5891] usb 6-1: config 0 descriptor?? [ 1659.078658][ T5844] input: Wacom Bamboo 2FG 4x5 SE Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00DA.0014/input/input74 [ 1659.163748][ T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1659.212506][ T5844] usb 4-1: USB disconnect, device number 63 [ 1659.354413][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1659.370016][ T9] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1659.389057][ T9] usb 5-1: config 0 has an invalid descriptor of length 205, skipping remainder of the config [ 1659.414251][ T9] usb 5-1: config 0 has no interface number 0 [ 1659.428999][ T9] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1659.443540][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.476126][ T9] usb 5-1: Product: syz [ 1659.480409][ T9] usb 5-1: Manufacturer: syz [ 1659.500192][ T9] usb 5-1: SerialNumber: syz [ 1659.520009][ T5891] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1659.533538][ T5891] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1659.540822][ T5891] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1659.566191][ T5891] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1659.579310][ T9] usb 5-1: config 0 descriptor?? [ 1659.598250][ T9] usb 5-1: Found UVC 0.00 device syz (046c:14e8) [ 1659.605138][ T5891] microsoft 0003:045E:07DA.0015: No inputs registered, leaving [ 1659.619969][ T5891] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1659.630861][ T9] usb 5-1: No valid video chain found. [ 1659.666246][ T5891] microsoft 0003:045E:07DA.0015: no inputs found [ 1659.672743][ T5891] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway [ 1659.731227][ T5891] usb 6-1: USB disconnect, device number 59 [ 1659.861905][ T9] usb 5-1: USB disconnect, device number 62 [ 1663.145448][T20052] loop3: detected capacity change from 0 to 1024 [ 1663.504217][ T5843] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1664.044736][ T5843] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1664.071260][ T5843] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1664.094517][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.103132][ T5843] usb 1-1: Product: syz [ 1664.373506][ T5843] usb 1-1: Manufacturer: syz [ 1664.380877][ T5843] usb 1-1: SerialNumber: syz [ 1664.635268][ T29] audit: type=1800 audit(1738949441.229:76): pid=20052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4266" name="bus" dev="loop3" ino=1 res=0 errno=0 [ 1664.734276][T20053] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1665.202109][T20070] syz.6.4269 (20070): drop_caches: 2 [ 1665.444010][T20053] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1665.657090][ T5843] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1665.673883][ T5843] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1665.701149][ T5843] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1666.010314][ T5843] cdc_ncm 1-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1666.064190][ T5843] usb 1-1: USB disconnect, device number 75 [ 1666.081854][ T5843] cdc_ncm 1-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 1666.599776][T20086] lo speed is unknown, defaulting to 1000 [ 1666.985557][T20086] veth1_vlan: left promiscuous mode [ 1667.501013][T20086] netlink: 'syz.6.4275': attribute type 2 has an invalid length. [ 1669.249593][T20105] syz.5.4282 (20105): drop_caches: 2 [ 1670.325390][T20111] loop5: detected capacity change from 0 to 256 [ 1670.332916][T20111] exfat: Invalid uid '0x00000000ffffffff' [ 1670.545329][T20114] loop3: detected capacity change from 0 to 256 [ 1670.581331][T20114] vfat: Bad value for 'fmask' [ 1671.196955][T15856] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1671.252967][T20125] netlink: 'syz.4.4288': attribute type 2 has an invalid length. [ 1671.365822][T20121] lo speed is unknown, defaulting to 1000 [ 1671.455179][T15856] usb 4-1: Using ep0 maxpacket: 32 [ 1671.498803][T15856] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1671.568310][T15856] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1671.745223][T15856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.753321][T15856] usb 4-1: Product: syz [ 1671.786017][T15856] usb 4-1: Manufacturer: syz [ 1671.790691][T15856] usb 4-1: SerialNumber: syz [ 1671.867286][T15856] usb 4-1: config 0 descriptor?? [ 1671.873157][T20119] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1671.918200][T15856] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1672.963781][ T5930] usb 4-1: USB disconnect, device number 64 [ 1673.497152][T19215] udevd[19215]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1675.171296][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1675.196180][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1677.122781][T20149] syz.3.4295 (20149): drop_caches: 2 [ 1681.306371][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1681.486962][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1681.494940][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1681.556806][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1681.648415][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1681.676417][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.725259][ T9] hub 5-1:4.0: USB hub found [ 1682.300708][ T9] hub 5-1:4.0: 30 ports detected [ 1682.306372][ T9] usb 5-1: selecting invalid altsetting 1 [ 1682.422232][T20184] loop6: detected capacity change from 0 to 256 [ 1682.466680][ T9] hub 5-1:4.0: Using single TT (err -22) [ 1682.496449][ T9] hub 5-1:4.0: insufficient power available to use all downstream ports [ 1682.733321][ T9] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 1682.754115][ T9] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 1682.918227][ T9] usb 5-1: USB disconnect, device number 63 [ 1683.761220][ T5844] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1683.937844][ T5844] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 1683.966613][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1683.978763][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1684.011544][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1684.039011][ T5844] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1684.108321][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.137755][T20197] syz.4.4309 (20197): drop_caches: 2 [ 1684.164934][ T5844] usb 4-1: config 0 descriptor?? [ 1684.171139][T20186] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1684.308370][T20199] loop4: detected capacity change from 0 to 512 [ 1684.346684][T20199] EXT4-fs: Mount option(s) incompatible with ext2 [ 1684.439592][T20199] loop4: detected capacity change from 0 to 1024 [ 1684.528925][T15999] bond0 (unregistering): (slave team0): Releasing backup interface [ 1684.541271][T15999] bond0 (unregistering): Released all slaves [ 1684.803403][ T5844] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 1684.826616][T20190] syz_tun: entered allmulticast mode [ 1685.177497][ T5844] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 1685.210784][ T5844] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1685.267067][ T5844] usb 4-1: USB disconnect, device number 65 [ 1685.880820][T20214] netlink: 'syz.0.4313': attribute type 2 has an invalid length. [ 1687.847327][ T5930] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1688.155344][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1688.211453][ T5930] usb 6-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47 [ 1688.239264][T20234] syz.0.4320 (20234): drop_caches: 2 [ 1688.291721][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.347008][ T5930] usb 6-1: Product: syz [ 1688.363664][ T5930] usb 6-1: Manufacturer: syz [ 1688.398382][ T5930] usb 6-1: SerialNumber: syz [ 1688.459841][ T5930] usb 6-1: config 0 descriptor?? [ 1688.514454][T20231] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1688.539553][T15999] hsr_slave_0: left promiscuous mode [ 1688.554136][T15999] hsr_slave_1: left promiscuous mode [ 1688.662705][T15999] veth1_macvtap: left promiscuous mode [ 1688.681608][T15999] veth0_macvtap: left promiscuous mode [ 1688.711578][T15999] veth1_vlan: left promiscuous mode [ 1688.750362][T15999] veth0_vlan: left promiscuous mode [ 1688.774283][ T5844] usb 6-1: USB disconnect, device number 60 [ 1689.149665][T20248] netlink: 'syz.4.4324': attribute type 2 has an invalid length. [ 1690.387819][T20253] loop5: detected capacity change from 0 to 2048 [ 1690.464317][T20253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1690.526497][T20253] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1690.655170][T20253] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4326: bg 0: block 345: padding at end of block bitmap is not set [ 1690.747999][T20253] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 1690.792703][T20253] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1690.792703][T20253] [ 1691.020378][T17322] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1692.787646][T17956] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1692.969311][T17956] usb 4-1: Using ep0 maxpacket: 8 [ 1692.993425][T17956] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1693.037641][T17956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.045709][T17956] usb 4-1: Product: syz [ 1693.128247][T17956] usb 4-1: Manufacturer: syz [ 1693.137477][T17956] usb 4-1: SerialNumber: syz [ 1693.152627][T17956] usb 4-1: config 0 descriptor?? [ 1693.302018][T20239] syzkaller0: entered promiscuous mode [ 1693.329653][T20239] syzkaller0: entered allmulticast mode [ 1693.498569][T17956] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1693.914799][T20297] syz.4.4337: attempt to access beyond end of device [ 1693.914799][T20297] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1693.929006][T20297] gfs2: error -5 reading superblock [ 1694.083963][T17956] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1695.800782][T15999] IPVS: stop unused estimator thread 0... [ 1695.976574][ T5843] usb 4-1: USB disconnect, device number 66 [ 1695.989231][T20315] loop6: detected capacity change from 0 to 2048 [ 1696.430741][T20315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1698.071628][T15999] bridge_slave_1: left allmulticast mode [ 1698.396242][T15999] bridge_slave_1: left promiscuous mode [ 1698.755459][ T5843] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1699.271372][T15999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.514148][T15999] bridge_slave_0: left allmulticast mode [ 1699.564650][T15999] bridge_slave_0: left promiscuous mode [ 1699.624803][T15999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.689873][ T5843] usb 4-1: device descriptor read/64, error -71 [ 1700.881591][T15999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1700.895750][T15999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1700.909663][T15999] bond0 (unregistering): (slave team0): Releasing backup interface [ 1700.923347][T15999] bond0 (unregistering): Released all slaves [ 1700.948843][ T5843] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1701.148592][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 1701.191931][ T5843] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1701.238593][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.274856][ T5843] usb 4-1: Product: syz [ 1701.287790][ T5843] usb 4-1: Manufacturer: syz [ 1701.308515][ T5843] usb 4-1: SerialNumber: syz [ 1701.335245][ T5843] usb 4-1: config 0 descriptor?? [ 1701.705766][ T5843] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1703.209201][ T5843] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1703.597881][T15999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1703.620230][T15999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1703.780958][T20378] syz.4.4363: attempt to access beyond end of device [ 1703.780958][T20378] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1703.897300][T15999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1703.913333][T15999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1703.929431][T20378] exFAT-fs (nbd4): unable to read boot sector [ 1703.976059][T20378] exFAT-fs (nbd4): failed to read boot sector [ 1703.992382][T15999] veth1_macvtap: left promiscuous mode [ 1703.998003][T15999] veth0_macvtap: left promiscuous mode [ 1704.006286][T15999] veth1_vlan: left promiscuous mode [ 1704.009670][T20378] exFAT-fs (nbd4): failed to recognize exfat type [ 1704.018980][T15999] veth0_vlan: left promiscuous mode [ 1704.299472][T20279] usb 4-1: USB disconnect, device number 68 [ 1705.753137][T20393] loop4: detected capacity change from 0 to 128 [ 1705.827022][T20393] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1705.858108][T20393] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1705.881533][T15999] team0 (unregistering): Port device team_slave_1 removed [ 1705.937656][T15929] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1705.982433][T15999] team0 (unregistering): Port device team_slave_0 removed [ 1706.309491][T20279] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1706.482315][T20279] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1706.507397][T20279] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1706.527758][T20279] usb 5-1: config 1 has no interface number 1 [ 1706.536649][T20279] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1706.563970][T20279] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 1706.585959][T20279] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1706.595435][T20279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.604956][T20279] usb 5-1: Product: syz [ 1706.612908][T20279] usb 5-1: Manufacturer: syz [ 1706.617547][T20279] usb 5-1: SerialNumber: syz [ 1706.865178][T20279] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1706.923025][T20279] usb 5-1: USB disconnect, device number 64 [ 1707.373894][T19256] udevd[19256]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1709.368490][T15999] IPVS: stop unused estimator thread 0... [ 1709.580589][ T5930] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1709.739908][ T5930] usb 6-1: Using ep0 maxpacket: 8 [ 1709.796757][ T5930] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1709.857172][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.896431][ T5930] usb 6-1: Product: syz [ 1709.909597][ T5930] usb 6-1: Manufacturer: syz [ 1709.933228][ T5930] usb 6-1: SerialNumber: syz [ 1709.942285][T20424] lo speed is unknown, defaulting to 1000 [ 1709.942618][T20427] netlink: 'syz.0.4381': attribute type 2 has an invalid length. [ 1709.966113][ T5930] usb 6-1: config 0 descriptor?? [ 1710.223886][ T5930] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1710.382390][T20437] loop4: detected capacity change from 0 to 1024 [ 1710.417082][T20437] EXT4-fs: Ignoring removed i_version option [ 1710.480145][T20437] EXT4-fs: Ignoring removed bh option [ 1710.559245][T20437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1710.891819][ T5930] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1710.971219][T15929] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1712.078446][T20460] syz.3.4391: attempt to access beyond end of device [ 1712.078446][T20460] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1712.091808][T20460] exFAT-fs (nbd3): unable to read boot sector [ 1712.097973][T20460] exFAT-fs (nbd3): failed to read boot sector [ 1712.104215][T20460] exFAT-fs (nbd3): failed to recognize exfat type [ 1713.021144][T15106] usb 6-1: USB disconnect, device number 61 [ 1713.162197][T20466] loop5: detected capacity change from 0 to 8 [ 1713.280086][T20466] SQUASHFS error: Failed to read block 0x2d7: -5 [ 1713.309111][T20466] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1714.580290][ T5930] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1714.780085][ T5930] usb 1-1: Using ep0 maxpacket: 32 [ 1714.802534][ T5930] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1714.840002][ T5930] usb 1-1: config 0 has no interface number 0 [ 1714.862066][ T5930] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1714.889002][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.905628][ T5930] usb 1-1: Product: syz [ 1714.909860][ T5930] usb 1-1: Manufacturer: syz [ 1714.930119][ T5930] usb 1-1: SerialNumber: syz [ 1714.952488][ T5930] usb 1-1: config 0 descriptor?? [ 1714.961171][ T5930] smsc95xx v2.0.0 [ 1715.376051][ T5930] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1715.400058][ T5930] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1716.213201][T20499] syz.4.4404: attempt to access beyond end of device [ 1716.213201][T20499] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1716.227063][T20499] exFAT-fs (nbd4): unable to read boot sector [ 1716.233289][T20499] exFAT-fs (nbd4): failed to read boot sector [ 1716.239471][T20499] exFAT-fs (nbd4): failed to recognize exfat type [ 1716.545259][ T5930] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1716.677348][ T5930] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1716.860630][ T5930] usb 1-1: USB disconnect, device number 76 [ 1717.635127][T20514] loop4: detected capacity change from 0 to 2048 [ 1717.744229][T20514] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1718.297033][T20525] lo speed is unknown, defaulting to 1000 [ 1718.628819][T20528] netlink: 'syz.5.4411': attribute type 2 has an invalid length. [ 1721.284894][T20550] loop0: detected capacity change from 0 to 2048 [ 1721.379154][T20550] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1721.416396][T20550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1723.391087][ T5930] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 1723.550303][T20568] loop5: detected capacity change from 0 to 2048 [ 1723.563561][ T5930] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1723.584993][ T5930] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1723.616091][T20568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1723.621178][ T5930] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1723.669035][ T5930] usb 1-1: string descriptor 0 read error: -22 [ 1723.685238][ T5930] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.40 [ 1723.723975][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.408538][T20564] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1725.845092][T20582] lo speed is unknown, defaulting to 1000 [ 1726.031648][ T5843] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1726.216636][ T5843] usb 6-1: config 0 has an invalid interface number: 216 but max is 0 [ 1726.235339][ T5843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.301404][ T5843] usb 6-1: config 0 has no interface number 0 [ 1726.313861][ T5930] usbhid 1-1:1.0: can't add hid device: -71 [ 1726.331630][ T5843] usb 6-1: config 0 interface 216 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1726.341492][ T5930] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1726.376276][ T5843] usb 6-1: config 0 interface 216 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 1726.413568][ T5930] usb 1-1: USB disconnect, device number 77 [ 1726.446308][ T5843] usb 6-1: config 0 interface 216 has no altsetting 0 [ 1726.484756][ T5843] usb 6-1: Dual-Role OTG device on HNP port [ 1726.497833][T20590] loop6: detected capacity change from 0 to 2048 [ 1726.522585][ T5843] usb 6-1: New USB device found, idVendor=0421, idProduct=0445, bcdDevice=a7.11 [ 1726.581466][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.589519][ T5843] usb 6-1: Product: syz [ 1726.608295][ T5843] usb 6-1: Manufacturer: syz [ 1726.625019][ T5843] usb 6-1: SerialNumber: syz [ 1726.652496][ T5843] usb 6-1: config 0 descriptor?? [ 1726.667957][T20590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1726.798121][T20600] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1726.876148][ T5843] hub 6-1:0.216: bad descriptor, ignoring hub [ 1726.882907][T20600] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 68 with error 28 [ 1726.897959][ T5843] hub 6-1:0.216: probe with driver hub failed with error -5 [ 1726.922355][ T5843] usb 6-1: bad CDC descriptors [ 1726.942787][T20600] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1726.942787][T20600] [ 1726.977271][T20600] EXT4-fs (loop6): Total free blocks count 0 [ 1726.982612][ T5843] usb 6-1: USB disconnect, device number 62 [ 1726.991494][T20600] EXT4-fs (loop6): Free/Dirty block details [ 1727.007745][T20600] EXT4-fs (loop6): free_blocks=2415919104 [ 1727.050288][T20600] EXT4-fs (loop6): dirty_blocks=96 [ 1727.058230][T20600] EXT4-fs (loop6): Block reservation details [ 1727.086752][T20600] EXT4-fs (loop6): i_reserved_data_blocks=6 [ 1727.236753][T15999] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 1728.486814][T20611] loop6: detected capacity change from 0 to 2048 [ 1728.622064][T20611] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1729.820800][T20622] lo speed is unknown, defaulting to 1000 [ 1729.843590][T20623] netlink: 'syz.0.4443': attribute type 2 has an invalid length. [ 1730.813840][T12529] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1730.825572][T12529] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1730.834864][T12529] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1730.845971][T12529] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1730.877938][T12529] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1730.890189][T20643] loop0: detected capacity change from 0 to 128 [ 1730.898296][T12529] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1730.980409][T20643] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1731.226279][ T29] audit: type=1800 audit(1738949507.801:77): pid=20632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4447" name="bus" dev="loop0" ino=121 res=0 errno=0 [ 1731.277623][T20640] lo speed is unknown, defaulting to 1000 [ 1731.731103][T20660] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4453'. [ 1731.749058][T20640] chnl_net:caif_netlink_parms(): no params data found [ 1731.908546][ T9819] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1731.997872][T20663] loop4: detected capacity change from 0 to 2048 [ 1732.030767][T20663] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1732.048323][T20663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1732.404249][T20640] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.430246][T20640] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.451428][T20640] bridge_slave_0: entered allmulticast mode [ 1732.464750][T20640] bridge_slave_0: entered promiscuous mode [ 1732.494336][T20640] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.501496][T20640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.521370][T20640] bridge_slave_1: entered allmulticast mode [ 1732.559938][T20640] bridge_slave_1: entered promiscuous mode [ 1732.680216][T20671] netlink: 'syz.6.4456': attribute type 2 has an invalid length. [ 1732.760413][T20674] lo speed is unknown, defaulting to 1000 [ 1732.771880][T20640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1732.885684][T20640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1732.972640][T15658] Bluetooth: hci0: command tx timeout [ 1733.229412][T20640] team0: Port device team_slave_0 added [ 1733.333674][T20640] team0: Port device team_slave_1 added [ 1733.401103][T20640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1733.416307][T20640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1733.483053][T20640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1733.553615][T20640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1733.568150][T20640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1733.650190][T20640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1733.836211][T20640] hsr_slave_0: entered promiscuous mode [ 1733.844262][T20640] hsr_slave_1: entered promiscuous mode [ 1733.850791][T20640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1733.861930][T20640] Cannot create hsr debugfs directory [ 1733.872425][ T5930] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1734.042281][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 1734.056647][ T5930] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1734.122021][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.168382][ T5930] usb 5-1: Product: syz [ 1734.187323][ T5930] usb 5-1: Manufacturer: syz [ 1734.191962][ T5930] usb 5-1: SerialNumber: syz [ 1734.335433][ T5930] usb 5-1: config 0 descriptor?? [ 1734.390640][T20701] loop5: detected capacity change from 0 to 128 [ 1734.457287][T20701] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1734.510731][T20701] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1734.554917][ T5930] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1734.577533][T20640] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1734.626107][T20701] EXT4-fs (loop5): shut down requested (2) [ 1734.664825][T20640] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1734.725323][T20640] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1734.794011][T20640] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1735.024791][T17322] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1735.055047][T15658] Bluetooth: hci0: command tx timeout [ 1735.227934][T20640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1735.325411][T20640] 8021q: adding VLAN 0 to HW filter on device team0 [ 1735.427192][T20708] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4468'. [ 1735.451751][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.459034][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1735.534216][T15999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1735.541416][T15999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1735.779512][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.787850][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.850404][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1735.862764][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1735.870349][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1735.890781][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1735.899457][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1735.911624][ T5930] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1735.962964][ T5930] usb 5-1: USB disconnect, device number 65 [ 1737.086150][T20640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1737.133089][T15658] Bluetooth: hci0: command tx timeout [ 1737.357011][T20721] loop4: detected capacity change from 0 to 2048 [ 1737.415257][T20721] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1737.463650][T20721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1738.478796][T20640] veth0_vlan: entered promiscuous mode [ 1738.615270][T20640] veth1_vlan: entered promiscuous mode [ 1738.785595][T20640] veth0_macvtap: entered promiscuous mode [ 1738.824390][T20640] veth1_macvtap: entered promiscuous mode [ 1738.890645][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.923052][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.951743][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.968678][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.999426][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1739.030476][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.071635][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1739.213212][T15658] Bluetooth: hci0: command tx timeout [ 1739.325488][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.345271][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1739.369792][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.390629][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1739.412751][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.442917][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1739.483227][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.526201][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1739.548282][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.580563][T20640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1739.617548][T20745] lo: entered allmulticast mode [ 1739.626275][T20745] lo: left allmulticast mode [ 1739.645182][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.677131][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.728458][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.756727][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.773278][T17956] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1739.793671][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.814159][T20753] loop6: detected capacity change from 0 to 2048 [ 1739.832219][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.859303][T20753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1739.861946][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.899558][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.927584][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.953920][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.979880][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1740.010292][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1740.143016][T17956] usb 6-1: Using ep0 maxpacket: 8 [ 1740.143747][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1740.154032][T17956] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1740.169524][T17956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.170777][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1740.400989][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1740.593545][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1740.696989][T20640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1740.805475][T20640] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.843173][T20640] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.876393][T20640] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.911034][T20640] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.917959][T20753] 9pnet: Could not find request transport: f0x0000000000000007 [ 1740.927535][T17956] usb 6-1: Product: syz [ 1740.931726][T17956] usb 6-1: Manufacturer: syz [ 1740.943113][T17956] usb 6-1: SerialNumber: syz [ 1740.950759][T17956] usb 6-1: config 0 descriptor?? [ 1741.198112][T17956] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1741.397324][T13556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1741.444362][T13556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1741.492481][T20767] loop0: detected capacity change from 0 to 1024 [ 1741.572968][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1741.621777][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1741.665305][T20770] loop4: detected capacity change from 0 to 512 [ 1741.836566][T20770] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1741.886550][T20770] EXT4-fs (loop4): 1 truncate cleaned up [ 1741.937091][T20770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1742.219453][ T4424] hfsplus: b-tree write err: -5, ino 4 [ 1743.432608][T15929] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1743.667183][T17956] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1743.751552][ T11] bridge_slave_1: left allmulticast mode [ 1743.767045][ T11] bridge_slave_1: left promiscuous mode [ 1743.772934][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.793668][T17956] usb 6-1: USB disconnect, device number 63 [ 1743.926148][ T11] bridge_slave_0: left allmulticast mode [ 1743.931853][ T11] bridge_slave_0: left promiscuous mode [ 1743.956571][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.999528][T20786] loop0: detected capacity change from 0 to 2048 [ 1744.119096][T20786] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1745.625077][T20815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4499'. [ 1747.644364][ T5892] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1747.814305][ T5892] usb 8-1: Using ep0 maxpacket: 16 [ 1747.823394][ T5892] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1747.867090][ T5892] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1747.907866][ T5892] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1747.960609][ T5892] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1747.984104][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.013311][ T5892] usb 8-1: config 0 descriptor?? [ 1749.147666][ T11] bond0 (unregistering): left promiscuous mode [ 1749.176383][ T11] bond_slave_0: left promiscuous mode [ 1749.193828][ T11] bond_slave_1: left promiscuous mode [ 1749.211909][ T11] team0: left promiscuous mode [ 1749.220126][ T11] team_slave_0: left promiscuous mode [ 1749.241217][ T11] team_slave_1: left promiscuous mode [ 1749.367288][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1749.385193][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1749.432810][ T11] bond0 (unregistering): (slave team0): Releasing backup interface [ 1749.443349][ T11] bond0 (unregistering): Released all slaves [ 1749.487133][T20787] lo: entered allmulticast mode [ 1749.514751][T20787] lo: left allmulticast mode [ 1749.574827][ T5892] usbhid 8-1:0.0: can't add hid device: -71 [ 1749.614438][ T5892] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1749.638836][ T11] Tq€: left promiscuous mode [ 1749.673765][ T5892] usb 8-1: USB disconnect, device number 2 [ 1752.450527][T20866] loop5: detected capacity change from 0 to 128 [ 1752.526437][T20866] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1752.609291][T20866] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1752.637161][T20860] loop6: detected capacity change from 0 to 4096 [ 1752.657232][ T11] hsr_slave_0: left promiscuous mode [ 1752.865912][ T5892] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1752.876870][T20871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4516'. [ 1753.008365][ T11] hsr_slave_1: left promiscuous mode [ 1753.016062][T20860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1753.063189][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1753.098747][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1753.118235][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1753.130433][T17322] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1753.134498][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1753.166369][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1753.181033][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1753.188742][ T5892] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1753.234694][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.257551][T18347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1753.289922][ T5892] usb 5-1: config 0 descriptor?? [ 1753.303993][ T11] veth1_macvtap: left promiscuous mode [ 1753.387283][ T11] veth0_macvtap: left promiscuous mode [ 1753.393124][ T11] veth1_vlan: left promiscuous mode [ 1753.435038][ T11] veth0_vlan: left promiscuous mode [ 1753.738696][ T5892] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 1753.816789][ T5892] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1753.962402][ T5892] usb 5-1: USB disconnect, device number 66 [ 1754.352287][ T5843] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1755.071434][T20897] loop4: detected capacity change from 0 to 2048 [ 1755.140580][T20897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1755.269107][ T5843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1755.293856][ T5843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1755.392633][ T5843] usb 8-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1755.415143][ T5843] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1755.981009][ T5843] usb 8-1: Manufacturer: syz [ 1756.012114][T20900] syz.6.4524 (20900): drop_caches: 2 [ 1756.069608][ T5843] usb 8-1: config 0 descriptor?? [ 1756.770681][ T5843] usbhid 8-1:0.0: can't add hid device: -71 [ 1756.783402][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1756.789680][ T5843] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1756.873067][ T5843] usb 8-1: USB disconnect, device number 3 [ 1757.102351][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1758.614986][T20921] loop7: detected capacity change from 0 to 16 [ 1758.685665][T20921] erofs (device loop7): mounted with root inode @ nid 36. [ 1758.704757][T20917] erofs (device loop7): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 1758.715976][T20917] erofs (device loop7): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 1758.726473][T20917] erofs (device loop7): read error -117 @ 72 of nid 36 [ 1759.665749][T20932] lo speed is unknown, defaulting to 1000 [ 1759.714565][T20934] netlink: 'syz.6.4537': attribute type 2 has an invalid length. [ 1760.146555][ T29] audit: type=1326 audit(1738949536.728:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20940 comm="syz.5.4540" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f167bf8cde9 code=0x0 [ 1760.225495][ T8] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1760.443063][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1760.466515][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1760.541159][ T8] usb 8-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1760.608477][ T8] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1761.138828][T20951] loop5: detected capacity change from 0 to 8 [ 1761.601448][T20951] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1761.609602][T20951] SQUASHFS error: Failed to read block 0x9b: -5 [ 1761.615951][T20951] SQUASHFS error: Unable to read metadata cache entry [99] [ 1761.623210][T20951] SQUASHFS error: Unable to read inode 0x127 [ 1761.983543][ T8] usb 8-1: Manufacturer: syz [ 1762.265438][ T8] usb 8-1: config 0 descriptor?? [ 1762.727079][T20956] loop0: detected capacity change from 0 to 256 [ 1762.773446][T20956] exfat: Bad value for 'uid' [ 1762.801173][T20956] exfat: Bad value for 'uid' [ 1762.934216][ T8] usbhid 8-1:0.0: can't add hid device: -71 [ 1762.964166][ T8] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1763.013837][ T8] usb 8-1: USB disconnect, device number 4 [ 1763.648368][T20968] loop5: detected capacity change from 0 to 512 [ 1763.802551][T20968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1763.916160][T20968] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1764.195862][ T29] audit: type=1800 audit(1738949540.767:79): pid=20968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4549" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1765.236086][T20972] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1766.592529][T20986] 9pnet_fd: Insufficient options for proto=fd [ 1766.684965][T17322] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1767.433334][ T5843] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1768.647571][ T5843] usb 1-1: device not accepting address 78, error -71 [ 1768.909133][T21000] loop5: detected capacity change from 0 to 16 [ 1768.999087][T21000] erofs (device loop5): mounted with root inode @ nid 36. [ 1769.452108][T21000] erofs (device loop5): corrupted dir block 0 @ nid 36 [ 1769.468740][T21000] erofs (device loop5): corrupted dir block 0 @ nid 36 [ 1769.516937][T21000] erofs (device loop5): corrupted dir block 0 @ nid 36 [ 1769.607122][T21000] erofs (device loop5): corrupted dir block 0 @ nid 36 [ 1769.615637][T21000] erofs (device loop5): corrupted dir block 0 @ nid 36 [ 1769.679378][T21000] erofs (device loop5): corrupted dir block 0 @ nid 36 [ 1770.446815][ T5843] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 1770.626901][T21019] loop6: detected capacity change from 0 to 256 [ 1770.658890][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1770.715391][T21019] FAT-fs (loop6): Directory bread(block 64) failed [ 1770.742927][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1770.769409][T21019] FAT-fs (loop6): Directory bread(block 65) failed [ 1770.827121][T21019] FAT-fs (loop6): Directory bread(block 66) failed [ 1770.843940][ T5843] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1770.897028][T21019] FAT-fs (loop6): Directory bread(block 67) failed [ 1770.904124][T21019] FAT-fs (loop6): Directory bread(block 68) failed [ 1770.912867][T21021] loop4: detected capacity change from 0 to 8 [ 1770.919928][T21019] FAT-fs (loop6): Directory bread(block 69) failed [ 1770.933523][T21019] FAT-fs (loop6): Directory bread(block 70) failed [ 1770.951063][T21019] FAT-fs (loop6): Directory bread(block 71) failed [ 1770.970052][T21019] FAT-fs (loop6): Directory bread(block 72) failed [ 1771.014312][T21021] SQUASHFS error: zstd decompression error: 10 [ 1771.023805][T21019] FAT-fs (loop6): Directory bread(block 73) failed [ 1771.038576][T21021] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1771.047408][ T5843] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1771.063225][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.075263][T21021] SQUASHFS error: Failed to read block 0x62b: -5 [ 1771.108011][ T5843] usb 6-1: config 0 descriptor?? [ 1771.123289][T21011] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1771.146770][T21021] SQUASHFS error: Unable to read metadata cache entry [629] [ 1771.156855][T21021] SQUASHFS error: Unable to read directory block [629:ff26] [ 1772.391347][ T5843] hid-led 0003:27B8:01ED.0018: item fetching failed at offset 2/5 [ 1772.423478][ T5843] hid-led 0003:27B8:01ED.0018: probe with driver hid-led failed with error -22 [ 1772.620613][T21011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1772.644633][T21031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4572'. [ 1772.748341][T21011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.754181][ T5844] usb 6-1: USB disconnect, device number 64 [ 1773.908028][T21041] loop7: detected capacity change from 0 to 1024 [ 1773.986252][T21045] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input87 [ 1774.107648][ T29] audit: type=1800 audit(1738949550.626:80): pid=21041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4574" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 1777.071991][T21052] ================================================================== [ 1777.080088][T21052] BUG: KASAN: slab-use-after-free in hci_chan_del+0x3b/0x1b0 [ 1777.087473][T21052] Read of size 8 at addr ffff88807078c718 by task khidpd_00010003/21052 [ 1777.095787][T21052] [ 1777.098116][T21052] CPU: 0 UID: 0 PID: 21052 Comm: khidpd_00010003 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 1777.098135][T21052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1777.098149][T21052] Call Trace: [ 1777.098156][T21052] [ 1777.098164][T21052] dump_stack_lvl+0x241/0x360 [ 1777.098184][T21052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1777.098201][T21052] ? __pfx__printk+0x10/0x10 [ 1777.098226][T21052] ? _printk+0xd5/0x120 [ 1777.098248][T21052] ? __virt_addr_valid+0x183/0x530 [ 1777.098272][T21052] ? __virt_addr_valid+0x183/0x530 [ 1777.098296][T21052] print_report+0x169/0x550 [ 1777.098312][T21052] ? __virt_addr_valid+0x183/0x530 [ 1777.098334][T21052] ? __virt_addr_valid+0x183/0x530 [ 1777.098355][T21052] ? __virt_addr_valid+0x45f/0x530 [ 1777.098377][T21052] ? __phys_addr+0xba/0x170 [ 1777.098400][T21052] ? hci_chan_del+0x3b/0x1b0 [ 1777.098422][T21052] kasan_report+0x143/0x180 [ 1777.098436][T21052] ? queue_delayed_work_on+0x267/0x390 [ 1777.098458][T21052] ? hci_chan_del+0x3b/0x1b0 [ 1777.098483][T21052] hci_chan_del+0x3b/0x1b0 [ 1777.098507][T21052] l2cap_conn_put+0x70/0xe0 [ 1777.098531][T21052] hidp_session_put+0x1e7/0x220 [ 1777.098554][T21052] hidp_session_thread+0x458/0x490 [ 1777.098582][T21052] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1777.098601][T21052] ? __pfx_hidp_session_thread+0x10/0x10 [ 1777.098622][T21052] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1777.098639][T21052] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1777.098664][T21052] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1777.098688][T21052] ? __kthread_parkme+0x169/0x1d0 [ 1777.098709][T21052] ? __pfx_hidp_session_thread+0x10/0x10 [ 1777.098730][T21052] kthread+0x7a9/0x920 [ 1777.098751][T21052] ? __pfx_kthread+0x10/0x10 [ 1777.098773][T21052] ? __pfx_hidp_session_thread+0x10/0x10 [ 1777.098794][T21052] ? __pfx_kthread+0x10/0x10 [ 1777.098814][T21052] ? __pfx_kthread+0x10/0x10 [ 1777.098836][T21052] ? __pfx_kthread+0x10/0x10 [ 1777.098857][T21052] ? _raw_spin_unlock_irq+0x23/0x50 [ 1777.098873][T21052] ? lockdep_hardirqs_on+0x99/0x150 [ 1777.098891][T21052] ? __pfx_kthread+0x10/0x10 [ 1777.098913][T21052] ret_from_fork+0x4b/0x80 [ 1777.098933][T21052] ? __pfx_kthread+0x10/0x10 [ 1777.098954][T21052] ret_from_fork_asm+0x1a/0x30 [ 1777.098978][T21052] [ 1777.098984][T21052] [ 1777.319272][T21052] Allocated by task 15658: [ 1777.323866][T21052] kasan_save_track+0x3f/0x80 [ 1777.328552][T21052] __kasan_kmalloc+0x98/0xb0 [ 1777.333147][T21052] __kmalloc_cache_noprof+0x243/0x390 [ 1777.338517][T21052] hci_chan_create+0xc8/0x310 [ 1777.343200][T21052] l2cap_conn_add+0x69/0x8e0 [ 1777.347782][T21052] l2cap_connect_cfm+0x115/0x1090 [ 1777.352803][T21052] hci_remote_features_evt+0x68e/0xac0 [ 1777.358715][T21052] hci_event_packet+0xac2/0x1540 [ 1777.363661][T21052] hci_rx_work+0x3f3/0xdb0 [ 1777.368086][T21052] process_scheduled_works+0xa66/0x1840 [ 1777.373636][T21052] worker_thread+0x870/0xd30 [ 1777.378323][T21052] kthread+0x7a9/0x920 [ 1777.382404][T21052] ret_from_fork+0x4b/0x80 [ 1777.386819][T21052] ret_from_fork_asm+0x1a/0x30 [ 1777.391580][T21052] [ 1777.393901][T21052] Freed by task 20640: [ 1777.397964][T21052] kasan_save_track+0x3f/0x80 [ 1777.402647][T21052] kasan_save_free_info+0x40/0x50 [ 1777.407673][T21052] __kasan_slab_free+0x59/0x70 [ 1777.412431][T21052] kfree+0x196/0x430 [ 1777.416338][T21052] hci_conn_del+0x4b5/0xc40 [ 1777.420833][T21052] hci_conn_hash_flush+0x258/0x350 [ 1777.425941][T21052] hci_dev_close_sync+0xa42/0x11c0 [ 1777.431051][T21052] hci_unregister_dev+0x20b/0x510 [ 1777.436103][T21052] vhci_release+0x80/0xd0 [ 1777.440438][T21052] __fput+0x3e9/0x9f0 [ 1777.444447][T21052] task_work_run+0x24f/0x310 [ 1777.449033][T21052] do_exit+0xa2a/0x2860 [ 1777.453196][T21052] do_group_exit+0x207/0x2c0 [ 1777.457796][T21052] __x64_sys_exit_group+0x3f/0x40 [ 1777.462834][T21052] x64_sys_call+0x26c3/0x26d0 [ 1777.467529][T21052] do_syscall_64+0xf3/0x230 [ 1777.472029][T21052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.477955][T21052] [ 1777.480293][T21052] The buggy address belongs to the object at ffff88807078c700 [ 1777.480293][T21052] which belongs to the cache kmalloc-128 of size 128 [ 1777.494336][T21052] The buggy address is located 24 bytes inside of [ 1777.494336][T21052] freed 128-byte region [ffff88807078c700, ffff88807078c780) [ 1777.508039][T21052] [ 1777.510355][T21052] The buggy address belongs to the physical page: [ 1777.516771][T21052] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807078c500 pfn:0x7078c [ 1777.526830][T21052] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1777.534904][T21052] page_type: f5(slab) [ 1777.538882][T21052] raw: 00fff00000000200 ffff88801ac41a00 ffffea0001a16a90 ffff88801ac40648 [ 1777.547478][T21052] raw: ffff88807078c500 000000000010000c 00000000f5000000 0000000000000000 [ 1777.556080][T21052] page dumped because: kasan: bad access detected [ 1777.562497][T21052] page_owner tracks the page as allocated [ 1777.568209][T21052] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 15949, tgid 15947 (syz.0.3073), ts 1153542372796, free_ts 1153086250170 [ 1777.587759][T21052] post_alloc_hook+0x1f4/0x240 [ 1777.592562][T21052] get_page_from_freelist+0x365c/0x37a0 [ 1777.598113][T21052] __alloc_frozen_pages_noprof+0x292/0x710 [ 1777.603936][T21052] alloc_pages_mpol+0x311/0x660 [ 1777.608781][T21052] allocate_slab+0x8f/0x3a0 [ 1777.613284][T21052] ___slab_alloc+0xc27/0x14a0 [ 1777.617964][T21052] __slab_alloc+0x58/0xa0 [ 1777.622296][T21052] __kmalloc_node_noprof+0x2ee/0x4d0 [ 1777.627584][T21052] __kvmalloc_node_noprof+0x72/0x190 [ 1777.632919][T21052] bpf_check+0x1054/0x1c150 [ 1777.637415][T21052] bpf_prog_load+0x1664/0x20e0 [ 1777.642172][T21052] __sys_bpf+0x4ee/0x810 [ 1777.646406][T21052] __x64_sys_bpf+0x7c/0x90 [ 1777.650828][T21052] do_syscall_64+0xf3/0x230 [ 1777.655339][T21052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.661234][T21052] page last free pid 5204 tgid 5204 stack trace: [ 1777.667551][T21052] free_frozen_pages+0xe0d/0x10e0 [ 1777.672591][T21052] rcu_core+0xaaa/0x17a0 [ 1777.676834][T21052] handle_softirqs+0x2d4/0x9b0 [ 1777.681591][T21052] __irq_exit_rcu+0xf7/0x220 [ 1777.686175][T21052] irq_exit_rcu+0x9/0x30 [ 1777.690410][T21052] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1777.696244][T21052] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1777.702228][T21052] [ 1777.704541][T21052] Memory state around the buggy address: [ 1777.710174][T21052] ffff88807078c600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1777.718245][T21052] ffff88807078c680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1777.726312][T21052] >ffff88807078c700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1777.734387][T21052] ^ [ 1777.739229][T21052] ffff88807078c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1777.747298][T21052] ffff88807078c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1777.755350][T21052] ================================================================== [ 1777.770241][T21069] loop6: detected capacity change from 0 to 2048 [ 1777.807486][T21052] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1777.814734][T21052] CPU: 0 UID: 0 PID: 21052 Comm: khidpd_00010003 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 1777.825449][T21052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1777.835540][T21052] Call Trace: [ 1777.838838][T21052] [ 1777.841803][T21052] dump_stack_lvl+0x241/0x360 [ 1777.846508][T21052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1777.851735][T21052] ? __pfx__printk+0x10/0x10 [ 1777.856353][T21052] ? preempt_schedule+0xe1/0xf0 [ 1777.861251][T21052] ? vscnprintf+0x5d/0x90 [ 1777.865584][T21052] panic+0x349/0x880 [ 1777.869500][T21052] ? check_panic_on_warn+0x21/0xb0 [ 1777.874617][T21052] ? __pfx_panic+0x10/0x10 [ 1777.879042][T21052] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 1777.885018][T21052] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1777.891340][T21052] ? print_report+0x502/0x550 [ 1777.896013][T21052] check_panic_on_warn+0x86/0xb0 [ 1777.900955][T21052] ? hci_chan_del+0x3b/0x1b0 [ 1777.905546][T21052] end_report+0x77/0x160 [ 1777.909782][T21052] kasan_report+0x154/0x180 [ 1777.914284][T21052] ? queue_delayed_work_on+0x267/0x390 [ 1777.919748][T21052] ? hci_chan_del+0x3b/0x1b0 [ 1777.924432][T21052] hci_chan_del+0x3b/0x1b0 [ 1777.928857][T21052] l2cap_conn_put+0x70/0xe0 [ 1777.933368][T21052] hidp_session_put+0x1e7/0x220 [ 1777.938225][T21052] hidp_session_thread+0x458/0x490 [ 1777.943341][T21052] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1777.949233][T21052] ? __pfx_hidp_session_thread+0x10/0x10 [ 1777.954875][T21052] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1777.960848][T21052] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1777.967100][T21052] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1777.973362][T21052] ? __kthread_parkme+0x169/0x1d0 [ 1777.978392][T21052] ? __pfx_hidp_session_thread+0x10/0x10 [ 1777.984026][T21052] kthread+0x7a9/0x920 [ 1777.988097][T21052] ? __pfx_kthread+0x10/0x10 [ 1777.992698][T21052] ? __pfx_hidp_session_thread+0x10/0x10 [ 1777.998328][T21052] ? __pfx_kthread+0x10/0x10 [ 1778.002915][T21052] ? __pfx_kthread+0x10/0x10 [ 1778.007506][T21052] ? __pfx_kthread+0x10/0x10 [ 1778.012103][T21052] ? _raw_spin_unlock_irq+0x23/0x50 [ 1778.017305][T21052] ? lockdep_hardirqs_on+0x99/0x150 [ 1778.022523][T21052] ? __pfx_kthread+0x10/0x10 [ 1778.027145][T21052] ret_from_fork+0x4b/0x80 [ 1778.031558][T21052] ? __pfx_kthread+0x10/0x10 [ 1778.036148][T21052] ret_from_fork_asm+0x1a/0x30 [ 1778.040916][T21052] [ 1778.044220][T21052] Kernel Offset: disabled [ 1778.048563][T21052] Rebooting in 86400 seconds..